This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/j_fEcmRawhfQ335R07nuk6I9mKM.roa File: j_fEcmRawhfQ335R07nuk6I9mKM.roa (raw, json) Hash identifier: sLXREARPQv68UDdJgDz8RPpaZ0LxhTnDeQMZPazHH7g= Subject key identifier: 8F:F7:C4:72:64:5A:C2:17:D0:DF:7E:51:D3:B9:EE:93:A2:3D:98:A3 Certificate issuer: /CN=e61c07c951488f04cb3b0fd338af84d77e46bf52 Certificate serial: 019B7F83CBF0B9EA62915D1FD71D1730F88F Authority key identifier: E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/j_fEcmRawhfQ335R07nuk6I9mKM.roa Signing time: Fri 02 Jan 2026 16:21:42 +0000 ROA not before: Fri 02 Jan 2026 16:21:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203435 IP address blocks: 185.135.2.0/24 maxlen: 24 205.201.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:cb:f0:b9:ea:62:91:5d:1f:d7:1d:17:30:f8:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e61c07c951488f04cb3b0fd338af84d77e46bf52 Validity Not Before: Jan 2 16:21:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ff7c472645ac217d0df7e51d3b9ee93a23d98a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:12:a3:62:9c:df:49:bb:f8:cf:ae:3b:d9:22: 0e:08:09:2f:b9:3b:f4:2a:8a:63:f5:7e:07:30:34: f2:8a:95:9f:60:a2:3e:88:63:29:3e:bb:3f:08:cf: 01:f7:d8:76:40:0a:fd:57:a8:23:f7:17:fa:8a:9e: 60:d6:cf:ca:ac:8e:ea:91:d9:b7:a0:6f:f2:f5:68: 7f:34:63:09:47:02:90:c2:99:43:8d:c1:46:85:ce: 26:34:60:3e:47:e9:f2:f6:61:3b:ab:2e:d7:26:45: 2c:d6:52:74:99:b3:64:53:b6:10:77:9e:3d:51:57: 04:46:5e:2d:0d:14:c6:e1:2e:fe:26:35:fa:ea:a0: b3:35:20:a7:50:74:aa:ce:b3:73:88:da:bb:c2:72: c2:e4:a6:04:f0:49:b2:50:69:34:38:5e:88:82:df: b7:e0:66:8a:e2:74:59:1b:55:0c:8e:1a:5b:04:ec: c0:df:c8:8b:f1:21:5d:bc:7b:b2:0a:3c:63:2a:91: 8b:1b:1a:fc:49:e2:ea:0a:aa:ea:f9:3a:31:b5:e0: 09:37:1a:ab:e8:24:76:fa:74:bc:89:d5:47:ec:b3: c2:9f:a4:08:30:cd:52:61:04:99:ab:66:2f:66:69: fa:61:62:5e:1b:83:ac:bb:b1:a3:05:c0:39:4f:5e: bf:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F7:C4:72:64:5A:C2:17:D0:DF:7E:51:D3:B9:EE:93:A2:3D:98:A3 X509v3 Authority Key Identifier: keyid:E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/j_fEcmRawhfQ335R07nuk6I9mKM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.135.2.0/24 205.201.55.0/24 Signature Algorithm: sha256WithRSAEncryption 01:7e:67:8d:e6:aa:46:35:85:c4:b6:a9:20:01:ac:76:9d:21: 73:0e:c2:ad:75:14:a8:93:9b:93:f3:42:08:26:56:bd:1d:f4: