This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/pJ62jL1_CaC6LVWNYtByFrcLuDM.roa File: pJ62jL1_CaC6LVWNYtByFrcLuDM.roa (raw, json) Hash identifier: ouNLsKMv0CYovkFAKO8v3kQl+SqC8Bd31AIWBDyAwC4= Subject key identifier: A4:9E:B6:8C:BD:7F:09:A0:BA:2D:55:8D:62:D0:72:16:B7:0B:B8:33 Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Certificate serial: 019B79EC48BFA885ADD7A83E6669CD2CFF12 Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/pJ62jL1_CaC6LVWNYtByFrcLuDM.roa Signing time: Thu 01 Jan 2026 14:18:06 +0000 ROA not before: Thu 01 Jan 2026 14:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201776 IP address blocks: 185.116.228.0/23 maxlen: 23 185.116.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:48:bf:a8:85:ad:d7:a8:3e:66:69:cd:2c:ff:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Validity Not Before: Jan 1 14:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a49eb68cbd7f09a0ba2d558d62d07216b70bb833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:c8:c2:64:1d:80:57:a9:d5:70:1c:7d:c4:7f: 01:09:40:b7:4d:c9:be:17:68:89:4f:5b:a6:34:41: 3f:79:21:3f:e8:00:88:15:96:93:86:00:dd:1e:13: 01:f4:a2:67:a1:45:e8:74:2e:fd:92:69:99:25:3f: 09:82:78:7e:43:91:9c:41:70:af:07:a3:34:5b:db: 82:c2:8b:99:a8:a2:5d:70:0f:0a:87:7a:37:e0:2c: 85:bb:86:0c:99:52:e6:1f:8e:de:15:59:f5:b0:62: 98:e7:b2:94:58:dc:a3:38:5d:64:af:0f:77:b3:87: 1a:c5:06:66:c7:0a:39:fb:56:df:f9:9e:70:d8:1c: 93:cf:a8:6b:f3:3a:8f:c4:f7:f8:48:6f:37:28:dc: f7:4d:73:6c:22:b3:0b:89:03:7f:f6:3b:ea:bc:c1: 4f:9f:71:17:81:f0:31:d2:29:9b:ee:77:a3:86:8a: 15:81:92:c0:8e:c4:b0:cc:6f:d7:5e:0e:2f:70:64: a4:b4:7d:f5:90:f3:90:5e:db:de:a4:2a:0f:a5:41: 7b:84:6f:f6:b1:09:68:7c:33:db:fc:8f:1b:18:14: 6f:fa:2a:7d:ac:10:7f:ee:13:df:2f:0a:d9:d4:35: b5:e2:82:81:45:23:bf:ec:c7:f9:cc:10:1a:e4:88: 2f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9E:B6:8C:BD:7F:09:A0:BA:2D:55:8D:62:D0:72:16:B7:0B:B8:33 X509v3 Authority Key Identifier: keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/pJ62jL1_CaC6LVWNYtByFrcLuDM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.116.228.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:74:35:c5:fa:8a:2f:3e:78:24:1c:2b:63:a8:ff:b6:c7:d9: f0:f7:52:89:d1:c0:28:da:81:a5:47:ca:5e:ef:fb:7b:6c:9d: 21:01:f7:ff:0f:61:dc:a1:30:98:45:95:85:63:32:d9:fc:0e: 87:ba:72:a6:72:39:86:32:84:a0:69:92:98:9d:c0:44:e0:e5: 91:7e:8b:b8:37:92:b2:bb:48:56:61:49:71:c1:7e:71:b3:34: 31:9c:90:54:c4:7e:46:b2:ab:d0:f9:c0:df:63:60:21:4b:eb: 15:41:46:e9:88:b8:b9:6f:e8:5c:7e:fd:af:67:f3:d1:92:b2: 3c:9d:f6:d7:fd:6e:41:a6:2f:6a:1f:a7:98:8d:0a:32:05:0f: c6:94:4e:b5:45:dc:73:3e:5f:d1:6c:4d:cd:32:f4:8b:fb:f0: 93:9c:0d:fc:e4:ba:0b:8d:d7:ec:30:3d:05:c9:8f:d3:1a:7f: 2a:e9:ef:d7:38:85:24:e5:7e:9d:d3:36:5c:3d:f6:3c:80:a1: ad:63:3f:a1:8a:49:60:4a:93:e8:40:ba:67:23:95:f3:24:98: 5b:7a:75:f5:78:c7:4d:ba:1d:d4:72:f7:16:3b:70:e5:47:96: d6:a3:85:96:7a:6d:72:6d:72:17:3d:f8:4e:91:00:39:48:11: 58:42:3e:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Ei/qIWt16g+ZmnNLP8SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh ZGZhMDAwHhcNMjYwMTAxMTQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDllYjY4Y2JkN2YwOWEwYmEyZDU1OGQ2MmQwNzIxNmI3MGJiODMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA98jCZB2AV6nVcBx9xH8BCUC3Tcm+ F2iJT1umNEE/eSE/6ACIFZaThgDdHhMB9KJnoUXodC79kmmZJT8Jgnh+Q5GcQXCv B6M0W9uCwouZqKJdcA8Kh3o34CyFu4YMmVLmH47eFVn1sGKY57KUWNyjOF1krw93 s4caxQZmxwo5+1bf+Z5w2ByTz6hr8zqPxPf4SG83KNz3TXNsIrMLiQN/9jvqvMFP n3EXgfAx0imb7nejhooVgZLAjsSwzG/XXg4vcGSktH31kPOQXtvepCoPpUF7hG/2 sQlofDPb/I8bGBRv+ip9rBB/7hPfLwrZ1DW14oKBRSO/7Mf5zBAa5IgvDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKSetoy9fwmgui1VjWLQcha3C7gzMB8GA1UdIwQY MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt OGRmMzYzMzdlNmJjLzEvcEo2MmpMMV9DYUM2TFZXTll0QnlGcmNMdURNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJj LzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXTkMA0G CSqGSIb3DQEBCwUAA4IBAQCKdDXF+oovPngkHCtjqP+2x9nw91KJ0cAo2oGlR8pe 7/t7bJ0hAff/D2HcoTCYRZWFYzLZ/A6HunKmcjmGMoSgaZKYncBE4OWRfou4N5Ky u0hWYUlxwX5xszQxnJBUxH5GsqvQ+cDfY2AhS+sVQUbpiLi5b+hcfv2vZ/PRkrI8 nfbX/W5Bpi9qH6eYjQoyBQ/GlE61RdxzPl/RbE3NMvSL+/CTnA385LoLjdfsMD0F yY/TGn8q6e/XOIUk5X6d0zZcPfY8gKGtYz+hiklgSpPoQLpnI5XzJJhbenX1eMdN uh3UcvcWO3DlR5bWo4WWem1ybXIXPfhOkQA5SBFYQj6t -----END CERTIFICATE-----Generated at Mon Jan 26 08:06:30 2026 by rpki-client