This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/Jne2uZQQNK-7k_qqfXs0lFjgHD4.roa File: Jne2uZQQNK-7k_qqfXs0lFjgHD4.roa (raw, json) Hash identifier: 7bEw241lSph/pFPVrb7MGNFqem6TlLpWsbHL+81LqTk= Subject key identifier: 26:77:B6:B9:94:10:34:AF:BB:93:FA:AA:7D:7B:34:94:58:E0:1C:3E Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Certificate serial: 019BEC3C8F52767D3088606B1EE90E21C7C5 Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/Jne2uZQQNK-7k_qqfXs0lFjgHD4.roa Signing time: Fri 23 Jan 2026 19:02:30 +0000 ROA not before: Fri 23 Jan 2026 19:02:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203534 IP address blocks: 2a0d:d940:2009::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ec:3c:8f:52:76:7d:30:88:60:6b:1e:e9:0e:21:c7:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Validity Not Before: Jan 23 19:02:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2677b6b9941034afbb93faaa7d7b349458e01c3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:77:06:1d:db:ac:02:1c:f7:48:bb:a3:81:a5: bd:bb:fd:07:b4:94:1f:68:fa:f3:25:55:6b:2a:09: 77:b7:b4:2e:af:a6:12:60:70:fb:0d:02:34:97:f4: 17:31:1d:57:8a:3c:00:93:63:2c:d6:03:8e:e2:81: 18:c3:35:1d:7e:6d:a4:d4:01:e9:58:d4:5a:36:b5: 2f:55:fb:0b:52:11:fa:4a:89:91:e1:be:35:d9:a9: d1:e3:83:36:46:2c:29:55:94:95:d2:9c:9c:ca:57: 9d:46:50:9e:64:fb:6d:9e:7a:33:8f:79:ee:45:6c: 6b:ae:83:95:86:5c:53:e8:28:62:11:b6:28:0a:70: 6b:03:0d:a2:53:fb:02:bc:a3:e2:ab:ba:e5:fe:9e: fa:2f:32:ef:05:52:fe:46:fb:6d:3a:f3:b8:8e:94: 40:ed:d0:35:ac:2d:63:a3:ce:b9:26:6f:80:f9:e3: bb:93:be:af:a7:53:07:a4:89:81:f9:6f:4a:96:ff: cf:d4:62:18:e9:4b:a1:d9:e6:9e:ff:2b:1f:60:89: 84:a8:f2:44:49:9e:cd:20:2d:4c:0e:7c:88:df:06: 2c:3a:90:a1:67:76:ec:70:41:4c:3e:69:0e:1f:d2: e1:51:1b:c3:19:27:97:d0:71:0a:41:e3:55:74:fa: 1c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:77:B6:B9:94:10:34:AF:BB:93:FA:AA:7D:7B:34:94:58:E0:1C:3E X509v3 Authority Key Identifier: keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/Jne2uZQQNK-7k_qqfXs0lFjgHD4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:d940:2009::/48 Signature Algorithm: sha256WithRSAEncryption 51:15:2a:66:06:3b:d1:2b:52:51:be:17:be:1e:28:74:c9:97: a8:cf:c8:bf:3a:76:d4:3b:65:0e:9a:e5:f7:cf:47:bf:24:19: d6:00:c8:fa:01:65:2b:da:96:37:b3:39:ff:45:d6:7d:39:fa: ee:1b:ff:70:ab:a4:21:61:de:a4:16:db:40:26:b9:24:85:a4: 9d:b9:ab:6f:98:f2:b8:68:d1:00:79:99:19:ae:92:d0:d8:01: b3:8a:d4:63:3b:6e:f0:42:4d:7a:97:69:59:df:72:e8:cb:fb: aa:07:1a:2e:75:2a:35:5d:ac:cb:e9:d6:a5:fd:2d:41:73:51: c6:97:cc:36:cb:f5:e8:ee:08:ee:bc:1d:04:5c:d3:17:fd:a1: 11:17:23:ce:ce:7a:21:a9:da:9c:f0:db:49:a6:bf:cd:38:56: e7:d2:dc:c7:c1:81:f1:11:d2:36:72:d5:1a:03:ee:a7:b9:68: 86:a2:46:ef:2e:1d:28:9f:81:4f:7f:9e:c0:0c:8c:be:c4:7d: 6a:8c:22:5a:8c:0e:f4:58:12:15:d3:64:5f:dd:3b:6b:9b:93: d2:c1:ea:bd:2b:d5:4f:28:8e:11:fe:a7:d9:ff:6c:82:0b:f6: 6e:0e:4c:4f:b5:a4:79:ca:cb:89:8f:7c:73:e0:ee:07:1f:ba: 55:88:2c:0f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZvsPI9Sdn0wiGBrHukOIcfFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj YmJjNzQwHhcNMjYwMTIzMTkwMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjc3YjZiOTk0MTAzNGFmYmI5M2ZhYWE3ZDdiMzQ5NDU4ZTAxYzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3cGHdusAhz3SLujgaW9u/0HtJQf aPrzJVVrKgl3t7Qur6YSYHD7DQI0l/QXMR1XijwAk2Ms1gOO4oEYwzUdfm2k1AHp WNRaNrUvVfsLUhH6SomR4b412anR44M2RiwpVZSV0pycyledRlCeZPttnnozj3nu RWxrroOVhlxT6ChiEbYoCnBrAw2iU/sCvKPiq7rl/p76LzLvBVL+RvttOvO4jpRA 7dA1rC1jo865Jm+A+eO7k76vp1MHpImB+W9Klv/P1GIY6Uuh2eae/ysfYImEqPJE SZ7NIC1MDnyI3wYsOpChZ3bscEFMPmkOH9LhURvDGSeX0HEKQeNVdPocpQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCZ3trmUEDSvu5P6qn17NJRY4Bw+MB8GA1UdIwQY MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt MTRkMjM4NTI3ODM1LzEvSm5lMnVaUVFOSy03a19xcWZYczBsRmpnSEQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1 LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg3ZQCAJ MA0GCSqGSIb3DQEBCwUAA4IBAQBRFSpmBjvRK1JRvhe+Hih0yZeoz8i/OnbUO2UO muX3z0e/JBnWAMj6AWUr2pY3szn/RdZ9OfruG/9wq6QhYd6kFttAJrkkhaSduatv mPK4aNEAeZkZrpLQ2AGzitRjO27wQk16l2lZ33Loy/uqBxoudSo1XazL6dal/S1B c1HGl8w2y/Xo7gjuvB0EXNMX/aERFyPOznohqdqc8NtJpr/NOFbn0tzHwYHxEdI2 ctUaA+6nuWiGokbvLh0on4FPf57ADIy+xH1qjCJajA70WBIV02Rf3Ttrm5PSweq9 K9VPKI4R/qfZ/2yCC/ZuDkxPtaR5ysuJj3xz4O4HH7pViCwP -----END CERTIFICATE-----Generated at Sun Jan 25 10:10:54 2026 by rpki-client