This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/JR2_p8k-Ea9COb3JaEywz7Ojvyo.roa File: JR2_p8k-Ea9COb3JaEywz7Ojvyo.roa (raw, json) Hash identifier: rIUEPyZH+tezouTeaObRUTshflwC+zsZEomWJIodOoM= Subject key identifier: 25:1D:BF:A7:C9:3E:11:AF:42:39:BD:C9:68:4C:B0:CF:B3:A3:BF:2A Certificate issuer: /CN=14336c78d52ba8115741002b6b070d117ae9bfcd Certificate serial: 019B79ED3C994517CC1BBF9AB5DDE56EF6F1 Authority key identifier: 14:33:6C:78:D5:2B:A8:11:57:41:00:2B:6B:07:0D:11:7A:E9:BF:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/JR2_p8k-Ea9COb3JaEywz7Ojvyo.roa Signing time: Thu 01 Jan 2026 14:19:09 +0000 ROA not before: Thu 01 Jan 2026 14:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203021 IP address blocks: 185.147.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:3c:99:45:17:cc:1b:bf:9a:b5:dd:e5:6e:f6:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14336c78d52ba8115741002b6b070d117ae9bfcd Validity Not Before: Jan 1 14:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=251dbfa7c93e11af4239bdc9684cb0cfb3a3bf2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5a:d7:f4:f9:52:0d:3a:02:40:f0:38:a8:c1: c6:c5:e0:7d:de:d6:52:1b:4f:6d:d7:2c:a6:73:51: b8:54:44:20:96:1e:42:84:e9:2d:94:ac:a4:00:22: ac:10:fb:ff:70:d8:3b:ae:1f:05:84:43:a6:a4:ad: 21:0e:d4:0a:ad:a6:5e:51:e1:81:68:93:e7:9a:0e: 5e:3e:d7:cd:61:6e:ee:56:3d:6a:08:2e:93:3b:f2: 31:73:1e:8e:ad:81:6a:f2:fd:9d:d9:a8:f7:84:9f: 2b:d7:7b:70:dc:28:00:19:34:7c:42:6a:e2:bc:5f: 8f:d0:af:17:f9:fa:db:23:f5:2d:e0:cb:a2:09:77: 62:0f:64:0f:d2:cb:7d:01:6f:ae:33:d2:1d:72:a9: 21:13:df:2f:4d:2b:79:7b:a1:2f:30:7a:50:c5:5e: 28:9f:91:8a:2c:b1:7b:97:63:e0:07:5a:d2:45:0f: 9d:ac:8d:fc:78:76:11:d7:0a:b6:b6:3a:bb:4c:ee: 33:25:86:b7:cd:29:d1:40:1e:fa:3d:b2:9c:d1:8d: a2:75:e4:bf:90:18:da:68:d2:a5:b2:b7:31:b6:d5: 58:b4:15:6f:8e:4e:9a:0e:52:a9:71:40:d6:36:df: 67:98:3c:5e:1d:b5:1d:cc:59:a3:37:79:f7:86:8f: 57:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:1D:BF:A7:C9:3E:11:AF:42:39:BD:C9:68:4C:B0:CF:B3:A3:BF:2A X509v3 Authority Key Identifier: keyid:14:33:6C:78:D5:2B:A8:11:57:41:00:2B:6B:07:0D:11:7A:E9:BF:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/JR2_p8k-Ea9COb3JaEywz7Ojvyo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.147.120.