This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/JIH2hr0PFTmo-UenvIATlScnTmw.roa File: JIH2hr0PFTmo-UenvIATlScnTmw.roa (raw, json) Hash identifier: /Ko64eIHlbMST16GcGIM1/ka+jF/BdIAp0WDKwXJUzY= Subject key identifier: 24:81:F6:86:BD:0F:15:39:A8:F9:47:A7:BC:80:13:95:27:27:4E:6C Certificate issuer: /CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28 Certificate serial: 019B797DDE2949AFCF9705F1544BA09F5230 Authority key identifier: 71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/JIH2hr0PFTmo-UenvIATlScnTmw.roa Signing time: Thu 01 Jan 2026 12:17:30 +0000 ROA not before: Thu 01 Jan 2026 12:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3257 IP address blocks: 185.228.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 06:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:de:29:49:af:cf:97:05:f1:54:4b:a0:9f:52:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28 Validity Not Before: Jan 1 12:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2481f686bd0f1539a8f947a7bc80139527274e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:02:66:02:4c:3e:9f:4e:63:0d:aa:ca:e3:4a: 49:a5:8e:33:16:db:9d:cd:78:89:eb:72:35:0d:b3: b6:ae:86:77:a0:49:5c:b2:91:8f:1a:71:59:12:2a: d2:e0:20:2b:48:ab:92:ff:0b:81:c4:6b:5a:2d:5d: a5:c6:9a:7a:05:13:5b:2a:35:f1:a9:9f:e6:1d:e4: 57:0e:54:73:0d:ae:51:0d:92:e0:50:39:72:ac:3a: 90:2c:d7:4b:45:65:8a:29:f4:bd:b8:57:56:cd:4d: a0:75:33:8d:fc:7c:ce:c0:cb:de:4c:aa:8e:bf:64: cf:de:eb:6a:4f:41:da:18:59:8b:05:88:f6:13:7b: 91:13:6d:50:f9:94:11:31:c9:6d:3d:c7:49:68:fe: 41:d3:54:5c:c5:9c:3d:d5:1b:e2:66:10:6c:85:2c: f8:94:a4:28:e5:15:51:24:87:8d:ea:9c:b4:bb:b2: d2:c7:f8:94:0c:fe:39:4b:02:37:e5:c7:06:7e:93: eb:44:50:b8:da:84:0d:11:33:32:c2:4b:0b:c4:90: d2:68:0b:cf:b9:33:2e:0b:d6:20:ef:51:78:f0:08: d1:05:b3:10:f3:2f:52:4c:3d:8f:47:eb:1d:5a:99: cf:58:d0:6c:05:c8:51:f7:a3:a6:a5:8d:f0:1c:cf: 08:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:81:F6:86:BD:0F:15:39:A8:F9:47:A7:BC:80:13:95:27:27:4E:6C X509v3 Authority Key Identifier: keyid:71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/JIH2hr0PFTmo-UenvIATlScnTmw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.228.192.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:6d:08:e0:c5:20:86:85:63:d8:42:eb:39:42:d8:90:4e:35: d7:74:d2:2b:c0:2f:02:c8:fb:4e:8d:86:32:33:17:95:5d:12: 2f:c3:38:4c:e8:d3:6e:b3:47:4a:4b:6d:81:cf:d5:4d:b4:93: cf:14:da:ec:44:f6:a0:1e:c5:ab:72:95:b3:ab:63:86:c2:f4: 36:a0:c0:e3:33:d6:f9:5b:9d:50:19:ac:91:c6:cf:b6:42:a7: 2e:d2:c7:5c:36:86:41:1b:9e:d7:c6:0b:0f:5b:42:a7:ec:2f: 9c:de:bc:cd:d5:75:6f:50:38:47:99:bf:7b:d2:f3:c3:bf:55: f5:f7:02:cf:1e:17:da:7d:5b:1f:e2:00:57:bf:0e:71:8f:46: 08:bd:74:32:af:07:72:b8:bd:b3:4c:90:fb:f2:3d:47:88:ae: 39:98:da:3b:d2:d4:59:6e:1d:75:1e:d4:3c:49:a4:e5:3f:29: 38:f4:f6:1e:66:e6:da:a3:91:dd:bb:fb:2c:09:2a:c9:56:2f: 2c:97:f8:dd:f8:8e:b1:21:a2:cf:24:27:4f:41:22:2d:b0:7c: 90:bb:71:00:ff:39:73:a7:3c:3b:8f:13:49:35:54:ef:97:80: 3b:ff:04:48:62:b4:03:d7:d8:b1:b4:06:06:c1:1a:35:e7:57: c8:fe:9b:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fd4pSa/PlwXxVEugn1IwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxY2VjMjY5Zjg0ZDU2NDFmZjYzYTYzZDFmMzk5N2M4Y2Zk NGZlMjgwHhcNMjYwMTAxMTIxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDgxZjY4NmJkMGYxNTM5YThmOTQ3YTdiYzgwMTM5NTI3Mjc0ZTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAJmAkw+n05jDarK40pJpY4zFtud zXiJ63I1DbO2roZ3oElcspGPGnFZEirS4CArSKuS/wuBxGtaLV2lxpp6BRNbKjXx qZ/mHeRXDlRzDa5RDZLgUDlyrDqQLNdLRWWKKfS9uFdWzU2gdTON/HzOwMveTKqO v2TP3utqT0HaGFmLBYj2E3uRE21Q+ZQRMcltPcdJaP5B01RcxZw91RviZhBshSz4 lKQo5RVRJIeN6py0u7LSx/iUDP45SwI35ccGfpPrRFC42oQNETMywksLxJDSaAvP uTMuC9Yg71F48AjRBbMQ8y9STD2PR+sdWpnPWNBsBchR96OmpY3wHM8I5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCSB9oa9DxU5qPlHp7yAE5UnJ05sMB8GA1UdIwQY MBaAFHHOwmn4TVZB/2OmPR85l8jP1P4oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2M3Q2FmaE5Wa0hfWTZZOUh6bVh5TV9VX2lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84ZjU1MWYtMjQyNS00MzRkLWFmYjUt YTc2MmU5YzBkZDMyLzEvSklIMmhyMFBGVG1vLVVlbnZJQVRsU2NuVG13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC84ZjU1MWYtMjQyNS00MzRkLWFmYjUtYTc2MmU5YzBkZDMy LzEvY2M3Q2FmaE5Wa0hfWTZZOUh6bVh5TV9VX2lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueTAMA0G CSqGSIb3DQEBCwUAA4IBAQAsbQjgxSCGhWPYQus5QtiQTjXXdNIrwC8CyPtOjYYy MxeVXRIvwzhM6NNus0dKS22Bz9VNtJPPFNrsRPagHsWrcpWzq2OGwvQ2oMDjM9b5 W51QGayRxs+2Qqcu0sdcNoZBG57XxgsPW0Kn7C+c3rzN1XVvUDhHmb970vPDv1X1 9wLPHhfafVsf4gBXvw5xj0YIvXQyrwdyuL2zTJD78j1HiK45mNo70tRZbh11HtQ8 SaTlPyk49PYeZubao5Hdu/ssCSrJVi8sl/jd+I6xIaLPJCdPQSItsHyQu3EA/zlz pzw7jxNJNVTvl4A7/wRIYrQD19ixtAYGwRo151fI/pvW -----END CERTIFICATE-----Generated at Fri Jan 2 16:22:43 2026 by rpki-client