This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/J6faa1GibNw6MoSS_lsuGkWgigA.roa File: J6faa1GibNw6MoSS_lsuGkWgigA.roa (raw, json) Hash identifier: B7w95QdSwgNMUOur1scDCD/uIecO23CLtKhv7ej0ZQA= Subject key identifier: 27:A7:DA:6B:51:A2:6C:DC:3A:32:84:92:FE:5B:2E:1A:45:A0:8A:00 Certificate issuer: /CN=eee573084100b41d7cc1e447295ba71d019d5192 Certificate serial: 019B797E66171C152A7967EA1FABD8EF4391 Authority key identifier: EE:E5:73:08:41:00:B4:1D:7C:C1:E4:47:29:5B:A7:1D:01:9D:51:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uVzCEEAtB18weRHKVunHQGdUZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/J6faa1GibNw6MoSS_lsuGkWgigA.roa Signing time: Thu 01 Jan 2026 12:18:05 +0000 ROA not before: Thu 01 Jan 2026 12:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24961 IP address blocks: 185.114.108.0/24 maxlen: 24 185.114.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/7uVzCEEAtB18weRHKVunHQGdUZI.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/7uVzCEEAtB18weRHKVunHQGdUZI.mft rsync://rpki.ripe.net/repository/DEFAULT/7uVzCEEAtB18weRHKVunHQGdUZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:66:17:1c:15:2a:79:67:ea:1f:ab:d8:ef:43:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eee573084100b41d7cc1e447295ba71d019d5192 Validity Not Before: Jan 1 12:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27a7da6b51a26cdc3a328492fe5b2e1a45a08a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:50:99:e0:7f:7a:8e:d6:b6:f2:0e:58:81:29: 9b:60:3e:ef:8b:6e:48:98:1e:6b:10:d8:36:2a:37: ed:94:64:a2:87:bc:41:0b:bf:44:91:f6:3f:0d:25: e3:c2:e5:e9:eb:db:aa:e4:31:4b:0d:25:4c:8b:3a: 52:a6:5e:a0:14:6e:1c:c9:da:b8:05:4c:1f:b2:36: 8b:34:ac:f9:bb:a9:47:a0:60:61:ce:e6:8c:e2:ee: 1b:5a:b5:3e:c4:b0:24:1b:c9:59:0a:52:61:37:91: ec:04:d0:cb:81:eb:29:47:7e:af:ce:66:70:1a:40: 71:00:06:48:c7:cf:91:18:72:0b:14:87:dc:56:95: 0a:18:d0:96:e7:99:f3:98:95:00:8c:39:20:1a:46: 55:0c:a2:30:32:29:51:3c:cc:58:78:b1:05:29:49: 29:76:66:31:82:9e:2e:a2:b0:48:13:a1:af:d9:ed: 7a:e9:08:6b:68:33:4f:b5:5c:8f:6a:4e:84:0c:b4: 1f:f1:cf:85:ad:b2:3d:04:64:5b:e8:d3:aa:bd:f7: 04:39:1e:38:d0:7c:8b:8b:dc:29:c5:f4:fe:7e:f6: cb:42:61:cf:f5:0f:25:ee:6b:6a:c8:91:2d:9d:ee: 80:32:ed:5f:ea:1d:75:1c:d3:78:eb:03:c9:62:27: 3d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A7:DA:6B:51:A2:6C:DC:3A:32:84:92:FE:5B:2E:1A:45:A0:8A:00 X509v3 Authority Key Identifier: keyid:EE:E5:73:08:41:00:B4:1D:7C:C1:E4:47:29:5B:A7:1D:01:9D:51:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uVzCEEAtB18weRHKVunHQGdUZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/J6faa1GibNw6MoSS_lsuGkWgigA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/7uVzCEEAtB18weRHKVunHQGdUZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.114.108.0/23 