This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/39jtKCjlUN84oiSNf6WcfKXutcI.roa File: 39jtKCjlUN84oiSNf6WcfKXutcI.roa (raw, json) Hash identifier: j3QkvAZ9jfUhKAEv42rUncts5G9mchS++JOlncvf+58= Subject key identifier: DF:D8:ED:28:28:E5:50:DF:38:A2:24:8D:7F:A5:9C:7C:A5:EE:B5:C2 Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1 Certificate serial: 019B7C12416A91DFB8FF067F3299403852E8 Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/39jtKCjlUN84oiSNf6WcfKXutcI.roa Signing time: Fri 02 Jan 2026 00:18:49 +0000 ROA not before: Fri 02 Jan 2026 00:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211368 IP address blocks: 2a10:f2c0:400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:41:6a:91:df:b8:ff:06:7f:32:99:40:38:52:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1 Validity Not Before: Jan 2 00:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfd8ed2828e550df38a2248d7fa59c7ca5eeb5c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:43:be:9d:eb:14:26:a0:ad:16:fe:26:df:7c: 24:a8:dc:58:bc:7e:68:10:f1:94:56:ec:36:3a:b0: 85:21:7f:46:4e:5b:98:d8:f4:5a:5b:b3:7a:95:7b: e1:86:2e:5c:b6:50:69:8f:df:1b:98:e0:ec:1a:9e: 26:59:8b:62:40:80:db:8f:61:0b:8f:b0:ae:a1:ea: 55:b3:05:39:49:77:9f:f2:7b:75:27:ea:1d:86:9a: 66:6f:a2:08:2c:df:cc:c3:b6:54:0b:58:c1:ae:8f: 2d:e9:05:c9:bc:3e:14:8f:41:23:c9:78:7e:84:99: e8:13:44:e4:41:a0:87:33:f5:fb:f0:0e:ea:51:eb: 2e:5b:f5:f4:65:5b:d7:1e:78:d1:b2:85:18:5b:2c: 3d:2f:aa:74:fb:0a:38:c4:15:e5:da:6e:46:4e:18: 4c:09:df:50:b5:96:74:e5:79:01:d4:49:b7:1d:eb: 6a:fd:d9:2e:f0:9c:18:bc:aa:f9:ec:95:4c:95:3a: aa:ce:75:8b:c1:71:0c:64:2f:4e:e8:16:2f:07:d7: b9:4c:bd:2b:fe:74:a4:36:d4:48:1d:3c:74:b8:13: ed:1d:a3:b3:79:e4:13:2e:d1:90:d8:3e:b8:1c:09: ce:a0:a2:ed:24:ad:24:a9:46:73:7f:2d:b7:bc:6d: 3d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D8:ED:28:28:E5:50:DF:38:A2:24:8D:7F:A5:9C:7C:A5:EE:B5:C2 X509v3 Authority Key Identifier: keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/39jtKCjlUN84oiSNf6WcfKXutcI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:f2c0:400::/48 Signature Algorithm: sha256WithRSAEncryption 85:65:64:26:98:62:3b:e8:1d:31:68:84:de:58:bb:63:8d:f7: bf:ff:6a:8b:f3:ba:87:47:03:ff:b9:66:7e:75:9f:23:7e:bb: 53:42:35:73:22:f5:d7:d0:1a:37:fd:e0:41:09:7c:f2:80:a1: df:06:5c:06:d7:fe:c7:4e:55:57:18:43:98:74:8b:39:8f:03: 14:03:e8:0f:48:af:70:96:32:73:22:66:a6:c0:ad:35:ad:0e: cd:0b:ed:87:4f:56:2a:47:20:05:8e:36:e8:4d:3c:22:92:cc: d9:cb:c1:dd:03:0e:98:71:03:3c:aa:52:c3:11:22:13:dd:c6: f3:2c:f5:3c:b5:d1:c6:88:52:81:5d:4a:89:29:05:e4:d9:43: 7e:84:4d:f6:d9:da:87:3b:06:ac:a8:c8:63:34:bf:39:30:7c: fb:b8:17:fb:7e:02:98:14:dc:85:71:09:d1:80:26:0c:64:d5: b2:ed:75:16:32:e7:98:5f:8d:f3:be:c5:14:70:72:7d:c2:19: a9:ee:37:56:0a:08:12:79:a4:90:bb:01:2c:54:d6:ec:6c:12: 30:39:46:3c:44:f4:85:2a:65:07:04:6c:ca:08:6d:2e:e2:bc: 91:66:1d:73:62:d9:8f:09:77:b4:56:16:5a:19:90:c3:cd:17: 69:5f:b4:ac -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8EkFqkd+4/wZ/MplAOFLoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxZGYyNDVlYWQ5OTgwZDJiMzk1MzM3ODJmNjVkNzU2NmQw NDYyZDEwHhcNMjYwMTAyMDAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmQ4ZWQyODI4ZTU1MGRmMzhhMjI0OGQ3ZmE1OWM3Y2E1ZWViNWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0O+nesUJqCtFv4m33wkqNxYvH5o EPGUVuw2OrCFIX9GTluY2PRaW7N6lXvhhi5ctlBpj98bmODsGp4mWYtiQIDbj2EL j7CuoepVswU5SXef8nt1J+odhppmb6IILN/Mw7ZUC1jBro8t6QXJvD4Uj0EjyXh+ hJnoE0TkQaCHM/X78A7qUesuW/X0ZVvXHnjRsoUYWyw9L6p0+wo4xBXl2m5GThhM Cd9QtZZ05XkB1Em3Hetq/dku8JwYvKr57JVMlTqqznWLwXEMZC9O6BYvB9e5TL0r /nSkNtRIHTx0uBPtHaOzeeQTLtGQ2D64HAnOoKLtJK0kqUZzfy23vG09FQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFN/Y7Sgo5VDfOKIkjX+lnHyl7rXCMB8GA1UdIwQY MBaAFCHfJF6tmYDSs5UzeC9l11ZtBGLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWQ4a1hxMlpnTkt6bFRONEwyWFhWbTBFWXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kZjdkNmEtNDU5Mi00MDBiLWFkZTQt MGVjNTIzNWQ0ZTlmLzEvMzlqdEtDamxVTjg0b2lTTmY2V2NmS1h1dGNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9kZjdkNmEtNDU5Mi00MDBiLWFkZTQtMGVjNTIzNWQ0ZTlm LzEvSWQ4a1hxMlpnTkt6bFRONEwyWFhWbTBFWXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhDywAQA MA0GCSqGSIb3DQEBCwUAA4IBAQCFZWQmmGI76B0xaITeWLtjjfe//2qL87qHRwP/ uWZ+dZ8jfrtTQjVzIvXX0Bo3/eBBCXzygKHfBlwG1/7HTlVXGEOYdIs5jwMUA+gP SK9wljJzImamwK01rQ7NC+2HT1YqRyAFjjboTTwikszZy8HdAw6YcQM8qlLDESIT 3cbzLPU8tdHGiFKBXUqJKQXk2UN+hE322dqHOwasqMhjNL85MHz7uBf7fgKYFNyF cQnRgCYMZNWy7XUWMueYX43zvsUUcHJ9whmp7jdWCggSeaSQuwEsVNbsbBIwOUY8 RPSFKmUHBGzKCG0u4ryRZh1zYtmPCXe0VhZaGZDDzRdpX7Ss -----END CERTIFICATE-----Generated at Sun Jan 25 13:31:19 2026 by rpki-client