This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/k7JflfqXnMHelt6wfEleP-MOc70.roa File: k7JflfqXnMHelt6wfEleP-MOc70.roa (raw, json) Hash identifier: rjDtKCAd/y7DIDwn4KthMGn3kODXPkka7cFwUkDi28M= Subject key identifier: 93:B2:5F:95:FA:97:9C:C1:DE:96:DE:B0:7C:49:5E:3F:E3:0E:73:BD Certificate issuer: /CN=259490c5dbcfbf590da33bfbd37970a0763469c9 Certificate serial: 019B7C110DB7CBACE181B46E16C61589424F Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/k7JflfqXnMHelt6wfEleP-MOc70.roa Signing time: Fri 02 Jan 2026 00:17:31 +0000 ROA not before: Fri 02 Jan 2026 00:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213388 IP address blocks: 2a09:be41::/32 maxlen: 48 2a09:be42::/32 maxlen: 48 2a09:be43::/32 maxlen: 48 2a09:be44::/32 maxlen: 48 2a09:be45::/32 maxlen: 48 2a09:be46::/32 maxlen: 48 2a09:be47::/32 maxlen: 48 2a12:49c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:0d:b7:cb:ac:e1:81:b4:6e:16:c6:15:89:42:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9 Validity Not Before: Jan 2 00:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93b25f95fa979cc1de96deb07c495e3fe30e73bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3e:ff:50:32:e1:52:2d:05:89:51:84:fe:51: 56:dc:d0:8c:11:06:f0:b7:8b:e3:15:31:9d:25:03: 7d:6b:e1:83:c6:08:2c:12:df:fa:c0:7f:bf:66:4a: a5:35:ad:05:4a:1b:45:6e:68:50:13:84:8c:fa:24: cb:9c:32:eb:2b:85:86:79:a7:8d:41:26:2f:6d:92: 09:a1:94:44:84:1f:6c:bd:e6:13:65:e0:49:78:72: 0e:ed:ff:08:f0:53:e5:3a:e3:b4:a7:d7:49:78:0a: 01:38:b4:32:13:c4:d5:77:1e:87:1e:5d:31:4f:65: 5b:0e:75:6a:2c:0a:42:f5:4f:02:c9:bb:5b:70:a0: e8:c7:b3:92:83:ca:52:16:1a:5f:4d:8c:b8:4e:64: fe:5a:ed:7f:72:b1:e0:46:1c:8d:eb:d6:af:f6:f3: c2:b8:dd:5c:67:75:38:53:bb:ed:d8:ec:b0:5d:d3: c8:29:1a:08:92:a7:ce:1f:fe:86:c2:cc:60:a0:36: 92:06:74:1b:64:1e:3f:ec:d7:cc:cc:52:51:8b:df: 2b:85:95:0f:e9:f9:a8:5a:8b:4f:f0:4b:2e:76:ef: 71:3f:4c:56:d7:bd:ff:46:c4:6b:45:80:c3:4a:4f: 4b:0e:59:99:69:d7:dc:42:f7:1f:c2:8f:d6:2c:bc: da:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B2:5F:95:FA:97:9C:C1:DE:96:DE:B0:7C:49:5E:3F:E3:0E:73:BD X509v3 Authority Key Identifier: keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/k7JflfqXnMHelt6wfEleP-MOc70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:be41::-2a09:be47:ffff:ffff:ffff:ffff:ffff:ffff 2a12:49c0::/29 Signature Algorithm: sha256WithRSAEncryption ba:be:23:88:41:78:2b:a6:7d:5e:ce:87:af:d3:64:96:29:75: 0b:fe:17:19:e7:2b:ea:9b:2f:5f:a0:76:d8:a8:bc:b9:ca:ac: 