This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/cj2iG-kAiX7g7Q_YyN0wXBDsPQA.roa File: cj2iG-kAiX7g7Q_YyN0wXBDsPQA.roa (raw, json) Hash identifier: Iwu4QuDjHy9svFihD9XS6FTYQQqAdESvSACyQGECMOI= Subject key identifier: 72:3D:A2:1B:E9:00:89:7E:E0:ED:0F:D8:C8:DD:30:5C:10:EC:3D:00 Certificate issuer: /CN=7cab39c6e0412235efc7877a9f737899313ed15e Certificate serial: 019B7E37B8A2EC78B3F062A703EA29F5E7AD Authority key identifier: 7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/cj2iG-kAiX7g7Q_YyN0wXBDsPQA.roa Signing time: Fri 02 Jan 2026 10:18:59 +0000 ROA not before: Fri 02 Jan 2026 10:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31574 IP address blocks: 194.242.109.0/24 maxlen: 24 194.242.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:b8:a2:ec:78:b3:f0:62:a7:03:ea:29:f5:e7:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cab39c6e0412235efc7877a9f737899313ed15e Validity Not Before: Jan 2 10:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=723da21be900897ee0ed0fd8c8dd305c10ec3d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fe:a9:99:2b:72:ae:bb:de:18:3a:3a:2d:27: b9:8a:3f:c0:4e:a2:53:e9:98:9a:6f:25:a2:55:0d: 5b:73:3b:1b:8c:17:34:dc:3e:da:2e:8d:a4:e0:25: f9:bf:bb:4e:c9:0c:2b:84:a4:2b:b6:58:c4:b6:e3: cd:42:0c:e3:c7:02:38:05:f2:38:34:bb:36:07:57: 6c:32:25:8e:cc:31:b4:3f:f5:25:cc:52:2e:d2:63: 5e:a6:dc:8c:dc:a3:a7:34:8c:f2:b9:3d:ba:19:e8: 7b:24:21:37:f7:bb:15:f1:71:c1:15:ac:09:c8:a7: bb:c7:9d:de:12:d2:41:a0:ec:6b:87:ad:ad:2e:5a: 6d:77:98:0c:7b:d1:0c:44:e2:ee:87:ee:46:76:32: f6:a2:cf:ce:8b:8e:00:d9:cb:c2:28:41:76:94:21: 25:20:3e:26:d0:68:b1:ed:75:f4:b7:8e:b4:43:b9: 26:09:d8:3d:4e:42:4e:c4:25:99:bd:b1:8f:e7:38: 8b:15:af:cf:03:09:83:44:68:8f:72:6c:08:cb:78: ce:a7:13:86:76:7c:2d:bf:4c:04:cd:31:c7:0e:ce: 8f:c3:e8:c3:45:ab:1e:ee:5f:e3:22:57:a0:51:1f: bb:95:7a:48:68:8f:19:8b:7e:7f:c6:6b:d5:dc:2b: 61:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:3D:A2:1B:E9:00:89:7E:E0:ED:0F:D8:C8:DD:30:5C:10:EC:3D:00 X509v3 Authority Key Identifier: keyid:7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/cj2iG-kAiX7g7Q_YyN0wXBDsPQA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.242.109.0-194.242.110.255 Signature Algorithm: sha256WithRSAEncryption a6:b4:85:a1:02:93:ee:d0:59:85:9d:5f:c8:49:e9:f0:08:fb: c3:46:95:a6:22:35:34:ae:0a:93:b8:ac:7b:b9:79:8a:be:e1: df:eb:de:6b:00:62:ee:36:4c:20:02:3e:ac:f2:df:31:0a:19: