This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/jlDm7AWLzaDS7FNqHfCVC-kO2b8.roa File: jlDm7AWLzaDS7FNqHfCVC-kO2b8.roa (raw, json) Hash identifier: Bwg2qZ0lRcowiJH1CacvQ5fimlEE7SEP99yQulXBGlk= Subject key identifier: 8E:50:E6:EC:05:8B:CD:A0:D2:EC:53:6A:1D:F0:95:0B:E9:0E:D9:BF Certificate issuer: /CN=58ff89023b87c0bf8479b9ff4725258613e4f0b5 Certificate serial: 019B7A5AA39A8CDA4A797EC1779DD143BE8C Authority key identifier: 58:FF:89:02:3B:87:C0:BF:84:79:B9:FF:47:25:25:86:13:E4:F0:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WP-JAjuHwL-Eebn_RyUlhhPk8LU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/jlDm7AWLzaDS7FNqHfCVC-kO2b8.roa Signing time: Thu 01 Jan 2026 16:18:39 +0000 ROA not before: Thu 01 Jan 2026 16:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213200 IP address blocks: 2a07:4b40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/WP-JAjuHwL-Eebn_RyUlhhPk8LU.crl rsync://rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/WP-JAjuHwL-Eebn_RyUlhhPk8LU.mft rsync://rpki.ripe.net/repository/DEFAULT/WP-JAjuHwL-Eebn_RyUlhhPk8LU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a3:9a:8c:da:4a:79:7e:c1:77:9d:d1:43:be:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ff89023b87c0bf8479b9ff4725258613e4f0b5 Validity Not Before: Jan 1 16:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e50e6ec058bcda0d2ec536a1df0950be90ed9bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:64:41:5b:21:68:09:54:50:4d:1f:00:33:bf: 1f:c9:15:ee:50:9a:76:06:ef:03:de:ca:ee:d8:60: 8d:28:9b:e9:ca:a9:c6:12:20:63:6d:50:6c:f5:c1: 5d:b8:de:34:f8:70:2a:a0:41:03:d3:70:08:86:cb: 14:c9:42:fc:89:97:5b:f7:f3:f1:4c:44:cf:72:d5: 11:ce:58:29:ab:ea:2d:a8:e4:cb:82:f4:05:89:ec: f3:41:e5:99:d9:e5:b2:85:3a:4d:39:a6:55:59:0b: 3d:11:0c:52:db:58:a6:bc:90:a4:dd:b3:5f:7d:9c: a7:43:8d:47:53:fa:7d:5a:43:fb:db:2c:73:d3:a9: 5d:ed:ba:d7:2a:b7:bf:fe:7b:55:55:2d:87:9a:76: 95:c1:89:ee:30:38:e8:35:72:04:32:c9:8e:93:b4: 12:aa:cc:1a:9c:7c:4e:cd:d8:00:c7:f3:a1:94:9a: f2:97:06:77:88:2b:bb:02:da:34:40:b0:a5:8f:73: f5:38:2f:fd:55:04:bf:27:2d:22:82:3b:9e:2a:71: c2:3d:3e:54:4b:52:07:bd:be:f3:60:80:33:49:51: 1e:26:81:10:b0:41:00:a1:44:9f:64:7b:b9:ad:62: 1f:29:43:4b:29:ce:1f:fb:c5:d6:10:8c:65:75:b8: 7d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:50:E6:EC:05:8B:CD:A0:D2:EC:53:6A:1D:F0:95:0B:E9:0E:D9:BF X509v3 Authority Key Identifier: keyid:58:FF:89:02:3B:87:C0:BF:84:79:B9:FF:47:25:25:86:13:E4:F0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WP-JAjuHwL-Eebn_RyUlhhPk8LU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/jlDm7AWLzaDS7FNqHfCVC-kO2b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/WP-JAjuHwL-Eebn_RyUlhhPk8LU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:4b40::/29 