This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/j2Zec19YMohuiWgyeOqj3yTZ1qE.roa File: j2Zec19YMohuiWgyeOqj3yTZ1qE.roa (raw, json) Hash identifier: 24aHxSxVGLUb8yk1YBdeTwbmPhDVWKEcsyuGoX47Z48= Subject key identifier: 8F:66:5E:73:5F:58:32:88:6E:89:68:32:78:EA:A3:DF:24:D9:D6:A1 Certificate issuer: /CN=7712e20f510b22b8217cdf0d211496b1b9c1edb8 Certificate serial: 019B7C8056A1CB8A7FB99E9A7E45D08B63E9 Authority key identifier: 77:12:E2:0F:51:0B:22:B8:21:7C:DF:0D:21:14:96:B1:B9:C1:ED:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/j2Zec19YMohuiWgyeOqj3yTZ1qE.roa Signing time: Fri 02 Jan 2026 02:19:04 +0000 ROA not before: Fri 02 Jan 2026 02:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59919 IP address blocks: 2.59.140.0/22 maxlen: 24 5.178.88.0/21 maxlen: 24 45.152.144.0/22 maxlen: 24 185.60.188.0/22 maxlen: 24 185.136.136.0/22 maxlen: 24 185.187.172.0/22 maxlen: 24 185.204.220.0/22 maxlen: 24 185.248.240.0/22 maxlen: 24 2a01:9ac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.crl rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:56:a1:cb:8a:7f:b9:9e:9a:7e:45:d0:8b:63:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7712e20f510b22b8217cdf0d211496b1b9c1edb8 Validity Not Before: Jan 2 02:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f665e735f5832886e89683278eaa3df24d9d6a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:26:8c:d2:d8:1b:e4:31:03:5b:ff:b4:89:8c: 26:57:27:2c:22:eb:31:a3:b4:7f:2a:e7:f5:d5:8a: 47:e4:11:19:94:78:07:0b:d9:ee:13:10:5b:05:f7: f8:92:22:69:d1:b9:72:31:4a:9c:7c:d8:ad:b6:90: 6b:58:be:c8:db:e0:70:45:ba:c6:b3:1a:8e:6f:b6: 14:c4:c8:b5:8f:57:3a:a8:21:a1:67:14:0e:e2:74: 9c:57:7e:b9:f0:79:88:bb:1b:81:f6:71:4f:e5:45: ea:23:01:0d:50:28:c7:eb:c0:55:27:15:f5:cb:39: ee:d7:18:2d:61:7f:50:f7:49:ac:de:ab:4e:f4:25: 99:9b:3f:73:c4:d5:8b:f6:0f:10:09:24:8c:be:53: 2d:88:0f:f6:0f:6a:32:a0:22:ca:34:3e:b7:fd:38: ab:fb:c1:78:de:be:99:14:01:5d:5c:75:c3:23:84: 61:86:a2:2f:df:c1:35:9d:7b:a7:3d:f2:1f:65:ff: 87:54:63:0b:c2:e4:35:0e:47:47:85:ec:3a:51:af: 0d:24:62:cf:d7:13:65:f1:1c:83:7a:75:cc:6e:69: 50:0b:04:9b:d7:23:a1:f2:5c:4f:9e:af:1d:1b:28: 88:19:f8:50:f0:ae:78:45:0f:3a:84:e6:61:ad:58: 17:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:66:5E:73:5F:58:32:88:6E:89:68:32:78:EA:A3:DF:24:D9:D6:A1 X509v3 Authority Key Identifier: keyid:77:12:E2:0F:51:0B:22:B8:21:7C:DF:0D:21:14:96:B1:B9:C1:ED:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/j2Zec19YMohuiWgyeOqj3yTZ1qE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.140.0/22 5.178.88.0/21 45.152.144.0/22 185.60.188.0/22 185.136.136.0/22 185.187.172.0/22 185.204.220.0/22 185.248.240.0/22 