This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/jlSciXacRcB4pANd0rFRpfq9tNU.roa File: jlSciXacRcB4pANd0rFRpfq9tNU.roa (raw, json) Hash identifier: wJkEHny81OqUs+bs+BGcRF+5m5zpiLQNOBGztS5BJc4= Subject key identifier: 8E:54:9C:89:76:9C:45:C0:78:A4:03:5D:D2:B1:51:A5:FA:BD:B4:D5 Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Certificate serial: 019B7C7F56E6552ECE1FD262DFF58459068B Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/jlSciXacRcB4pANd0rFRpfq9tNU.roa Signing time: Fri 02 Jan 2026 02:17:58 +0000 ROA not before: Fri 02 Jan 2026 02:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51373 IP address blocks: 2001:1a68:14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:56:e6:55:2e:ce:1f:d2:62:df:f5:84:59:06:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Validity Not Before: Jan 2 02:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e549c89769c45c078a4035dd2b151a5fabdb4d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:25:a0:9e:96:a4:5d:c3:c1:9c:2f:cd:55:f3: 66:74:f5:cd:76:dd:5e:56:15:c2:d7:58:f4:d3:45: ce:ce:c8:4d:07:b3:33:6c:4b:ea:ce:15:56:46:74: 4f:f5:09:f6:fc:20:db:c0:8a:f1:c2:27:bc:11:3e: fd:e9:41:f4:4c:48:38:ed:db:2c:b1:9a:93:bb:f3: 8b:0c:9d:17:c1:69:a2:0e:4e:32:1d:f5:0b:e0:c4: 58:c6:5b:83:82:ed:e9:44:d9:73:b9:b8:b2:db:dd: 14:89:63:58:47:d8:2a:52:f5:d1:9e:6a:74:7b:83: 46:e6:cc:26:93:b5:94:96:cd:ba:32:ab:f5:75:da: e7:ff:28:bf:d8:a8:21:96:55:12:d0:77:40:8d:7b: 27:5c:3a:41:90:a6:4d:28:39:91:cf:e0:10:79:58: dd:c6:79:45:ab:bf:81:9d:f2:19:2d:c2:10:f1:e1: 95:24:0f:82:52:d5:45:07:35:9d:10:34:04:7c:af: 08:e4:27:de:db:f5:f5:8f:03:72:8f:01:33:e2:cf: 84:d4:80:b7:66:6a:a9:93:6e:10:3b:76:4a:34:a0: 01:b9:5b:69:71:52:94:36:83:e2:ad:df:df:e6:8d: 42:4e:7b:65:f5:8f:20:03:20:30:cd:8e:85:40:a3: b5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:54:9C:89:76:9C:45:C0:78:A4:03:5D:D2:B1:51:A5:FA:BD:B4:D5 X509v3 Authority Key Identifier: keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/jlSciXacRcB4pANd0rFRpfq9tNU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:1a68:14::/48 Signature Algorithm: sha256WithRSAEncryption 30:fe:1d:87:0e:3c:5a:01:17:81:0a:83:c9:87:3c:88:f6:6e: 6f:a2:03:15:c1:e5:be:06:d4:09:bd:ed:7c:7d:08:d2:ce:e0: 12:ae:cc:48:2e:23:d1:2e:05:ff:0b:51:c6:e9:92:94:37:81: c4:be:29:ce:72:6f:70:29:a1:c1:07:25:d5:65:c7:2d:ed:6f: db:f1:24:84:02:d7:cc:8f:58:08:c1:73:09:f7:96:b9:9d:b6: d9:f5:3a:5d:a4:5d:06:bf:82:e5:04:c2:b5:a8:2e:76:88:0e: cf:49:30:7f:ea:1d:79:77:c2:04:53:92:07:1a:e0:2e:f3:50: e6:01:47:d0:46:e2:cc:e2:8d:d1:b1:c2:76:6b:41:0a:ad:3a: ae:32:9b:2c:c2:e8:2a:0f:64:3b:b7:c5:30:aa:b8:66:d2:6f: f4:8e:ed:8f:f5:95:2f:d8:d1:cb:01:8b:75:78:27:80:94:0b: 8f:e6:32:91:4b:da:e7:cd:4b:b4:38:24:37:a1:b4:6c:c5:3b: 14:24:88:ed:ed:32:7c:3d:76:26:80:f0:68:74:6d:1b:96:6f: 6e:ed:1b:b1:2b:cd:03:91:be:2f:9c:f1:63:fe:b4:a7:e9:1e: bb:7b:5f:5d:04:52:bb:d6:dc:a1:bb:92:04:15:ea:1b:34:d7: 8c:34:dd:28 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8f1bmVS7OH9Ji3/WEWQaLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz MzBjNWIwHhcNMjYwMTAyMDIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTU0OWM4OTc2OWM0NWMwNzhhNDAzNWRkMmIxNTFhNWZhYmRiNGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyWgnpakXcPBnC/NVfNmdPXNdt1e VhXC11j000XOzshNB7MzbEvqzhVWRnRP9Qn2/CDbwIrxwie8ET796UH0TEg47dss sZqTu/OLDJ0XwWmiDk4yHfUL4MRYxluDgu3pRNlzubiy290UiWNYR9gqUvXRnmp0 e4NG5swmk7WUls26Mqv1ddrn/yi/2KghllUS0HdAjXsnXDpBkKZNKDmRz+AQeVjd xnlFq7+BnfIZLcIQ8eGVJA+CUtVFBzWdEDQEfK8I5Cfe2/X1jwNyjwEz4s+E1IC3 Zmqpk24QO3ZKNKABuVtpcVKUNoPird/f5o1CTntl9Y8gAyAwzY6FQKO1jQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFI5UnIl2nEXAeKQDXdKxUaX6vbTVMB8GA1UdIwQY MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt NWQ2NjVlOTk4ZjZhLzEvamxTY2lYYWNSY0I0cEFOZDByRlJwZnE5dE5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEaaAAU MA0GCSqGSIb3DQEBCwUAA4IBAQAw/h2HDjxaAReBCoPJhzyI9m5vogMVweW+BtQJ ve18fQjSzuASrsxILiPRLgX/C1HG6ZKUN4HEvinOcm9wKaHBByXVZcct7W/b8SSE AtfMj1gIwXMJ95a5nbbZ9TpdpF0Gv4LlBMK1qC52iA7PSTB/6h15d8IEU5IHGuAu 81DmAUfQRuLM4o3RscJ2a0EKrTquMpsswugqD2Q7t8Uwqrhm0m/0ju2P9ZUv2NHL AYt1eCeAlAuP5jKRS9rnzUu0OCQ3obRsxTsUJIjt7TJ8PXYmgPBodG0blm9u7Rux K80Dkb4vnPFj/rSn6R67e19dBFK71tyhu5IEFeobNNeMNN0o -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:16 2026 by rpki-client