This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/jWrQWxU_htSVFKc3r-gsjIqKyK8.roa File: jWrQWxU_htSVFKc3r-gsjIqKyK8.roa (raw, json) Hash identifier: 155qzeQlRhVHXfpXCRqK6ZR2jbaxRLl0EHy1IGUr6Uk= Subject key identifier: 8D:6A:D0:5B:15:3F:86:D4:95:14:A7:37:AF:E8:2C:8C:8A:8A:C8:AF Certificate issuer: /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac Certificate serial: 019B7AC791CF7687C45DBBC1ADEA7E05BE1B Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/jWrQWxU_htSVFKc3r-gsjIqKyK8.roa Signing time: Thu 01 Jan 2026 18:17:37 +0000 ROA not before: Thu 01 Jan 2026 18:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59819 IP address blocks: 2a03:6947:1400::/40 maxlen: 40 2a03:6947:1500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:91:cf:76:87:c4:5d:bb:c1:ad:ea:7e:05:be:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac Validity Not Before: Jan 1 18:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d6ad05b153f86d49514a737afe82c8c8a8ac8af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0f:30:8f:21:c8:8f:6f:6d:66:61:23:e6:bc: 4e:69:5e:75:98:52:26:37:23:b3:1c:b1:4c:99:05: e1:92:c2:de:da:39:e5:5b:7a:cd:6e:c7:9c:c2:46: ad:b7:1e:0f:e2:b0:ae:7b:13:43:98:a1:23:62:77: 0a:d6:d2:dd:79:dd:8a:1e:10:1a:8e:03:a4:9a:2a: 7e:1b:f7:24:17:ca:4f:d4:8a:ed:fa:d3:cb:c0:c5: f6:12:94:48:27:34:53:09:f0:dd:1f:53:29:ed:76: cf:60:20:34:87:a0:24:b8:ea:34:d2:dd:05:43:65: 82:4f:5a:6c:97:d2:3d:e9:5d:ab:35:5b:9e:e7:ec: ca:7a:47:b4:48:33:d5:c4:f7:d8:5e:54:d5:21:34: d7:67:c6:a2:03:f3:46:3c:a5:7d:64:9d:2d:a1:1f: 54:a0:46:07:92:88:f7:f8:a2:51:ee:35:a1:0d:70: b7:2c:c8:5a:63:e2:5c:00:29:c4:22:7f:02:39:4a: 6a:95:25:06:0c:3e:20:6d:c5:fb:d5:3c:14:f1:0d: e3:87:fb:3d:d9:5a:c0:8e:92:48:af:d3:83:0c:f1: eb:37:97:ea:15:de:88:dd:d3:aa:de:83:c6:c7:26: 52:49:af:e7:21:c0:0f:c1:f5:35:32:bb:0f:43:44: 08:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6A:D0:5B:15:3F:86:D4:95:14:A7:37:AF:E8:2C:8C:8A:8A:C8:AF X509v3 Authority Key Identifier: keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/jWrQWxU_htSVFKc3r-gsjIqKyK8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:6947:1400::/39 Signature Algorithm: sha256WithRSAEncryption 38:71:82:36:73:34:c3:90:ba:2b:21:33:39:31:70:db:1d:54: 16:93:53:58:87:31:e1:50:fb:29:5f:14:0e:12:64:eb:b9:47: e8:fe:c0:d0:87:48:f3:ff:ba:89:0b:a9:33:34:29:10:2b:2c: 8c:c7:cd:92:b5:0f:d9:a7:77:fd:b3:de:3e:bd:0d:1c:1d:0f: 0a:d9:b5:24:3d:91:85:a9:c4:f3:d4:fd:36:c1:a1:36:36:3d: 93:1d:9a:e1:83:2e:06:a0:42:79:d6:58:dd:3e:e9:d1:a6:96: 50:e7:aa:8d:37:dc:43:ba:45:c9:2d:e7:d0:69:d8:98:f3:03: b8:13:6b:ec:d2:54:a6:65:4f:36:b0:1f:1f:62:71:fb:bf:6a: 1d:66:72:eb:08:a4:4b:48:ed:45:fa:f5:ae:6a:b4:9a:cc:bc: cc:3d:bf:e5:ce:07:1a:65:f8:ef:2e:30:8a:f4:b5:12:63:7c: f3:c1:92:53:8b:19:52:78:77:06:4e:29:d5:e4:9c:ea:e7:a0: db:59:84:95:cf:d2:db:21:15:97:ad:00:a7:14:22:b3:a3:ad: de:cf:7f:a7:dd:56:0f:e0:74:69:f3:1a:f4:13:d1:c7:98:f4: d4:dd:99:14:64:62:9a:f5:3f:dd:3c:6e:6b:87:0d:59:37:23: 96:c2:1d:11 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt6x5HPdofEXbvBrep+Bb4bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYjkwNzgxZGJiZWJkYjhlYzQyYmFmNjY0ODgwNTllYTU4 NjZhYWMwHhcNMjYwMTAxMTgxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDZhZDA1YjE1M2Y4NmQ0OTUxNGE3MzdhZmU4MmM4YzhhOGFjOGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw8wjyHIj29tZmEj5rxOaV51mFIm NyOzHLFMmQXhksLe2jnlW3rNbsecwkattx4P4rCuexNDmKEjYncK1tLded2KHhAa jgOkmip+G/ckF8pP1Irt+tPLwMX2EpRIJzRTCfDdH1Mp7XbPYCA0h6AkuOo00t0F Q2WCT1psl9I96V2rNVue5+zKeke0SDPVxPfYXlTVITTXZ8aiA/NGPKV9ZJ0toR9U oEYHkoj3+KJR7jWhDXC3LMhaY+JcACnEIn8COUpqlSUGDD4gbcX71TwU8Q3jh/s9 2VrAjpJIr9ODDPHrN5fqFd6I3dOq3oPGxyZSSa/nIcAPwfU1MrsPQ0QI/wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFI1q0FsVP4bUlRSnN6/oLIyKisivMB8GA1UdIwQY MBaAFPO5B4Hbvr247EK69mSIBZ6lhmqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi84YzU4MDgtMzE2NS00MWRjLTkwYTAt M2VmNWViN2M4NTk4LzEvaldyUVd4VV9odFNWRktjM3ItZ3NqSXFLeUs4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi84YzU4MDgtMzE2NS00MWRjLTkwYTAtM2VmNWViN2M4NTk4 LzEvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBKgNpRxQw DQYJKoZIhvcNAQELBQADggEBADhxgjZzNMOQuishMzkxcNsdVBaTU1iHMeFQ+ylf FA4SZOu5R+j+wNCHSPP/uokLqTM0KRArLIzHzZK1D9mnd/2z3j69DRwdDwrZtSQ9 kYWpxPPU/TbBoTY2PZMdmuGDLgagQnnWWN0+6dGmllDnqo033EO6Rckt59Bp2Jjz A7gTa+zSVKZlTzawHx9icfu/ah1mcusIpEtI7UX69a5qtJrMvMw9v+XOBxpl+O8u MIr0tRJjfPPBklOLGVJ4dwZOKdXknOrnoNtZhJXP0tshFZetAKcUIrOjrd7Pf6fd Vg/gdGnzGvQT0ceY9NTdmRRkYpr1P908bmuHDVk3I5bCHRE= -----END CERTIFICATE-----Generated at Mon Jan 26 04:39:22 2026 by rpki-client