IPv6: 2a01:9ac0::/32 Signature Algorithm: sha256WithRSAEncryption 1f:18:f5:a0:44:71:94:12:ae:06:b7:90:5d:02:16:9b:0e:35: f2:68:73:71:be:72:2c:e6:49:20:ab:78:45:84:4c:ae:3e:8c: 70:81:1d:1c:4b:56:c9:30:15:b9:41:4c:2a:63:d7:af:24:66: 78:02:05:98:04:04:8b:a0:f5:38:67:83:03:f2:3c:b3:5e:6c: c0:31:c6:24:b9:5c:a8:19:54:5b:46:d7:31:92:b2:55:9a:18: 91:9f:c0:76:c5:92:eb:2d:0c:12:94:58:91:15:51:0d:a3:d8: ac:ac:cf:f0:df:90:46:f0:75:32:d4:4c:f1:db:a1:56:17:e0: ae:da:a4:73:c1:15:5e:46:58:71:94:79:36:fc:73:b2:64:7e: d8:25:56:3e:0b:bb:4f:5a:a6:4f:7d:5f:30:da:99:02:35:ab: cf:49:24:ac:ca:d1:76:bb:0b:95:fa:92:14:e9:d2:a6:0b:04: ca:10:c6:01:e4:49:72:21:58:ec:f6:8d:fc:5c:07:55:c9:70: c8:8c:c4:4f:88:8f:fc:c7:9d:d1:a4:23:6b:a5:30:32:2e:51: 5c:52:fc:7a:32:12:70:ed:f3:0a:d0:94:ca:c8:32:49:49:6e: a2:df:39:bd:1d:94:eb:bc:22:fb:2a:11:b3:a1:07:47:be:30: 85:61:12:9e -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt8gFahy4p/uZ6afkXQi2PpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MTJlMjBmNTEwYjIyYjgyMTdjZGYwZDIxMTQ5NmIxYjlj MWVkYjgwHhcNMjYwMTAyMDIxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjY2NWU3MzVmNTgzMjg4NmU4OTY4MzI3OGVhYTNkZjI0ZDlkNmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyaM0tgb5DEDW/+0iYwmVycsIusx o7R/Kuf11YpH5BEZlHgHC9nuExBbBff4kiJp0blyMUqcfNittpBrWL7I2+BwRbrG sxqOb7YUxMi1j1c6qCGhZxQO4nScV3658HmIuxuB9nFP5UXqIwENUCjH68BVJxX1 yznu1xgtYX9Q90ms3qtO9CWZmz9zxNWL9g8QCSSMvlMtiA/2D2oyoCLKND63/Tir +8F43r6ZFAFdXHXDI4RhhqIv38E1nXunPfIfZf+HVGMLwuQ1DkdHhew6Ua8NJGLP 1xNl8RyDenXMbmlQCwSb1yOh8lxPnq8dGyiIGfhQ8K54RQ86hOZhrVgX2QIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFI9mXnNfWDKIboloMnjqo98k2dahMB8GA1UdIwQY MBaAFHcS4g9RCyK4IXzfDSEUlrG5we24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHhMaUQxRUxJcmdoZk44TklSU1dzYm5CN2JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82Y2I3MTQtYzcxNC00MjgxLThhZGEt NDNjZTk0OTY2M2Q5LzEvajJaZWMxOVlNb2h1aVdneWVPcWozeVRaMXFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS82Y2I3MTQtYzcxNC00MjgxLThhZGEtNDNjZTk0OTY2M2Q5 LzEvZHhMaUQxRUxJcmdoZk44TklSU1dzYm5CN2JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQCAjuMAwQD BbJYAwQCLZiQAwQCuTy8AwQCuYiIAwQCubusAwQCuczcAwQCufjwMA0EAgACMAcD BQAqAZrAMA0GCSqGSIb3DQEBCwUAA4IBAQAfGPWgRHGUEq4Gt5BdAhabDjXyaHNx vnIs5kkgq3hFhEyuPoxwgR0cS1bJMBW5QUwqY9evJGZ4AgWYBASLoPU4Z4MD8jyz XmzAMcYkuVyoGVRbRtcxkrJVmhiRn8B2xZLrLQwSlFiRFVENo9isrM/w35BG8HUy 1Ezx26FWF+Cu2qRzwRVeRlhxlHk2/HOyZH7YJVY+C7tPWqZPfV8w2pkCNavPSSSs ytF2uwuV+pIU6dKmCwTKEMYB5ElyIVjs9o38XAdVyXDIjMRPiI/8x53RpCNrpTAy LlFcUvx6MhJw7fMK0JTKyDJJSW6i3zm9HZTrvCL7KhGzoQdHvjCFYRKe -----END CERTIFICATE-----Generated at Tue Feb 10 04:53:15 2026 by rpki-client