eb:40:87:2d:1d:78:eb:04:a7:62:a9:82:80:3f:0e:4a:ef:6c: 1f:cb:05:6e:36:55:12:a3:9e:6b:b6:2f:80:30:38:d7:90:3c: 27:be:3e:5d:03:f5:94:ea:38:2f:27:13:e6:5a:81:4b:05:4b: 5c:55:70:12:f9:59:e7:6d:ac:e5:f3:f8:3f:43:90:3c:85:10: 2a:f1:9d:8c:fe:b9:75:df:30:12:15:d1:20:e7:82:71:21:5f: 30:6a:0c:81:2e:f1:3c:17:0a:fb:c6:6c:b8:27:8e:4e:ea:7a: 2c:ca:68:ec:31:f7:5a:be:be:c8:4c:6f:f1:fa:55:d4:cf:88: 59:36:19:c2:df:68:9a:b8:07:c4:de:71:d8:38:e8:29:7f:56: 2d:10:49:3b:20:31:86:69:07:b8:b3:1f:d3:3c:a5:84:8f:ff: a5:71:09:93:b6:75:90:3f:34:8d:53:9e:02:0f:33:b6:d6:02: 00:6f:0f:0c:0a:6c:7e:09:19:34:5d:58:07:ee:87:6e:71:31: 35:62:2c:14:42:e0:31:9e:1b:f3:01:70:c5:3b:ca:24:6b:3d: a5:8f:cf:53 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/g8vwuepikV0f1x0XMPiPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MWMwN2M5NTE0ODhmMDRjYjNiMGZkMzM4YWY4NGQ3N2U0 NmJmNTIwHhcNMjYwMTAyMTYyMTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmY3YzQ3MjY0NWFjMjE3ZDBkZjdlNTFkM2I5ZWU5M2EyM2Q5OGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhKjYpzfSbv4z6472SIOCAkvuTv0 Kopj9X4HMDTyipWfYKI+iGMpPrs/CM8B99h2QAr9V6gj9xf6ip5g1s/KrI7qkdm3 oG/y9Wh/NGMJRwKQwplDjcFGhc4mNGA+R+ny9mE7qy7XJkUs1lJ0mbNkU7YQd549 UVcERl4tDRTG4S7+JjX66qCzNSCnUHSqzrNziNq7wnLC5KYE8EmyUGk0OF6Igt+3 4GaK4nRZG1UMjhpbBOzA38iL8SFdvHuyCjxjKpGLGxr8SeLqCqrq+ToxteAJNxqr 6CR2+nS8idVH7LPCn6QIMM1SYQSZq2YvZmn6YWJeG4Osu7GjBcA5T16/rQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI/3xHJkWsIX0N9+UdO57pOiPZijMB8GA1UdIwQY MBaAFOYcB8lRSI8EyzsP0zivhNd+Rr9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWh3SHlWRklqd1RMT3dfVE9LLUUxMzVHdjFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yZGJhNWMtOWE5MC00MDUyLWExZWIt NmE4NDc3Y2I2YzJhLzEval9mRWNtUmF3aGZRMzM1UjA3bnVrNkk5bUtNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8yZGJhNWMtOWE5MC00MDUyLWExZWItNmE4NDc3Y2I2YzJh LzEvNWh3SHlWRklqd1RMT3dfVE9LLUUxMzVHdjFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuYcCAwQA zck3MA0GCSqGSIb3DQEBCwUAA4IBAQABfmeN5qpGNYXEtqkgAax2nSFzDsKtdRSo k5uT80IIJla9HfTrQIctHXjrBKdiqYKAPw5K72wfywVuNlUSo55rti+AMDjXkDwn vj5dA/WU6jgvJxPmWoFLBUtcVXAS+Vnnbazl8/g/Q5A8hRAq8Z2M/rl13zASFdEg 54JxIV8wagyBLvE8Fwr7xmy4J45O6nosymjsMfdavr7ITG/x+lXUz4hZNhnC32ia uAfE3nHYOOgpf1YtEEk7IDGGaQe4sx/TPKWEj/+lcQmTtnWQPzSNU54CDzO21gIA bw8MCmx+CRk0XVgH7oducTE1YiwUQuAxnhvzAXDFO8okaz2lj89T -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:22 2026 by rpki-client