This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/ITJ_4YK0o5n4s0S4B56m9EJ0ogg.roa File: ITJ_4YK0o5n4s0S4B56m9EJ0ogg.roa (raw, json) Hash identifier: kcpE8+HMiQBohKY0fa+TOjXFBG4SK95c0ErHWF7t+v8= Subject key identifier: 21:32:7F:E1:82:B4:A3:99:F8:B3:44:B8:07:9E:A6:F4:42:74:A2:08 Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Certificate serial: 019B7B36DD75D965929E2DF29730AF7D920A Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/ITJ_4YK0o5n4s0S4B56m9EJ0ogg.roa Signing time: Thu 01 Jan 2026 20:19:11 +0000 ROA not before: Thu 01 Jan 2026 20:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214000 IP address blocks: 213.145.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:dd:75:d9:65:92:9e:2d:f2:97:30:af:7d:92:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Validity Not Before: Jan 1 20:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21327fe182b4a399f8b344b8079ea6f44274a208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:49:82:96:99:d3:11:40:4f:1a:a6:fc:0e:93: cb:9c:dd:96:64:c9:6a:3d:6b:82:f5:ef:ad:f9:c1: 26:7b:d4:14:70:29:44:08:12:15:2a:9c:23:94:a1: bb:c8:48:79:4c:34:56:ca:e0:f1:93:b0:b2:88:c0: ad:4c:60:df:90:df:1f:56:79:82:76:46:72:af:49: 3f:e0:7a:3a:0d:0a:1e:d7:d4:93:68:01:52:b1:c1: 19:64:65:c3:48:5b:43:83:0c:f5:3d:d2:13:77:15: 89:73:72:7d:f0:08:27:16:f5:33:8d:f9:c8:46:04: 46:52:09:d1:f8:c4:31:89:73:a2:5f:95:ce:62:5e: a9:a5:fe:90:85:e9:f3:26:0b:11:46:ce:14:b3:0f: c5:b7:fc:9f:f0:9d:c9:95:31:9d:51:c0:36:e6:d7: 76:05:2a:53:f7:a7:60:83:08:39:ad:81:a2:eb:4b: 75:97:e3:c8:8e:ec:f7:56:e5:56:2b:5a:65:f9:6b: d4:9c:94:bb:d3:2c:a8:dc:0b:15:64:be:86:c9:f0: 3b:5d:50:85:db:26:84:db:a7:be:a0:ad:77:e1:c1: f7:72:a0:ef:a8:22:6f:d1:f0:76:8e:0d:0c:e1:0e: dd:1b:47:52:a8:40:98:d7:db:9f:29:72:fd:ba:eb: e5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:32:7F:E1:82:B4:A3:99:F8:B3:44:B8:07:9E:A6:F4:42:74:A2:08 X509v3 Authority Key Identifier: keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/ITJ_4YK0o5n4s0S4B56m9EJ0ogg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.145.94.0/24 Signature Algorithm: sha256WithRSAEncryption b9:4a:2b:ee:f4:fa:5f:0d:85:ab:31:4f:0f:c0:68:93:7a:ee: f1:80:0d:e4:20:f6:d5:f7:db:37:ba:60:a2:1d:88:1d:07:cc: db:84:0e:92:4c:7b:52:d4:5f:75:95:fc:68:3e:44:15:5b:1e: aa:61:35:9d:43:a4:57:b6:e7:57:6b:ec:6c:e3:c8:cd:a3:78: 9b:7b:b3:d2:ac:00:b8:31:55:0e:4f:8a:2e:18:0e:cd:2c:6b: 93:d5:8c:aa:2c:94:1c:35:42:e9:ec:61:0f:dc:c1:a2:2d:a6: 3b:02:21:37:c3:3a:b8:9f:ec:c7:3a:c7:10:8d:6b:d7:88:e5: 97:cf:34:52:cc:e1:d5:5c:ea:fd:f7:6d:09:57:da:17:8d:a0: 05:bd:1e:e3:98:a5:85:bc:01:f1:fb:b3:2a:2f:2b:24:02:c1: 20:96:d5:2d:a5:bb:d9:ef:02:ee:2a:50:35:ec:a5:5e:8f:b8: d8:ad:72:d1:b8:3c:62:f4:57:54:aa:c8:e3:67:ca:00:1e:d1: 14:d7:14:e7:0e:43:19:c1:0f:0a:7a:78:64:af:82:2d:d1:b6: c2:a9:74:ea:0a:af:a6:cd:45:3f:b0:7f:51:7a:93:01:4f:d6: 55:fc:6f:9a:c6:c0:33:b1:35:cc:31:dd:00:d6:81:42:2a:5e: 0c:2b:a6:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nt112WWSni3ylzCvfZIKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx ZDA3MjIwHhcNMjYwMTAxMjAxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTMyN2ZlMTgyYjRhMzk5ZjhiMzQ0YjgwNzllYTZmNDQyNzRhMjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUmClpnTEUBPGqb8DpPLnN2WZMlq PWuC9e+t+cEme9QUcClECBIVKpwjlKG7yEh5TDRWyuDxk7CyiMCtTGDfkN8fVnmC dkZyr0k/4Ho6DQoe19STaAFSscEZZGXDSFtDgwz1PdITdxWJc3J98AgnFvUzjfnI RgRGUgnR+MQxiXOiX5XOYl6ppf6QhenzJgsRRs4Usw/Ft/yf8J3JlTGdUcA25td2 BSpT96dggwg5rYGi60t1l+PIjuz3VuVWK1pl+WvUnJS70yyo3AsVZL6GyfA7XVCF 2yaE26e+oK134cH3cqDvqCJv0fB2jg0M4Q7dG0dSqECY19ufKXL9uuvlZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCEyf+GCtKOZ+LNEuAeepvRCdKIIMB8GA1UdIwQY MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt ZDI0MmI2ZjNhOGExLzEvSVRKXzRZSzBvNW40czBTNEI1Nm05RUowb2dnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ZFeMA0G CSqGSIb3DQEBCwUAA4IBAQC5Sivu9PpfDYWrMU8PwGiTeu7xgA3kIPbV99s3umCi HYgdB8zbhA6STHtS1F91lfxoPkQVWx6qYTWdQ6RXtudXa+xs48jNo3ibe7PSrAC4 MVUOT4ouGA7NLGuT1YyqLJQcNULp7GEP3MGiLaY7AiE3wzq4n+zHOscQjWvXiOWX zzRSzOHVXOr9920JV9oXjaAFvR7jmKWFvAHx+7MqLyskAsEgltUtpbvZ7wLuKlA1 7KVej7jYrXLRuDxi9FdUqsjjZ8oAHtEU1xTnDkMZwQ8Kenhkr4It0bbCqXTqCq+m zUU/sH9RepMBT9ZV/G+axsAzsTXMMd0A1oFCKl4MK6bi -----END CERTIFICATE-----Generated at Mon Jan 19 20:20:49 2026 by rpki-client