This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/JpNz-5mJsFq7butKO_csWbCEm5Q.roa File: JpNz-5mJsFq7butKO_csWbCEm5Q.roa (raw, json) Hash identifier: VpAczQvbgQ1Ym4VsrRQcCrHDbx+vYYfxzFiOJ1msYps= Subject key identifier: 26:93:73:FB:99:89:B0:5A:BB:6E:EB:4A:3B:F7:2C:59:B0:84:9B:94 Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601 Certificate serial: 019B797EA998FD4A151D99A7F3F9A9689EB7 Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/JpNz-5mJsFq7butKO_csWbCEm5Q.roa Signing time: Thu 01 Jan 2026 12:18:22 +0000 ROA not before: Thu 01 Jan 2026 12:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202573 IP address blocks: 2a13:1c47:f800::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a9:98:fd:4a:15:1d:99:a7:f3:f9:a9:68:9e:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601 Validity Not Before: Jan 1 12:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=269373fb9989b05abb6eeb4a3bf72c59b0849b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:04:45:66:4c:02:29:40:bf:77:3c:33:0f:1f: 96:7c:83:47:52:0a:0b:e8:70:80:bd:7a:36:b0:45: 6c:6d:9e:5b:c1:33:95:cc:87:69:92:84:77:a4:88: fb:b3:eb:c4:62:a7:63:99:46:c3:0c:6b:26:ad:93: 8f:9e:07:86:c4:02:c3:be:f9:78:a2:1e:83:db:a7: 8a:03:fd:8d:a1:1c:58:6d:19:de:08:51:e8:76:d5: b5:2d:81:83:48:0b:6d:51:c4:1c:80:99:03:85:77: e7:25:f2:70:86:fc:d5:b8:e2:0d:6d:66:a8:fe:58: d9:39:01:39:27:af:d2:d6:25:e3:d3:26:f8:49:cc: af:0b:c8:50:f5:f5:01:7c:f9:48:b6:ef:58:a9:40: c7:38:e4:11:55:f2:d3:76:9d:9a:ad:c5:b7:08:71: 44:a1:65:cf:71:65:e2:23:cc:dc:01:27:f3:d5:71: d9:33:cf:17:03:42:4f:e3:f7:c1:04:ae:43:14:a7: f8:88:a3:bd:24:a2:e6:b0:d4:de:41:e3:26:9b:36: fc:18:b5:6f:10:e5:03:df:a5:25:75:0b:e1:bc:1b: 6d:e6:84:0c:6f:4f:11:bc:ff:4f:a4:0f:9b:2d:1d: 60:98:9f:6c:af:b1:c9:5d:3b:4f:6a:ec:b6:1f:bc: 94:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:93:73:FB:99:89:B0:5A:BB:6E:EB:4A:3B:F7:2C:59:B0:84:9B:94 X509v3 Authority Key Identifier: keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/JpNz-5mJsFq7butKO_csWbCEm5Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:1c47:f800::/44 Signature Algorithm: sha256WithRSAEncryption ca:53:14:4b:be:ae:eb:c3:5e:76:83:cc:ba:bc:52:a9:fa:ad: c2:28:bf:25:b6:ac:2a:0d:ba:54:24:03:fc:34:3b:b8:5d:ee: 28:6d:48:f6:9b:4b:93:de:80:10:32:1d:af:a5:32:fa:19:12: c6:b1:f7:32:f2:80:8d:86:e1:69:7d:93:e2:10:8b:d6:6a:b1: ca:38:f2:78:a3:18:36:ea:50:dc:b3:22:1a:76:2f:20:81:b9: 27:6c:3e:ad:7f:b6:37:b6:ea:eb:48:c7:b7:40:ef:3a:20:7c: 5c:f4:80:80:0c:ea:b3:34:f4:52:bc:4f:ee:a7:6c:6b:2a:14: fa:cf:fd:21:90:f4:e9:19:5a:3b:6c:b0:62:40:72:15:c5:0c: 68:c5:0b:c8:cf:fb:57:cf:38:21:b2:d4:12:cd:90:0c:49:bc: 33:4a:be:b6:00:54:31:5f:c2:dc:4b:ad:3c:95:1c:a8:dc:66: 48:1c:54:52:fb:29:eb:a0:26:a4:b7:2b:ec:fd:b1:17:89:ad: 9d:e2:77:91:b8:40:29:61:15:13:f6:f1:38:7c:e6:4b:15:42: b0:13:83:a5:d8:0c:d3:9a:be:63:f3:19:e2:09:35:db:bb:ca: 74:d6:56:51:2c:91:73:42:26:c7:1c:11:b2:02:5d:a0:89:55: 0e:80:d1:e4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fqmY/UoVHZmn8/mpaJ63MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3Y2UxNzljYmUxM2RkYjE0MDEyOTg1YTA2NzEwMGVmOThh NTU2MDEwHhcNMjYwMTAxMTIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjkzNzNmYjk5ODliMDVhYmI2ZWViNGEzYmY3MmM1OWIwODQ5Yjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwRFZkwCKUC/dzwzDx+WfINHUgoL 6HCAvXo2sEVsbZ5bwTOVzIdpkoR3pIj7s+vEYqdjmUbDDGsmrZOPngeGxALDvvl4 oh6D26eKA/2NoRxYbRneCFHodtW1LYGDSAttUcQcgJkDhXfnJfJwhvzVuOINbWao /ljZOQE5J6/S1iXj0yb4ScyvC8hQ9fUBfPlItu9YqUDHOOQRVfLTdp2arcW3CHFE oWXPcWXiI8zcASfz1XHZM88XA0JP4/fBBK5DFKf4iKO9JKLmsNTeQeMmmzb8GLVv EOUD36UldQvhvBtt5oQMb08RvP9PpA+bLR1gmJ9sr7HJXTtPauy2H7yUnwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCaTc/uZibBau27rSjv3LFmwhJuUMB8GA1UdIwQY MBaAFGfOF5y+E92xQBKYWgZxAO+YpVYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEt NjJjMDFkYzY5Y2NhLzEvSnBOei01bUpzRnE3YnV0S09fY3NXYkNFbTVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEtNjJjMDFkYzY5Y2Nh LzEvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhMcR/gA MA0GCSqGSIb3DQEBCwUAA4IBAQDKUxRLvq7rw152g8y6vFKp+q3CKL8ltqwqDbpU JAP8NDu4Xe4obUj2m0uT3oAQMh2vpTL6GRLGsfcy8oCNhuFpfZPiEIvWarHKOPJ4 oxg26lDcsyIadi8ggbknbD6tf7Y3turrSMe3QO86IHxc9ICADOqzNPRSvE/up2xr KhT6z/0hkPTpGVo7bLBiQHIVxQxoxQvIz/tXzzghstQSzZAMSbwzSr62AFQxX8Lc S608lRyo3GZIHFRS+ynroCaktyvs/bEXia2d4neRuEApYRUT9vE4fOZLFUKwE4Ol 2AzTmr5j8xniCTXbu8p01lZRLJFzQibHHBGyAl2giVUOgNHk -----END CERTIFICATE-----Generated at Mon Jan 26 00:24:23 2026 by rpki-client