Signature Algorithm: sha256WithRSAEncryption 81:63:35:f0:d6:80:f8:75:1f:17:98:5d:78:0c:f5:e0:15:03: 0b:2c:a5:a3:f1:50:d3:cf:1f:c8:aa:7f:7b:19:0f:d5:94:80: cf:96:8a:13:bb:7b:ef:47:aa:af:b9:ee:c1:3c:38:15:60:6b: 73:a4:76:77:f2:4d:80:87:ba:8e:17:a2:30:8d:fb:29:99:c9: e1:2a:0f:dc:83:84:10:b9:67:83:dd:d6:46:f6:ae:ca:ca:8c: 13:eb:a5:e0:08:d7:03:8d:d0:1d:3d:2c:33:8f:06:85:e7:10: 44:c3:8d:02:cb:6b:e7:fe:90:c7:2f:4f:88:78:24:e9:93:8b: 2c:49:f4:47:ae:63:e3:dc:e3:c1:95:ee:0c:32:6c:c2:58:84: 47:40:5a:62:d5:56:77:21:33:ee:a1:0b:ac:89:b2:94:90:03: 0c:4f:d8:de:92:b3:12:ef:6b:22:c9:df:97:9f:19:d2:11:68: 7c:70:a1:c5:3b:f8:cd:2f:59:0e:7f:6f:10:36:7a:e3:c7:c5: 36:a5:20:fb:c4:cb:4c:32:26:d4:ad:64:56:45:26:49:f7:55: 45:28:18:27:3c:25:66:eb:39:56:b1:21:62:2d:08:48:53:72: db:33:67:63:71:21:85:68:09:d4:de:c7:cf:9f:6c:8e:c4:a3: 90:4d:67:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fmYXHBUqeWfqH6vY70ORMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZTU3MzA4NDEwMGI0MWQ3Y2MxZTQ0NzI5NWJhNzFkMDE5 ZDUxOTIwHhcNMjYwMTAxMTIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2E3ZGE2YjUxYTI2Y2RjM2EzMjg0OTJmZTViMmUxYTQ1YTA4YTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlCZ4H96jta28g5YgSmbYD7vi25I mB5rENg2KjftlGSih7xBC79EkfY/DSXjwuXp69uq5DFLDSVMizpSpl6gFG4cydq4 BUwfsjaLNKz5u6lHoGBhzuaM4u4bWrU+xLAkG8lZClJhN5HsBNDLgespR36vzmZw GkBxAAZIx8+RGHILFIfcVpUKGNCW55nzmJUAjDkgGkZVDKIwMilRPMxYeLEFKUkp dmYxgp4uorBIE6Gv2e166QhraDNPtVyPak6EDLQf8c+FrbI9BGRb6NOqvfcEOR44 0HyLi9wpxfT+fvbLQmHP9Q8l7mtqyJEtne6AMu1f6h11HNN46wPJYic9nQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCen2mtRomzcOjKEkv5bLhpFoIoAMB8GA1UdIwQY MBaAFO7lcwhBALQdfMHkRylbpx0BnVGSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3VWekNFRUF0QjE4d2VSSEtWdW5IUUdkVVpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8xMWE4NjQtZDFjYi00MDAwLWIyYmMt MTllZTNkOGI1NzdlLzEvSjZmYWExR2liTnc2TW9TU19sc3VHa1dnaWdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8xMWE4NjQtZDFjYi00MDAwLWIyYmMtMTllZTNkOGI1Nzdl LzEvN3VWekNFRUF0QjE4d2VSSEtWdW5IUUdkVVpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuXJsMA0G CSqGSIb3DQEBCwUAA4IBAQCBYzXw1oD4dR8XmF14DPXgFQMLLKWj8VDTzx/Iqn97 GQ/VlIDPlooTu3vvR6qvue7BPDgVYGtzpHZ38k2Ah7qOF6IwjfspmcnhKg/cg4QQ uWeD3dZG9q7KyowT66XgCNcDjdAdPSwzjwaF5xBEw40Cy2vn/pDHL0+IeCTpk4ss SfRHrmPj3OPBle4MMmzCWIRHQFpi1VZ3ITPuoQusibKUkAMMT9jekrMS72siyd+X nxnSEWh8cKHFO/jNL1kOf28QNnrjx8U2pSD7xMtMMibUrWRWRSZJ91VFKBgnPCVm 6zlWsSFiLQhIU3LbM2djcSGFaAnU3sfPn2yOxKOQTWcN -----END CERTIFICATE-----Generated at Wed Jan 21 09:21:33 2026 by rpki-client