This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/juBkbpcYbHGu8X6oDqr6gXzg0p4.roa File: juBkbpcYbHGu8X6oDqr6gXzg0p4.roa (raw, json) Hash identifier: YpMOIRw0fnrQ2EWztcpAe2+2MvDjXytsu0Rk4/ssWiY= Subject key identifier: 8E:E0:64:6E:97:18:6C:71:AE:F1:7E:A8:0E:AA:FA:81:7C:E0:D2:9E Certificate issuer: /CN=3a48fe0704e4ac95e3a70e95beb84425c316b9ad Certificate serial: 019B79100BA2E53914BF3FCDDF86494EB402 Authority key identifier: 3A:48:FE:07:04:E4:AC:95:E3:A7:0E:95:BE:B8:44:25:C3:16:B9:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/juBkbpcYbHGu8X6oDqr6gXzg0p4.roa Signing time: Thu 01 Jan 2026 10:17:33 +0000 ROA not before: Thu 01 Jan 2026 10:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12897 IP address blocks: 2001:678:804::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.crl rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.mft rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:0b:a2:e5:39:14:bf:3f:cd:df:86:49:4e:b4:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a48fe0704e4ac95e3a70e95beb84425c316b9ad Validity Not Before: Jan 1 10:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ee0646e97186c71aef17ea80eaafa817ce0d29e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:10:d0:3a:ae:01:5d:85:3c:7e:50:48:e5:81: 0c:a3:21:38:52:95:24:d4:93:a7:2b:2a:ea:ef:c6: 91:16:87:97:55:f5:05:ca:81:d2:25:e4:d0:b5:cc: da:d1:9b:4b:87:41:74:95:09:90:89:f9:53:e4:4d: 9f:42:aa:b4:c6:ca:4b:fe:be:cb:3d:cb:49:e3:37: 0a:40:72:62:f9:a5:f2:fb:9d:76:a4:1d:14:f1:48: 15:f2:37:ac:a1:ea:9a:fc:d9:a0:9a:71:67:98:aa: 59:dd:47:62:47:f3:fc:22:02:ee:2b:d3:d9:82:8e: 9b:bf:08:4d:ab:d0:59:87:1b:93:77:8a:23:4f:9f: 8e:1f:a4:05:5e:d6:09:72:2f:c3:cc:f2:fc:45:69: f2:9c:b5:fb:e3:f3:76:df:4c:09:20:0c:df:ad:eb: 76:71:83:f2:51:77:d9:a2:de:23:cd:14:a3:9f:c1: b5:38:e4:52:a7:93:ab:1f:e5:d7:85:f7:0f:09:c2: bd:3d:04:96:63:37:5c:e1:4d:69:e5:6c:d8:35:a9: b2:b6:a3:f1:aa:96:c3:c1:4a:46:4d:36:cf:d9:bd: 71:fc:aa:bb:64:0a:dc:69:b5:d8:5f:e2:4d:9c:4b: 78:16:48:e7:82:1c:2e:ff:f0:64:27:c6:e4:3d:6e: 50:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E0:64:6E:97:18:6C:71:AE:F1:7E:A8:0E:AA:FA:81:7C:E0:D2:9E X509v3 Authority Key Identifier: keyid:3A:48:FE:07:04:E4:AC:95:E3:A7:0E:95:BE:B8:44:25:C3:16:B9:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Okj-BwTkrJXjpw6VvrhEJcMWua0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/juBkbpcYbHGu8X6oDqr6gXzg0p4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/91717c-eb77-4e83-8eaa-e123e4e303e1/1/Okj-BwTkrJXjpw6VvrhEJcMWua0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:804::/48 