This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/0J2Nb4Q1OO2pfPBSxR-MztsiJBY.roa File: 0J2Nb4Q1OO2pfPBSxR-MztsiJBY.roa (raw, json) Hash identifier: tftG+mQIphk3FNSPZp40EyRTZOVpuoMSFbhQMapxPC0= Subject key identifier: D0:9D:8D:6F:84:35:38:ED:A9:7C:F0:52:C5:1F:8C:CE:DB:22:24:16 Certificate issuer: /CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e Certificate serial: 019B7BA508324BBC95394C9208E217EB8FD5 Authority key identifier: 53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/0J2Nb4Q1OO2pfPBSxR-MztsiJBY.roa Signing time: Thu 01 Jan 2026 22:19:31 +0000 ROA not before: Thu 01 Jan 2026 22:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204521 IP address blocks: 185.168.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:08:32:4b:bc:95:39:4c:92:08:e2:17:eb:8f:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e Validity Not Before: Jan 1 22:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d09d8d6f843538eda97cf052c51f8ccedb222416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a8:54:02:13:ac:62:65:8b:ca:e7:7f:02:fb: ff:48:c9:0c:93:39:89:15:3b:53:80:c7:b2:77:70: ef:be:5a:7b:de:c2:97:f6:87:39:f7:44:57:f0:4c: bb:f7:8e:d5:80:44:f6:46:a6:e1:72:f5:b2:96:48: 4d:9a:1f:5f:4c:21:45:81:c2:8e:34:3c:6f:76:e5: e5:51:62:1a:2b:cc:bd:4a:ca:b5:4a:a5:e8:f8:70: fd:b1:c4:58:67:f4:e7:54:4c:2f:77:b3:4c:ab:ad: 7f:66:11:5e:08:51:bf:7b:27:99:87:bd:d5:c0:c0: 05:fa:f1:75:fc:a0:7c:42:d6:f9:4f:ed:1e:5f:4f: 99:24:73:07:37:2f:6e:82:82:28:da:47:dd:4f:5d: ca:b5:38:39:86:0a:f1:5d:07:d8:db:90:25:8c:ac: 4e:dd:99:f4:a9:25:b6:f7:97:74:67:e9:a8:bd:6d: c6:da:f9:e2:de:9b:aa:53:36:1f:0d:97:2f:df:e3: 30:e7:63:9e:64:b8:f1:53:ac:07:14:49:ed:5a:b6: 56:e3:56:13:99:87:20:43:b4:6e:ba:6a:97:36:02: 02:08:06:84:1d:a0:35:75:03:f6:c9:83:66:6a:6d: 8b:6a:ef:d2:6f:8c:42:8d:19:b5:34:f8:3a:f9:23: 4f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9D:8D:6F:84:35:38:ED:A9:7C:F0:52:C5:1F:8C:CE:DB:22:24:16 X509v3 Authority Key Identifier: keyid:53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/0J2Nb4Q1OO2pfPBSxR-MztsiJBY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.168.216.0/24 Signature Algorithm: sha256WithRSAEncryption 70:c8:06:de:14:20:81:89:ee:de:42:16:89:72:f5:15:4d:24: 4d:60:3c:15:d2:e9:eb:a0:49:89:d5:20:92:ff:60:a0:c2:99: 99:ff:eb:59:bc:72:8e:2b:8a:89:87:4f:04:09:da:54:c3:82: 9d:a1:04:10:af:59:7b:11:51:2c:04:6f:f8:0c:8f:82:dd:33: e5:d2:9a:a8:cc:b6:f1:b4:f5:95:3a:70:a5:c7:09:c2:95:39: d4:1c:88:df:16:87:79:a9:66:67:4f:b9:1f:e6:57:e2:f1:cf: 13:7d:5d:bf:11:9b:1c:4f:a7:5c:ff:d3:8c:92:0e:ca:c5:07: c8:1f:0a:ca:79:26:eb:f5:d9:c5:cf:43:f5:f8:34:c0:ed:3c: 90:85:29:0a:61:21:c4:04:0c:77:3f:c9:ad:ef:1c:9d:ff:b1: b1:b9:89:39:bf:38:a3:67:83:e2:89:79:df:b1:2c:34:96:15: c5:83:7c:b3:f7:bf:46:90:28:82:ca:02:a1:7b:78:d9:e3:f1: 85:01:68:92:c3:25:5d:4d:b3:1c:97:47:e4:1d:04:79:77:41: 17:96:83:42:07:f4:77:54:75:cf:d0:9b:1c:84:5a:b3:e1:f5: f3:3c:f0:a1:3d:5e:4b:34:c7:67:65:a6:53:92:a6:25:98:17: c6:af:c9:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pQgyS7yVOUySCOIX64/VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMTY1OTBhMGVhZjQ4ZGYyYjFhZTIzYjlkNTU5ZTljYWMy NTk5N2UwHhcNMjYwMTAxMjIxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDlkOGQ2Zjg0MzUzOGVkYTk3Y2YwNTJjNTFmOGNjZWRiMjIyNDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qhUAhOsYmWLyud/Avv/SMkMkzmJ FTtTgMeyd3Dvvlp73sKX9oc590RX8Ey7947VgET2RqbhcvWylkhNmh9fTCFFgcKO NDxvduXlUWIaK8y9Ssq1SqXo+HD9scRYZ/TnVEwvd7NMq61/ZhFeCFG/eyeZh73V wMAF+vF1/KB8Qtb5T+0eX0+ZJHMHNy9ugoIo2kfdT13KtTg5hgrxXQfY25AljKxO 3Zn0qSW295d0Z+movW3G2vni3puqUzYfDZcv3+Mw52OeZLjxU6wHFEntWrZW41YT mYcgQ7RuumqXNgICCAaEHaA1dQP2yYNmam2Lau/Sb4xCjRm1NPg6+SNPEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNCdjW+ENTjtqXzwUsUfjM7bIiQWMB8GA1UdIwQY MBaAFFMWWQoOr0jfKxriO51VnpysJZl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXhaWkNnNnZTTjhyR3VJN25WV2VuS3dsbVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mOWRkMWMtMzE3Yi00MWMxLThmY2It N2Q5ZWFiZWUxNWFjLzEvMEoyTmI0UTFPTzJwZlBCU3hSLU16dHNpSkJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9mOWRkMWMtMzE3Yi00MWMxLThmY2ItN2Q5ZWFiZWUxNWFj LzEvVXhaWkNnNnZTTjhyR3VJN25WV2VuS3dsbVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuajYMA0G CSqGSIb3DQEBCwUAA4IBAQBwyAbeFCCBie7eQhaJcvUVTSRNYDwV0unroEmJ1SCS /2CgwpmZ/+tZvHKOK4qJh08ECdpUw4KdoQQQr1l7EVEsBG/4DI+C3TPl0pqozLbx tPWVOnClxwnClTnUHIjfFod5qWZnT7kf5lfi8c8TfV2/EZscT6dc/9OMkg7KxQfI HwrKeSbr9dnFz0P1+DTA7TyQhSkKYSHEBAx3P8mt7xyd/7GxuYk5vzijZ4PiiXnf sSw0lhXFg3yz979GkCiCygKhe3jZ4/GFAWiSwyVdTbMcl0fkHQR5d0EXloNCB/R3 VHXP0JschFqz4fXzPPChPV5LNMdnZaZTkqYlmBfGr8kW -----END CERTIFICATE-----Generated at Tue Jan 27 04:22:44 2026 by rpki-client