This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/J9MOifVvxWkCXnbkT4Sr5P1XUQk.roa File: J9MOifVvxWkCXnbkT4Sr5P1XUQk.roa (raw, json) Hash identifier: JFKzgNziUP2fsulFj18JSMHykZ0juIoG3V1HkaMBe5c= Subject key identifier: 27:D3:0E:89:F5:6F:C5:69:02:5E:76:E4:4F:84:AB:E4:FD:57:51:09 Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Certificate serial: 019B7A5B4B56D46D95AD1E379F93295B9A55 Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/J9MOifVvxWkCXnbkT4Sr5P1XUQk.roa Signing time: Thu 01 Jan 2026 16:19:22 +0000 ROA not before: Thu 01 Jan 2026 16:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214454 IP address blocks: 2a13:fc2::/32 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:4b:56:d4:6d:95:ad:1e:37:9f:93:29:5b:9a:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Validity Not Before: Jan 1 16:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27d30e89f56fc569025e76e44f84abe4fd575109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:27:c9:a2:c9:ca:ed:f7:5d:2d:97:e8:10:90: e2:b5:24:86:dc:c7:83:17:16:ee:cf:ea:3b:b8:47: f4:45:18:a2:b9:67:4b:4c:cb:1f:6b:7d:e9:44:50: ec:f3:35:56:64:18:3e:65:f0:43:2e:2f:d2:a6:84: 39:aa:be:be:e0:08:6f:c4:5e:50:c1:8a:d2:a4:fe: c1:08:6b:45:d8:31:5a:98:11:be:13:96:28:c9:01: 60:dc:1f:4e:20:5f:f1:e8:e4:9f:21:8e:a0:9c:b5: ab:c0:06:de:39:cb:21:e0:41:cb:0f:5b:10:22:19: 6c:b5:d0:0f:f4:ca:dd:af:11:f9:27:43:2d:bb:f2: ed:99:43:92:48:0a:44:4e:7f:7f:da:25:31:b1:5c: 49:0f:ac:13:8e:54:b7:51:b6:dd:be:5a:c1:e1:40: 36:bd:17:64:a2:96:55:a8:ac:27:84:73:b3:c2:15: 23:4c:0b:69:0b:9f:1a:b7:ae:e1:96:82:b7:f8:bf: d0:1b:1e:e3:b5:29:d4:1e:94:dc:db:17:e8:3b:cd: 31:8e:41:ef:fb:91:cb:89:08:17:0c:65:99:c2:c0: f8:f7:87:9c:d2:ce:38:15:61:3e:07:51:47:80:79: fa:ab:83:76:4d:19:cc:dc:40:11:5f:13:72:3b:8c: 9f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D3:0E:89:F5:6F:C5:69:02:5E:76:E4:4F:84:AB:E4:FD:57:51:09 X509v3 Authority Key Identifier: keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/J9MOifVvxWkCXnbkT4Sr5P1XUQk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:fc2::/32 Signature Algorithm: sha256WithRSAEncryption 4e:d1:5d:aa:14:9e:eb:27:59:f9:36:24:b0:48:69:ef:d2:69: 4b:3b:d4:f1:a3:27:e8:06:7b:4c:a5:2a:1e:45:14:f8:b8:cc: 06:83:26:ec:ce:26:4f:c6:e6:ce:5c:07:55:ec:f1:42:c9:9c: 7c:e2:fd:ab:f0:f2:e4:92:20:fb:a9:5b:75:5e:19:33:cf:5e: af:31:de:2c:be:cb:ba:b3:e9:11:28:4f:28:0c:2f:bf:7f:ae: 9f:46:00:5e:2b:14:12:1a:47:7d:4f:2a:d7:d7:04:82:af:0d: 3d:ed:7c:3a:b9:bf:b9:1c:8c:c2:ac:51:06:98:d5:a9:a8:f2: 46:c2:61:84:87:a8:75:14:a3:27:2f:27:c4:66:db:f6:e9:fc: f3:3c:0f:05:72:a1:48:41:67:b0:36:7a:1e:1d:f1:91:82:cb: 18:97:0f:f0:ac:35:44:6d:88:49:b3:e8:62:32:55:fd:54:79: 41:d6:18:c9:64:5c:40:a5:6e:fd:d8:88:8e:76:f7:17:68:d5: 9d:ee:f3:d3:44:94:62:30:e9:92:5d:d9:6c:57:1b:79:26:70: 20:5a:35:2c:f9:9c:c6:d5:82:e9:39:98:90:d6:8b:b7:b1:24: 7c:0e:22:bb:ea:c7:54:9a:69:90:1d:7c:44:17:82:8c:61:79: 6e:98:1a:57 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6W0tW1G2VrR43n5MpW5pVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMzkyZTkyOTMxN2FlNmJkZTA4YTVhM2I5OGEyYjcwMWRk Yjg5M2EwHhcNMjYwMTAxMTYxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2QzMGU4OWY1NmZjNTY5MDI1ZTc2ZTQ0Zjg0YWJlNGZkNTc1MTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yfJosnK7fddLZfoEJDitSSG3MeD Fxbuz+o7uEf0RRiiuWdLTMsfa33pRFDs8zVWZBg+ZfBDLi/SpoQ5qr6+4AhvxF5Q wYrSpP7BCGtF2DFamBG+E5YoyQFg3B9OIF/x6OSfIY6gnLWrwAbeOcsh4EHLD1sQ IhlstdAP9MrdrxH5J0Mtu/LtmUOSSApETn9/2iUxsVxJD6wTjlS3UbbdvlrB4UA2 vRdkopZVqKwnhHOzwhUjTAtpC58at67hloK3+L/QGx7jtSnUHpTc2xfoO80xjkHv +5HLiQgXDGWZwsD494ec0s44FWE+B1FHgHn6q4N2TRnM3EARXxNyO4yf0wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFCfTDon1b8VpAl525E+Eq+T9V1EJMB8GA1UdIwQY MBaAFGM5LpKTF65r3gilo7mKK3Ad24k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEt ODcyNTBmNWEwN2NjLzEvSjlNT2lmVnZ4V2tDWG5ia1Q0U3I1UDFYVVFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEtODcyNTBmNWEwN2Nj LzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhMPwjAN BgkqhkiG9w0BAQsFAAOCAQEATtFdqhSe6ydZ+TYksEhp79JpSzvU8aMn6AZ7TKUq HkUU+LjMBoMm7M4mT8bmzlwHVezxQsmcfOL9q/Dy5JIg+6lbdV4ZM89erzHeLL7L urPpEShPKAwvv3+un0YAXisUEhpHfU8q19cEgq8NPe18Orm/uRyMwqxRBpjVqajy RsJhhIeodRSjJy8nxGbb9un88zwPBXKhSEFnsDZ6Hh3xkYLLGJcP8Kw1RG2ISbPo YjJV/VR5QdYYyWRcQKVu/diIjnb3F2jVne7z00SUYjDpkl3ZbFcbeSZwIFo1LPmc xtWC6TmYkNaLt7EkfA4iu+rHVJppkB18RBeCjGF5bpgaVw== -----END CERTIFICATE-----Generated at Sun Jan 25 13:53:50 2026 by rpki-client