This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/jRpXU9eqysmsAJR80B3Aax6y_BQ.roa File: jRpXU9eqysmsAJR80B3Aax6y_BQ.roa (raw, json) Hash identifier: XRM8W3BWblehC6PY0lBpqApKx5419cv1D4/Jksn00jI= Subject key identifier: 8D:1A:57:53:D7:AA:CA:C9:AC:00:94:7C:D0:1D:C0:6B:1E:B2:FC:14 Certificate issuer: /CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01 Certificate serial: 019B7DC9A7BA37170622307A7AD99B93B267 Authority key identifier: F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/jRpXU9eqysmsAJR80B3Aax6y_BQ.roa Signing time: Fri 02 Jan 2026 08:18:46 +0000 ROA not before: Fri 02 Jan 2026 08:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206605 IP address blocks: 185.181.212.0/22 maxlen: 22 2a0a:de80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:a7:ba:37:17:06:22:30:7a:7a:d9:9b:93:b2:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01 Validity Not Before: Jan 2 08:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d1a5753d7aacac9ac00947cd01dc06b1eb2fc14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3c:f5:a5:2f:1d:ff:b9:67:86:7f:d2:cf:b0: e8:b2:ea:a1:c7:ec:41:ff:0b:be:5a:0b:ab:d7:4b: 85:b4:b5:96:62:e9:e3:ed:0a:80:c9:89:94:f6:23: f4:84:f3:e2:b7:c6:18:14:4e:76:a5:1a:64:db:3c: 06:73:09:8e:e0:57:29:56:8b:44:e7:5f:0c:dc:b6: 2e:cb:46:3b:c4:34:aa:22:f1:7f:41:d1:88:32:19: 7e:8e:3d:81:00:b2:44:ae:ce:7c:48:9c:d8:6b:fd: 81:23:3b:c1:ec:62:ee:12:d6:d4:1b:5d:81:0b:42: df:f5:55:e9:19:f1:56:a4:b8:aa:46:b1:8c:0a:02: af:81:47:da:e1:29:99:29:bd:96:f4:a8:02:0f:bb: f2:a6:02:cd:ab:44:3e:00:62:ee:64:04:d6:69:98: 34:55:4a:28:77:5d:be:ba:07:36:15:cd:76:af:72: 61:fe:4d:1c:ae:fd:b8:22:dd:37:9c:f0:a8:ae:17: be:52:7a:e2:9d:e0:4d:69:01:2d:88:37:2b:5e:19: e0:00:10:26:c7:ee:2e:0b:db:51:75:41:96:71:f8: b7:0b:e3:29:b0:de:e8:a2:49:08:b5:6d:85:dd:4d: fa:5f:f2:77:41:41:be:df:1c:f0:c2:77:b1:4b:6c: 1b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:1A:57:53:D7:AA:CA:C9:AC:00:94:7C:D0:1D:C0:6B:1E:B2:FC:14 X509v3 Authority Key Identifier: keyid:F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/jRpXU9eqysmsAJR80B3Aax6y_BQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.181.212.0/22 IPv6: 2a0a:de80::/32 Signature Algorithm: sha256WithRSAEncryption 9b:d1:70:c5:21:2c:96:02:fc:32:b4:a6:29:e1:65:b7:08:ec: 87:c5:ce:26:67:17:19:ef:20:a8:50:ed:00:4d:88:96:05:a4: dc:cc:be:75:09:93:4c:f4:bc:ce:ed:a4:c5:9c:ae:77:86:fe: 35:21:a4:f1:32:d9:02:7a:c6:8c:99:4d:69:cd:a9:37:b6:5e: c0:de:3c:62:b9:8b:85:32:56:35:1a:ee:56:c0:6b:c2:72:96: 25:9b:f7:cd:dd:49:55:6d:15:ea:10:8b:c1:f9:9a:19:29:66: fe:c6:d5:4f:7f:a3:fd:99:09:fe:0f:62:2e:9e:7f:53:28:78: e2:d6:b4:79:e6:5c:13:be:e9:4a:c0:08:11:9f:32:c9:4e:12: da:0a:5b:4d:bc:05:cd:7c:98:96:d0:f6:02:7c:40:61:dc:64: c8:0e:07:3f:05:b0:f9:45:f8:0d:5d:81:aa:2a:ec:9c:b7:66: 56:51:a8:78:b8:8e:8b:c2:1d:7e:2f:44:22:98:cf:94:e9:2c: 65:2d:6f:5a:2d:90:01:af:a1:d5:f8:de:de:72:4b:a8:ef:8d: ce:08:1c:f3:ae:e9:cd:aa:0f:22:1a:32:99:64:82:a2:82:45: d3:13:03:66:84:60:56:08:66:a5:0d:cb:97:0c:c5:39:bf:1c: 38:8a:29:6c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9yae6NxcGIjB6etmbk7JnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZmZmOGYxYjgxYzJjNjE0ZmMzZTk0ZWIxN2NiYTA5NDAy MTFhMDEwHhcNMjYwMTAyMDgxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDFhNTc1M2Q3YWFjYWM5YWMwMDk0N2NkMDFkYzA2YjFlYjJmYzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDz1pS8d/7lnhn/Sz7Dosuqhx+xB /wu+Wgur10uFtLWWYunj7QqAyYmU9iP0hPPit8YYFE52pRpk2zwGcwmO4FcpVotE 518M3LYuy0Y7xDSqIvF/QdGIMhl+jj2BALJErs58SJzYa/2BIzvB7GLuEtbUG12B C0Lf9VXpGfFWpLiqRrGMCgKvgUfa4SmZKb2W9KgCD7vypgLNq0Q+AGLuZATWaZg0 VUood12+ugc2Fc12r3Jh/k0crv24It03nPCorhe+UnrineBNaQEtiDcrXhngABAm x+4uC9tRdUGWcfi3C+MpsN7ookkItW2F3U36X/J3QUG+3xzwwnexS2wbBQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFI0aV1PXqsrJrACUfNAdwGsesvwUMB8GA1UdIwQY MBaAFPL/+PG4HCxhT8PpTrF8uglAIRoBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHZfNDhiZ2NMR0ZQdy1sT3NYeTZDVUFoR2dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8yMDAyYzQtZWIwYS00NzAwLTkwNzYt MTc0NDFiZmU1NmNmLzEvalJwWFU5ZXF5c21zQUpSODBCM0FheDZ5X0JRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8yMDAyYzQtZWIwYS00NzAwLTkwNzYtMTc0NDFiZmU1NmNm LzEvOHZfNDhiZ2NMR0ZQdy1sT3NYeTZDVUFoR2dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubXUMA0E AgACMAcDBQAqCt6AMA0GCSqGSIb3DQEBCwUAA4IBAQCb0XDFISyWAvwytKYp4WW3 COyHxc4mZxcZ7yCoUO0ATYiWBaTczL51CZNM9LzO7aTFnK53hv41IaTxMtkCesaM mU1pzak3tl7A3jxiuYuFMlY1Gu5WwGvCcpYlm/fN3UlVbRXqEIvB+ZoZKWb+xtVP f6P9mQn+D2Iunn9TKHji1rR55lwTvulKwAgRnzLJThLaCltNvAXNfJiW0PYCfEBh 3GTIDgc/BbD5RfgNXYGqKuyct2ZWUah4uI6Lwh1+L0QimM+U6SxlLW9aLZABr6HV +N7eckuo743OCBzzrunNqg8iGjKZZIKigkXTEwNmhGBWCGalDcuXDMU5vxw4iils -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:42 2026 by rpki-client