Signature Algorithm: sha256WithRSAEncryption bb:76:65:d8:12:0f:3b:9d:85:b7:e7:56:49:51:09:ad:b4:90: 3c:dc:63:13:a5:e2:1d:d0:a6:91:2f:d6:36:b5:e0:23:cb:36: 88:01:d3:c2:33:2e:3e:99:b2:ae:c6:bf:5e:8f:58:0f:b3:1a: 04:91:43:5c:db:f5:9b:e7:a4:c8:e4:e6:b9:64:bf:a4:06:f8: e3:65:6d:5b:8e:e1:0c:7f:99:91:db:c7:5e:e0:a0:e8:46:a6: 89:94:78:32:06:d8:95:00:ac:9d:a5:75:34:70:a6:89:2a:36: ae:2b:ad:69:d4:66:07:28:f1:62:11:5d:62:ee:33:eb:46:80: a7:f0:ca:db:b9:ca:ef:74:b5:89:62:09:a5:2c:39:d9:08:35: 37:9e:4e:d1:21:f0:9f:4b:1b:bc:67:92:67:52:a4:24:61:a0: 7c:cf:c9:df:fe:c7:91:94:19:42:c1:cb:b4:4d:78:8b:2d:0e: c6:da:f6:ed:47:79:9f:1e:a2:9d:98:4d:59:08:46:2d:b8:63: 6e:77:62:1f:84:35:4d:49:42:ef:f4:67:ec:e1:a7:76:40:7f: 7b:aa:ff:3c:dc:bb:ae:d0:78:ad:2b:08:a7:f9:2f:72:64:7d: 94:7c:df:97:c5:e2:6f:e5:4f:9c:f1:c0:be:7d:ee:28:26:1b: eb:0f:a6:3b -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6WqOajNpKeX7Bd53RQ76MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZmY4OTAyM2I4N2MwYmY4NDc5YjlmZjQ3MjUyNTg2MTNl NGYwYjUwHhcNMjYwMTAxMTYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTUwZTZlYzA1OGJjZGEwZDJlYzUzNmExZGYwOTUwYmU5MGVkOWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWRBWyFoCVRQTR8AM78fyRXuUJp2 Bu8D3sru2GCNKJvpyqnGEiBjbVBs9cFduN40+HAqoEED03AIhssUyUL8iZdb9/Px TETPctURzlgpq+otqOTLgvQFiezzQeWZ2eWyhTpNOaZVWQs9EQxS21imvJCk3bNf fZynQ41HU/p9WkP72yxz06ld7brXKre//ntVVS2HmnaVwYnuMDjoNXIEMsmOk7QS qswanHxOzdgAx/OhlJrylwZ3iCu7Ato0QLClj3P1OC/9VQS/Jy0igjueKnHCPT5U S1IHvb7zYIAzSVEeJoEQsEEAoUSfZHu5rWIfKUNLKc4f+8XWEIxldbh9JQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFI5Q5uwFi82g0uxTah3wlQvpDtm/MB8GA1UdIwQY MBaAFFj/iQI7h8C/hHm5/0clJYYT5PC1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1AtSkFqdUh3TC1FZWJuX1J5VWxoaFBrOExVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iZWJiNmYtOTQ3YS00ZWFjLTg1YjEt MzYzMTNjNTMyZDA0LzEvamxEbTdBV0x6YURTN0ZOcUhmQ1ZDLWtPMmI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9iZWJiNmYtOTQ3YS00ZWFjLTg1YjEtMzYzMTNjNTMyZDA0 LzEvV1AtSkFqdUh3TC1FZWJuX1J5VWxoaFBrOExVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgdLQDAN BgkqhkiG9w0BAQsFAAOCAQEAu3Zl2BIPO52Ft+dWSVEJrbSQPNxjE6XiHdCmkS/W NrXgI8s2iAHTwjMuPpmyrsa/Xo9YD7MaBJFDXNv1m+ekyOTmuWS/pAb442VtW47h DH+ZkdvHXuCg6EamiZR4MgbYlQCsnaV1NHCmiSo2riutadRmByjxYhFdYu4z60aA p/DK27nK73S1iWIJpSw52Qg1N55O0SHwn0sbvGeSZ1KkJGGgfM/J3/7HkZQZQsHL tE14iy0Oxtr27Ud5nx6inZhNWQhGLbhjbndiH4Q1TUlC7/Rn7OGndkB/e6r/PNy7 rtB4rSsIp/kvcmR9lHzfl8Xib+VPnPHAvn3uKCYb6w+mOw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:49:58 2026 by rpki-client