This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/JiK8psPNS7Q8TSWjkJH1pP9BmF8.roa File: JiK8psPNS7Q8TSWjkJH1pP9BmF8.roa (raw, json) Hash identifier: 3M1URB5bq4S79c9mtyyaPbUG6/SErUNxltBv4XVCKoY= Subject key identifier: 26:22:BC:A6:C3:CD:4B:B4:3C:4D:25:A3:90:91:F5:A4:FF:41:98:5F Certificate issuer: /CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64 Certificate serial: 019B7FF189A02B7F107EBD78A2A803D7BE80 Authority key identifier: 3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/JiK8psPNS7Q8TSWjkJH1pP9BmF8.roa Signing time: Fri 02 Jan 2026 18:21:34 +0000 ROA not before: Fri 02 Jan 2026 18:21:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214178 IP address blocks: 2a14:4b41:1000::/44 maxlen: 48 2a14:4b41:1010::/44 maxlen: 48 2a14:4b41:1201::/48 maxlen: 48 2a14:4b41:1203::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:89:a0:2b:7f:10:7e:bd:78:a2:a8:03:d7:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64 Validity Not Before: Jan 2 18:21:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2622bca6c3cd4bb43c4d25a39091f5a4ff41985f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:52:f8:cc:20:50:2d:6d:a6:9b:1f:b9:e9:71: 81:a0:eb:8b:1c:6a:35:09:60:a4:a3:d3:db:7e:db: 20:47:7c:df:ae:73:8d:1f:56:0f:c1:a3:64:09:25: 69:97:48:f0:88:f3:a0:03:c5:03:6a:00:f5:87:0f: c1:80:31:1a:88:47:30:73:5e:0c:17:11:25:22:db: ec:5a:b1:00:44:7f:25:c7:b4:68:74:6e:ae:ec:bd: 46:05:b2:bc:76:c5:a7:a8:3d:7a:ce:9a:5b:e8:99: b4:9b:77:3f:d8:d6:a8:08:d0:3e:84:eb:00:44:83: a0:cf:d0:4a:21:fb:01:0e:1a:b8:b2:5f:67:fa:85: 5a:1e:32:bd:16:08:f8:52:24:7c:4f:57:77:00:4d: 6c:68:96:61:c0:b8:03:f7:e4:9b:72:9b:6a:1e:63: e5:65:9e:90:ab:f7:c7:5a:37:8f:30:bf:d1:e4:a6: fc:13:60:62:59:fb:e1:64:ca:3e:9f:3e:51:7b:33: e6:d3:1d:4e:60:e2:57:0a:3d:c9:bc:a3:0c:93:2f: 46:86:93:10:ce:43:b9:af:12:05:07:20:85:c9:e4: fc:f2:de:ab:eb:d7:08:88:94:8b:08:f1:ca:42:28: 2f:f8:44:a1:c4:ea:4d:ff:8d:a7:fd:8a:fa:2b:c5: 84:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:22:BC:A6:C3:CD:4B:B4:3C:4D:25:A3:90:91:F5:A4:FF:41:98:5F X509v3 Authority Key Identifier: keyid:3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/JiK8psPNS7Q8TSWjkJH1pP9BmF8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:4b41:1000::/43 2a14:4b41:1201::/48 2a14:4b41:1203::/48 Signature Algorithm: sha256WithRSAEncryption 45:22:f9:6f:28:ac:14:02:a2:5f:41:0f:75:86:7c:a4:99:8a: a2:ef:e4:dd:ff:00:84:82:f2:55:c1:d2:b1:08:a6:58:50:63: 