This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/JwJbBnAQRnm7Yr9wnBpWo0sg6l8.roa File: JwJbBnAQRnm7Yr9wnBpWo0sg6l8.roa (raw, json) Hash identifier: j/L9is0WBI5ilRI5gTL02OZdlEqkkNv6fyzs7XSwNkE= Subject key identifier: 27:02:5B:06:70:10:46:79:BB:62:BF:70:9C:1A:56:A3:4B:20:EA:5F Certificate issuer: /CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b Certificate serial: 019B7A5AE6348D2D098CE145CCEDF49C772E Authority key identifier: A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/JwJbBnAQRnm7Yr9wnBpWo0sg6l8.roa Signing time: Thu 01 Jan 2026 16:18:56 +0000 ROA not before: Thu 01 Jan 2026 16:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.200.208.0/24 maxlen: 24 185.200.209.0/24 maxlen: 24 185.200.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 01:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e6:34:8d:2d:09:8c:e1:45:cc:ed:f4:9c:77:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b Validity Not Before: Jan 1 16:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27025b0670104679bb62bf709c1a56a34b20ea5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bc:7e:d0:10:7b:4b:a1:34:bc:14:b2:e5:31: df:7f:f4:b7:fe:ac:3d:d2:f9:1c:07:87:ce:da:31: 68:f7:e0:b6:19:80:6d:91:f4:8b:72:df:75:fb:76: 47:68:9e:51:25:00:92:ce:42:d8:01:bc:f7:7f:98: 13:88:87:73:18:86:fa:d2:da:97:8b:d6:55:a5:68: 95:ad:6a:4f:ed:00:68:8a:cb:c6:c3:d3:8a:8b:a1: 63:37:c3:94:0c:e1:f9:83:3b:56:84:84:f9:a4:9c: 1f:fb:a4:ae:42:99:bf:32:b2:56:b6:98:9a:88:da: eb:bd:5e:ed:28:46:73:a0:68:de:4c:ac:aa:9c:8d: 4c:7f:3d:d5:93:39:94:95:38:f0:ba:ca:5c:f4:c6: 47:6e:a1:31:e4:d4:77:44:bd:ac:9b:ba:f2:8d:8e: af:43:4b:88:59:dd:a1:f8:7d:e8:1a:b2:ed:e4:98: 3c:50:b0:fb:9c:40:9f:8e:7c:76:42:91:ac:5f:bf: e3:cb:5c:da:72:99:83:78:2c:83:10:d2:e6:31:f8: 33:d4:a7:67:e7:ee:d1:97:46:17:a3:25:29:62:0e: 4e:61:e6:9a:d2:10:11:d4:7f:75:52:e6:88:f4:ef: 7d:33:d1:db:77:ee:7b:68:01:11:dc:25:64:a9:8d: cd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:02:5B:06:70:10:46:79:BB:62:BF:70:9C:1A:56:A3:4B:20:EA:5F X509v3 Authority Key Identifier: keyid:A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/JwJbBnAQRnm7Yr9wnBpWo0sg6l8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.200.208.0/23 185.200.211.0/24 Signature Algorithm: sha256WithRSAEncryption 82:a2:df:fc:f2:1e:cd:66:94:db:51:1f:55:c2:16:54:fa:92: 30:95:81:cf:16:ec:5c:e8:76:d0:43:e0:e9:d4:83:91:f3:23: d4:c7:17:65:f8:8a:c5:da:7b:13:b5:13:7a:62:ce:95:04:5b: 23:cb:ad:06:24:fd:35:a4:cd:2c:1a:8e:f9:88:0f:a6:3b:34: b7:71:cd:37:71:37:fe:73:f5:bd:39:91:28:f7:79:95:d6:97: 70:d6:8c:6a:61:d1:ee:20:46:f8:80:17:6c:6f:bc:17:c9:6b: fb:0f:bd:9c:c8:aa:bc:ca:46:8c:fc:8d:9c:8e:be:b1:54:66: 77:df:45:db:ab:ec:c0:e5:66:0f:a2:d1:2e:d7:a6:cf:2e:84: 46:66:52:54:fa:c5:3d:4b:7e:2d:64:f8:60:e7:1f:16:0e:d3: e8:d8:2b:55:72:a1:28:bf:2a:4c:a9:96:c0:30:97:32:e9:f6: 9b:ad:47:9e:f6:ee:c1:38:52:b6:da:b2:20:a9:73:d9:30:bc: 53:5d:8e:3f:dc:87:86:6d:c6:5e:99:df:7b:d7:2e:1d:9a:c0: 57:ed:b6:b5:a3:2b:9a:95:eb:55:cd:76:3b:1e:8a:6b:66:66: 98:70:3c:91:dc:cd:96:5f:ae:ba:c6:ba:8c:46:72:ec:21:46: a0:fe:b6:a3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WuY0jS0JjOFFzO30nHcuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZGJkNWQxZjg2ZGQ5ZGQ2NjYwNmExNGQzMWQ2NGNiMGVh YWM4M2IwHhcNMjYwMTAxMTYxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzAyNWIwNjcwMTA0Njc5YmI2MmJmNzA5YzFhNTZhMzRiMjBlYTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrx+0BB7S6E0vBSy5THff/S3/qw9 0vkcB4fO2jFo9+C2GYBtkfSLct91+3ZHaJ5RJQCSzkLYAbz3f5gTiIdzGIb60tqX i9ZVpWiVrWpP7QBoisvGw9OKi6FjN8OUDOH5gztWhIT5pJwf+6SuQpm/MrJWtpia iNrrvV7tKEZzoGjeTKyqnI1Mfz3VkzmUlTjwuspc9MZHbqEx5NR3RL2sm7ryjY6v Q0uIWd2h+H3oGrLt5Jg8ULD7nECfjnx2QpGsX7/jy1zacpmDeCyDENLmMfgz1Kdn 5+7Rl0YXoyUpYg5OYeaa0hAR1H91UuaI9O99M9Hbd+57aAER3CVkqY3NQwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCcCWwZwEEZ5u2K/cJwaVqNLIOpfMB8GA1UdIwQY MBaAFKDb1dH4bdndZmBqFNMdZMsOqsg7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb052VjBmaHQyZDFtWUdvVTB4MWt5dzZxeURzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xZDRjZmMtOGU1Yy00NTdjLTk2MjAt MTM1YzkxZWMxOTllLzEvSndKYkJuQVFSbm03WXI5d25CcFdvMHNnNmw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8xZDRjZmMtOGU1Yy00NTdjLTk2MjAtMTM1YzkxZWMxOTll LzEvb052VjBmaHQyZDFtWUdvVTB4MWt5dzZxeURzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBucjQAwQA ucjTMA0GCSqGSIb3DQEBCwUAA4IBAQCCot/88h7NZpTbUR9VwhZU+pIwlYHPFuxc 6HbQQ+Dp1IOR8yPUxxdl+IrF2nsTtRN6Ys6VBFsjy60GJP01pM0sGo75iA+mOzS3 cc03cTf+c/W9OZEo93mV1pdw1oxqYdHuIEb4gBdsb7wXyWv7D72cyKq8ykaM/I2c jr6xVGZ330Xbq+zA5WYPotEu16bPLoRGZlJU+sU9S34tZPhg5x8WDtPo2CtVcqEo vypMqZbAMJcy6fabrUee9u7BOFK22rIgqXPZMLxTXY4/3IeGbcZemd971y4dmsBX 7ba1oyualetVzXY7HoprZmaYcDyR3M2WX666xrqMRnLsIUag/raj -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:02 2026 by rpki-client