b3:02:49:03:8b:5c:ea:7c:e2:1c:e5:46:5d:97:88:0c:7a:62: bc:fa:57:a2:99:ee:70:b4:5c:a3:d5:7c:18:26:f4:e2:84:be: bb:35:b6:a5:ad:5e:6b:c5:93:1c:ad:53:ed:b8:d7:f6:30:ad: 00:b4:e2:7f:f7:e0:94:be:05:21:7e:e4:8b:a1:b8:aa:f2:78: 29:89:99:38:7c:a6:b6:30:c2:a0:b5:cc:92:65:4a:d7:7b:bc: 6e:bc:34:56:8e:a3:39:51:68:5a:76:32:81:c2:6c:28:a3:70: 94:c6:88:6b:5b:3b:b5:aa:4a:62:7f:cd:b1:81:de:5c:b2:b2: f5:b3:0b:7d:0f:8a:12:57:ec:77:b9:96:bf:d5:88:e8:b9:df: ac:5a:45:39:01:95:3f:14:b0:46:2b:81:5b:1a:50:44:21:b9: 04:cc:a4:0d:d7:f7:eb:21:90:11:c5:f0:6f:94:d1:69:a4:c2: 93:4b:f1:15:ff:5b:cc:8a:13:a0:bd:b9:cd:dc:b3:58:04:74: 43:39:1c:24 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+N7ii7Hiz8GKnA+op9eetMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYWIzOWM2ZTA0MTIyMzVlZmM3ODc3YTlmNzM3ODk5MzEz ZWQxNWUwHhcNMjYwMTAyMTAxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjNkYTIxYmU5MDA4OTdlZTBlZDBmZDhjOGRkMzA1YzEwZWMzZDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3f6pmStyrrveGDo6LSe5ij/ATqJT 6ZiabyWiVQ1bczsbjBc03D7aLo2k4CX5v7tOyQwrhKQrtljEtuPNQgzjxwI4BfI4 NLs2B1dsMiWOzDG0P/UlzFIu0mNeptyM3KOnNIzyuT26Geh7JCE397sV8XHBFawJ yKe7x53eEtJBoOxrh62tLlptd5gMe9EMROLuh+5GdjL2os/Oi44A2cvCKEF2lCEl ID4m0Gix7XX0t460Q7kmCdg9TkJOxCWZvbGP5ziLFa/PAwmDRGiPcmwIy3jOpxOG dnwtv0wEzTHHDs6Pw+jDRase7l/jIlegUR+7lXpIaI8Zi35/xmvV3Cth8wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFHI9ohvpAIl+4O0P2MjdMFwQ7D0AMB8GA1UdIwQY MBaAFHyrOcbgQSI178eHep9zeJkxPtFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktzNXh1QkJJalh2eDRkNm4zTjRtVEUtMFY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mODkxNzAtMTM4ZS00OTk5LWFlZjct YzQ0MDI5OGRmYzVjLzEvY2oyaUcta0FpWDdnN1FfWXlOMHdYQkRzUFFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9mODkxNzAtMTM4ZS00OTk5LWFlZjctYzQ0MDI5OGRmYzVj LzEvZktzNXh1QkJJalh2eDRkNm4zTjRtVEUtMFY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADC8m0D BADC8m4wDQYJKoZIhvcNAQELBQADggEBAKa0haECk+7QWYWdX8hJ6fAI+8NGlaYi NTSuCpO4rHu5eYq+4d/r3msAYu42TCACPqzy3zEKGbMCSQOLXOp84hzlRl2XiAx6 Yrz6V6KZ7nC0XKPVfBgm9OKEvrs1tqWtXmvFkxytU+241/YwrQC04n/34JS+BSF+ 5IuhuKryeCmJmTh8prYwwqC1zJJlStd7vG68NFaOozlRaFp2MoHCbCijcJTGiGtb O7WqSmJ/zbGB3lyysvWzC30PihJX7He5lr/ViOi536xaRTkBlT8UsEYrgVsaUEQh uQTMpA3X9+shkBHF8G+U0WmkwpNL8RX/W8yKE6C9uc3cs1gEdEM5HCQ= -----END CERTIFICATE-----Generated at Thu Jan 8 13:44:42 2026 by rpki-client