This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/jr2Bs93kCy1qM5dGaxCmTxVRCPs.roa File: jr2Bs93kCy1qM5dGaxCmTxVRCPs.roa (raw, json) Hash identifier: JQrsYENJWrVuw6dKCnfSnh8ynO6digQQI/K1CgLtuIQ= Subject key identifier: 8E:BD:81:B3:DD:E4:0B:2D:6A:33:97:46:6B:10:A6:4F:15:51:08:FB Certificate issuer: /CN=40f75d327761b90c0899638f430eb614c87c3106 Certificate serial: 019B79ECB49326807F842223F2FB1595FA58 Authority key identifier: 40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/jr2Bs93kCy1qM5dGaxCmTxVRCPs.roa Signing time: Thu 01 Jan 2026 14:18:34 +0000 ROA not before: Thu 01 Jan 2026 14:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 2001:678:2cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.crl rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:b4:93:26:80:7f:84:22:23:f2:fb:15:95:fa:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f75d327761b90c0899638f430eb614c87c3106 Validity Not Before: Jan 1 14:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ebd81b3dde40b2d6a3397466b10a64f155108fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:eb:fe:f0:02:a2:2c:58:b7:6d:8f:7a:d1:9e: a6:b5:e9:74:8f:c3:76:e8:77:a7:2a:fc:fd:ed:88: 29:5f:b7:25:41:44:8f:b2:bd:26:5a:4a:d8:e3:95: 33:cb:42:1b:de:11:f2:27:99:a5:96:af:f3:12:f3: 09:0f:5f:79:32:59:83:f9:92:8c:1c:d0:96:73:ba: a4:1f:35:6c:5f:dd:ec:b1:f0:ca:b3:f8:d9:a7:5c: 67:52:b3:e8:0d:85:94:bb:75:46:22:d8:6b:3c:34: 60:90:17:be:06:71:36:09:57:e7:a9:cb:e4:64:6f: 14:1c:16:5f:cd:a6:a0:e3:f7:09:7f:fe:09:02:9c: 6b:57:ba:a1:fb:ec:84:b5:fd:30:ce:09:24:b0:80: ad:09:fb:6a:b6:54:b8:6c:de:5f:b2:2b:63:a4:3d: 3c:d1:de:c7:5b:16:47:de:19:95:ab:ad:32:5d:6c: 56:d1:b4:f4:4a:21:3b:c5:3a:6f:14:76:8d:8e:56: 7d:19:82:c8:34:99:59:5d:0c:9c:93:83:36:cf:6f: e5:20:ce:70:09:b6:2d:e7:18:60:5c:4e:b8:48:43: 7f:19:9c:7d:8c:c7:f8:4e:f9:8f:51:cd:9c:01:9c: 99:a5:8f:1e:fd:23:57:69:17:ec:f1:24:b3:11:93: 36:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:BD:81:B3:DD:E4:0B:2D:6A:33:97:46:6B:10:A6:4F:15:51:08:FB X509v3 Authority Key Identifier: keyid:40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/jr2Bs93kCy1qM5dGaxCmTxVRCPs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:2cc::/48 Signature Algorithm: sha256WithRSAEncryption 17:6e:d6:2e:0f:33:9d:41:6b:61:70:df:a1:3b:4d:c6:d1:fe: ea:7a:8d:63:a4:40:0e:79:4c:0f:8e:55:c0:e0:9f:5a:1d:70: