This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/0JwjDB6pwBrnM_VNKbEaVOuyt7M.roa File: 0JwjDB6pwBrnM_VNKbEaVOuyt7M.roa (raw, json) Hash identifier: UYK9qyiM+jwVVrmAK1B64PoIFsnPeLAVZ6nQFz3lWgo= Subject key identifier: D0:9C:23:0C:1E:A9:C0:1A:E7:33:F5:4D:29:B1:1A:54:EB:B2:B7:B3 Certificate issuer: /CN=b15f6a50e6a4887e17c53b0fc10e4b7e1493eeb5 Certificate serial: 019B78A35842DC046BA388C0D5FD2E79D7C2 Authority key identifier: B1:5F:6A:50:E6:A4:88:7E:17:C5:3B:0F:C1:0E:4B:7E:14:93:EE:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sV9qUOakiH4XxTsPwQ5LfhST7rU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/0JwjDB6pwBrnM_VNKbEaVOuyt7M.roa Signing time: Thu 01 Jan 2026 08:18:49 +0000 ROA not before: Thu 01 Jan 2026 08:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44398 IP address blocks: 2a00:1e58::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.mft rsync://rpki.ripe.net/repository/DEFAULT/sV9qUOakiH4XxTsPwQ5LfhST7rU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:58:42:dc:04:6b:a3:88:c0:d5:fd:2e:79:d7:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b15f6a50e6a4887e17c53b0fc10e4b7e1493eeb5 Validity Not Before: Jan 1 08:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d09c230c1ea9c01ae733f54d29b11a54ebb2b7b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8a:8a:74:9d:08:1f:28:bf:93:c8:94:63:ca: 1c:4f:2d:62:ef:5f:90:7d:80:78:48:3f:b3:16:2d: 8f:4f:0e:92:a2:4f:17:44:4c:8b:52:d8:bf:d3:5f: d0:55:78:bc:0f:d0:40:a2:4e:1d:91:50:13:c5:c9: db:b4:5c:c2:d0:6a:dc:53:b8:21:34:2b:29:c9:39: 93:81:e9:95:f1:75:bf:ed:81:ca:5c:fb:28:b2:e9: 5e:94:9a:46:3a:23:84:dd:a8:9b:05:3d:4f:7c:33: bc:c9:26:e8:72:a8:a4:00:d0:86:fe:42:87:e9:e4: a9:05:07:3e:00:35:b9:20:de:31:11:0a:e1:67:b4: 13:26:9b:b9:cd:69:34:bc:52:06:3d:5a:49:78:62: 16:50:09:85:c5:9f:a0:93:63:2f:a1:69:7f:ba:4b: 80:9c:04:e5:93:5e:59:e1:12:01:a9:f2:81:cf:c8: a7:9b:b2:ed:a9:fa:cf:d2:2d:3c:cb:10:b6:f7:df: 75:cd:c4:b8:86:cb:b8:e0:bd:86:31:21:17:58:ab: 70:15:6c:6a:2a:1b:13:95:66:e2:80:04:ef:a6:0b: ee:fb:49:8b:13:7c:70:c5:2a:e3:81:a7:7d:f6:71: 28:fa:d4:30:f2:c1:33:37:49:5d:15:35:1d:1a:a6: bf:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9C:23:0C:1E:A9:C0:1A:E7:33:F5:4D:29:B1:1A:54:EB:B2:B7:B3 X509v3 Authority Key Identifier: keyid:B1:5F:6A:50:E6:A4:88:7E:17:C5:3B:0F:C1:0E:4B:7E:14:93:EE:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sV9qUOakiH4XxTsPwQ5LfhST7rU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/0JwjDB6pwBrnM_VNKbEaVOuyt7M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c93524-3765-49e2-aa3e-29842bc27145/1/sV9qUOakiH4XxTsPwQ5LfhST7rU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:1e58::/32 