This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/JTblbDk5qmgs49V1IeqJoG_e-jI.roa File: JTblbDk5qmgs49V1IeqJoG_e-jI.roa (raw, json) Hash identifier: jSRnDLnRJxGnNzUMCH/eyYcLAQj4Mpkh/xUJIElD2Jw= Subject key identifier: 25:36:E5:6C:39:39:AA:68:2C:E3:D5:75:21:EA:89:A0:6F:DE:FA:32 Certificate issuer: /CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1 Certificate serial: 019B7759090FB1C39654B7EB91653DA58178 Authority key identifier: 34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/JTblbDk5qmgs49V1IeqJoG_e-jI.roa Signing time: Thu 01 Jan 2026 02:18:02 +0000 ROA not before: Thu 01 Jan 2026 02:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213220 IP address blocks: 2a03:e140:3a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:09:0f:b1:c3:96:54:b7:eb:91:65:3d:a5:81:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1 Validity Not Before: Jan 1 02:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2536e56c3939aa682ce3d57521ea89a06fdefa32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e8:2c:78:c8:72:99:30:70:86:5b:ed:a5:94: 9d:75:63:73:1d:48:3c:23:24:c5:f7:19:88:ad:e3: bc:b8:c8:7c:ca:32:55:b5:06:39:39:09:bb:5c:2d: 24:d9:62:68:41:4f:f5:31:86:6e:77:4d:3b:ac:75: f0:69:9d:fb:1e:58:ca:13:1c:6f:1b:2e:00:f2:f5: 6f:c0:ee:ed:04:f4:c5:4d:8c:af:45:5b:89:b6:9d: 7b:2f:8e:fa:f3:1e:52:ce:6b:aa:52:84:09:b4:40: 89:c3:f0:a0:b9:8c:a6:3c:52:d8:2a:8a:f9:2b:46: 99:1a:f2:b6:54:2b:3e:48:15:c5:ea:8e:5f:14:26: 58:ad:e5:ce:e0:d9:ac:64:5d:53:dc:6f:00:c8:a1: fd:3f:87:15:52:02:ce:b0:0d:0f:98:c2:bc:75:89: dd:c4:85:32:fd:24:64:aa:b4:fd:de:02:43:2c:97: 17:cc:93:ee:58:11:39:8d:47:d6:b2:c6:4e:40:37: 79:9b:cd:6e:ac:21:bd:d7:44:72:e8:c6:bb:b6:3b: d1:d7:17:f6:24:29:fa:bd:9b:5e:a9:c1:4c:ca:dc: 45:68:55:ed:76:02:d5:78:06:4d:82:73:1c:3c:50: 25:58:e4:08:79:03:19:b4:ce:3f:8b:de:5c:12:5d: 85:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:36:E5:6C:39:39:AA:68:2C:E3:D5:75:21:EA:89:A0:6F:DE:FA:32 X509v3 Authority Key Identifier: keyid:34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/JTblbDk5qmgs49V1IeqJoG_e-jI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:e140:3a::/48 Signature Algorithm: sha256WithRSAEncryption 66:f6:c3:8e:d5:32:e9:d2:7b:6a:19:2b:01:e4:62:9a:9e:87: 6b:88:04:ad:8c:21:53:9c:80:33:17:95:08:8d:fe:dc:c2:1a: 60:7d:79:c7:44:06:24:08:7e:1b:9b:87:68:95:ce:0f:97:6b: 9d:51:1d:9d:e3:fc:d3:e9:b6:7e:f0:d7:42:ea:44:69:3a:97: 45:af:e7:d0:18:ed:d8:12:ce:aa:5f:5b:06:16:cc:77:94:8e: 98:08:e3:7c:67:d0:69:c8:8f:69:de:d9:a3:a2:74:fe:49:e9: c4:63:b5:22:35:a4:f0:3f:7b:6a:10:af:80:ee:37:c4:b4:fd: 7c:ce:63:a0:cc:a3:1f:f9:77:78:33:ab:b4:9b:04:e6:d9:70: cd:70:b5:9b:1e:d1:6a:56:45:97:c7:45:a8:ef:f7:c4:a0:2b: c5:d7:a9:fc:ac:88:08:ee:35:a7:79:40:aa:14:1c:08:ae:e1: 7b:98:42:f6:f1:d2:1c:fc:8b:57:3f:a9:c3:8f:5f:a4:d4:6d: 34:f5:10:6a:ae:b7:35:d3:91:28:9f:d0:5f:1d:26:07:43:c7: 3d:b9:19:c1:b0:9d:a3:78:17:a1:71:72:8d:29:a7:85:cc:94: c2:6d:0e:86:f2:5f:d0:53:a6:f3:5b:fd:af:f7:72:bb:5d:e3: 1c:9f:83:17 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WQkPscOWVLfrkWU9pYF4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NzJiNTUzZjBjYjBiMTM5MDBkNGMyZTBlNmM3NzlhY2Ew M2UzYjEwHhcNMjYwMTAxMDIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTM2ZTU2YzM5MzlhYTY4MmNlM2Q1NzUyMWVhODlhMDZmZGVmYTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+gseMhymTBwhlvtpZSddWNzHUg8 IyTF9xmIreO8uMh8yjJVtQY5OQm7XC0k2WJoQU/1MYZud007rHXwaZ37HljKExxv Gy4A8vVvwO7tBPTFTYyvRVuJtp17L4768x5SzmuqUoQJtECJw/CguYymPFLYKor5 K0aZGvK2VCs+SBXF6o5fFCZYreXO4NmsZF1T3G8AyKH9P4cVUgLOsA0PmMK8dYnd xIUy/SRkqrT93gJDLJcXzJPuWBE5jUfWssZOQDd5m81urCG910Ry6Ma7tjvR1xf2 JCn6vZteqcFMytxFaFXtdgLVeAZNgnMcPFAlWOQIeQMZtM4/i95cEl2FPwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCU25Ww5OapoLOPVdSHqiaBv3voyMB8GA1UdIwQY MBaAFDRytVPwywsTkA1MLg5sd5rKA+OxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkhLMVVfRExDeE9RRFV3dURteDNtc29ENDdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wNWVkMmYtYzRmNy00NDE3LWE0ZmIt MGQyMDUyNWVkYzc0LzEvSlRibGJEazVxbWdzNDlWMUllcUpvR19lLWpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8wNWVkMmYtYzRmNy00NDE3LWE0ZmItMGQyMDUyNWVkYzc0 LzEvTkhLMVVfRExDeE9RRFV3dURteDNtc29ENDdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgPhQAA6 MA0GCSqGSIb3DQEBCwUAA4IBAQBm9sOO1TLp0ntqGSsB5GKanodriAStjCFTnIAz F5UIjf7cwhpgfXnHRAYkCH4bm4dolc4Pl2udUR2d4/zT6bZ+8NdC6kRpOpdFr+fQ GO3YEs6qX1sGFsx3lI6YCON8Z9BpyI9p3tmjonT+SenEY7UiNaTwP3tqEK+A7jfE tP18zmOgzKMf+Xd4M6u0mwTm2XDNcLWbHtFqVkWXx0Wo7/fEoCvF16n8rIgI7jWn eUCqFBwIruF7mEL28dIc/ItXP6nDj1+k1G009RBqrrc105Eon9BfHSYHQ8c9uRnB sJ2jeBehcXKNKaeFzJTCbQ6G8l/QU6bzW/2v93K7XeMcn4MX -----END CERTIFICATE-----Generated at Sun Jan 25 11:40:54 2026 by rpki-client