This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/JnnE5cNAcv9wz3TI8TfH4u0NBcU.roa File: JnnE5cNAcv9wz3TI8TfH4u0NBcU.roa (raw, json) Hash identifier: xU3rWkfVk5qZUJvhVm68n48mnoaSTHuwyqAL2yV4jY4= Subject key identifier: 26:79:C4:E5:C3:40:72:FF:70:CF:74:C8:F1:37:C7:E2:ED:0D:05:C5 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019AC48E60219B519884A1FD8FF698A792C0 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/JnnE5cNAcv9wz3TI8TfH4u0NBcU.roa Signing time: Thu 27 Nov 2025 09:04:16 +0000 ROA not before: Thu 27 Nov 2025 09:04:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 185.214.108.0/24 maxlen: 24 185.223.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 02 Dec 2025 23:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c4:8e:60:21:9b:51:98:84:a1:fd:8f:f6:98:a7:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Nov 27 09:04:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2679c4e5c34072ff70cf74c8f137c7e2ed0d05c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:57:bf:0e:6f:dc:92:db:19:08:90:72:3b:c4: 51:75:b0:b3:55:fb:98:41:ec:e3:1b:56:c0:99:45: 67:65:67:95:de:b7:75:d9:4f:56:2d:7d:22:64:a1: 8d:e9:d2:9b:c0:5d:ac:4b:6f:59:c2:0c:fd:65:9d: 37:78:c2:99:6b:ae:7c:79:2b:9f:95:77:71:bc:01: 48:49:3f:8d:91:b7:66:fa:51:73:34:85:6d:48:c3: b3:ca:77:37:f8:96:f1:11:84:18:27:58:6a:50:34: 86:2b:41:6d:05:3b:af:f5:51:5d:0e:6a:34:a6:79: 86:cf:fd:99:be:46:0d:6b:1f:6f:41:e5:93:d4:45: aa:35:bc:fe:4c:0b:a5:ae:4b:b2:35:fc:a4:bb:d6: 9e:22:8c:b2:09:c0:a0:b8:70:31:1f:7c:e5:69:b8: bc:cb:60:19:72:5d:03:c1:f7:3e:0c:4a:59:c4:b3: 76:db:47:dd:8f:4d:b0:aa:cd:7b:e8:bf:57:40:64: d7:10:20:3c:b7:3e:b6:ab:8f:69:08:d0:10:f4:a3: 45:e4:06:35:57:ee:3e:bb:7a:b5:f2:ae:37:c4:ea: 11:53:c4:7e:33:90:02:44:e1:ad:ee:b6:1a:e2:8e: 4b:6b:f9:4e:a5:55:32:5e:99:21:0b:16:8f:2a:fd: bd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:79:C4:E5:C3:40:72:FF:70:CF:74:C8:F1:37:C7:E2:ED:0D:05:C5 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/JnnE5cNAcv9wz3TI8TfH4u0NBcU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.214.108.0/24 185.223.155.0/24 Signature Algorithm: sha256WithRSAEncryption 87:37:38:c6:12:f9:01:7e:c2:8d:e5:ce:7c:ae:b4:80:66:de: 03:b1:a9:f3:cf:04:4d:e9:61:40:7c:d7:b8:40:6f:40:27:40: a5:49:3e:52:55:26:be:b3:77:77:54:d6:98:26:b2:5a:1e:6c: e1:3a:a6:22:6a:a6:8d:b3:ab:0b:16:c1:4f:25:12:05:3c:68: 76:7c:dd:bc:0c:d0:be:78:4f:26:d4:90:72:05:91:05:08:06: db:0d:07:ee:0f:e6:1a:ee:99:56:bb:74:4c:1d:e8:bf:b0:94: 2c:bf:f3:26:7a:ef:64:95:86:22:a5:41:36:e5:08:fa:ac:77: d7:22:0d:c6:fa:d3:e3:78:03:67:e6:2f:07:48:11:94:ba:61: 97:ec:c9:7d:b8:a2:eb:68:9c:ea:28:55:39:95:23:ec:0a:bf: 95:df:f7:10:52:f2:2a:d3:ab:29:31:8f:93:6d:52:e9:23:f4: 9b:15:06:47:5d:93:04:7c:7a:92:13:f8:20:80:cb:2e:c8:9f: 97:c5:0a:dc:99:cf:f5:1b:da:fa:85:6c:bf:af:f5:f4:83:07: 05:83:53:4c:bb:b3:9c:8d:3a:1b:e8:07:0f:6e:43:12:4e:31: 80:17:3b:81:00:21:ad:d7:ba:19:e6:72:f6:23:ae:f3:34:80: 08:d1:79:cc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrEjmAhm1GYhKH9j/aYp5LAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjUxMTI3MDkwNDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjc5YzRlNWMzNDA3MmZmNzBjZjc0YzhmMTM3YzdlMmVkMGQwNWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1e/Dm/cktsZCJByO8RRdbCzVfuY QezjG1bAmUVnZWeV3rd12U9WLX0iZKGN6dKbwF2sS29Zwgz9ZZ03eMKZa658eSuf lXdxvAFIST+Nkbdm+lFzNIVtSMOzync3+JbxEYQYJ1hqUDSGK0FtBTuv9VFdDmo0 pnmGz/2ZvkYNax9vQeWT1EWqNbz+TAulrkuyNfyku9aeIoyyCcCguHAxH3zlabi8 y2AZcl0Dwfc+DEpZxLN220fdj02wqs176L9XQGTXECA8tz62q49pCNAQ9KNF5AY1 V+4+u3q18q43xOoRU8R+M5ACROGt7rYa4o5La/lOpVUyXpkhCxaPKv29BwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCZ5xOXDQHL/cM90yPE3x+LtDQXFMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvSm5uRTVjTkFjdjl3ejNUSThUZkg0dTBOQmNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAudZsAwQA ud+bMA0GCSqGSIb3DQEBCwUAA4IBAQCHNzjGEvkBfsKN5c58rrSAZt4DsanzzwRN 6WFAfNe4QG9AJ0ClST5SVSa+s3d3VNaYJrJaHmzhOqYiaqaNs6sLFsFPJRIFPGh2 fN28DNC+eE8m1JByBZEFCAbbDQfuD+Ya7plWu3RMHei/sJQsv/Mmeu9klYYipUE2 5Qj6rHfXIg3G+tPjeANn5i8HSBGUumGX7Ml9uKLraJzqKFU5lSPsCr+V3/cQUvIq 06spMY+TbVLpI/SbFQZHXZMEfHqSE/gggMsuyJ+XxQrcmc/1G9r6hWy/r/X0gwcF g1NMu7OcjTob6AcPbkMSTjGAFzuBACGt17oZ5nL2I67zNIAI0XnM -----END CERTIFICATE-----Generated at Tue Dec 2 07:16:48 2025 by rpki-client