This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/2heyWtMYgWE5sJJbRhcdVLib2Pg.roa File: 2heyWtMYgWE5sJJbRhcdVLib2Pg.roa (raw, json) Hash identifier: 9uHzCImbpKe/eGWij9i6SSpSaF4x37XjwQJlpnFZTtQ= Subject key identifier: DA:17:B2:5A:D3:18:81:61:39:B0:92:5B:46:17:1D:54:B8:9B:D8:F8 Certificate issuer: /CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6 Certificate serial: 019B7A5B6040A3AD3F982269D9F16E4F914A Authority key identifier: 8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/2heyWtMYgWE5sJJbRhcdVLib2Pg.roa Signing time: Thu 01 Jan 2026 16:19:27 +0000 ROA not before: Thu 01 Jan 2026 16:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2200 IP address blocks: 134.206.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:60:40:a3:ad:3f:98:22:69:d9:f1:6e:4f:91:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6 Validity Not Before: Jan 1 16:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da17b25ad318816139b0925b46171d54b89bd8f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e6:ab:6a:92:ef:4f:8e:97:53:49:c7:e3:25: e1:98:a9:83:2e:8d:ae:86:b9:0c:8c:d1:02:2d:df: 6b:c6:14:2c:79:b9:5c:bd:30:25:cf:3a:80:36:a7: f8:9c:d8:82:ab:1d:32:09:9a:56:d7:e2:13:10:29: cc:e1:9f:f8:ee:21:83:11:2b:df:c6:7d:77:09:12: 4d:de:f1:8e:0d:9e:c0:43:ac:2c:20:ab:4b:e0:94: 59:09:ee:aa:94:e1:5d:c4:72:62:81:75:a1:fb:da: d2:17:62:14:59:03:9f:37:e4:cf:ea:c5:ed:df:4e: fa:ec:f9:37:2f:c8:7b:9f:43:99:63:c3:16:6c:65: a4:fe:79:00:f2:1d:48:8d:a0:45:53:ab:c1:83:ce: ac:6e:a3:04:14:4c:01:6c:87:20:59:19:d8:5c:c1: 67:20:1e:c0:a3:6a:a4:54:f4:f4:fb:7c:a9:2a:6c: 66:b0:c5:b3:69:07:5b:c2:3d:51:7d:43:ce:92:88: 4e:d8:16:0f:53:c6:33:d2:d2:99:94:1a:e8:bc:4c: 10:cd:14:f1:02:91:a0:17:07:fb:66:d1:bf:4e:e5: 6f:5b:80:b0:0b:14:11:57:40:52:56:92:96:1a:75: 35:69:f6:8b:0d:b8:e0:92:87:61:7f:59:3a:1e:f2: d1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:17:B2:5A:D3:18:81:61:39:B0:92:5B:46:17:1D:54:B8:9B:D8:F8 X509v3 Authority Key Identifier: keyid:8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/2heyWtMYgWE5sJJbRhcdVLib2Pg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.206.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0c:ce:76:e8:c1:2f:68:6e:cf:ba:e7:e2:c6:70:26:6b:aa:a1: f4:7e:71:35:9b:ca:de:6c:8b:20:b6:51:5a:1f:90:62:97:56: 68:47:59:b0:a5:79:6b:2d:0c:ae:2f:83:54:8e:8e:ba:5c:60: 10:da:ba:39:c1:85:5c:56:8a:57:46:62:1f:db:e8:a9:28:e2: ef:66:75:01:14:50:6c:74:31:46:e4:76:eb:4b:01:0e:70:13: 0b:af:24:ab:c5:c4:10:28:99:9f:24:1b:61:e6:3d:37:3c:a5: 46:ec:3e:42:3c:63:64:2f:10:f7:de:0f:4e:0b:71:74:f2:8d: df:7b:21:d9:1a:d4:1d:91:25:48:0e:1d:a8:ea:f2:6b:07:4e: 4c:8e:3d:74:71:ac:5e:94:ff:54:c3:06:f6:2f:cb:40:3b:08: 3c:8c:2b:c7:ec:4a:f6:81:81:20:3d:c2:89:e8:0a:c3:02:a8: 48:ca:3f:91:20:cc:55:35:01:3a:1a:a9:86:82:a4:23:7c:c4: e4:b3:9d:39:60:b9:58:1b:0e:2a:65:e4:f6:d6:f4:bf:8c:68: 74:99:c4:a8:3d:da:fe:59:93:d6:f1:1a:ab:1f:db:b8:85:57: 5e:a4:18:50:18:1c:0b:11:bf:9d:44:0a:42:51:c5:43:36:47: 4f:70:c0:6f -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt6W2BAo60/mCJp2fFuT5FKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmM2Y5ZTdmZmU4ODU4Mzg3ZWQxYjNhN2VjYTc2MjA1ZWYw ZTIxZjYwHhcNMjYwMTAxMTYxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTE3YjI1YWQzMTg4MTYxMzliMDkyNWI0NjE3MWQ1NGI4OWJkOGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+arapLvT46XU0nH4yXhmKmDLo2u hrkMjNECLd9rxhQseblcvTAlzzqANqf4nNiCqx0yCZpW1+ITECnM4Z/47iGDESvf xn13CRJN3vGODZ7AQ6wsIKtL4JRZCe6qlOFdxHJigXWh+9rSF2IUWQOfN+TP6sXt 30767Pk3L8h7n0OZY8MWbGWk/nkA8h1IjaBFU6vBg86sbqMEFEwBbIcgWRnYXMFn IB7Ao2qkVPT0+3ypKmxmsMWzaQdbwj1RfUPOkohO2BYPU8Yz0tKZlBrovEwQzRTx ApGgFwf7ZtG/TuVvW4CwCxQRV0BSVpKWGnU1afaLDbjgkodhf1k6HvLRBQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFNoXslrTGIFhObCSW0YXHVS4m9j4MB8GA1UdIwQY MBaAFI8/nn/+iFg4ftGzp+ynYgXvDiH2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanotZWZfNklXRGgtMGJPbjdLZGlCZThPSWZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy84NDIwZTYtOGMzZS00Y2NiLWIxNDMt ZTdhY2Y5NDFmMzc1LzEvMmhleVd0TVlnV0U1c0pKYlJoY2RWTGliMlBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy84NDIwZTYtOGMzZS00Y2NiLWIxNDMtZTdhY2Y5NDFmMzc1 LzEvanotZWZfNklXRGgtMGJPbjdLZGlCZThPSWZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhs4wDQYJ KoZIhvcNAQELBQADggEBAAzOdujBL2huz7rn4sZwJmuqofR+cTWbyt5siyC2UVof kGKXVmhHWbCleWstDK4vg1SOjrpcYBDaujnBhVxWildGYh/b6Kko4u9mdQEUUGx0 MUbkdutLAQ5wEwuvJKvFxBAomZ8kG2HmPTc8pUbsPkI8Y2QvEPfeD04LcXTyjd97 Idka1B2RJUgOHajq8msHTkyOPXRxrF6U/1TDBvYvy0A7CDyMK8fsSvaBgSA9wono CsMCqEjKP5EgzFU1AToaqYaCpCN8xOSznTlguVgbDipl5PbW9L+MaHSZxKg92v5Z k9bxGqsf27iFV16kGFAYHAsRv51ECkJRxUM2R09wwG8= -----END CERTIFICATE-----Generated at Sat Jan 10 08:40:24 2026 by rpki-client