This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/JqRZJ3yZS2NGw3E4q9F77DlBVPU.roa File: JqRZJ3yZS2NGw3E4q9F77DlBVPU.roa (raw, json) Hash identifier: UPvHDY+QZmptAo1aMBQZCt3JHBBqlqPm63jjsEBEq9k= Subject key identifier: 26:A4:59:27:7C:99:4B:63:46:C3:71:38:AB:D1:7B:EC:39:41:54:F5 Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b Certificate serial: 019B79ED456EC4D815915A64206C9ABD15B0 Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/JqRZJ3yZS2NGw3E4q9F77DlBVPU.roa Signing time: Thu 01 Jan 2026 14:19:11 +0000 ROA not before: Thu 01 Jan 2026 14:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208483 IP address blocks: 2a14:4b80::/32 maxlen: 32 2a14:4b81::/32 maxlen: 32 2a14:4b82::/32 maxlen: 32 2a14:4b83::/32 maxlen: 32 2a14:4b84::/32 maxlen: 32 2a14:4b85::/32 maxlen: 32 2a14:4b86::/32 maxlen: 32 2a14:4b87::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:45:6e:c4:d8:15:91:5a:64:20:6c:9a:bd:15:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b Validity Not Before: Jan 1 14:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26a459277c994b6346c37138abd17bec394154f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0c:dd:7e:08:43:b7:46:82:40:56:0e:e0:08: 3b:f4:44:7b:bc:93:d4:15:60:a1:8e:e7:da:84:6e: d4:69:78:f0:c2:bd:ca:05:55:07:e5:b5:b2:64:2b: 7d:74:76:25:8a:e6:09:80:a0:2d:33:ee:1f:85:5b: 96:fa:6e:4e:cc:92:e8:92:a4:e6:61:cc:d3:b9:3c: e0:e8:a0:67:16:25:49:b6:73:11:ae:a9:ea:3b:bd: 55:f4:f3:d1:0c:70:b4:d9:88:f2:37:f4:10:b5:93: e5:7a:29:c4:f4:bc:15:0e:04:eb:7a:4d:5d:23:1f: e5:2a:8f:f8:28:06:75:9c:2b:0c:c4:b1:1e:ad:da: 45:89:84:0f:d9:27:4a:88:75:e5:c9:c7:a0:98:00: e6:98:6b:e3:e8:3e:90:7a:b2:6c:c3:fe:d8:df:bf: 5d:66:85:e0:8b:19:8a:d5:e8:92:9e:5f:2e:79:10: 6c:4b:66:4e:6c:a9:94:ea:82:50:73:21:74:e7:01: 6f:72:c0:b8:54:be:6e:f5:4b:90:94:5e:3b:9d:a8: 2a:e1:d2:cd:ef:ad:3e:b2:cd:22:a7:d8:7c:e2:cc: 08:6b:c6:33:92:d2:63:0f:74:dd:d2:59:76:9d:f0: 29:1b:f5:b1:b2:7e:a5:65:f3:70:81:39:16:be:da: e3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A4:59:27:7C:99:4B:63:46:C3:71:38:AB:D1:7B:EC:39:41:54:F5 X509v3 Authority Key Identifier: keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/JqRZJ3yZS2NGw3E4q9F77DlBVPU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:4b80::/29 Signature Algorithm: sha256WithRSAEncryption 9e:f4:43:28:19:a8:89:33:6a:8b:1b:27:2e:00:e0:f5:ff:f0: 49:8a:92:06:cd:de:ba:e1:b3:29:bf:c6:e0:4c:e3:f4:d4:87: 01:9d:1e:22:b4:5b:1d:73:6f:f8:d1:87:77:6a:f2:6d:9f:87: 3c:de:5c:bf:94:0d:a0:57:7e:73:84:22:69:7d:16:31:37:9b: b9:b5:e1:72:89:e8:a6:bb:04:55:b9:36:96:55:70:19:ab:37: 81:ae:52:30:3b:fb:b1:6c:05:2c:ad:e8:0f:9d:27:69:db:99: 79:ea:f1:61:8e:fc:17:1e:db:4b:36:ac:6f:5c:42:c0:71:dd: a1:3a:71:2f:bb:59:0f:f7:69:a2:07:9c:45:9c:f8:dd:0f:6d: fe:49:96:28:96:c0:82:62:bf:62:c1:d4:e1:6f:dc:f1:99:a2: f5:74:78:e5:2b:a9:bb:66:27:9d:97:87:ef:c2:eb:3f:76:27: 2d:ba:36:cd:cf:09:fb:81:70:45:a8:df:7e:f1:07:3c:fe:2e: 25:b6:e3:8e:3e:21:0c:40:14:da:1e:c6:b2:92:cc:b2:bb:04: 09:8b:bd:8c:b7:7d:7e:46:e3:22:17:9e:31:20:0a:68:5b:62: 8e:da:16:da:ec:b2:54:67:e1:bc:18:bf:ff:2b:2b:30:19:14: 78:a9:df:fa -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt57UVuxNgVkVpkIGyavRWwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz ZWRmNGIwHhcNMjYwMTAxMTQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmE0NTkyNzdjOTk0YjYzNDZjMzcxMzhhYmQxN2JlYzM5NDE1NGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgzdfghDt0aCQFYO4Ag79ER7vJPU FWChjufahG7UaXjwwr3KBVUH5bWyZCt9dHYliuYJgKAtM+4fhVuW+m5OzJLokqTm YczTuTzg6KBnFiVJtnMRrqnqO71V9PPRDHC02YjyN/QQtZPleinE9LwVDgTrek1d Ix/lKo/4KAZ1nCsMxLEerdpFiYQP2SdKiHXlycegmADmmGvj6D6QerJsw/7Y379d ZoXgixmK1eiSnl8ueRBsS2ZObKmU6oJQcyF05wFvcsC4VL5u9UuQlF47nagq4dLN 760+ss0ip9h84swIa8YzktJjD3Td0ll2nfApG/Wxsn6lZfNwgTkWvtrjLwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFCakWSd8mUtjRsNxOKvRe+w5QVT1MB8GA1UdIwQY MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt OTQ0OTk1N2ZkNWE1LzEvSnFSWkozeVpTMk5HdzNFNHE5Rjc3RGxCVlBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1 LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhRLgDAN BgkqhkiG9w0BAQsFAAOCAQEAnvRDKBmoiTNqixsnLgDg9f/wSYqSBs3euuGzKb/G 4Ezj9NSHAZ0eIrRbHXNv+NGHd2rybZ+HPN5cv5QNoFd+c4QiaX0WMTebubXhcono prsEVbk2llVwGas3ga5SMDv7sWwFLK3oD50naduZeerxYY78Fx7bSzasb1xCwHHd oTpxL7tZD/dpogecRZz43Q9t/kmWKJbAgmK/YsHU4W/c8Zmi9XR45Supu2YnnZeH 78LrP3YnLbo2zc8J+4FwRajffvEHPP4uJbbjjj4hDEAU2h7GspLMsrsECYu9jLd9 fkbjIheeMSAKaFtijtoW2uyyVGfhvBi//ysrMBkUeKnf+g== -----END CERTIFICATE-----Generated at Sun Jan 25 15:47:34 2026 by rpki-client