This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/J5ItodHrRCheXviqPMZtDDHgoRU.roa File: J5ItodHrRCheXviqPMZtDDHgoRU.roa (raw, json) Hash identifier: fl0j9Uu7JS7V1n5kkbcRFj/Trr5iL8zrAWPpKhN3sGg= Subject key identifier: 27:92:2D:A1:D1:EB:44:28:5E:5E:F8:AA:3C:C6:6D:0C:31:E0:A1:15 Certificate issuer: /CN=9d6b9774c94876c98321de3201b11b75a1358d19 Certificate serial: 019B783500A251597B718F3D2050C09938A3 Authority key identifier: 9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/J5ItodHrRCheXviqPMZtDDHgoRU.roa Signing time: Thu 01 Jan 2026 06:18:18 +0000 ROA not before: Thu 01 Jan 2026 06:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215740 IP address blocks: 2a0d:8140:1fff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:00:a2:51:59:7b:71:8f:3d:20:50:c0:99:38:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d6b9774c94876c98321de3201b11b75a1358d19 Validity Not Before: Jan 1 06:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27922da1d1eb44285e5ef8aa3cc66d0c31e0a115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:eb:53:3f:66:28:50:18:99:07:6d:33:22:4a: 8a:a1:5a:a7:48:f7:75:fc:c3:d7:70:a8:7d:ee:ba: b6:c0:b6:77:7e:12:08:f5:05:7c:29:39:f0:79:46: 33:95:dd:5e:82:fd:10:7e:4c:59:9d:8e:16:e0:82: 33:96:d3:ab:02:4e:4e:55:f0:3d:f9:98:38:1b:ad: ed:a3:db:55:37:f9:ad:aa:78:34:2b:47:8a:22:e0: 82:ba:01:09:a4:c6:9d:f6:95:09:ea:0c:8f:a2:05: ec:05:e2:d9:89:e3:6a:ac:5a:0f:40:d0:f6:3f:54: 8c:a9:45:b4:80:97:18:42:22:ac:92:58:3c:cb:2f: b2:3b:65:aa:95:7f:8e:cd:e4:ce:54:bb:6e:8d:93: 09:03:30:cb:7a:f6:7f:06:77:b0:8c:0c:91:0a:6e: 7a:b1:2d:e9:be:5c:d2:18:52:aa:21:3f:aa:0a:c5: 6b:d1:30:fa:47:4e:f4:8b:91:30:d2:e1:52:76:65: c0:f7:bd:0b:b1:9f:ee:1d:cb:9d:ff:8b:8a:fd:c7: bf:6f:a8:87:0f:58:19:a3:9b:48:09:84:e8:84:e2: 80:64:17:ff:5f:d9:0c:33:c5:91:e9:c3:f7:8a:66: df:06:bb:49:bc:e3:3f:2e:3b:02:6e:ca:d4:f1:72: 76:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:92:2D:A1:D1:EB:44:28:5E:5E:F8:AA:3C:C6:6D:0C:31:E0:A1:15 X509v3 Authority Key Identifier: keyid:9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/J5ItodHrRCheXviqPMZtDDHgoRU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:8140:1fff::/48 Signature Algorithm: sha256WithRSAEncryption 02:f3:c7:c2:58:db:d7:a3:75:7d:f7:ce:0a:b9:7b:33:a1:e0: 3c:59:c2:b5:61:3c:62:83:88:0e:db:5b:ca:ba:1e:b2:a2:46: 1b:75:dd:3b:c3:44:44:09:1b:b3:0d:08:cd:ba:1c:26:f2:38: 6c:e5:dc:44:a5:75:54:d3:46:2d:7b:b4:01:dd:ee:24:b1:86: dc:95:07:92:cd:cb:e0:8e:2e:a0:89:78:7a:c3:04:54:e7:e5: 09:b1:48:c5:7c:d2:49:b6:51:2d:74:41:40:dd:61:59:3a:03: 7e:d5:30:c0:c2:00:73:3c:45:d5:7f:dc:52:52:c6:90:8f:d6: a6:d4:4b:28:47:9a:26:22:28:a2:9a:01:7f:cd:06:76:85:09: 6d:d8:54:8c:f9:f1:b8:0a:c0:d9:c0:40:1f:19:4e:7f:b2:59: ab:71:71:f8:b8:38:a6:b8:b9:f2:d4:93:e1:30:4d:70:c4:9b: f8:71:51:5c:99:78:4c:62:da:71:8f:cb:63:29:b0:22:d6:8b: 55:58:87:e9:02:24:97:fd:86:67:db:0b:61:91:03:67:f1:23: 47:be:7f:fb:7b:3c:da:b2:8b:13:71:45:9f:59:76:f1:2c:18: fa:1b:cc:dc:fc:85:c2:3a:a8:26:36:1d:ba:59:5f:1d:6a:9b: b7:9e:e7:7b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4NQCiUVl7cY89IFDAmTijMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNmI5Nzc0Yzk0ODc2Yzk4MzIxZGUzMjAxYjExYjc1YTEz NThkMTkwHhcNMjYwMTAxMDYxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzkyMmRhMWQxZWI0NDI4NWU1ZWY4YWEzY2M2NmQwYzMxZTBhMTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvutTP2YoUBiZB20zIkqKoVqnSPd1 /MPXcKh97rq2wLZ3fhII9QV8KTnweUYzld1egv0QfkxZnY4W4IIzltOrAk5OVfA9 +Zg4G63to9tVN/mtqng0K0eKIuCCugEJpMad9pUJ6gyPogXsBeLZieNqrFoPQND2 P1SMqUW0gJcYQiKsklg8yy+yO2WqlX+OzeTOVLtujZMJAzDLevZ/BnewjAyRCm56 sS3pvlzSGFKqIT+qCsVr0TD6R070i5Ew0uFSdmXA970LsZ/uHcud/4uK/ce/b6iH D1gZo5tICYTohOKAZBf/X9kMM8WR6cP3imbfBrtJvOM/LjsCbsrU8XJ2hQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCeSLaHR60QoXl74qjzGbQwx4KEVMB8GA1UdIwQY MBaAFJ1rl3TJSHbJgyHeMgGxG3WhNY0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbld1WGRNbElkc21ESWQ0eUFiRWJkYUUxalJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS80MGNiOWMtYzQyNi00OGFiLTk5Njgt YTU2YmRmYWRiODFlLzEvSjVJdG9kSHJSQ2hlWHZpcVBNWnREREhnb1JVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS80MGNiOWMtYzQyNi00OGFiLTk5NjgtYTU2YmRmYWRiODFl LzEvbld1WGRNbElkc21ESWQ0eUFiRWJkYUUxalJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg2BQB// MA0GCSqGSIb3DQEBCwUAA4IBAQAC88fCWNvXo3V9984KuXszoeA8WcK1YTxig4gO 21vKuh6yokYbdd07w0RECRuzDQjNuhwm8jhs5dxEpXVU00Yte7QB3e4ksYbclQeS zcvgji6giXh6wwRU5+UJsUjFfNJJtlEtdEFA3WFZOgN+1TDAwgBzPEXVf9xSUsaQ j9am1EsoR5omIiiimgF/zQZ2hQlt2FSM+fG4CsDZwEAfGU5/slmrcXH4uDimuLny 1JPhME1wxJv4cVFcmXhMYtpxj8tjKbAi1otVWIfpAiSX/YZn2wthkQNn8SNHvn/7 ezzasosTcUWfWXbxLBj6G8zc/IXCOqgmNh26WV8dapu3nud7 -----END CERTIFICATE-----Generated at Sun Jan 25 15:29:12 2026 by rpki-client