This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/jioszf8WkcygR-sUCmeQ22hRJBQ.roa File: jioszf8WkcygR-sUCmeQ22hRJBQ.roa (raw, json) Hash identifier: GlPRmHwlYfAxgr1RqMrlQqRp2B9t9+qwJKez8uOIIxI= Subject key identifier: 8E:2A:2C:CD:FF:16:91:CC:A0:47:EB:14:0A:67:90:DB:68:51:24:14 Certificate issuer: /CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1 Certificate serial: 019B7F15283AB0A8550FED3E1DC230E956FD Authority key identifier: CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/jioszf8WkcygR-sUCmeQ22hRJBQ.roa Signing time: Fri 02 Jan 2026 14:20:51 +0000 ROA not before: Fri 02 Jan 2026 14:20:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204529 IP address blocks: 185.114.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:28:3a:b0:a8:55:0f:ed:3e:1d:c2:30:e9:56:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1 Validity Not Before: Jan 2 14:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e2a2ccdff1691cca047eb140a6790db68512414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:65:0f:0c:90:22:04:83:36:f0:47:73:60:34: b1:71:99:97:07:fc:35:35:27:be:b8:4e:06:9a:e0: cd:f6:11:a6:93:62:14:64:e4:a0:fc:81:e9:a6:13: ba:13:73:e5:80:46:12:80:6b:b5:05:b2:61:ea:76: 60:80:d8:cc:ab:2a:2b:c5:40:25:ab:22:82:ee:7e: 2c:4d:55:3a:30:bb:12:8c:4c:ab:05:65:a3:b7:aa: ee:db:fa:0c:40:21:7a:b7:12:76:30:2f:c6:1b:3a: 84:dc:16:81:b7:17:fe:6c:68:4d:52:3f:7d:69:dd: a8:a9:c1:22:4d:d6:f2:66:e9:95:05:7b:a2:44:e2: d8:1e:8d:e4:e4:3b:9f:0e:3a:5e:32:28:37:f2:2a: f6:72:ba:cd:e6:8a:05:fc:7d:99:8d:0d:c6:78:9b: ed:43:63:60:fb:52:a5:26:fa:42:b0:49:d9:41:19: 70:55:83:80:b3:44:f1:c2:55:e4:39:25:12:f0:83: 66:39:33:4e:86:4c:c9:06:70:57:c5:4b:b1:8c:a6: 36:c1:5d:fb:a9:95:51:8e:20:e1:9e:a2:56:84:7a: 1b:04:98:72:d8:84:11:56:d4:9a:34:79:48:5d:96: f3:eb:54:66:b4:52:70:88:b8:ae:fa:da:33:16:cc: e2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:2A:2C:CD:FF:16:91:CC:A0:47:EB:14:0A:67:90:DB:68:51:24:14 X509v3 Authority Key Identifier: keyid:CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/jioszf8WkcygR-sUCmeQ22hRJBQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.114.218.0/24 Signature Algorithm: sha256WithRSAEncryption 62:e1:87:42:63:74:2c:75:c4:8a:80:c5:e4:bb:12:fb:a6:ce: d0:e2:83:0c:1f:8f:cc:10:b7:4d:10:cd:0b:be:b7:9e:ee:ce: 52:58:fd:6f:22:35:05:c5:17:58:c6:86:f2:2f:83:20:c3:f1: 67:73:f8:03:46:4b:64:91:ff:8f:6a:11:e3:17:bd:bf:4d:f9: 17:ca:ee:88:1c:71:e6:64:0f:7c:d2:ae:c5:93:95:c2:11:29: b0:e6:30:60:60:f5:c1:43:a3:59:10:9d:3a:f1:b9:aa:89:c4: 39:53:38:63:fa:bb:84:02:23:69:84:ef:d3:ae:f8:59:b2:b3: 75:48:ea:db:69:ed:33:e5:51:a3:7e:a7:34:79:ff:b9:70:33: eb:ca:4e:4b:fc:38:0f:4f:5c:38:19:6c:d2:c7:62:c9:75:44: e2:0e:53:2d:68:20:36:a8:f7:c5:dd:3e:35:d0:e1:f1:70:d1: 67:0b:76:9d:3a:96:f6:80:f5:a7:d0:bd:2b:55:78:95:91:87: cd:8b:14:a6:2a:37:19:3e:f4:c2:92:91:22:e5:0d:92:b8:8f: 0f:01:be:ac:ff:4e:0e:96:57:96:76:0b:74:3f:e1:7a:50:83: 81:7d:1f:55:62:a6:3a:2d:10:c0:ca:2b:d4:e7:d1:5c:05:c5: 03:4a:80:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FSg6sKhVD+0+HcIw6Vb9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNWUzZWM1YTkwNjIzY2NiOTc3ODRkM2NlZjI0MjEyYTMx Y2JhZjEwHhcNMjYwMTAyMTQyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTJhMmNjZGZmMTY5MWNjYTA0N2ViMTQwYTY3OTBkYjY4NTEyNDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmUPDJAiBIM28EdzYDSxcZmXB/w1 NSe+uE4GmuDN9hGmk2IUZOSg/IHpphO6E3PlgEYSgGu1BbJh6nZggNjMqyorxUAl qyKC7n4sTVU6MLsSjEyrBWWjt6ru2/oMQCF6txJ2MC/GGzqE3BaBtxf+bGhNUj99 ad2oqcEiTdbyZumVBXuiROLYHo3k5DufDjpeMig38ir2crrN5ooF/H2ZjQ3GeJvt Q2Ng+1KlJvpCsEnZQRlwVYOAs0TxwlXkOSUS8INmOTNOhkzJBnBXxUuxjKY2wV37 qZVRjiDhnqJWhHobBJhy2IQRVtSaNHlIXZbz61RmtFJwiLiu+tozFsziGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI4qLM3/FpHMoEfrFApnkNtoUSQUMB8GA1UdIwQY MBaAFMpePsWpBiPMuXeE087yQhKjHLrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWw0LXhha0dJOHk1ZDRUVHp2SkNFcU1jdXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8wZjkyYmQtMzVkMC00NTcwLWI1ZDMt NmYzMWY2ZjdmMTZiLzEvamlvc3pmOFdrY3lnUi1zVUNtZVEyMmhSSkJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8wZjkyYmQtMzVkMC00NTcwLWI1ZDMtNmYzMWY2ZjdmMTZi LzEveWw0LXhha0dJOHk1ZDRUVHp2SkNFcU1jdXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXLaMA0G CSqGSIb3DQEBCwUAA4IBAQBi4YdCY3QsdcSKgMXkuxL7ps7Q4oMMH4/MELdNEM0L vree7s5SWP1vIjUFxRdYxobyL4Mgw/Fnc/gDRktkkf+PahHjF72/TfkXyu6IHHHm ZA980q7Fk5XCESmw5jBgYPXBQ6NZEJ068bmqicQ5Uzhj+ruEAiNphO/TrvhZsrN1 SOrbae0z5VGjfqc0ef+5cDPryk5L/DgPT1w4GWzSx2LJdUTiDlMtaCA2qPfF3T41 0OHxcNFnC3adOpb2gPWn0L0rVXiVkYfNixSmKjcZPvTCkpEi5Q2SuI8PAb6s/04O lleWdgt0P+F6UIOBfR9VYqY6LRDAyivU59FcBcUDSoBk -----END CERTIFICATE-----Generated at Mon Feb 2 20:39:38 2026 by rpki-client