This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/jr2MrmNKvgvkaJUvTwgCK9768R4.roa File: jr2MrmNKvgvkaJUvTwgCK9768R4.roa (raw, json) Hash identifier: 7wyrtDZfRy4mA/6PukeLbOrGbjNWDRzfMCXsJFdFPfM= Subject key identifier: 8E:BD:8C:AE:63:4A:BE:0B:E4:68:95:2F:4F:08:02:2B:DE:FA:F1:1E Certificate issuer: /CN=7bab6c11d41162db0306858f83e5e65121132a6b Certificate serial: 019B79112FBB6A768ECDDEEAE9003BCCCB89 Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/jr2MrmNKvgvkaJUvTwgCK9768R4.roa Signing time: Thu 01 Jan 2026 10:18:47 +0000 ROA not before: Thu 01 Jan 2026 10:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207649 IP address blocks: 2a07:22c1:c002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:2f:bb:6a:76:8e:cd:de:ea:e9:00:3b:cc:cb:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b Validity Not Before: Jan 1 10:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ebd8cae634abe0be468952f4f08022bdefaf11e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8b:a2:75:46:2e:bd:8d:45:c5:f0:42:c8:cf: 1d:b2:61:1f:97:ad:84:59:7a:cc:db:78:82:f9:40: d9:be:b6:5f:1c:7b:94:5e:39:80:23:4f:de:c3:6a: d2:e2:de:97:da:ea:7e:71:a0:39:8c:ce:cd:fe:5d: d1:bf:7a:31:9c:19:8b:44:e3:e1:7b:8c:d8:e0:79: 95:62:43:fe:42:0a:35:6b:84:37:eb:04:24:91:4f: f4:a1:a7:79:52:9f:35:2d:c8:11:a3:7b:63:a0:60: ec:58:06:c9:2f:aa:1c:7e:eb:0c:4c:1c:f6:76:04: b6:2f:71:f4:2d:d1:03:ce:c0:c5:3d:88:ff:98:84: 7a:87:8f:8f:6c:f8:79:23:d9:03:5c:ba:94:de:69: 75:a8:30:6d:9f:45:07:0b:01:e9:ca:c5:37:67:85: 42:1f:df:ed:50:ad:30:45:13:a8:42:60:5f:c8:0c: 6e:d4:43:3f:1a:b2:a6:5f:da:86:7f:28:c3:b6:62: c0:6f:5c:3c:f1:fb:e1:a3:1e:7c:4b:9f:ce:5b:25: 29:e7:50:d5:38:6a:ef:c5:f3:55:83:7f:bf:22:4d: 80:61:9d:29:50:27:46:41:73:3d:43:f2:36:39:db: bc:ac:5e:e8:19:4a:71:5a:5d:c0:69:2a:04:43:15: b4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:BD:8C:AE:63:4A:BE:0B:E4:68:95:2F:4F:08:02:2B:DE:FA:F1:1E X509v3 Authority Key Identifier: keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/jr2MrmNKvgvkaJUvTwgCK9768R4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:22c1:c002::/48 Signature Algorithm: sha256WithRSAEncryption 04:74:5a:64:be:16:d1:1e:bd:0b:53:a9:4b:f6:89:80:09:8a: 23:33:7f:c3:72:d4:88:4b:1d:8b:eb:c3:00:2d:f9:cf:b6:6d: 95:d8:f0:74:be:c2:94:50:3e:3e:4a:79:8a:86:0f:af:7e:8c: 93:39:20:6d:de:ae:d9:a7:b0:94:82:81:db:bb:26:4f:0b:2f: 0e:34:b5:85:82:ce:c6:95:eb:9c:d4:2e:8c:c1:c4:eb:f8:23: ef:b8:df:62:ee:c3:5c:7b:38:b9:4b:ff:65:62:8a:eb:b1:2a: 24:10:f5:3f:d5:ea:e1:8a:4d:e3:22:74:30:5f:bf:59:f9:fb: 84:52:62:be:37:bc:37:b7:67:a9:cf:4f:dd:a1:21:fd:fa:ef: 77:d2:ce:a4:ea:49:c2:f4:31:0a:ea:78:06:48:3a:c6:48:1a: 96:11:b5:b7:77:39:3b:26:69:83:23:5a:26:c7:e0:1a:73:c5: be:be:bf:44:95:7a:36:29:5f:fe:ec:e6:18:ef:9f:d9:30:64: bd:42:57:46:73:39:bb:62:0d:64:2c:a1:36:a5:cc:e2:c9:6b: 45:0b:e3:c3:3f:7a:21:79:2f:f1:8b:f8:f9:58:85:26:57:58: 61:c8:b2:2a:08:a9:52:0a:18:3d:47:1c:1d:ea:01:9d:4b:f8: 82:f0:17:60 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5ES+7anaOzd7q6QA7zMuJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYWI2YzExZDQxMTYyZGIwMzA2ODU4ZjgzZTVlNjUxMjEx MzJhNmIwHhcNMjYwMTAxMTAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWJkOGNhZTYzNGFiZTBiZTQ2ODk1MmY0ZjA4MDIyYmRlZmFmMTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4uidUYuvY1FxfBCyM8dsmEfl62E WXrM23iC+UDZvrZfHHuUXjmAI0/ew2rS4t6X2up+caA5jM7N/l3Rv3oxnBmLROPh e4zY4HmVYkP+Qgo1a4Q36wQkkU/0oad5Up81LcgRo3tjoGDsWAbJL6ocfusMTBz2 dgS2L3H0LdEDzsDFPYj/mIR6h4+PbPh5I9kDXLqU3ml1qDBtn0UHCwHpysU3Z4VC H9/tUK0wRROoQmBfyAxu1EM/GrKmX9qGfyjDtmLAb1w88fvhox58S5/OWyUp51DV OGrvxfNVg3+/Ik2AYZ0pUCdGQXM9Q/I2Odu8rF7oGUpxWl3AaSoEQxW0dwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFI69jK5jSr4L5GiVL08IAive+vEeMB8GA1UdIwQY MBaAFHurbBHUEWLbAwaFj4Pl5lEhEyprMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTZ0c0VkUVJZdHNEQm9XUGctWG1VU0VUS21zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kMzM0YWQtNTI0MC00ZGFhLWEwNTAt OWY1YmY3MzY3MjBlLzEvanIyTXJtTkt2Z3ZrYUpVdlR3Z0NLOTc2OFI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9kMzM0YWQtNTI0MC00ZGFhLWEwNTAtOWY1YmY3MzY3MjBl LzEvZTZ0c0VkUVJZdHNEQm9XUGctWG1VU0VUS21zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgciwcAC MA0GCSqGSIb3DQEBCwUAA4IBAQAEdFpkvhbRHr0LU6lL9omACYojM3/DctSISx2L 68MALfnPtm2V2PB0vsKUUD4+SnmKhg+vfoyTOSBt3q7Zp7CUgoHbuyZPCy8ONLWF gs7Gleuc1C6MwcTr+CPvuN9i7sNcezi5S/9lYorrsSokEPU/1erhik3jInQwX79Z +fuEUmK+N7w3t2epz0/doSH9+u930s6k6knC9DEK6ngGSDrGSBqWEbW3dzk7JmmD I1omx+Aac8W+vr9ElXo2KV/+7OYY75/ZMGS9QldGczm7Yg1kLKE2pcziyWtFC+PD P3oheS/xi/j5WIUmV1hhyLIqCKlSChg9Rxwd6gGdS/iC8Bdg -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:10 2026 by rpki-client