This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/JbtqhEgKOMM5lCGQ3_D0O9DvRJU.roa File: JbtqhEgKOMM5lCGQ3_D0O9DvRJU.roa (raw, json) Hash identifier: xzc59keT1FZ4gCGQXvlTseKe39dERkUlJDFHPMicGMg= Subject key identifier: 25:BB:6A:84:48:0A:38:C3:39:94:21:90:DF:F0:F4:3B:D0:EF:44:95 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019BF0009E77440FD45616FC35FA63F2C3B3 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/JbtqhEgKOMM5lCGQ3_D0O9DvRJU.roa Signing time: Sat 24 Jan 2026 12:35:30 +0000 ROA not before: Sat 24 Jan 2026 12:35:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212336 IP address blocks: 2a0c:9a40:8aa0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f0:00:9e:77:44:0f:d4:56:16:fc:35:fa:63:f2:c3:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 24 12:35:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25bb6a84480a38c339942190dff0f43bd0ef4495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f6:1d:a1:09:09:02:64:03:bb:09:34:20:fd: a3:a2:f2:b4:2b:0f:8d:22:74:c2:40:62:b1:74:40: 7f:b1:3a:cf:4c:bf:24:0e:7d:b7:cc:c0:b4:6b:7e: 84:c2:c6:e9:4a:34:7f:52:e3:76:43:a0:c9:03:0a: 9b:38:be:3d:f3:51:11:0f:43:4a:3c:00:43:02:1c: 01:be:46:58:a2:43:55:b1:34:6c:85:5f:24:30:47: 76:8d:f7:a2:aa:f9:8a:0d:97:59:c9:5c:d0:52:05: c2:a5:af:6b:0b:64:26:ba:c2:a7:15:65:08:91:87: fc:4e:f9:3c:64:3f:52:90:e9:5e:94:5a:17:d8:85: 35:42:38:a8:20:8f:15:46:fa:7d:f2:44:d0:ee:fb: 86:b6:8c:ae:a2:d6:88:c6:cd:dd:5f:8e:51:2e:cd: 39:50:f3:8a:37:eb:a2:65:bc:1c:25:ce:44:b9:45: 9d:24:a8:47:4d:ea:5a:8a:35:d5:53:16:a3:58:15: e7:8d:ca:3e:57:1a:fc:64:4f:ba:22:38:1b:19:13: b2:62:eb:60:33:f6:a6:2b:6d:98:73:a3:29:1d:63: 52:f2:35:85:4e:24:8b:aa:61:a2:ef:e0:3c:35:05: 96:ed:20:61:43:a9:8f:49:a2:07:de:bd:9f:1d:7d: b0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:BB:6A:84:48:0A:38:C3:39:94:21:90:DF:F0:F4:3B:D0:EF:44:95 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/JbtqhEgKOMM5lCGQ3_D0O9DvRJU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8aa0::/44 Signature Algorithm: sha256WithRSAEncryption 75:dc:e3:ea:44:93:d4:d0:ab:9d:4b:ed:03:e1:60:68:2f:d2: 51:c6:a3:23:f8:fa:99:78:b3:31:15:2a:c5:dc:4b:37:ad:37: 64:82:9b:e6:fb:4c:37:42:d9:e3:0b:c0:9f:05:64:c1:27:72: 5c:ac:d7:b6:3b:09:c8:f6:b7:ad:eb:e6:1a:a8:7d:d4:ec:4b: e6:e0:25:90:aa:b0:72:e8:52:24:c7:ec:26:cc:7a:98:6e:31: 77:e2:e5:c9:6c:62:8d:0a:28:59:70:da:db:e3:c7:17:69:29: 8e:1f:54:9a:42:ba:cb:5c:b4:10:d3:a0:a7:5e:81:02:6e:97: 77:4d:b4:ea:37:57:67:bd:f3:bf:5c:d9:76:93:2d:e4:69:96: 6d:9d:cc:41:3c:5a:f4:2e:51:18:52:b6:7e:65:a5:b9:78:65: d5:e8:96:95:af:af:ab:02:a2:76:2c:ac:16:43:51:48:67:cc: 1a:bb:5f:75:70:c9:91:35:15:0c:4f:89:96:c0:ef:ec:9d:21: f1:3a:46:e0:61:db:e2:93:05:29:d2:fe:d9:37:2f:2d:54:11: 24:d6:af:c7:8b:f6:88:cb:0b:91:16:6d:c7:49:02:2f:3f:57: 2c:5d:a3:36:98:c2:92:b0:08:62:50:54:1a:bb:a9:fc:11:21: 85:fc:bf:33 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZvwAJ53RA/UVhb8Nfpj8sOzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTI0MTIzNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWJiNmE4NDQ4MGEzOGMzMzk5NDIxOTBkZmYwZjQzYmQwZWY0NDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfYdoQkJAmQDuwk0IP2jovK0Kw+N InTCQGKxdEB/sTrPTL8kDn23zMC0a36EwsbpSjR/UuN2Q6DJAwqbOL4981ERD0NK PABDAhwBvkZYokNVsTRshV8kMEd2jfeiqvmKDZdZyVzQUgXCpa9rC2QmusKnFWUI kYf8Tvk8ZD9SkOlelFoX2IU1QjioII8VRvp98kTQ7vuGtoyuotaIxs3dX45RLs05 UPOKN+uiZbwcJc5EuUWdJKhHTepaijXVUxajWBXnjco+Vxr8ZE+6IjgbGROyYutg M/amK22Yc6MpHWNS8jWFTiSLqmGi7+A8NQWW7SBhQ6mPSaIH3r2fHX2wBQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCW7aoRICjjDOZQhkN/w9DvQ70SVMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvSmJ0cWhFZ0tPTU01bENHUTNfRDBPOUR2UkpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQIqg MA0GCSqGSIb3DQEBCwUAA4IBAQB13OPqRJPU0KudS+0D4WBoL9JRxqMj+PqZeLMx FSrF3Es3rTdkgpvm+0w3QtnjC8CfBWTBJ3JcrNe2OwnI9ret6+YaqH3U7Evm4CWQ qrBy6FIkx+wmzHqYbjF34uXJbGKNCihZcNrb48cXaSmOH1SaQrrLXLQQ06CnXoEC bpd3TbTqN1dnvfO/XNl2ky3kaZZtncxBPFr0LlEYUrZ+ZaW5eGXV6JaVr6+rAqJ2 LKwWQ1FIZ8wau191cMmRNRUMT4mWwO/snSHxOkbgYdvikwUp0v7ZNy8tVBEk1q/H i/aIywuRFm3HSQIvP1csXaM2mMKSsAhiUFQau6n8ESGF/L8z -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:51 2026 by rpki-client