This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/JHDYQiALesWvByATRJ3bFGKf440.roa File: JHDYQiALesWvByATRJ3bFGKf440.roa (raw, json) Hash identifier: 4qi7uVDpfuqHxI2PwRXSylbhTlTDmB3nFH/RQRca9I4= Subject key identifier: 24:70:D8:42:20:0B:7A:C5:AF:07:20:13:44:9D:DB:14:62:9F:E3:8D Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a Certificate serial: 019B78A2607296B51ED1BB427DB9AA9F87F4 Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/JHDYQiALesWvByATRJ3bFGKf440.roa Signing time: Thu 01 Jan 2026 08:17:45 +0000 ROA not before: Thu 01 Jan 2026 08:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202512 IP address blocks: 2a0e:1cc0:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:60:72:96:b5:1e:d1:bb:42:7d:b9:aa:9f:87:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a Validity Not Before: Jan 1 08:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2470d842200b7ac5af072013449ddb14629fe38d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:92:48:64:d0:95:8c:ba:8a:bd:eb:85:50:a2: c4:83:aa:0c:fe:6f:8d:10:69:47:63:60:d1:81:cb: 04:5e:27:63:69:6b:8d:a7:f3:12:5b:1d:73:ca:f2: c2:71:d4:11:78:e0:cd:a1:a1:e9:e5:be:d0:5b:7b: db:b2:08:62:fa:69:a0:0a:d0:54:02:f2:37:db:cb: 6a:6c:87:6c:7f:bd:19:f5:b7:99:a9:38:66:c7:d6: 69:c7:98:5c:e8:d9:a7:7e:cf:10:af:32:5a:58:58: 16:69:23:d6:40:48:81:14:40:bf:f2:2a:7c:e8:92: 49:51:0d:45:46:be:c4:c3:3b:5e:f3:0a:27:15:1a: 99:0a:f2:d9:b5:1b:7f:92:e2:2a:ce:36:e5:57:cd: a1:7c:8d:11:6e:00:48:65:bb:5d:e2:61:e4:49:af: 1a:e7:04:73:7f:b5:23:67:30:6e:a9:a4:8c:0f:41: 39:06:eb:16:bb:98:21:bb:2d:39:f7:a7:ee:1c:8c: d8:10:68:d5:4b:24:23:cd:52:c3:0c:62:34:d1:da: d2:e8:60:82:36:93:5e:58:52:86:f8:ac:95:00:72: 45:0d:66:aa:a2:b2:b5:99:b6:8f:f1:ed:75:e0:8f: 1c:64:62:93:8a:06:cf:c3:23:fd:4d:d4:e4:2b:bb: b5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:70:D8:42:20:0B:7A:C5:AF:07:20:13:44:9D:DB:14:62:9F:E3:8D X509v3 Authority Key Identifier: keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/JHDYQiALesWvByATRJ3bFGKf440.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:1cc0:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 0a:9d:79:98:76:32:61:d0:92:71:7e:93:97:b9:7e:2c:a8:a5: 6d:87:5b:ea:10:5f:be:f0:1f:e6:54:b4:38:15:77:5b:87:53: 4a:f4:4a:a3:ba:93:af:26:aa:29:af:11:22:c9:6e:42:d7:99: 13:aa:3e:43:5b:08:eb:0c:41:49:9d:d6:eb:63:42:de:0e:b5: 80:93:91:70:47:b5:6f:04:e0:56:cf:d8:5a:73:3d:02:d1:bc: d1:20:de:62:e9:65:0b:22:88:17:bf:5a:b6:4e:93:2b:da:36: a0:1e:1d:2c:67:a9:66:b1:72:c8:1d:d7:69:e8:16:b7:ad:a7: 9e:69:0d:4b:0f:56:01:af:70:6f:7f:8d:50:98:d1:3e:7c:e6: f9:aa:85:c9:d3:24:4d:47:2f:f2:60:9c:9c:0a:23:96:7d:d2: 9e:a6:b1:91:24:54:d0:1b:23:7c:0b:91:79:ee:45:1e:a5:47: 61:65:ed:e0:cd:30:5c:c6:eb:37:fc:bd:49:87:63:79:3d:e9: fe:44:38:9e:d6:22:30:40:bd:32:48:c8:28:f7:25:61:ff:4b: 96:4c:5c:41:77:30:08:1c:34:82:41:94:92:8f:58:ea:3a:89: 4d:73:78:be:09:31:e9:c2:3d:8b:20:f1:56:bc:2c:44:de:bc: 6e:b7:68:99 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4omBylrUe0btCfbmqn4f0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzEzNjdkZjZkMTg2MTA3MWM5MmJhZTcyNjUyMzMyNmY0 NWJhMmEwHhcNMjYwMTAxMDgxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDcwZDg0MjIwMGI3YWM1YWYwNzIwMTM0NDlkZGIxNDYyOWZlMzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpJIZNCVjLqKveuFUKLEg6oM/m+N EGlHY2DRgcsEXidjaWuNp/MSWx1zyvLCcdQReODNoaHp5b7QW3vbsghi+mmgCtBU AvI328tqbIdsf70Z9beZqThmx9Zpx5hc6Nmnfs8QrzJaWFgWaSPWQEiBFEC/8ip8 6JJJUQ1FRr7Ewzte8wonFRqZCvLZtRt/kuIqzjblV82hfI0RbgBIZbtd4mHkSa8a 5wRzf7UjZzBuqaSMD0E5BusWu5ghuy0596fuHIzYEGjVSyQjzVLDDGI00drS6GCC NpNeWFKG+KyVAHJFDWaqorK1mbaP8e114I8cZGKTigbPwyP9TdTkK7u1QQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCRw2EIgC3rFrwcgE0Sd2xRin+ONMB8GA1UdIwQY MBaAFO4xNn320YYQcckrrnJlIzJvRboqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2It MTE1OWRiZmJlZDU0LzEvSkhEWVFpQUxlc1d2QnlBVFJKM2JGR0tmNDQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2ItMTE1OWRiZmJlZDU0 LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg4cwLAL MA0GCSqGSIb3DQEBCwUAA4IBAQAKnXmYdjJh0JJxfpOXuX4sqKVth1vqEF++8B/m VLQ4FXdbh1NK9EqjupOvJqoprxEiyW5C15kTqj5DWwjrDEFJndbrY0LeDrWAk5Fw R7VvBOBWz9hacz0C0bzRIN5i6WULIogXv1q2TpMr2jagHh0sZ6lmsXLIHddp6Ba3 raeeaQ1LD1YBr3Bvf41QmNE+fOb5qoXJ0yRNRy/yYJycCiOWfdKeprGRJFTQGyN8 C5F57kUepUdhZe3gzTBcxus3/L1Jh2N5Pen+RDie1iIwQL0ySMgo9yVh/0uWTFxB dzAIHDSCQZSSj1jqOolNc3i+CTHpwj2LIPFWvCxE3rxut2iZ -----END CERTIFICATE-----Generated at Sun Jan 25 10:38:27 2026 by rpki-client