Signature Algorithm: sha256WithRSAEncryption 58:c3:45:a9:a8:a6:9c:08:27:b9:99:ad:0f:34:a0:79:dd:e8: 9f:ef:9b:a8:6f:8a:c9:63:cf:0e:7b:8b:03:3c:54:9d:af:49: 6f:2a:a5:cf:18:bb:1e:a9:b6:38:a9:31:06:db:96:1f:ff:2d: 72:41:8e:26:ae:f2:b6:ea:85:86:d2:97:1a:32:d7:1c:fe:34: c6:b2:09:bc:a1:d0:8b:b9:aa:08:0a:42:0c:ba:ed:51:13:f8: 39:53:1a:b3:61:41:ef:ee:8d:1a:da:0a:50:a0:09:6f:26:e8: 5f:99:3f:dc:b9:d3:f7:eb:fe:23:8e:e7:55:a5:d5:83:aa:1b: 43:38:c3:bf:ee:b4:a8:9b:00:42:f2:58:78:1a:be:dd:29:4f: c4:39:f6:79:3b:08:5f:55:53:01:bb:c7:ab:8a:7f:43:54:77: 22:6d:d1:38:4d:29:41:63:de:9a:bc:4c:47:d3:e9:06:63:9a: 64:a3:05:9c:5c:9e:a8:f7:b3:25:3c:25:ec:56:35:a2:0f:8e: 06:5f:ff:00:1b:dd:3c:f7:e7:b8:2f:8a:56:06:1c:f4:37:28: 10:47:12:a2:3c:94:85:77:55:24:60:58:b7:ab:fd:1a:9e:b6: d3:e6:3e:60:36:dd:63:73:1b:79:6b:c6:be:14:84:f4:68:6e: 92:66:1c:6f -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4o1hC3ARro4jA1f0uedfCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNWY2YTUwZTZhNDg4N2UxN2M1M2IwZmMxMGU0YjdlMTQ5 M2VlYjUwHhcNMjYwMTAxMDgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDljMjMwYzFlYTljMDFhZTczM2Y1NGQyOWIxMWE1NGViYjJiN2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4qKdJ0IHyi/k8iUY8ocTy1i71+Q fYB4SD+zFi2PTw6Sok8XREyLUti/01/QVXi8D9BAok4dkVATxcnbtFzC0GrcU7gh NCspyTmTgemV8XW/7YHKXPsosulelJpGOiOE3aibBT1PfDO8ySbocqikANCG/kKH 6eSpBQc+ADW5IN4xEQrhZ7QTJpu5zWk0vFIGPVpJeGIWUAmFxZ+gk2MvoWl/ukuA nATlk15Z4RIBqfKBz8inm7LtqfrP0i08yxC29991zcS4hsu44L2GMSEXWKtwFWxq KhsTlWbigATvpgvu+0mLE3xwxSrjgad99nEo+tQw8sEzN0ldFTUdGqa/GQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFNCcIwweqcAa5zP1TSmxGlTrsrezMB8GA1UdIwQY MBaAFLFfalDmpIh+F8U7D8EOS34Uk+61MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1Y5cVVPYWtpSDRYeFRzUHdRNUxmaFNUN3JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jOTM1MjQtMzc2NS00OWUyLWFhM2Ut Mjk4NDJiYzI3MTQ1LzEvMEp3akRCNnB3QnJuTV9WTktiRWFWT3V5dDdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9jOTM1MjQtMzc2NS00OWUyLWFhM2UtMjk4NDJiYzI3MTQ1 LzEvc1Y5cVVPYWtpSDRYeFRzUHdRNUxmaFNUN3JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgAeWDAN BgkqhkiG9w0BAQsFAAOCAQEAWMNFqaimnAgnuZmtDzSged3on++bqG+KyWPPDnuL AzxUna9Jbyqlzxi7Hqm2OKkxBtuWH/8tckGOJq7ytuqFhtKXGjLXHP40xrIJvKHQ i7mqCApCDLrtURP4OVMas2FB7+6NGtoKUKAJbyboX5k/3LnT9+v+I47nVaXVg6ob QzjDv+60qJsAQvJYeBq+3SlPxDn2eTsIX1VTAbvHq4p/Q1R3Im3ROE0pQWPemrxM R9PpBmOaZKMFnFyeqPezJTwl7FY1og+OBl//ABvdPPfnuC+KVgYc9DcoEEcSojyU hXdVJGBYt6v9Gp620+Y+YDbdY3MbeWvGvhSE9GhukmYcbw== -----END CERTIFICATE-----Generated at Mon Jan 26 11:40:04 2026 by rpki-client