This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/1--JUDppRbu7T0stV0TMFX_JdJqk.roa File: 1--JUDppRbu7T0stV0TMFX_JdJqk.roa (raw, json) Hash identifier: 7ElxaU2FrJVBWuFjmaI5WPADPHQpzQarn/tOamW8ol4= Subject key identifier: FB:E2:54:0E:9A:51:6E:EE:D3:D2:CB:55:D1:33:05:5F:F2:5D:26:A9 Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f Certificate serial: 019B76EB608BDE35C384C7CD2FCB000E7D43 Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/1--JUDppRbu7T0stV0TMFX_JdJqk.roa Signing time: Thu 01 Jan 2026 00:18:15 +0000 ROA not before: Thu 01 Jan 2026 00:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 2a0b:6b86:f00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:60:8b:de:35:c3:84:c7:cd:2f:cb:00:0e:7d:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f Validity Not Before: Jan 1 00:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbe2540e9a516eeed3d2cb55d133055ff25d26a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:25:85:09:af:a8:a8:4e:24:46:87:d3:33:25: 0d:ec:79:c6:4a:20:20:9a:52:77:c3:67:01:52:e0: 0f:6c:6e:13:b9:f8:63:46:4d:fe:11:0f:c7:43:07: 6a:bd:49:86:ac:ca:27:87:82:f0:4e:b3:3d:92:06: 31:23:98:6c:b6:67:f7:8c:ef:c2:01:f3:02:5a:d8: f0:b1:98:43:13:18:4f:42:61:92:87:3b:42:98:42: a4:30:bc:ba:cd:d2:25:8b:bd:66:65:89:6d:ce:7b: 92:c4:0c:ff:0a:e2:bd:c7:6b:b1:3e:ae:e3:af:40: f1:48:2d:b0:4d:1c:c1:2c:24:ae:0d:fa:6a:8d:8a: 01:fa:14:16:58:56:e2:27:ed:41:8a:3d:41:17:b2: 1c:e1:a8:ba:f5:63:ee:57:5a:59:ba:5c:da:aa:6c: 0a:33:51:70:08:0d:a9:73:c7:1a:db:c1:64:3d:af: 2f:f4:63:78:27:03:f5:5f:1a:99:e4:9b:cf:59:a3: 6b:dd:e8:6c:38:2d:ae:ea:49:a3:92:3e:3e:df:81: 7e:27:16:19:db:41:92:3c:42:ce:5e:f3:36:dd:6f: 56:be:c4:16:50:d9:cd:fa:82:60:3c:94:af:5b:2d: da:06:c2:52:e8:fe:e8:51:84:9a:97:6c:b2:f0:a3: 25:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E2:54:0E:9A:51:6E:EE:D3:D2:CB:55:D1:33:05:5F:F2:5D:26:A9 X509v3 Authority Key Identifier: keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/1--JUDppRbu7T0stV0TMFX_JdJqk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:6b86:f00::/40 Signature Algorithm: sha256WithRSAEncryption 70:44:59:2e:af:08:56:7f:aa:93:d5:47:ea:46:c5:50:d1:55: 42:ed:06:48:a9:e8:f2:6b:fb:1c:db:a9:1f:38:17:ab:55:fc: 6d:be:5c:4e:a0:78:55:c9:0d:86:7e:0e:e5:53:b0:ff:66:45: c8:3e:03:8b:0b:f3:08:50:ce:16:bf:23:73:7a:2d:19:6b:25: 99:a3:b9:2c:1d:32:e8:fa:be:f3:b9:4d:83:97:60:16:76:32: fa:ab:36:dc:8a:72:cc:19:16:f6:6f:b2:bd:a0:3b:bf:43:8f: 24:5e:f9:01:c9:a2:e7:82:af:c7:c9:8c:18:9d:52:14:b0:1a: 9c:79:9c:c8:d4:80:87:3f:e6:4d:85:55:39:74:91:42:34:e0: 68:8f:7a:e4:be:41:b6:97:89:e7:de:5e:34:63:65:1e:94:e4: 06:84:a0:72:13:1b:aa:c9:ce:d7:29:2b:f1:6e:2d:34:68:28: dc:54:c5:26:55:e5:95:c4:61:74:e5:05:be:65:b2:6f:93:b0: b6:0b:2a:2c:4a:9a:66:7a:f5:d1:9a:b5:3e:48:d0:93:f6:16: aa:ba:1b:5d:20:a1:cb:bb:3d:02:08:fc:41:c1:ce:24:07:f2: 10:fe:c2:35:64:ca:fb:58:9c:f3:cf:6f:34:2e:5f:16:89:5c: d2:64:39:2e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt262CL3jXDhMfNL8sADn1DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNWJjOWJiNTQ3ZTI3Nzg4ZDIyMWJjOGJiZDVmYjAyZTAy NDQ4MGYwHhcNMjYwMTAxMDAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmUyNTQwZTlhNTE2ZWVlZDNkMmNiNTVkMTMzMDU1ZmYyNWQyNmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8yWFCa+oqE4kRofTMyUN7HnGSiAg mlJ3w2cBUuAPbG4TufhjRk3+EQ/HQwdqvUmGrMonh4LwTrM9kgYxI5hstmf3jO/C AfMCWtjwsZhDExhPQmGShztCmEKkMLy6zdIli71mZYltznuSxAz/CuK9x2uxPq7j r0DxSC2wTRzBLCSuDfpqjYoB+hQWWFbiJ+1Bij1BF7Ic4ai69WPuV1pZulzaqmwK M1FwCA2pc8ca28FkPa8v9GN4JwP1XxqZ5JvPWaNr3ehsOC2u6kmjkj4+34F+JxYZ 20GSPELOXvM23W9WvsQWUNnN+oJgPJSvWy3aBsJS6P7oUYSal2yy8KMl+QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPviVA6aUW7u09LLVdEzBV/yXSapMB8GA1UdIwQY MBaAFINbybtUfid4jSIbyLvV+wLgJEgPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85NjJmYjEtM2RmMC00ZWMyLWI1MGEt YjM2YTI0ZDM5NDI3LzEvMS0tSlVEcHBSYnU3VDBzdFYwVE1GWF9KZEpxay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODQvOTYyZmIxLTNkZjAtNGVjMi1iNTBhLWIzNmEyNGQzOTQy Ny8xL2cxdkp1MVItSjNpTklodkl1OVg3QXVBa1NBOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoLa4YP MA0GCSqGSIb3DQEBCwUAA4IBAQBwRFkurwhWf6qT1UfqRsVQ0VVC7QZIqejya/sc 26kfOBerVfxtvlxOoHhVyQ2Gfg7lU7D/ZkXIPgOLC/MIUM4WvyNzei0ZayWZo7ks HTLo+r7zuU2Dl2AWdjL6qzbcinLMGRb2b7K9oDu/Q48kXvkByaLngq/HyYwYnVIU sBqceZzI1ICHP+ZNhVU5dJFCNOBoj3rkvkG2l4nn3l40Y2UelOQGhKByExuqyc7X KSvxbi00aCjcVMUmVeWVxGF05QW+ZbJvk7C2CyosSppmevXRmrU+SNCT9haquhtd IKHLuz0CCPxBwc4kB/IQ/sI1ZMr7WJzzz280Ll8WiVzSZDku -----END CERTIFICATE-----Generated at Sun Jan 25 15:29:11 2026 by rpki-client