This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/JolCrPCyt6FQAjQdkxeUkG5hr_c.roa File: JolCrPCyt6FQAjQdkxeUkG5hr_c.roa (raw, json) Hash identifier: tR07fd6qiP9t7/rCVkFLRiRbNcRHO1l6JwkPDCkWrQw= Subject key identifier: 26:89:42:AC:F0:B2:B7:A1:50:02:34:1D:93:17:94:90:6E:61:AF:F7 Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Certificate serial: 019BC5371123CB3C699499B263004F2340E2 Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/JolCrPCyt6FQAjQdkxeUkG5hr_c.roa Signing time: Fri 16 Jan 2026 05:11:19 +0000 ROA not before: Fri 16 Jan 2026 05:11:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205592 IP address blocks: 2a13:2200:1a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c5:37:11:23:cb:3c:69:94:99:b2:63:00:4f:23:40:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Validity Not Before: Jan 16 05:11:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=268942acf0b2b7a15002341d931794906e61aff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5b:dd:33:fd:6d:c6:f5:a6:3b:83:b6:46:9e: c5:05:13:af:8c:ac:93:da:01:7b:95:ff:46:f7:28: 4c:6a:5b:49:f5:f8:dd:03:e7:d3:c5:0d:4f:14:c7: 29:c5:89:84:2a:92:63:aa:cb:80:fe:9f:a9:48:8f: ce:d0:bc:1e:84:33:4a:dc:93:65:d9:2a:ed:57:b0: e7:c5:83:e4:87:51:dc:f6:72:ea:69:39:55:cd:ab: 9e:d2:d1:6b:b0:34:f7:22:a9:22:4d:ba:06:27:17: 9e:66:79:54:0a:1d:20:68:db:35:3d:d7:27:64:81: 69:7a:42:55:ef:16:6d:7d:a7:32:e5:06:3d:c5:ef: f8:bd:01:48:03:dd:51:01:28:40:c2:92:5c:01:cb: fe:a1:6a:ed:30:65:0a:36:b9:08:1e:12:16:5d:62: 42:68:0d:51:70:31:27:4d:23:da:e9:7f:e7:17:c7: 12:47:78:45:87:8a:b7:53:86:76:a3:93:8e:77:f6: ee:03:72:cc:cb:bc:e0:f1:ba:e8:2a:99:17:6a:b8: e4:f1:c9:cb:61:68:7d:d8:41:b1:c5:ec:3b:a7:d8: e7:8c:2c:31:78:53:e9:9d:d2:29:0a:a2:33:cd:51: 95:f1:55:b4:14:8b:57:65:03:7d:7e:c7:f2:9e:1f: b6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:89:42:AC:F0:B2:B7:A1:50:02:34:1D:93:17:94:90:6E:61:AF:F7 X509v3 Authority Key Identifier: keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/JolCrPCyt6FQAjQdkxeUkG5hr_c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:2200:1a::/48 Signature Algorithm: sha256WithRSAEncryption 68:e3:5d:3a:90:9d:dd:b0:36:a2:87:ad:01:eb:12:9b:b4:d1: a8:5d:8a:11:08:1c:6e:58:fc:41:20:94:d9:5b:c4:c6:51:68: b3:4b:2b:ea:08:8e:7c:b7:1c:57:f9:16:1f:69:27:82:64:0a: 25:82:a6:43:3f:b7:e3:11:29:79:88:7b:bf:15:18:bd:9d:b0: e5:20:d9:e4:43:18:86:62:1f:a1:c1:e6:c5:95:63:a6:9d:3f: 7a:c4:a4:57:49:09:42:f8:89:bd:d0:67:c1:eb:e9:be:4f:a3: a2:4f:43:1e:8e:cd:5f:de:93:31:3a:52:e3:b5:49:4d:48:dd: 38:e4:a1:5f:40:d4:b6:1b:54:2f:7d:0e:eb:8d:62:8e:ca:38: ab:3b:d4:8c:1f:f9:60:aa:89:a3:01:ed:4f:3c:8f:ae:df:95: bf:a2:f1:36:e7:7f:78:e6:f8:7c:99:ca:e7:88:54:58:05:20: 38:dd:d9:5d:68:f4:82:4c:fc:8f:82:db:7c:aa:cc:46:b1:58: 7d:2c:80:05:99:a7:95:c2:fd:fc:6e:d5:0b:83:2f:a7:69:5e: d1:20:d9:d1:ea:02:ca:7b:3c:49:07:2c:45:c6:10:21:0b:ca: 27:b9:f2:2a:43:d2:42:47:32:fa:05:a4:d3:27:27:4e:e7:35: 62:d3:4d:bb -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZvFNxEjyzxplJmyYwBPI0DiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMmQxMDJiNjExMmIwZDlhOGI4ZWViYWM0Yjk3YzgxOWY5 N2M2MDYwHhcNMjYwMTE2MDUxMTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjg5NDJhY2YwYjJiN2ExNTAwMjM0MWQ5MzE3OTQ5MDZlNjFhZmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlvdM/1txvWmO4O2Rp7FBROvjKyT 2gF7lf9G9yhMaltJ9fjdA+fTxQ1PFMcpxYmEKpJjqsuA/p+pSI/O0LwehDNK3JNl 2SrtV7DnxYPkh1Hc9nLqaTlVzaue0tFrsDT3IqkiTboGJxeeZnlUCh0gaNs1Pdcn ZIFpekJV7xZtfacy5QY9xe/4vQFIA91RAShAwpJcAcv+oWrtMGUKNrkIHhIWXWJC aA1RcDEnTSPa6X/nF8cSR3hFh4q3U4Z2o5OOd/buA3LMy7zg8broKpkXarjk8cnL YWh92EGxxew7p9jnjCwxeFPpndIpCqIzzVGV8VW0FItXZQN9fsfynh+2VwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCaJQqzwsrehUAI0HZMXlJBuYa/3MB8GA1UdIwQY MBaAFOotECthErDZqLjuusS5fIGfl8YGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEt YjgyOWNjNDAxMDMxLzEvSm9sQ3JQQ3l0NkZRQWpRZGt4ZVVrRzVocl9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEtYjgyOWNjNDAxMDMx LzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhMiAAAa MA0GCSqGSIb3DQEBCwUAA4IBAQBo4106kJ3dsDaih60B6xKbtNGoXYoRCBxuWPxB IJTZW8TGUWizSyvqCI58txxX+RYfaSeCZAolgqZDP7fjESl5iHu/FRi9nbDlINnk QxiGYh+hwebFlWOmnT96xKRXSQlC+Im90GfB6+m+T6OiT0Mejs1f3pMxOlLjtUlN SN045KFfQNS2G1QvfQ7rjWKOyjirO9SMH/lgqomjAe1PPI+u35W/ovE253945vh8 mcrniFRYBSA43dldaPSCTPyPgtt8qsxGsVh9LIAFmaeVwv38btULgy+naV7RINnR 6gLKezxJByxFxhAhC8onufIqQ9JCRzL6BaTTJydO5zVi0027 -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:26 2026 by rpki-client