This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/JlEL__d65JQ_tfOKiJmQEWtDYCM.roa File: JlEL__d65JQ_tfOKiJmQEWtDYCM.roa (raw, json) Hash identifier: GgRAVhQTIpXTw8lHuxPoRTh/pEuAXi31/QuDq0oYfZA= Subject key identifier: 26:51:0B:FF:F7:7A:E4:94:3F:B5:F3:8A:88:99:90:11:6B:43:60:23 Certificate issuer: /CN=b266e6e4d5df7f8a25654144755d7bd992e73539 Certificate serial: 019B7F1526128DACBF227A14B6A1A2D7A8D3 Authority key identifier: B2:66:E6:E4:D5:DF:7F:8A:25:65:41:44:75:5D:7B:D9:92:E7:35:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/JlEL__d65JQ_tfOKiJmQEWtDYCM.roa Signing time: Fri 02 Jan 2026 14:20:50 +0000 ROA not before: Fri 02 Jan 2026 14:20:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204332 IP address blocks: 185.252.88.0/22 maxlen: 22 185.252.88.0/23 maxlen: 23 185.252.90.0/23 maxlen: 23 2a0c:2440::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.crl rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:26:12:8d:ac:bf:22:7a:14:b6:a1:a2:d7:a8:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b266e6e4d5df7f8a25654144755d7bd992e73539 Validity Not Before: Jan 2 14:20:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26510bfff77ae4943fb5f38a889990116b436023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:38:d2:ea:7b:23:87:4b:5d:c8:fd:17:4f:ce: a3:13:c7:5e:e8:52:b5:42:16:7f:e5:4d:24:32:9a: 18:11:9b:4d:5b:89:1f:42:44:48:e3:7d:e3:78:61: 49:84:b7:9a:88:45:a6:b2:b6:68:e5:a9:fc:46:7a: 5f:2f:ee:55:ce:db:85:04:09:cb:8d:b9:d0:de:6e: 8e:44:b2:90:c4:9a:9f:c6:4d:2b:1e:a9:ef:0d:d8: b9:ef:46:a6:e0:33:14:20:c2:9a:cc:b1:84:4b:31: a1:ff:88:69:ec:bb:ed:82:4a:e9:c7:2a:b9:75:53: 5e:6d:73:a1:ba:ea:3f:51:0c:dc:79:d0:a2:a0:cc: 7f:91:9f:80:38:9e:cf:ce:44:51:66:a1:d1:f5:72: 33:f5:7a:0e:a7:ca:1b:ec:00:7e:db:12:89:5b:3d: 1e:3f:57:31:bd:c3:99:e5:94:3c:50:f2:82:ef:c5: f8:23:e6:e2:cd:84:3e:99:38:98:45:aa:5d:78:36: de:b8:4a:54:f3:5e:de:6b:0d:c4:31:bf:15:4d:9a: 4a:b0:d3:74:2e:e5:7e:ed:08:c5:a8:b1:ac:5d:13: bd:57:6a:bb:d3:eb:9e:90:4a:a5:ed:6d:16:5e:45: cb:fb:3f:ad:fc:a9:ac:1e:8f:6d:a7:fd:50:67:cb: c5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:51:0B:FF:F7:7A:E4:94:3F:B5:F3:8A:88:99:90:11:6B:43:60:23 X509v3 Authority Key Identifier: keyid:B2:66:E6:E4:D5:DF:7F:8A:25:65:41:44:75:5D:7B:D9:92:E7:35:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/JlEL__d65JQ_tfOKiJmQEWtDYCM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.252.88.0/22 IPv6: 2a0c:2440::/29 Signature Algorithm: sha256WithRSAEncryption 