Signature Algorithm: sha256WithRSAEncryption dd:67:20:c6:7a:93:3d:2b:17:55:ef:d5:b3:3b:0e:d8:4b:92: 9a:aa:aa:cd:3e:bf:5e:c1:91:a9:7f:d1:a6:c5:e2:26:33:d7: 8c:67:7a:29:ea:a3:ca:9e:62:ac:e4:bf:65:b7:aa:6d:79:45: 3f:37:4a:ad:09:46:0e:07:98:04:87:48:c3:7a:3e:9c:0d:d5: 46:2b:7e:59:33:a2:2e:c9:5f:6e:72:f7:6b:41:36:ee:a8:6c: 08:de:3f:cf:e2:7d:cd:e9:38:2e:29:09:c6:1f:60:35:d0:c0: f1:da:18:b4:24:af:93:11:92:70:43:81:2c:39:ce:b4:55:15: d9:d5:18:cf:18:28:0f:a3:23:ad:5f:d7:89:ff:ca:f2:e2:51: c3:b1:7a:ac:e3:f7:45:ea:18:95:65:1c:3e:c8:d8:16:db:2f: 6e:58:6d:59:d3:09:20:f6:e9:83:37:5b:58:d0:a6:4c:1d:c9: 24:dd:fd:0b:aa:74:4e:6b:d4:b7:77:cf:0d:7f:07:84:77:51: d5:e4:39:fe:0e:91:b4:26:6b:e4:8e:24:31:38:88:87:ea:a6: be:c6:e0:f8:75:9a:c6:08:bd:bd:0b:ee:1f:de:12:3f:09:45: a4:be:71:20:0f:a3:c7:a4:ef:7d:7e:ee:24:03:52:b8:a3:99: a4:3d:2a:c5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EAui5TkUvz/N34ZJTrQCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNDhmZTA3MDRlNGFjOTVlM2E3MGU5NWJlYjg0NDI1YzMx NmI5YWQwHhcNMjYwMTAxMTAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWUwNjQ2ZTk3MTg2YzcxYWVmMTdlYTgwZWFhZmE4MTdjZTBkMjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohDQOq4BXYU8flBI5YEMoyE4UpUk 1JOnKyrq78aRFoeXVfUFyoHSJeTQtcza0ZtLh0F0lQmQiflT5E2fQqq0xspL/r7L PctJ4zcKQHJi+aXy+512pB0U8UgV8jesoeqa/NmgmnFnmKpZ3UdiR/P8IgLuK9PZ go6bvwhNq9BZhxuTd4ojT5+OH6QFXtYJci/DzPL8RWnynLX74/N230wJIAzfret2 cYPyUXfZot4jzRSjn8G1OORSp5OrH+XXhfcPCcK9PQSWYzdc4U1p5WzYNamytqPx qpbDwUpGTTbP2b1x/Kq7ZArcabXYX+JNnEt4Fkjnghwu//BkJ8bkPW5Q/QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFI7gZG6XGGxxrvF+qA6q+oF84NKeMB8GA1UdIwQY MBaAFDpI/gcE5KyV46cOlb64RCXDFrmtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2tqLUJ3VGtySlhqcHc2VnZyaEVKY01XdWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS85MTcxN2MtZWI3Ny00ZTgzLThlYWEt ZTEyM2U0ZTMwM2UxLzEvanVCa2JwY1liSEd1OFg2b0RxcjZnWHpnMHA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS85MTcxN2MtZWI3Ny00ZTgzLThlYWEtZTEyM2U0ZTMwM2Ux LzEvT2tqLUJ3VGtySlhqcHc2VnZyaEVKY01XdWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAgE MA0GCSqGSIb3DQEBCwUAA4IBAQDdZyDGepM9KxdV79WzOw7YS5KaqqrNPr9ewZGp f9GmxeImM9eMZ3op6qPKnmKs5L9lt6pteUU/N0qtCUYOB5gEh0jDej6cDdVGK35Z M6IuyV9ucvdrQTbuqGwI3j/P4n3N6TguKQnGH2A10MDx2hi0JK+TEZJwQ4EsOc60 VRXZ1RjPGCgPoyOtX9eJ/8ry4lHDsXqs4/dF6hiVZRw+yNgW2y9uWG1Z0wkg9umD N1tY0KZMHckk3f0LqnROa9S3d88NfweEd1HV5Dn+DpG0JmvkjiQxOIiH6qa+xuD4 dZrGCL29C+4f3hI/CUWkvnEgD6PHpO99fu4kA1K4o5mkPSrF -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:34 2026 by rpki-client