This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/Jn0foO2nylOIzwPP_aMaHGiC2GY.roa File: Jn0foO2nylOIzwPP_aMaHGiC2GY.roa (raw, json) Hash identifier: ohSovumWWLhKdZhk5RrKtQ4CFLps70d/0Yn1l3fVxq8= Subject key identifier: 26:7D:1F:A0:ED:A7:CA:53:88:CF:03:CF:FD:A3:1A:1C:68:82:D8:66 Certificate issuer: /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598 Certificate serial: 019B7FF1AA8B4A05B24224A6D94750BA2A63 Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/Jn0foO2nylOIzwPP_aMaHGiC2GY.roa Signing time: Fri 02 Jan 2026 18:21:42 +0000 ROA not before: Fri 02 Jan 2026 18:21:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210928 IP address blocks: 212.15.47.0/24 maxlen: 24 212.15.50.0/24 maxlen: 24 212.15.54.0/24 maxlen: 24 212.15.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 18:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:aa:8b:4a:05:b2:42:24:a6:d9:47:50:ba:2a:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598 Validity Not Before: Jan 2 18:21:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=267d1fa0eda7ca5388cf03cffda31a1c6882d866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b1:ed:5d:de:3b:3e:0a:7c:16:b5:92:d6:79: 07:7a:96:59:63:64:c5:b8:89:b7:97:e2:b9:1c:6e: a0:53:38:92:98:fe:61:df:9b:38:b4:6e:69:3d:8f: 9b:fc:76:7d:48:20:9a:66:37:b6:05:29:a0:63:44: 03:8f:4f:37:1e:3a:56:91:99:e7:0e:d0:0f:71:7a: ed:87:4e:b3:29:35:0f:10:88:13:2d:23:0a:f4:cf: ef:9a:c2:36:cc:91:59:45:65:13:69:0a:4a:a9:d2: 45:de:62:39:9f:9b:38:c9:86:a4:3d:a3:16:9f:0e: 00:45:41:64:22:3c:c0:29:59:e4:42:de:d2:55:19: 73:cf:1e:03:f4:82:ca:2f:e1:0d:4e:20:b1:58:19: bb:c9:2c:52:ec:c3:51:88:37:38:e0:c4:9a:ec:a4: 3c:f9:37:52:6e:be:e0:05:98:b0:8f:91:21:ab:58: 43:d6:3b:86:b9:f9:44:38:fc:51:0a:9e:8b:90:f9: 7b:0c:e0:c8:d1:fa:58:3e:31:d2:a3:0d:e5:b4:d3: ee:f6:43:a8:b0:a4:2d:3d:06:9f:71:2f:d6:9e:07: 32:ee:17:de:c6:8c:91:5c:22:4b:f8:49:3b:50:1f: 6e:38:f7:47:91:00:65:f5:2f:21:54:69:e9:54:a9: 70:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:7D:1F:A0:ED:A7:CA:53:88:CF:03:CF:FD:A3:1A:1C:68:82:D8:66 X509v3 Authority Key Identifier: keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/Jn0foO2nylOIzwPP_aMaHGiC2GY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.15.47.0/24 212.15.50.0/24 212.15.54.0/23 Signature Algorithm: sha256WithRSAEncryption 72:20:4c:a8:6d:15:f2:80:68:88:2f:92:d1:b7:ef:0a:f4:33: 3a:d6:73:df:0e:8e:76:a8:70:c6:cd:32:67:f5:03:10:d9:d6: