This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/jFHWQVied9oZQfm4vhIvSC4eiV0.roa File: jFHWQVied9oZQfm4vhIvSC4eiV0.roa (raw, json) Hash identifier: dr0KfgCKcAC1kV4SsWObX5dDQnEh0pKNGg0bXRatP4I= Subject key identifier: 8C:51:D6:41:58:9E:77:DA:19:41:F9:B8:BE:12:2F:48:2E:1E:89:5D Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Certificate serial: 019B7E38F8C7A95DF0F254491297D58E1C66 Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/jFHWQVied9oZQfm4vhIvSC4eiV0.roa Signing time: Fri 02 Jan 2026 10:20:21 +0000 ROA not before: Fri 02 Jan 2026 10:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215893 IP address blocks: 2a12:5840:2510::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f8:c7:a9:5d:f0:f2:54:49:12:97:d5:8e:1c:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Validity Not Before: Jan 2 10:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c51d641589e77da1941f9b8be122f482e1e895d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b5:83:97:4f:99:9f:24:80:a1:b7:30:4c:71: b1:b2:6f:fb:c4:9b:25:37:f7:c1:e5:01:fd:5d:d9: 17:98:1b:c5:62:81:5e:52:f0:70:f0:a7:0a:1e:b6: 28:c4:1b:ab:b2:da:d8:53:3c:6f:08:70:1d:87:c3: 23:ed:87:f2:c0:1a:2f:67:82:a1:55:c7:36:f2:bc: a7:01:4f:a3:28:a5:e0:20:49:fb:ac:a9:f5:21:ec: ee:2e:1d:51:50:46:fe:44:34:be:00:ff:8e:14:a3: 29:7a:9e:e1:cb:c8:b0:07:f4:75:53:7d:91:83:25: e8:f0:4d:a7:e6:3a:53:5a:31:bd:17:e1:dc:de:bc: 7c:e4:e7:4e:0e:1d:b4:6e:ae:d5:e9:b3:f3:5e:e4: a7:ed:e6:43:0e:b9:bb:20:5f:4e:29:68:82:bf:b3: e9:82:e5:0e:8f:29:23:9f:9b:a2:5b:cf:3e:49:94: 92:bd:d3:b8:76:b6:bd:c7:ce:03:c2:60:d9:b7:2f: a4:e8:fb:6f:9c:7e:06:02:f4:e1:3c:8a:ab:ea:d9: 35:5c:f5:4f:cb:1d:95:c4:79:0f:32:a5:0e:aa:b5: 8a:c8:d6:6f:86:9b:0f:e8:d3:8b:8f:41:5a:55:5e: 91:ce:3c:b4:4e:27:30:88:a8:dc:a3:ea:78:e1:c9: c0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:51:D6:41:58:9E:77:DA:19:41:F9:B8:BE:12:2F:48:2E:1E:89:5D X509v3 Authority Key Identifier: keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/jFHWQVied9oZQfm4vhIvSC4eiV0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:5840:2510::/44 Signature Algorithm: sha256WithRSAEncryption 0a:5e:99:19:81:d7:66:6d:4b:2d:47:b5:d1:cd:c5:5e:6a:4d: ed:5f:63:b0:a5:db:3f:b5:54:44:35:b3:02:a6:91:14:e0:25: dd:c9:33:bd:f5:d1:7e:00:e9:bb:bf:81:2b:3b:f0:57:e5:d8: eb:7c:a4:b4:e2:22:e3:06:ea:34:3a:5c:a4:54:1f:6b:83:b7: b8:de:15:37:9b:cb:7b:3b:5d:8d:4d:59:a6:d8:eb:14:06:c7: ce:21:0f:1f:30:85:a6:42:bf:85:b8:5e:6f:9b:1d:59:b4:a9: 9a:0b:35:89:b7:6f:b0:51:4f:15:f1:9d:69:33:fd:bc:c9:e0: 1a:28:9b:23:f1:55:7e:3f:39:bb:24:20:64:7d:f5:b7:13:34: 48:7f:3f:4f:69:33:15:0b:52:fd:cb:5c:35:3f:8e:34:19:74: 24:4a:fe:1e:c6:00:43:f0:63:6c:bc:50:6c:6c:c8:b2:21:28: 99:24:92:6d:5c:8b:e8:24:fa:89:41:82:e3:2f:83:0b:55:e7: a1:1a:8d:36:bc:f7:b3:53:2f:67:f5:e5:0f:5b:14:e0:06:b9: 24:61:8a:bb:99:4a:9e:19:07:c4:18:ba:40:70:c7:c9:94:09: 98:b0:fb:63:df:13:5d:50:12:1a:3e:b2:cb:56:1c:88:b8:69: 46:a0:09:93 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OPjHqV3w8lRJEpfVjhxmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YzNlMDI3ZDJkMWMyZDM2ZDdjOTU0ODY3MjI2YzgzYjY1 ZWI1NmYwHhcNMjYwMTAyMTAyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzUxZDY0MTU4OWU3N2RhMTk0MWY5YjhiZTEyMmY0ODJlMWU4OTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7WDl0+ZnySAobcwTHGxsm/7xJsl N/fB5QH9XdkXmBvFYoFeUvBw8KcKHrYoxBurstrYUzxvCHAdh8Mj7YfywBovZ4Kh Vcc28rynAU+jKKXgIEn7rKn1IezuLh1RUEb+RDS+AP+OFKMpep7hy8iwB/R1U32R gyXo8E2n5jpTWjG9F+Hc3rx85OdODh20bq7V6bPzXuSn7eZDDrm7IF9OKWiCv7Pp guUOjykjn5uiW88+SZSSvdO4dra9x84DwmDZty+k6PtvnH4GAvThPIqr6tk1XPVP yx2VxHkPMqUOqrWKyNZvhpsP6NOLj0FaVV6Rzjy0TicwiKjco+p44cnAUQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIxR1kFYnnfaGUH5uL4SL0guHoldMB8GA1UdIwQY MBaAFPbD4CfS0cLTbXyVSGcibIO2XrVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUt MzU2YzRkN2JiNDUyLzEvakZIV1FWaWVkOW9aUWZtNHZoSXZTQzRlaVYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUtMzU2YzRkN2JiNDUy LzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhJYQCUQ MA0GCSqGSIb3DQEBCwUAA4IBAQAKXpkZgddmbUstR7XRzcVeak3tX2Owpds/tVRE NbMCppEU4CXdyTO99dF+AOm7v4ErO/BX5djrfKS04iLjBuo0OlykVB9rg7e43hU3 m8t7O12NTVmm2OsUBsfOIQ8fMIWmQr+FuF5vmx1ZtKmaCzWJt2+wUU8V8Z1pM/28 yeAaKJsj8VV+Pzm7JCBkffW3EzRIfz9PaTMVC1L9y1w1P440GXQkSv4exgBD8GNs vFBsbMiyISiZJJJtXIvoJPqJQYLjL4MLVeehGo02vPezUy9n9eUPWxTgBrkkYYq7 mUqeGQfEGLpAcMfJlAmYsPtj3xNdUBIaPrLLVhyIuGlGoAmT -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:26 2026 by rpki-client