This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/JsDV0JgNIJsN-ibYdgtSHoMxIvw.roa File: JsDV0JgNIJsN-ibYdgtSHoMxIvw.roa (raw, json) Hash identifier: cHo9xyUEk2HyEiBCUp1r4usf+4Crk42MuHgQ//gFieE= Subject key identifier: 26:C0:D5:D0:98:0D:20:9B:0D:FA:26:D8:76:0B:52:1E:83:31:22:FC Certificate issuer: /CN=d588212bf5dace1080dc45e2c55b92ff85c6c192 Certificate serial: 019B76EB6776CE1ABB7AB453FC86937E2A79 Authority key identifier: D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/JsDV0JgNIJsN-ibYdgtSHoMxIvw.roa Signing time: Thu 01 Jan 2026 00:18:17 +0000 ROA not before: Thu 01 Jan 2026 00:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33280 IP address blocks: 2a01:8840:c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:67:76:ce:1a:bb:7a:b4:53:fc:86:93:7e:2a:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d588212bf5dace1080dc45e2c55b92ff85c6c192 Validity Not Before: Jan 1 00:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26c0d5d0980d209b0dfa26d8760b521e833122fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ff:be:7b:18:e8:a1:59:ee:34:4d:f6:f5:f9: 3b:23:f2:d6:d2:b4:35:f4:f3:0a:1d:a1:99:12:59: d2:50:79:69:a3:2c:9a:62:d0:2e:43:e6:ce:f4:27: a3:fd:96:9c:a4:df:0c:9d:5f:02:9f:5f:b5:0c:87: 3d:4b:51:06:2b:02:4a:b8:1d:b1:5a:1e:f8:66:57: ae:db:7c:7a:17:55:0e:fe:48:5c:b5:c4:8e:46:cf: 4f:bf:4e:a7:c6:be:77:d4:17:44:a9:28:43:c3:0b: 1e:1c:88:33:3b:6d:f3:25:30:68:d6:2b:41:f3:59: da:27:52:57:b9:5e:7a:2f:f8:2f:46:f3:df:c1:77: d3:4c:8f:95:03:ec:78:ac:64:5e:a8:f5:51:4b:51: 27:8e:91:7a:f9:a7:04:2c:78:90:07:96:7b:e5:23: 16:ac:03:a2:68:7f:ef:67:4e:e9:73:64:0e:99:31: 91:21:f9:6b:23:24:56:3f:63:85:69:f5:32:68:3c: 05:b6:a7:9c:f6:ab:50:5c:aa:a9:f4:1a:80:0b:95: fe:ec:72:2c:03:d6:ec:a7:61:98:ca:4c:2b:a9:83: f8:5f:cb:0d:5e:7b:9e:77:69:98:e9:4f:58:ef:24: 0f:2e:79:3f:d5:83:cc:2c:20:48:ba:4c:46:a3:38: e4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C0:D5:D0:98:0D:20:9B:0D:FA:26:D8:76:0B:52:1E:83:31:22:FC X509v3 Authority Key Identifier: keyid:D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/JsDV0JgNIJsN-ibYdgtSHoMxIvw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:8840:c::/48 Signature Algorithm: sha256WithRSAEncryption 1a:d7:12:77:a4:54:91:d5:6c:b5:fa:a0:72:7c:55:cc:cc:67: 4a:b1:f1:99:43:08:e7:a5:77:90:05:81:3a:ce:bb:3b:f3:61: 92:43:99:f4:5e:e4:98:0a:bf:de:4a:af:b8:b5:4f:9a:2d:80: a2:37:d3:42:80:f3:24:ea:fc:2b:b5:21:8b:95:4b:33:65:fc: bc:39:ec:4e:5c:4f:6f:b6:dd:27:59:07:69:ef:b3:1c:67:d7: c1:8a:5d:28:25:99:7c:c0:64:a1:5c:d5:e0:ab:49:13:ae:e6: e0:ed:d5:60:7d:4b:1a:ed:a6:67:c1:7e:18:8f:c1:e2:d2:a5: 44:9c:2c:75:b9:fa:df:10:97:1a:47:cb:1d:94:8a:c9:f0:7e: d0:d2:98:eb:d2:69:e1:aa:f5:30:84:8f:bb:5b:4d:73:8f:3a: 2a:4e:1e:d2:67:5c:cb:25:56:88:94:0d:e7:6b:06:98:61:74: 06:31:68:7a:f8:c8:b8:9d:6e:8c:87:76:17:e8:e7:7e:0b:4b: 9b:34:ed:45:5c:bc:91:26:51:7d:ab:45:8d:60:f2:9e:71:fc: 0b:64:de:3b:6a:4d:16:69:7d:a1:76:72:4b:f2:54:d2:94:a2: a9:af:f2:60:f0:6e:f6:fc:58:15:e3:bf:24:cf:44:ac:9e:88: 93:24:d3:d3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt262d2zhq7erRT/IaTfip5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ODgyMTJiZjVkYWNlMTA4MGRjNDVlMmM1NWI5MmZmODVj NmMxOTIwHhcNMjYwMTAxMDAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmMwZDVkMDk4MGQyMDliMGRmYTI2ZDg3NjBiNTIxZTgzMzEyMmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/++exjooVnuNE329fk7I/LW0rQ1 9PMKHaGZElnSUHlpoyyaYtAuQ+bO9Cej/ZacpN8MnV8Cn1+1DIc9S1EGKwJKuB2x Wh74Zleu23x6F1UO/khctcSORs9Pv06nxr531BdEqShDwwseHIgzO23zJTBo1itB 81naJ1JXuV56L/gvRvPfwXfTTI+VA+x4rGReqPVRS1EnjpF6+acELHiQB5Z75SMW rAOiaH/vZ07pc2QOmTGRIflrIyRWP2OFafUyaDwFtqec9qtQXKqp9BqAC5X+7HIs A9bsp2GYykwrqYP4X8sNXnued2mY6U9Y7yQPLnk/1YPMLCBIukxGozjkXQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCbA1dCYDSCbDfom2HYLUh6DMSL8MB8GA1UdIwQY MBaAFNWIISv12s4QgNxF4sVbkv+FxsGSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVlnaEtfWGF6aENBM0VYaXhWdVNfNFhHd1pJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8yMTEzNTQtZWJlNC00Nzk3LTk4ZjMt MWIyYWMzNWMwOWFhLzEvSnNEVjBKZ05JSnNOLWliWWRndFNIb014SXZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8yMTEzNTQtZWJlNC00Nzk3LTk4ZjMtMWIyYWMzNWMwOWFh LzEvMVlnaEtfWGF6aENBM0VYaXhWdVNfNFhHd1pJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgGIQAAM MA0GCSqGSIb3DQEBCwUAA4IBAQAa1xJ3pFSR1Wy1+qByfFXMzGdKsfGZQwjnpXeQ BYE6zrs782GSQ5n0XuSYCr/eSq+4tU+aLYCiN9NCgPMk6vwrtSGLlUszZfy8OexO XE9vtt0nWQdp77McZ9fBil0oJZl8wGShXNXgq0kTrubg7dVgfUsa7aZnwX4Yj8Hi 0qVEnCx1ufrfEJcaR8sdlIrJ8H7Q0pjr0mnhqvUwhI+7W01zjzoqTh7SZ1zLJVaI lA3nawaYYXQGMWh6+Mi4nW6Mh3YX6Od+C0ubNO1FXLyRJlF9q0WNYPKecfwLZN47 ak0WaX2hdnJL8lTSlKKpr/Jg8G72/FgV478kz0SsnoiTJNPT -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:31 2026 by rpki-client