dc:21:29:51:d4:fd:ac:43:57:f7:95:94:80:de:ab:a7:0c:93: 96:b8:8e:e6:7b:80:cd:0f:d6:d4:70:97:d7:b0:57:97:d9:02: 5d:af:0e:74:b0:07:1c:52:6b:12:ee:f8:5e:2b:76:0a:f4:07: 69:49:ee:65:22:5f:6f:2d:1f:69:80:a1:c4:52:11:f8:11:72: ec:9b:cd:e7:44:36:e7:6c:c6:09:d8:b0:e0:d5:86:bf:29:e9: ef:83:0b:8d:57:ee:42:76:eb:4f:2b:53:40:8d:06:6f:e9:67: 78:b4:a2:fe:13:eb:55:39:86:fe:f7:dc:5d:3d:cc:74:f3:8b: 36:74:a5:05:67:aa:a3:a5:c2:a7:af:c0:5d:52:f7:ef:6b:42: ab:8a:dd:6c:ef:b5:03:07:9e:8c:4f:6d:d7:e9:72:26:0f:1f: 97:ab:e5:ef:49:e1:d2:ee:bf:0c:f3:33:f8:2e:7e:6a:f1:19: 97:9b:b9:f9:76:25:0b:c9:b8:59:3e:0d:0a:3c:25:00:f2:3d: a2:c3:7e:48:ec:b9:7c:4d:c0:14:32:9f:24:44:6b:31:ce:7d: d0:26:a3:07 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/8aqLSgWyQiSm2UdQuipjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZWFmYWEzMGIzNDBlY2Y4MTBhNGNiOWFmM2I1MWM3MDI1 NjY1OTgwHhcNMjYwMTAyMTgyMTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjdkMWZhMGVkYTdjYTUzODhjZjAzY2ZmZGEzMWExYzY4ODJkODY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLHtXd47Pgp8FrWS1nkHepZZY2TF uIm3l+K5HG6gUziSmP5h35s4tG5pPY+b/HZ9SCCaZje2BSmgY0QDj083HjpWkZnn DtAPcXrth06zKTUPEIgTLSMK9M/vmsI2zJFZRWUTaQpKqdJF3mI5n5s4yYakPaMW nw4ARUFkIjzAKVnkQt7SVRlzzx4D9ILKL+ENTiCxWBm7ySxS7MNRiDc44MSa7KQ8 +TdSbr7gBZiwj5Ehq1hD1juGuflEOPxRCp6LkPl7DODI0fpYPjHSow3ltNPu9kOo sKQtPQafcS/Wngcy7hfexoyRXCJL+Ek7UB9uOPdHkQBl9S8hVGnpVKlwRwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCZ9H6Dtp8pTiM8Dz/2jGhxogthmMB8GA1UdIwQY MBaAFMLq+qMLNA7PgQpMua87UccCVmWYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3VyNm93czBEcy1CQ2t5NXJ6dFJ4d0pXWlpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hMzRhMTYtZjg4MC00ODczLTg2OGIt NWVjYWZkYTQ3MWY3LzEvSm4wZm9PMm55bE9JendQUF9hTWFIR2lDMkdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9hMzRhMTYtZjg4MC00ODczLTg2OGItNWVjYWZkYTQ3MWY3 LzEvd3VyNm93czBEcy1CQ2t5NXJ6dFJ4d0pXWlpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA1A8vAwQA 1A8yAwQB1A82MA0GCSqGSIb3DQEBCwUAA4IBAQByIEyobRXygGiIL5LRt+8K9DM6 1nPfDo52qHDGzTJn9QMQ2dbcISlR1P2sQ1f3lZSA3qunDJOWuI7me4DND9bUcJfX sFeX2QJdrw50sAccUmsS7vheK3YK9AdpSe5lIl9vLR9pgKHEUhH4EXLsm83nRDbn bMYJ2LDg1Ya/KenvgwuNV+5CdutPK1NAjQZv6Wd4tKL+E+tVOYb+99xdPcx084s2 dKUFZ6qjpcKnr8BdUvfva0Krit1s77UDB56MT23X6XImDx+Xq+XvSeHS7r8M8zP4 Ln5q8RmXm7n5diULybhZPg0KPCUA8j2iw35I7Ll8TcAUMp8kRGsxzn3QJqMH -----END CERTIFICATE-----Generated at Sat Jan 3 04:13:22 2026 by rpki-client