This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/J2qzFsI09RGWX0TQW_Ik7AKbbQM.roa File: J2qzFsI09RGWX0TQW_Ik7AKbbQM.roa (raw, json) Hash identifier: lUuNT1eBBa+JpXs3fEVcImBW6pOF6M9gLS5SJiJaWOc= Subject key identifier: 27:6A:B3:16:C2:34:F5:11:96:5F:44:D0:5B:F2:24:EC:02:9B:6D:03 Certificate issuer: /CN=ea0f5b221f6af32098f3064d68251b617892ac92 Certificate serial: 019B7F83C10A29F688F443FE72EFFBE771E7 Authority key identifier: EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/J2qzFsI09RGWX0TQW_Ik7AKbbQM.roa Signing time: Fri 02 Jan 2026 16:21:39 +0000 ROA not before: Fri 02 Jan 2026 16:21:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6848 IP address blocks: 2a03:1e84:9bf::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:c1:0a:29:f6:88:f4:43:fe:72:ef:fb:e7:71:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea0f5b221f6af32098f3064d68251b617892ac92 Validity Not Before: Jan 2 16:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=276ab316c234f511965f44d05bf224ec029b6d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4d:96:51:4b:1d:ff:53:19:a9:b1:1a:99:9a: e8:d4:82:55:9e:92:e8:5e:ff:35:87:04:83:b6:69: 4f:d8:84:a4:89:21:9e:01:15:80:9f:cd:dc:67:cd: b3:fe:c5:6e:59:7f:83:53:c7:50:52:b7:2e:55:4a: e9:7d:fb:90:63:bb:49:c1:6b:ff:3c:ce:0d:9e:1f: 48:c8:cc:9e:c0:c9:49:ed:66:db:cd:01:a8:09:93: 81:bc:f3:9d:96:1d:cc:28:32:92:ba:71:c2:99:98: 7a:aa:51:2f:6e:4a:48:cb:4e:f0:85:5d:49:2a:72: 31:ca:74:46:39:cf:22:d4:96:88:a1:1a:16:57:52: a0:4c:f9:b3:e9:35:4e:27:aa:9f:6e:d7:fb:e1:0c: 76:0d:e6:2b:b5:dd:cb:10:44:23:0a:44:1b:82:09: 9b:ac:0e:a9:c5:16:68:06:81:3b:7c:92:c2:13:26: a6:4b:91:67:bc:bd:34:28:f0:af:92:da:e0:01:ac: 03:98:f7:ca:ca:0e:39:1f:61:89:28:85:d5:1b:30: 16:70:8b:e2:ff:84:8c:17:77:b8:7d:69:1c:94:db: 24:1f:0b:3a:78:0f:75:60:46:2c:c1:44:60:50:7a: a3:c9:7c:32:73:e1:84:01:39:2d:10:15:f3:f1:d0: 34:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:6A:B3:16:C2:34:F5:11:96:5F:44:D0:5B:F2:24:EC:02:9B:6D:03 X509v3 Authority Key Identifier: keyid:EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/J2qzFsI09RGWX0TQW_Ik7AKbbQM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:1e84:9bf::/48 Signature Algorithm: sha256WithRSAEncryption 65:57:a8:07:e2:aa:07:b5:05:96:6f:e2:01:86:ed:bb:81:f4: f1:cf:a3:a5:ee:2c:cf:72:af:94:3c:b9:76:41:49:2b:3e:19: 8f:58:3a:dc:a8:40:32:b2:45:c2:e8:9a:41:1d:b0:58:50:f2: fa:11:e8:a4:6d:5a:55:20:dd:1e:21:51:d3:b0:58:1c:ba:45: 7d:67:0a:ce:77:f4:15:7a:9d:d7:5f:57:58:4b:75:4b:41:36: de:68:20:37:49:4d:bb:d1:07:43:c8:ba:90:71:e5:32:91:6b: 6d:5c:dd:37:6f:7e:17:b1:45:b0:43:7d:0b:3d:d2:7b:5d:f7: 74:eb:5c:52:b1:2c:29:04:a3:3c:70:2c:38:ea:1e:11:dc:4f: 67:42:69:7c:a2:82:74:98:51:dd:f1:a2:a1:09:88:c3:96:ef: c9:43:6b:5c:38:9a:56:03:52:66:20:6f:bc:4c:56:fc:4c:62: 65:f1:cd:e9:0c:d6:85:e5:c4:99:06:db:53:4c:97:f4:dd:42: 7c:8e:a8:81:c5:e8:fd:d8:5b:ab:7c:51:61:74:ee:16:2b:a8: 5d:d2:f2:80:9c:0b:85:77:47:48:9e:74:30:86:a4:38:62:a7: 36:8f:d9:e2:ee:88:9e:e7:a3:1b:ae:d9:42:eb:08:c7:4c:7a: 56:e7:eb:51 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/g8EKKfaI9EP+cu/753HnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMGY1YjIyMWY2YWYzMjA5OGYzMDY0ZDY4MjUxYjYxNzg5 MmFjOTIwHhcNMjYwMTAyMTYyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzZhYjMxNmMyMzRmNTExOTY1ZjQ0ZDA1YmYyMjRlYzAyOWI2ZDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE2WUUsd/1MZqbEamZro1IJVnpLo Xv81hwSDtmlP2ISkiSGeARWAn83cZ82z/sVuWX+DU8dQUrcuVUrpffuQY7tJwWv/ PM4Nnh9IyMyewMlJ7WbbzQGoCZOBvPOdlh3MKDKSunHCmZh6qlEvbkpIy07whV1J KnIxynRGOc8i1JaIoRoWV1KgTPmz6TVOJ6qfbtf74Qx2DeYrtd3LEEQjCkQbggmb rA6pxRZoBoE7fJLCEyamS5FnvL00KPCvktrgAawDmPfKyg45H2GJKIXVGzAWcIvi /4SMF3e4fWkclNskHws6eA91YEYswURgUHqjyXwyc+GEATktEBXz8dA0oQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCdqsxbCNPURll9E0FvyJOwCm20DMB8GA1UdIwQY MBaAFOoPWyIfavMgmPMGTWglG2F4kqySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmc5YkloOXE4eUNZOHdaTmFDVWJZWGlTckpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lODUzYWItZjQ3MC00OTI4LWJjNjgt NTdlOTBjNTZhMGUyLzEvSjJxekZzSTA5UkdXWDBUUVdfSWs3QUtiYlFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9lODUzYWItZjQ3MC00OTI4LWJjNjgtNTdlOTBjNTZhMGUy LzEvNmc5YkloOXE4eUNZOHdaTmFDVWJZWGlTckpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgMehAm/ MA0GCSqGSIb3DQEBCwUAA4IBAQBlV6gH4qoHtQWWb+IBhu27gfTxz6Ol7izPcq+U PLl2QUkrPhmPWDrcqEAyskXC6JpBHbBYUPL6EeikbVpVIN0eIVHTsFgcukV9ZwrO d/QVep3XX1dYS3VLQTbeaCA3SU270QdDyLqQceUykWttXN03b34XsUWwQ30LPdJ7 Xfd061xSsSwpBKM8cCw46h4R3E9nQml8ooJ0mFHd8aKhCYjDlu/JQ2tcOJpWA1Jm IG+8TFb8TGJl8c3pDNaF5cSZBttTTJf03UJ8jqiBxej92FurfFFhdO4WK6hd0vKA nAuFd0dInnQwhqQ4Yqc2j9ni7oie56MbrtlC6wjHTHpW5+tR -----END CERTIFICATE-----Generated at Sun Jan 25 20:58:59 2026 by rpki-client