This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/jtoBQwIUDDJGQnPKKMk_RqjJnM8.roa File: jtoBQwIUDDJGQnPKKMk_RqjJnM8.roa (raw, json) Hash identifier: qs/ndOyS1IApu6dntwwwn/J4lhn/hjfKt5trUC8kNUw= Subject key identifier: 8E:DA:01:43:02:14:0C:32:46:42:73:CA:28:C9:3F:46:A8:C9:9C:CF Certificate issuer: /CN=18f8a3af0d8c0d51de2ddd265ad54dab97bde6ce Certificate serial: 019AD9E16C8884E06F31E2CCE22974F523C3 Authority key identifier: 18:F8:A3:AF:0D:8C:0D:51:DE:2D:DD:26:5A:D5:4D:AB:97:BD:E6:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPijrw2MDVHeLd0mWtVNq5e95s4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/jtoBQwIUDDJGQnPKKMk_RqjJnM8.roa Signing time: Mon 01 Dec 2025 12:27:00 +0000 ROA not before: Mon 01 Dec 2025 12:27:00 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198837 IP address blocks: 2001:67c:728::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft rsync://rpki.ripe.net/repository/DEFAULT/GPijrw2MDVHeLd0mWtVNq5e95s4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:e1:6c:88:84:e0:6f:31:e2:cc:e2:29:74:f5:23:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18f8a3af0d8c0d51de2ddd265ad54dab97bde6ce Validity Not Before: Dec 1 12:27:00 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8eda014302140c32464273ca28c93f46a8c99ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b0:47:f6:5d:59:9f:7e:94:20:b4:26:ed:eb: b3:08:70:93:bc:a1:83:2a:cc:12:dc:50:23:67:87: ee:49:3a:2c:ab:19:e7:92:62:b6:1f:9d:20:f5:33: f6:66:42:b3:ba:6a:26:39:13:62:4d:6f:23:87:0a: e6:48:8c:8d:b4:a7:63:d2:d5:5f:54:58:7d:44:0b: 80:b1:2c:23:6b:bf:c3:35:ff:ab:64:80:66:90:34: c8:1b:d8:87:28:c3:91:8f:9f:8c:81:95:69:94:0d: 63:b0:72:83:89:b0:14:fc:a3:52:82:2e:dc:66:27: 20:4c:4d:1e:e5:3c:a2:ad:62:e0:9d:6e:26:77:bf: 10:cf:1b:ad:e5:90:50:f3:92:f2:0c:70:e4:51:40: c9:b3:3e:ba:9a:7a:ae:d9:a7:cf:6f:08:c2:5c:85: 4a:22:06:4c:3f:fa:ce:ef:c0:33:00:98:1c:15:ed: 16:aa:2a:ca:c5:c8:23:88:79:5b:05:0f:a3:32:98: 6c:71:29:e1:dc:18:8a:e8:19:a9:34:ea:eb:2a:7b: ae:2e:a7:13:98:f8:2a:99:94:7c:68:1f:91:46:31: 06:7e:0d:ee:38:be:4f:7b:a3:73:96:31:60:f8:e8: dc:a3:2c:fe:5e:5f:da:ef:10:1f:99:72:70:49:9a: 0d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:DA:01:43:02:14:0C:32:46:42:73:CA:28:C9:3F:46:A8:C9:9C:CF X509v3 Authority Key Identifier: keyid:18:F8:A3:AF:0D:8C:0D:51:DE:2D:DD:26:5A:D5:4D:AB:97:BD:E6:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPijrw2MDVHeLd0mWtVNq5e95s4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/jtoBQwIUDDJGQnPKKMk_RqjJnM8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:728::/48 