This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/jcdUCN5v_fEw6tgouDGmsAi4uqQ.roa File: jcdUCN5v_fEw6tgouDGmsAi4uqQ.roa (raw, json) Hash identifier: aK8/MYOjzg2j9dQklFTXiZMZEJgQejRF7dLncl3fyJg= Subject key identifier: 8D:C7:54:08:DE:6F:FD:F1:30:EA:D8:28:B8:31:A6:B0:08:B8:BA:A4 Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca Certificate serial: 019B7EA7223DC69D5A98EBB1BB255D762C84 Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/jcdUCN5v_fEw6tgouDGmsAi4uqQ.roa Signing time: Fri 02 Jan 2026 12:20:41 +0000 ROA not before: Fri 02 Jan 2026 12:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 141039 IP address blocks: 2a13:240:4100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:22:3d:c6:9d:5a:98:eb:b1:bb:25:5d:76:2c:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca Validity Not Before: Jan 2 12:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8dc75408de6ffdf130ead828b831a6b008b8baa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:80:af:23:20:69:ad:00:70:16:f6:63:c4:d5: 39:4f:4e:e1:8a:f3:c6:5a:e6:57:25:12:73:9c:c7: 2a:52:80:17:1a:5e:c0:f3:00:65:4f:99:a9:86:ef: 7f:a6:78:d5:dd:7d:00:9a:3b:91:8d:8d:be:56:44: 18:97:d0:16:e9:4c:ba:73:7f:9d:2c:98:ff:15:ca: 4d:9b:ae:47:0e:b3:96:6a:a2:e2:f4:7a:26:70:7b: c3:50:c8:5b:45:47:8b:f3:93:24:9f:49:a6:6d:ea: fa:b6:36:6c:b0:c7:22:14:91:d3:92:c1:48:ca:7b: a1:93:c2:a2:79:e3:d2:2f:da:f4:e1:07:fc:8a:75: 85:ac:11:1d:87:d8:54:e3:ec:4f:7b:8d:f2:43:58: 93:79:2a:a2:71:2c:2d:02:2f:75:ea:57:4b:ac:67: 99:53:9c:5b:ce:b6:fd:aa:a1:fd:8f:2f:53:53:16: 29:3a:80:4e:08:16:54:84:9e:14:8e:b4:b5:24:4a: 10:85:11:7b:a4:bd:5e:b3:19:41:f1:44:03:45:dd: 6a:d4:14:3c:b3:dc:3b:aa:46:45:e2:e1:85:03:7a: 20:30:37:bd:c1:5b:40:81:9a:65:4e:ce:0a:7c:1e: 2f:1c:3c:17:46:07:d5:52:84:a4:66:b0:5d:b0:fc: 88:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C7:54:08:DE:6F:FD:F1:30:EA:D8:28:B8:31:A6:B0:08:B8:BA:A4 X509v3 Authority Key Identifier: keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/jcdUCN5v_fEw6tgouDGmsAi4uqQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:240:4100::/40 Signature Algorithm: sha256WithRSAEncryption 25:00:4c:99:ab:16:2c:e1:62:4f:42:45:b7:d9:cf:99:a8:3d: 49:d0:12:82:87:40:21:3c:10:58:62:1b:2f:74:e4:57:39:20: 6e:df:a0:4c:29:d0:49:84:a2:bf:28:6f:50:9a:a6:ce:8c:af: d6:51:f6:5e:af:87:4b:39:5e:29:17:b9:d2:31:26:4c:af:63: 8a:b0:a5:34:f6:9a:08:73:50:1d:eb:6e:fc:a5:13:5b:64:47: 80:fa:12:7f:3e:45:7d:c5:0e:87:28:71:9a:45:d2:bf:d1:cd: 84:63:86:c7:84:7a:c3:40:3c:e2:91:95:68:b8:62:a9:dc:ca: 93:41:7d:6d:1c:a5:12:8e:7e:86:e5:f7:86:a9:f2:f2:e2:d1: 0e:17:f5:87:56:43:17:46:8a:5d:4e:09:6d:1d:70:43:77:ea: a4:2a:97:b3:58:c5:e6:8d:89:22:38:cb:29:4a:8b:53:e5:a5: 13:bb:34:ab:5f:b7:90:00:86:c7:4e:b6:4b:e6:53:51:44:19: 6a:a7:13:89:2c:28:91:3a:ed:6d:ec:a9:f4:06:0f:8c:ee:45: 23:a7:dd:83:f6:0e:c1:b1:98:87:01:b6:75:c2:50:c6:0b:49: 41:35:87:21:85:e0:3e:58:67:ad:b5:f5:4c:c4:75:80:f6:4a: 95:69:85:a7 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+pyI9xp1amOuxuyVddiyEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYmY1NTMwNDJmMWE0MzgyN2RjMDM0NTAwYmJkMTA2OGE3 Mjk3Y2EwHhcNMjYwMTAyMTIyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGM3NTQwOGRlNmZmZGYxMzBlYWQ4MjhiODMxYTZiMDA4YjhiYWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oCvIyBprQBwFvZjxNU5T07hivPG WuZXJRJznMcqUoAXGl7A8wBlT5mphu9/pnjV3X0AmjuRjY2+VkQYl9AW6Uy6c3+d LJj/FcpNm65HDrOWaqLi9HomcHvDUMhbRUeL85Mkn0mmber6tjZssMciFJHTksFI ynuhk8KieePSL9r04Qf8inWFrBEdh9hU4+xPe43yQ1iTeSqicSwtAi916ldLrGeZ U5xbzrb9qqH9jy9TUxYpOoBOCBZUhJ4UjrS1JEoQhRF7pL1esxlB8UQDRd1q1BQ8 s9w7qkZF4uGFA3ogMDe9wVtAgZplTs4KfB4vHDwXRgfVUoSkZrBdsPyIZwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFI3HVAjeb/3xMOrYKLgxprAIuLqkMB8GA1UdIwQY MBaAFHC/VTBC8aQ4J9wDRQC70QaKcpfKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYt NTM1ODQwMWZiNzk2LzEvamNkVUNONXZfZkV3NnRnb3VER21zQWk0dXFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYtNTM1ODQwMWZiNzk2 LzEvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhMCQEEw DQYJKoZIhvcNAQELBQADggEBACUATJmrFizhYk9CRbfZz5moPUnQEoKHQCE8EFhi Gy905Fc5IG7foEwp0EmEor8ob1Caps6Mr9ZR9l6vh0s5XikXudIxJkyvY4qwpTT2 mghzUB3rbvylE1tkR4D6En8+RX3FDococZpF0r/RzYRjhseEesNAPOKRlWi4Yqnc ypNBfW0cpRKOfobl94ap8vLi0Q4X9YdWQxdGil1OCW0dcEN36qQql7NYxeaNiSI4 yylKi1PlpRO7NKtft5AAhsdOtkvmU1FEGWqnE4ksKJE67W3sqfQGD4zuRSOn3YP2 DsGxmIcBtnXCUMYLSUE1hyGF4D5YZ6219UzEdYD2SpVphac= -----END CERTIFICATE-----Generated at Sun Jan 25 13:07:16 2026 by rpki-client