This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/JzElV8rMB35_r5yROjAIe1YSEGk.roa File: JzElV8rMB35_r5yROjAIe1YSEGk.roa (raw, json) Hash identifier: prxCAC9aS1jR/lGKgImoCaF1puXWY2FG75jnwkB+CC4= Subject key identifier: 27:31:25:57:CA:CC:07:7E:7F:AF:9C:91:3A:30:08:7B:56:12:10:69 Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030 Certificate serial: 019B7BA520D15F5EE4CED28DE119D565869E Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/JzElV8rMB35_r5yROjAIe1YSEGk.roa Signing time: Thu 01 Jan 2026 22:19:37 +0000 ROA not before: Thu 01 Jan 2026 22:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25693 IP address blocks: 185.228.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:20:d1:5f:5e:e4:ce:d2:8d:e1:19:d5:65:86:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030 Validity Not Before: Jan 1 22:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27312557cacc077e7faf9c913a30087b56121069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:81:44:c4:ab:da:0c:de:f8:b0:1b:1f:ec:aa: 4b:8c:f6:32:49:b8:a3:b5:78:d0:ee:9c:5d:f7:29: e2:59:2f:e4:bb:8f:9b:a2:01:4a:21:5e:8e:4c:3d: 3a:a8:f3:20:eb:0c:85:4c:04:7b:54:80:21:60:a5: 29:64:86:46:79:b2:bd:db:3a:73:c9:8f:43:27:15: 16:e7:51:72:5d:f5:f0:0e:5b:c3:24:20:de:2d:0c: 7a:4f:49:bb:65:ea:e3:86:14:27:3d:df:61:d6:bc: 04:b8:65:cc:12:0d:36:38:50:f8:fb:49:88:f5:ed: 23:0e:18:ef:53:a2:98:03:6e:95:ec:62:62:7d:86: bd:d2:28:f2:71:5f:0d:b6:5e:3a:0c:26:65:ab:14: 7a:a4:53:bf:83:62:27:43:af:72:14:c8:a1:08:fd: eb:0a:9e:68:79:11:fc:0c:91:da:f2:af:c2:c2:8d: cf:6a:53:82:d4:7e:d4:a1:fd:58:55:3e:7e:29:e3: b4:95:04:b6:7f:c1:44:6a:c0:77:3c:35:38:30:02: d6:49:ae:f2:ca:07:5d:55:78:28:62:93:84:45:36: f0:16:c8:1d:1f:a5:64:ce:7c:09:77:a8:c6:f6:50: 5e:13:37:17:7a:9a:6e:1c:36:df:0f:0a:f9:7d:75: 04:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:31:25:57:CA:CC:07:7E:7F:AF:9C:91:3A:30:08:7B:56:12:10:69 X509v3 Authority Key Identifier: keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/JzElV8rMB35_r5yROjAIe1YSEGk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.228.1.0/24 Signature Algorithm: sha256WithRSAEncryption 69:83:ae:08:7f:a4:07:2b:80:2a:00:00:d5:7f:ed:a6:45:81: 56:62:c6:88:4c:b8:00:34:97:9e:19:00:44:18:88:94:67:7d: c8:e5:8a:5d:6d:24:80:7c:6e:8d:b6:9e:7f:a7:40:06:68:9c: 05:c4:6f:33:6d:32:64:23:f4:28:8c:3a:06:c5:95:8f:fe:0b: d8:18:63:f5:d3:5d:7a:45:a9:50:76:61:e5:78:25:a7:9e:dc: c3:bb:45:e1:d8:5a:4c:31:b1:45:c4:f7:93:40:c9:20:b2:c8: 15:a3:53:e6:36:72:ce:95:5d:0a:5f:5a:2a:6d:42:d9:b9:45: 0b:a5:42:c7:15:72:29:6f:24:8c:80:5e:54:cc:30:eb:f0:2b: 81:40:b0:45:bb:b0:ac:6c:88:f5:91:70:78:3c:f2:eb:0d:96: 92:e2:3f:b5:4e:83:f1:de:79:68:28:77:e0:0a:d2:d8:8e:dc: 47:12:0e:ec:b8:ce:86:f9:b7:82:80:10:76:d4:f6:a0:d7:c5: 1a:12:69:0f:0a:69:3c:b5:cf:11:6b:66:1e:66:67:cb:fe:ed: a2:b3:89:f3:40:60:ab:ee:9b:e2:a1:f5:4f:63:bd:2f:f4:49: 27:8e:79:3f:45:c0:2b:ee:4c:e1:d7:db:13:c2:1e:70:52:99: 7e:14:d2:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pSDRX17kztKN4RnVZYaeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YzYzNzNlYWIxOWNmNDNkZDJmNDMxMTEzOTgzODNlZTJi YWQwMzAwHhcNMjYwMTAxMjIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzMxMjU1N2NhY2MwNzdlN2ZhZjljOTEzYTMwMDg3YjU2MTIxMDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IFExKvaDN74sBsf7KpLjPYySbij tXjQ7pxd9yniWS/ku4+bogFKIV6OTD06qPMg6wyFTAR7VIAhYKUpZIZGebK92zpz yY9DJxUW51FyXfXwDlvDJCDeLQx6T0m7ZerjhhQnPd9h1rwEuGXMEg02OFD4+0mI 9e0jDhjvU6KYA26V7GJifYa90ijycV8Ntl46DCZlqxR6pFO/g2InQ69yFMihCP3r Cp5oeRH8DJHa8q/Cwo3PalOC1H7Uof1YVT5+KeO0lQS2f8FEasB3PDU4MALWSa7y ygddVXgoYpOERTbwFsgdH6VkznwJd6jG9lBeEzcXeppuHDbfDwr5fXUE/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCcxJVfKzAd+f6+ckTowCHtWEhBpMB8GA1UdIwQY MBaAFKXGNz6rGc9D3S9DEROYOD7iutAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEt YTRlYTBhNjNmNzY2LzEvSnpFbFY4ck1CMzVfcjV5Uk9qQUllMVlTRUdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEtYTRlYTBhNjNmNzY2 LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueQBMA0G CSqGSIb3DQEBCwUAA4IBAQBpg64If6QHK4AqAADVf+2mRYFWYsaITLgANJeeGQBE GIiUZ33I5YpdbSSAfG6Ntp5/p0AGaJwFxG8zbTJkI/QojDoGxZWP/gvYGGP10116 RalQdmHleCWnntzDu0Xh2FpMMbFFxPeTQMkgssgVo1PmNnLOlV0KX1oqbULZuUUL pULHFXIpbySMgF5UzDDr8CuBQLBFu7CsbIj1kXB4PPLrDZaS4j+1ToPx3nloKHfg CtLYjtxHEg7suM6G+beCgBB21Pag18UaEmkPCmk8tc8Ra2YeZmfL/u2is4nzQGCr 7pviofVPY70v9Eknjnk/RcAr7kzh19sTwh5wUpl+FNIO -----END CERTIFICATE-----Generated at Tue Jan 20 12:27:29 2026 by rpki-client