Signature Algorithm: sha256WithRSAEncryption 5c:08:d3:03:cb:15:12:47:64:50:32:0a:0a:44:b3:43:f2:c1: f0:fa:1e:a1:22:15:79:8a:0c:ef:4e:26:25:b9:af:65:6f:0f: 18:a7:d0:2b:5e:9b:26:f8:ed:a9:12:07:38:76:75:b6:8f:c1: a0:a3:10:b4:3f:19:da:53:2d:67:f0:e3:fd:e9:8f:4c:61:5c: 63:a0:24:58:63:6e:35:c2:1b:c9:a2:8f:10:14:81:f6:3b:79: 89:1e:fd:21:62:8e:4b:1e:5d:88:c7:2d:77:1c:6d:76:47:8a: 37:cc:96:6b:98:1a:4f:a2:f1:03:be:eb:a7:06:fa:6f:cc:fb: 94:68:af:38:f9:4c:74:9b:0d:e5:3d:16:0c:9c:8d:8a:39:72: 27:20:b8:d9:61:2d:01:ca:a8:1f:63:58:21:56:86:e6:0b:8a: 0b:01:66:15:f0:b1:73:ed:1e:52:2c:1e:47:b6:fd:46:ca:17: 3e:ef:8d:b9:0f:0e:48:ed:db:fc:e4:f9:cc:02:fe:e1:59:38: e4:2a:ee:41:de:38:69:48:45:2c:7b:f9:d7:1a:5d:72:39:20: 4e:60:de:7b:b2:ae:97:a7:10:0a:6d:c1:4a:8f:09:45:f9:13: 52:40:8a:64:54:4e:1f:93:2d:4b:c5:25:d5:08:73:30:0e:6d: f2:35:9c:64 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZrZ4WyIhOBvMeLM4il09SPDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZjhhM2FmMGQ4YzBkNTFkZTJkZGQyNjVhZDU0ZGFiOTdi ZGU2Y2UwHhcNMjUxMjAxMTIyNzAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWRhMDE0MzAyMTQwYzMyNDY0MjczY2EyOGM5M2Y0NmE4Yzk5Y2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLBH9l1Zn36UILQm7euzCHCTvKGD KswS3FAjZ4fuSTosqxnnkmK2H50g9TP2ZkKzumomORNiTW8jhwrmSIyNtKdj0tVf VFh9RAuAsSwja7/DNf+rZIBmkDTIG9iHKMORj5+MgZVplA1jsHKDibAU/KNSgi7c ZicgTE0e5TyirWLgnW4md78Qzxut5ZBQ85LyDHDkUUDJsz66mnqu2afPbwjCXIVK IgZMP/rO78AzAJgcFe0WqirKxcgjiHlbBQ+jMphscSnh3BiK6BmpNOrrKnuuLqcT mPgqmZR8aB+RRjEGfg3uOL5Pe6NzljFg+Ojcoyz+Xl/a7xAfmXJwSZoNWwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFI7aAUMCFAwyRkJzyijJP0aoyZzPMB8GA1UdIwQY MBaAFBj4o68NjA1R3i3dJlrVTauXvebOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1BpanJ3Mk1EVkhlTGQwbVd0Vk5xNWU5NXM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9lNTMzMTMtZDU4Ny00OTJjLWFkMTgt NDc2MzdlYjFlYzQ5LzEvanRvQlF3SVVEREpHUW5QS0tNa19ScWpKbk04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9lNTMzMTMtZDU4Ny00OTJjLWFkMTgtNDc2MzdlYjFlYzQ5 LzEvR1BpanJ3Mk1EVkhlTGQwbVd0Vk5xNWU5NXM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAco MA0GCSqGSIb3DQEBCwUAA4IBAQBcCNMDyxUSR2RQMgoKRLND8sHw+h6hIhV5igzv TiYlua9lbw8Yp9ArXpsm+O2pEgc4dnW2j8GgoxC0PxnaUy1n8OP96Y9MYVxjoCRY Y241whvJoo8QFIH2O3mJHv0hYo5LHl2Ixy13HG12R4o3zJZrmBpPovEDvuunBvpv zPuUaK84+Ux0mw3lPRYMnI2KOXInILjZYS0ByqgfY1ghVobmC4oLAWYV8LFz7R5S LB5Htv1Gyhc+7425Dw5I7dv85PnMAv7hWTjkKu5B3jhpSEUse/nXGl1yOSBOYN57 sq6XpxAKbcFKjwlF+RNSQIpkVE4fky1LxSXVCHMwDm3yNZxk -----END CERTIFICATE-----Generated at Sat Dec 6 18:22:30 2025 by rpki-client