5b:40:90:27:41:f2:a5:d3:a6:16:84:5c:16:a3:77:cd:84:45: 38:e9:83:e6:f7:08:8c:0a:3f:7a:ec:4a:5c:4e:83:b3:e0:e4: 1d:af:ce:7b:b4:cc:21:0e:47:fb:f2:de:b6:6c:ce:fc:7c:4b: 5d:c3:19:62:af:28:36:57:32:93:70:0c:05:0e:d6:4a:8a:bb: 9f:69:d1:87:d4:61:4e:a2:4f:f2:5b:31:8e:9f:e1:f2:ff:23: 1e:e1:55:f5:a8:a6:b8:97:f1:ba:1a:09:c1:c6:fa:f9:45:25: 65:19:fa:7a:8f:73:9e:f6:f0:cb:0c:96:c6:44:db:47:17:25: e2:84:ba:7d:4d:56:d8:bc:aa:41:0c:cc:d0:5b:39:2a:7d:fa: 65:bd:41:31:ad:33:65:a6:57:6f:de:b8:03:12:bf:37:b5:5c: 78:b5:ac:97:24:14:c1:6a:cf:80:29:86:d4:04:f0:83:b0:29: 26:36:0c:b2:2b:4a:8d:cc:93:9b:ed:4e:53:73:44:9d:dd:e2: 48:be:99:18:23:e8:8b:50:54:3f:3c:9b:1a:4a:8b:4b:d5:f8: 99:ea:71:15 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8EQ23y6zhgbRuFsYViUJPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1OTQ5MGM1ZGJjZmJmNTkwZGEzM2JmYmQzNzk3MGEwNzYz NDY5YzkwHhcNMjYwMTAyMDAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2IyNWY5NWZhOTc5Y2MxZGU5NmRlYjA3YzQ5NWUzZmUzMGU3M2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwj7/UDLhUi0FiVGE/lFW3NCMEQbw t4vjFTGdJQN9a+GDxggsEt/6wH+/ZkqlNa0FShtFbmhQE4SM+iTLnDLrK4WGeaeN QSYvbZIJoZREhB9sveYTZeBJeHIO7f8I8FPlOuO0p9dJeAoBOLQyE8TVdx6HHl0x T2VbDnVqLApC9U8CybtbcKDox7OSg8pSFhpfTYy4TmT+Wu1/crHgRhyN69av9vPC uN1cZ3U4U7vt2OywXdPIKRoIkqfOH/6GwsxgoDaSBnQbZB4/7NfMzFJRi98rhZUP 6fmoWotP8Esudu9xP0xW173/RsRrRYDDSk9LDlmZadfcQvcfwo/WLLzaFwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJOyX5X6l5zB3pbesHxJXj/jDnO9MB8GA1UdIwQY MBaAFCWUkMXbz79ZDaM7+9N5cKB2NGnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlpTUXhkdlB2MWtOb3p2NzAzbHdvSFkwYWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9lZGFkMmQtOTVjYy00OWQwLTg2ZjQt M2NlM2NmOGIxYzQ5LzEvazdKZmxmcVhuTUhlbHQ2d2ZFbGVQLU1PYzcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9lZGFkMmQtOTVjYy00OWQwLTg2ZjQtM2NlM2NmOGIxYzQ5 LzEvSlpTUXhkdlB2MWtOb3p2NzAzbHdvSFkwYWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIAAjAXMA4DBQAqCb5B AwUDKgm+QAMFAyoSScAwDQYJKoZIhvcNAQELBQADggEBALq+I4hBeCumfV7Oh6/T ZJYpdQv+FxnnK+qbL1+gdtiovLnKrFtAkCdB8qXTphaEXBajd82ERTjpg+b3CIwK P3rsSlxOg7Pg5B2vznu0zCEOR/vy3rZszvx8S13DGWKvKDZXMpNwDAUO1kqKu59p 0YfUYU6iT/JbMY6f4fL/Ix7hVfWopriX8boaCcHG+vlFJWUZ+nqPc5728MsMlsZE 20cXJeKEun1NVti8qkEMzNBbOSp9+mW9QTGtM2WmV2/euAMSvze1XHi1rJckFMFq z4AphtQE8IOwKSY2DLIrSo3Mk5vtTlNzRJ3d4ki+mRgj6ItQVD88mxpKi0vV+Jnq cRU= -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:13 2026 by rpki-client