06:f0:cb:01:52:63:d7:a9:9a:dd:44:ff:ab:27:6e:c8:4b:ea: 53:fa:54:04:f5:a1:29:50:82:0a:1b:9a:29:27:c0:6a:fd:54: 3c:df:b9:e6:09:41:29:d2:06:12:04:53:8d:cb:cd:a4:62:56: 01:55:05:b5:45:b3:57:f6:00:a7:79:5b:ec:ab:fa:90:3e:63: be:fa:1f:05:e0:19:c1:0d:ab:c5:0d:09:d0:00:47:c0:6e:c9: 96:69:da:fc:4f:6d:cc:bf:ec:d4:55:00:06:ed:a0:c8:4c:c3: 5d:e6:ab:81:71:f8:ff:2d:bd:0f:a1:bf:8c:63:02:ed:7b:06: e3:e1:34:23:69:d3:f5:71:0b:6d:61:c2:52:0e:5f:62:c7:df: 7d:94:40:a6:3b:ce:5b:79:e4:0a:a7:d0:aa:30:d9:18:53:7c: 62:89:e3:78:3a:bc:e4:3e:02:8c:2a:a4:e4:d0:2d:d4:5c:58: 2f:d7:ae:bc:74:fe:8d:d1:3b:a0:d4:62:2d:5a:1c:69:46:a8: 9a:4c:75:66:d7:f3:cd:0f:e8:d3:20:76:02:84:34:e5:2a:35: 70:7a:4f:2c -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/8YmgK38Qfr14oqgD176AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhM2VhMzNhZWE4YjM4NDI3ZjJiY2VmNWVkNGMyMTQyM2Ey YTlkNjQwHhcNMjYwMTAyMTgyMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjIyYmNhNmMzY2Q0YmI0M2M0ZDI1YTM5MDkxZjVhNGZmNDE5ODVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlL4zCBQLW2mmx+56XGBoOuLHGo1 CWCko9PbftsgR3zfrnONH1YPwaNkCSVpl0jwiPOgA8UDagD1hw/BgDEaiEcwc14M FxElItvsWrEARH8lx7RodG6u7L1GBbK8dsWnqD16zppb6Jm0m3c/2NaoCNA+hOsA RIOgz9BKIfsBDhq4sl9n+oVaHjK9Fgj4UiR8T1d3AE1saJZhwLgD9+SbcptqHmPl ZZ6Qq/fHWjePML/R5Kb8E2BiWfvhZMo+nz5RezPm0x1OYOJXCj3JvKMMky9GhpMQ zkO5rxIFByCFyeT88t6r69cIiJSLCPHKQigv+EShxOpN/42n/Yr6K8WETwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCYivKbDzUu0PE0lo5CR9aT/QZhfMB8GA1UdIwQY MBaAFDo+ozrqizhCfyvO9e1MIUI6Kp1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2o2ak91cUxPRUpfSzg3MTdVd2hRam9xbldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wNjdiMDctNWViNi00M2YxLTg2ZmYt MWQ2N2MzMjQ1MDFmLzEvSmlLOHBzUE5TN1E4VFNXamtKSDFwUDlCbUY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8wNjdiMDctNWViNi00M2YxLTg2ZmYtMWQ2N2MzMjQ1MDFm LzEvT2o2ak91cUxPRUpfSzg3MTdVd2hRam9xbldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcFKhRLQRAA AwcAKhRLQRIBAwcAKhRLQRIDMA0GCSqGSIb3DQEBCwUAA4IBAQBFIvlvKKwUAqJf QQ91hnykmYqi7+Td/wCEgvJVwdKxCKZYUGMG8MsBUmPXqZrdRP+rJ27IS+pT+lQE 9aEpUIIKG5opJ8Bq/VQ837nmCUEp0gYSBFONy82kYlYBVQW1RbNX9gCneVvsq/qQ PmO++h8F4BnBDavFDQnQAEfAbsmWadr8T23Mv+zUVQAG7aDITMNd5quBcfj/Lb0P ob+MYwLtewbj4TQjadP1cQttYcJSDl9ix999lECmO85beeQKp9CqMNkYU3xiieN4 OrzkPgKMKqTk0C3UXFgv1668dP6N0Tug1GItWhxpRqiaTHVm1/PND+jTIHYChDTl KjVwek8s -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:34 2026 by rpki-client