21:c1:aa:27:f8:9a:83:3a:a6:8c:a8:8c:b2:15:f4:5c:f6:a3: ca:b4:5f:cd:7c:bb:79:7b:a1:f9:34:c0:5e:3f:7e:c5:d2:ec: 06:f1:73:4e:60:5b:ae:7a:26:15:23:e6:ee:8d:a7:62:a0:6b: dd:9f:1e:5c:a3:c1:ec:6b:3c:01:3d:c1:bf:d4:18:ba:de:ec: 93:88:6f:28:7f:19:06:34:a4:13:a4:5e:a9:9e:d1:1f:5a:d8: 83:4d:60:7d:30:6c:b8:e2:81:48:5f:32:bd:eb:0e:25:8e:96: 17:e5:27:79:d1:0d:c1:9d:a5:04:18:d4:a5:ca:37:d8:e6:b6: a7:52:26:5f:e5:43:e6:be:b2:18:f8:d0:d3:0f:e1:f7:c9:e2: d4:c2:7f:3b:03:a1:2e:19:d9:e7:58:29:67:7b:a3:09:f6:68: d9:f0:87:50:18:2c:6e:b0:b6:1b:91:35:31:d2:27:5d:c1:ac: 08:13:19:2c:c8:43:3e:af:cf:af:87:5c:77:46:72:09:a0:a7: 25:3b:e0:60:5a:e5:31:40:77:6d:c7:1b:4f:0f:ac:21:d7:a0: ac:7e:52:11:ee:c8:11:a6:d5:12:47:50:dd:d0:84:48:c6:d1: a0:5a:63:06:ad:f1:5d:fe:99:88:95:61:e2:79:30:38:06:c0: a4:4b:0d:15 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FSYSjay/InoUtqGi16jTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNjZlNmU0ZDVkZjdmOGEyNTY1NDE0NDc1NWQ3YmQ5OTJl NzM1MzkwHhcNMjYwMTAyMTQyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjUxMGJmZmY3N2FlNDk0M2ZiNWYzOGE4ODk5OTAxMTZiNDM2MDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDjS6nsjh0tdyP0XT86jE8de6FK1 QhZ/5U0kMpoYEZtNW4kfQkRI433jeGFJhLeaiEWmsrZo5an8RnpfL+5VztuFBAnL jbnQ3m6ORLKQxJqfxk0rHqnvDdi570am4DMUIMKazLGESzGh/4hp7Lvtgkrpxyq5 dVNebXOhuuo/UQzcedCioMx/kZ+AOJ7PzkRRZqHR9XIz9XoOp8ob7AB+2xKJWz0e P1cxvcOZ5ZQ8UPKC78X4I+bizYQ+mTiYRapdeDbeuEpU817eaw3EMb8VTZpKsNN0 LuV+7QjFqLGsXRO9V2q70+uekEql7W0WXkXL+z+t/KmsHo9tp/1QZ8vF8QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCZRC//3euSUP7XzioiZkBFrQ2AjMB8GA1UdIwQY MBaAFLJm5uTV33+KJWVBRHVde9mS5zU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc21ibTVOWGZmNG9sWlVGRWRWMTcyWkxuTlRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9lYzg4MDEtMGE3Yy00ODdlLWExMDMt NTI1ZDdlMjJjNzg4LzEvSmxFTF9fZDY1SlFfdGZPS2lKbVFFV3REWUNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9lYzg4MDEtMGE3Yy00ODdlLWExMDMtNTI1ZDdlMjJjNzg4 LzEvc21ibTVOWGZmNG9sWlVGRWRWMTcyWkxuTlRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufxYMA0E AgACMAcDBQMqDCRAMA0GCSqGSIb3DQEBCwUAA4IBAQAhwaon+JqDOqaMqIyyFfRc 9qPKtF/NfLt5e6H5NMBeP37F0uwG8XNOYFuueiYVI+bujadioGvdnx5co8HsazwB PcG/1Bi63uyTiG8ofxkGNKQTpF6pntEfWtiDTWB9MGy44oFIXzK96w4ljpYX5Sd5 0Q3BnaUEGNSlyjfY5ranUiZf5UPmvrIY+NDTD+H3yeLUwn87A6EuGdnnWClne6MJ 9mjZ8IdQGCxusLYbkTUx0iddwawIExksyEM+r8+vh1x3RnIJoKclO+BgWuUxQHdt xxtPD6wh16CsflIR7sgRptUSR1Dd0IRIxtGgWmMGrfFd/pmIlWHieTA4BsCkSw0V -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:49 2026 by rpki-client