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:f8:18:ba:8c:65:09:31:6b:ab:66:85:81:09:9b:65:b5:46: b7:ee:63:24:6c:7a:5a:b7:bc:06:e6:f1:a8:5f:fc:4e:72:61: 74:49:54:08:a2:84:c0:66:de:89:07:ec:85:ae:29:5a:29:36: 80:3c:d5:c4:7f:30:54:9b:14:6d:81:09:99:20:20:49:50:4d: ba:55:a6:cd:b4:46:5d:82:de:ea:41:ae:2d:68:15:cd:64:76: 5d:89:8b:5e:98:2c:fc:c8:81:30:ec:96:d1:da:f5:34:58:7a: 6d:94:25:7f:27:31:f4:cc:a4:d1:30:c2:ec:78:cc:d2:74:23: 01:c3:1e:ad:29:bb:36:52:8c:cf:97:58:b1:3a:f0:cc:65:fa: 51:9e:64:e2:a8:48:02:64:64:93:02:a3:13:85:9b:d0:f0:04: fd:d5:5b:a5:a1:53:64:5d:16:f8:c7:94:a9:d4:89:be:ce:e0: 66:bb:35:68:75:e6:67:5e:f8:8f:b7:f4:b8:3d:b4:33:d2:30: 68:a4:6f:b7:d7:78:34:cd:6f:7e:20:6e:30:74:1e:45:fd:b3: b8:b1:66:89:30:b2:4e:20:58:73:08:fa:73:07:29:61:7d:47: bc:2d:68:6c:ac:29:52:fe:a6:c6:c1:51:a1:36:15:88:3b:15: 31:c0:4f:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57TyZRRfMG7+atd3lbvbxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0MzM2Yzc4ZDUyYmE4MTE1NzQxMDAyYjZiMDcwZDExN2Fl OWJmY2QwHhcNMjYwMTAxMTQxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTFkYmZhN2M5M2UxMWFmNDIzOWJkYzk2ODRjYjBjZmIzYTNiZjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslrX9PlSDToCQPA4qMHGxeB93tZS G09t1yymc1G4VEQglh5ChOktlKykACKsEPv/cNg7rh8FhEOmpK0hDtQKraZeUeGB aJPnmg5ePtfNYW7uVj1qCC6TO/Ixcx6OrYFq8v2d2aj3hJ8r13tw3CgAGTR8Qmri vF+P0K8X+frbI/Ut4MuiCXdiD2QP0st9AW+uM9IdcqkhE98vTSt5e6EvMHpQxV4o n5GKLLF7l2PgB1rSRQ+drI38eHYR1wq2tjq7TO4zJYa3zSnRQB76PbKc0Y2ideS/ kBjaaNKlsrcxttVYtBVvjk6aDlKpcUDWNt9nmDxeHbUdzFmjN3n3ho9X9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCUdv6fJPhGvQjm9yWhMsM+zo78qMB8GA1UdIwQY MBaAFBQzbHjVK6gRV0EAK2sHDRF66b/NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkROc2VOVXJxQkZYUVFBcmF3Y05FWHJwdjgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83MTgzYWYtNjdiOC00YTZjLWJhMWEt YWRhZWZiZGVmYWM5LzEvSlIyX3A4ay1FYTlDT2IzSmFFeXd6N09qdnlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83MTgzYWYtNjdiOC00YTZjLWJhMWEtYWRhZWZiZGVmYWM5 LzEvRkROc2VOVXJxQkZYUVFBcmF3Y05FWHJwdjgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZN4MA0G CSqGSIb3DQEBCwUAA4IBAQA8+Bi6jGUJMWurZoWBCZtltUa37mMkbHpat7wG5vGo X/xOcmF0SVQIooTAZt6JB+yFrilaKTaAPNXEfzBUmxRtgQmZICBJUE26VabNtEZd gt7qQa4taBXNZHZdiYtemCz8yIEw7JbR2vU0WHptlCV/JzH0zKTRMMLseMzSdCMB wx6tKbs2UozPl1ixOvDMZfpRnmTiqEgCZGSTAqMThZvQ8AT91VuloVNkXRb4x5Sp 1Im+zuBmuzVodeZnXviPt/S4PbQz0jBopG+313g0zW9+IG4wdB5F/bO4sWaJMLJO IFhzCPpzBylhfUe8LWhsrClS/qbGwVGhNhWIOxUxwE9v -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:53 2026 by rpki-client