dd:f8:9b:73:e6:d9:e0:61:54:84:fd:9a:5d:f2:bf:12:a7:cf: 07:d3:13:c7:d5:00:0d:65:a6:f8:15:78:27:15:f6:2b:c6:c4: 2e:3a:82:cd:64:03:42:4b:b6:33:cf:71:45:05:5e:6f:0c:ce: 79:84:2c:ca:5a:39:8b:a1:8b:30:89:33:bc:b9:33:fc:98:3f: eb:d3:56:bd:f3:6e:bb:21:bc:eb:10:95:9a:a8:b9:c5:a3:dd: ef:14:cd:58:3e:2d:f1:80:4d:f9:7d:d9:26:bb:f4:03:d0:44: c4:82:f8:cc:90:60:cc:1f:1d:55:94:b7:b6:92:d5:fc:a8:5c: 5d:26:bd:58:9d:c2:49:25:97:03:ee:cc:72:a6:ca:84:af:57: e5:cf:b7:a5:08:16:54:e5:d6:67:49:b0:63:62:49:eb:1a:dd: 24:a6:1b:82:24:ba:7e:71:72:a5:41:03:b3:31:4f:bf:18:84: 34:d8:c3:b9:19:aa:3b:df:17:a7:be:ae:fd:4f:fc:4e:01:9d: 8c:38:9b:75:ca:72:c1:e8:7a:57:c6:09:2d:82:7e:b3:86:8a: 28:b7:d9:04 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57LSTJoB/hCIj8vsVlfpYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZjc1ZDMyNzc2MWI5MGMwODk5NjM4ZjQzMGViNjE0Yzg3 YzMxMDYwHhcNMjYwMTAxMTQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWJkODFiM2RkZTQwYjJkNmEzMzk3NDY2YjEwYTY0ZjE1NTEwOGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOv+8AKiLFi3bY960Z6mtel0j8N2 6HenKvz97YgpX7clQUSPsr0mWkrY45Uzy0Ib3hHyJ5mllq/zEvMJD195MlmD+ZKM HNCWc7qkHzVsX93ssfDKs/jZp1xnUrPoDYWUu3VGIthrPDRgkBe+BnE2CVfnqcvk ZG8UHBZfzaag4/cJf/4JApxrV7qh++yEtf0wzgkksICtCftqtlS4bN5fsitjpD08 0d7HWxZH3hmVq60yXWxW0bT0SiE7xTpvFHaNjlZ9GYLINJlZXQyck4M2z2/lIM5w CbYt5xhgXE64SEN/GZx9jMf4TvmPUc2cAZyZpY8e/SNXaRfs8SSzEZM2SwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFI69gbPd5AstajOXRmsQpk8VUQj7MB8GA1UdIwQY MBaAFED3XTJ3YbkMCJljj0MOthTIfDEGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVBkZE1uZGh1UXdJbVdPUFF3NjJGTWg4TVFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS82ZTVmNGMtMmVhZS00OGEwLTg1NTAt MjlhYzQ1ZTJlY2ZmLzEvanIyQnM5M2tDeTFxTTVkR2F4Q21UeFZSQ1BzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS82ZTVmNGMtMmVhZS00OGEwLTg1NTAtMjlhYzQ1ZTJlY2Zm LzEvUVBkZE1uZGh1UXdJbVdPUFF3NjJGTWg4TVFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeALM MA0GCSqGSIb3DQEBCwUAA4IBAQAXbtYuDzOdQWthcN+hO03G0f7qeo1jpEAOeUwP jlXA4J9aHXDd+Jtz5tngYVSE/Zpd8r8Sp88H0xPH1QANZab4FXgnFfYrxsQuOoLN ZANCS7Yzz3FFBV5vDM55hCzKWjmLoYswiTO8uTP8mD/r01a98267IbzrEJWaqLnF o93vFM1YPi3xgE35fdkmu/QD0ETEgvjMkGDMHx1VlLe2ktX8qFxdJr1YncJJJZcD 7sxypsqEr1flz7elCBZU5dZnSbBjYknrGt0kphuCJLp+cXKlQQOzMU+/GIQ02MO5 Gao73xenvq79T/xOAZ2MOJt1ynLB6HpXxgktgn6zhooot9kE -----END CERTIFICATE-----Generated at Sun Jan 25 10:27:44 2026 by rpki-client