This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/jU4Lr0RWqeKwbtj_mpkI_cSuuKQ.roa File: jU4Lr0RWqeKwbtj_mpkI_cSuuKQ.roa (raw, json) Hash identifier: yPSwJ7BnVd6OtmjXkcMdWkJgliiWudINiSFU9FCJQiQ= Subject key identifier: 8D:4E:0B:AF:44:56:A9:E2:B0:6E:D8:FF:9A:99:08:FD:C4:AE:B8:A4 Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Certificate serial: 019B7B354EF833670E47C0C0BAD0C504CABD Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/jU4Lr0RWqeKwbtj_mpkI_cSuuKQ.roa Signing time: Thu 01 Jan 2026 20:17:29 +0000 ROA not before: Thu 01 Jan 2026 20:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29588 IP address blocks: 2a0e:e6c0:6000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:4e:f8:33:67:0e:47:c0:c0:ba:d0:c5:04:ca:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Validity Not Before: Jan 1 20:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d4e0baf4456a9e2b06ed8ff9a9908fdc4aeb8a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1e:ed:31:13:a7:64:24:96:60:a1:ee:00:0b: c9:d5:a9:b1:7c:82:2b:c2:59:5f:02:09:6c:03:84: af:6e:c8:06:18:84:fe:38:d0:d4:5c:05:d2:d0:17: 79:24:72:90:41:01:50:e1:d3:fb:3e:dd:de:d2:af: cb:56:e2:11:b9:c1:96:4a:b2:af:e7:4a:d3:35:bc: 15:f0:3c:d8:72:9b:34:3b:9c:b2:5a:5e:6b:07:c5: 3e:5b:8c:b8:78:3a:fc:b9:8f:ef:fa:fb:29:39:0a: d8:28:cf:01:ad:f9:98:a8:fb:bb:99:cd:d2:ba:0b: 54:36:9a:f1:97:05:12:bd:3c:22:a6:39:a9:47:56: 6a:0a:4b:4d:82:b5:e0:5b:3b:0c:7e:7e:d2:2b:ff: 8f:72:fa:a6:27:ec:ca:c2:15:85:47:80:9e:d7:9b: a0:57:af:fe:ec:38:58:ec:c5:9e:fa:67:bd:66:f2: ec:c1:27:3a:6f:6a:75:fa:2e:f8:22:9b:34:95:0e: fc:df:b0:b4:da:a2:bb:42:90:33:d5:4d:f9:76:89: 63:2f:64:44:99:67:eb:7f:4f:32:83:65:af:ca:c7: e3:43:35:ba:e8:3b:82:70:6c:e4:6f:d4:43:5a:ed: 64:01:a0:88:9a:70:26:6a:31:88:10:32:cc:ae:79: 7b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4E:0B:AF:44:56:A9:E2:B0:6E:D8:FF:9A:99:08:FD:C4:AE:B8:A4 X509v3 Authority Key Identifier: keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/jU4Lr0RWqeKwbtj_mpkI_cSuuKQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:e6c0:6000::/36 Signature Algorithm: sha256WithRSAEncryption 56:54:8f:80:62:aa:66:e3:82:50:d1:84:c0:3c:c3:ca:88:e3: 7c:cd:6b:3f:7b:d2:4a:80:10:12:c1:3a:f3:97:1f:25:93:cb: 15:b5:20:2f:44:3f:ad:96:95:b0:66:d6:e0:d8:18:2f:61:b3: d0:bd:64:fc:08:28:68:d9:5a:c6:b5:30:e5:fd:4f:0b:77:34: d7:dd:d4:05:b7:aa:e3:c7:a3:b3:f4:57:33:f2:09:5b:c7:82: f8:d8:46:8f:e5:0d:47:f4:c1:b9:b3:0e:15:43:7b:eb:b1:a5: 8d:e1:d9:6b:94:6c:c8:b7:30:04:e3:c3:aa:2c:a0:99:c8:b4: ab:51:4d:b9:fc:b5:a4:62:88:9c:f1:7a:29:99:d0:b5:03:4b: c5:c6:14:eb:fb:53:96:60:b0:61:1a:e1:59:35:64:73:a1:e1: 38:08:5b:86:e0:50:d7:95:55:ec:e4:0a:bc:73:8d:49:da:bb: 50:3e:21:bf:d0:b0:95:dc:1f:fa:a1:2f:f2:1f:3e:49:61:c1: 96:c4:17:1e:0c:d0:47:3c:f5:d7:c2:fc:a5:c0:d2:9e:1e:84: 56:45:42:75:8b:ee:0e:85:d8:1d:b1:bd:ac:a0:12:06:b7:91: ed:33:87:1d:cc:c0:69:ef:69:af:6f:e7:b9:e3:80:fb:75:05: 05:d1:71:10 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt7NU74M2cOR8DAutDFBMq9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNzI2MWQ3MTUzNDhiZmQ3M2NlOWRiYjcyNDg4NjU2OTkz YmEyZjEwHhcNMjYwMTAxMjAxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDRlMGJhZjQ0NTZhOWUyYjA2ZWQ4ZmY5YTk5MDhmZGM0YWViOGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoB7tMROnZCSWYKHuAAvJ1amxfIIr wllfAglsA4SvbsgGGIT+ONDUXAXS0Bd5JHKQQQFQ4dP7Pt3e0q/LVuIRucGWSrKv 50rTNbwV8DzYcps0O5yyWl5rB8U+W4y4eDr8uY/v+vspOQrYKM8BrfmYqPu7mc3S ugtUNprxlwUSvTwipjmpR1ZqCktNgrXgWzsMfn7SK/+PcvqmJ+zKwhWFR4Ce15ug V6/+7DhY7MWe+me9ZvLswSc6b2p1+i74Ips0lQ7837C02qK7QpAz1U35doljL2RE mWfrf08yg2WvysfjQzW66DuCcGzkb9RDWu1kAaCImnAmajGIEDLMrnl70QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFI1OC69EVqnisG7Y/5qZCP3ErrikMB8GA1UdIwQY MBaAFLJyYdcVNIv9c86du3JIhlaZO6LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2Yt NTA0ZjI3NjY3NjBmLzEvalU0THIwUldxZUt3YnRqX21wa0lfY1N1dUtRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2YtNTA0ZjI3NjY3NjBm LzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKg7mwGAw DQYJKoZIhvcNAQELBQADggEBAFZUj4BiqmbjglDRhMA8w8qI43zNaz970kqAEBLB OvOXHyWTyxW1IC9EP62WlbBm1uDYGC9hs9C9ZPwIKGjZWsa1MOX9Twt3NNfd1AW3 quPHo7P0VzPyCVvHgvjYRo/lDUf0wbmzDhVDe+uxpY3h2WuUbMi3MATjw6osoJnI tKtRTbn8taRiiJzxeimZ0LUDS8XGFOv7U5ZgsGEa4Vk1ZHOh4TgIW4bgUNeVVezk CrxzjUnau1A+Ib/QsJXcH/qhL/IfPklhwZbEFx4M0Ec89dfC/KXA0p4ehFZFQnWL 7g6F2B2xvaygEga3ke0zhx3MwGnvaa9v57njgPt1BQXRcRA= -----END CERTIFICATE-----Generated at Sun Jan 25 16:12:30 2026 by rpki-client