This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/JZaH_jpSvzp_LB_dT1bUbnV7u6Y.roa File: JZaH_jpSvzp_LB_dT1bUbnV7u6Y.roa (raw, json) Hash identifier: PBsKlZt/RhXzdnMDW9mk8dmSBPIc5dC6MxwZF8UDWyw= Subject key identifier: 25:96:87:FE:3A:52:BF:3A:7F:2C:1F:DD:4F:56:D4:6E:75:7B:BB:A6 Certificate issuer: /CN=1b098412c984b89be38011a72a3c471975fc47a2 Certificate serial: 019B7EA684B9F00079E61261AE102D22C865 Authority key identifier: 1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/JZaH_jpSvzp_LB_dT1bUbnV7u6Y.roa Signing time: Fri 02 Jan 2026 12:20:00 +0000 ROA not before: Fri 02 Jan 2026 12:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214216 IP address blocks: 2a13:8340::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:84:b9:f0:00:79:e6:12:61:ae:10:2d:22:c8:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b098412c984b89be38011a72a3c471975fc47a2 Validity Not Before: Jan 2 12:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=259687fe3a52bf3a7f2c1fdd4f56d46e757bbba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:c8:c2:e7:05:bd:ff:09:72:63:af:b1:8b:ee: c3:72:ac:f4:5c:7d:88:4f:9c:54:8e:71:c9:89:8f: 33:e8:69:ea:6a:fa:55:0f:ec:35:28:60:8c:98:08: e1:88:81:21:eb:aa:3e:99:bd:7a:e8:2d:a2:70:79: 0a:94:d0:a8:1e:22:5b:44:6d:6e:b8:0c:35:0b:d9: 35:f3:c5:aa:7a:e9:d6:85:3e:47:44:e2:51:21:45: e4:0c:6f:11:74:77:b8:59:fd:37:5a:65:32:01:4c: b1:27:9d:ec:21:9b:c9:02:af:c1:94:73:84:f5:da: d8:5f:0e:ab:9e:be:94:52:08:e6:a1:c6:e2:88:f8: c9:9a:db:80:90:77:75:1a:0a:7f:96:bc:1b:1b:bf: 06:2f:9d:24:38:0a:eb:84:05:2e:bf:e9:ef:4b:ae: 56:09:da:be:18:24:ee:a0:e5:21:60:e7:a8:29:00: 72:0b:3d:93:c8:33:1f:99:52:08:1d:f4:6e:80:ae: 16:1f:d7:0b:b7:a2:18:d7:df:bc:f1:16:0c:34:d5: 6c:1a:34:0f:b5:aa:26:76:39:dd:05:5c:bb:4a:4c: 35:cd:ee:d9:62:41:58:a7:9b:a1:ae:f4:ed:a7:21: 26:4d:7d:e4:dc:68:09:e1:04:69:2d:4a:43:1f:c1: c5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:96:87:FE:3A:52:BF:3A:7F:2C:1F:DD:4F:56:D4:6E:75:7B:BB:A6 X509v3 Authority Key Identifier: keyid:1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/JZaH_jpSvzp_LB_dT1bUbnV7u6Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:8340::/29 Signature Algorithm: sha256WithRSAEncryption 81:d6:e4:55:e2:0a:da:40:27:53:9c:44:0c:4e:2e:22:61:88: 40:d1:68:6c:88:96:b1:d0:71:d1:13:09:1a:6b:2a:e4:9f:e9: 4d:fc:a5:73:b5:ce:69:1f:21:83:d0:ac:3b:aa:07:fd:98:dc: f7:37:39:3f:e8:d2:1f:3c:b0:37:83:2a:67:36:cf:71:09:4a: 5e:1e:e5:0a:cd:ce:5d:3b:6a:c2:97:d1:9d:cd:7b:2e:56:ea: f2:80:2a:eb:dd:31:68:e6:87:f2:ec:18:4f:f1:ca:e4:9d:91: 2c:05:8b:c5:31:f7:31:f2:aa:91:a3:b4:46:ae:5f:4d:8b:58: b4:f3:f3:ab:44:73:92:4c:e7:50:41:ea:1a:5e:1c:cd:ef:9b: 61:30:f4:2c:22:29:d9:ec:0f:2c:6f:ff:66:bc:ed:66:78:9c: e6:69:67:c3:9d:a8:4c:fd:03:bd:34:49:22:40:04:dc:e9:01: fc:2e:0f:18:cc:4d:21:d4:d9:1c:a9:7a:82:4f:d0:8c:75:7f: 4e:4b:1d:40:df:8f:28:38:bd:16:4d:68:b9:67:55:25:76:d0: 3b:a8:17:0b:e9:2f:c5:10:2a:38:7d:0e:ed:15:46:c6:04:80: cf:c4:a8:82:da:d4:4b:b5:99:39:93:48:0b:ff:c5:45:81:94: 35:9c:5c:c7 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+poS58AB55hJhrhAtIshlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDk4NDEyYzk4NGI4OWJlMzgwMTFhNzJhM2M0NzE5NzVm YzQ3YTIwHhcNMjYwMTAyMTIyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTk2ODdmZTNhNTJiZjNhN2YyYzFmZGQ0ZjU2ZDQ2ZTc1N2JiYmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/cjC5wW9/wlyY6+xi+7Dcqz0XH2I T5xUjnHJiY8z6GnqavpVD+w1KGCMmAjhiIEh66o+mb166C2icHkKlNCoHiJbRG1u uAw1C9k188WqeunWhT5HROJRIUXkDG8RdHe4Wf03WmUyAUyxJ53sIZvJAq/BlHOE 9drYXw6rnr6UUgjmocbiiPjJmtuAkHd1Ggp/lrwbG78GL50kOArrhAUuv+nvS65W Cdq+GCTuoOUhYOeoKQByCz2TyDMfmVIIHfRugK4WH9cLt6IY19+88RYMNNVsGjQP taomdjndBVy7Skw1ze7ZYkFYp5uhrvTtpyEmTX3k3GgJ4QRpLUpDH8HFJQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFCWWh/46Ur86fywf3U9W1G51e7umMB8GA1UdIwQY MBaAFBsJhBLJhLib44ARpyo8Rxl1/EeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dtRUVzbUV1SnZqZ0JHbktqeEhHWFg4UjZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8xNWU5MDUtZmE0Zi00ZDgzLWJmZjYt NzBkMTMzMDZjZDFjLzEvSlphSF9qcFN2enBfTEJfZFQxYlViblY3dTZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8xNWU5MDUtZmE0Zi00ZDgzLWJmZjYtNzBkMTMzMDZjZDFj LzEvR3dtRUVzbUV1SnZqZ0JHbktqeEhHWFg4UjZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhODQDAN BgkqhkiG9w0BAQsFAAOCAQEAgdbkVeIK2kAnU5xEDE4uImGIQNFobIiWsdBx0RMJ Gmsq5J/pTfylc7XOaR8hg9CsO6oH/Zjc9zc5P+jSHzywN4MqZzbPcQlKXh7lCs3O XTtqwpfRnc17Llbq8oAq690xaOaH8uwYT/HK5J2RLAWLxTH3MfKqkaO0Rq5fTYtY tPPzq0RzkkznUEHqGl4cze+bYTD0LCIp2ewPLG//ZrztZnic5mlnw52oTP0DvTRJ IkAE3OkB/C4PGMxNIdTZHKl6gk/QjHV/TksdQN+PKDi9Fk1ouWdVJXbQO6gXC+kv xRAqOH0O7RVGxgSAz8SogtrUS7WZOZNIC//FRYGUNZxcxw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:40 2026 by rpki-client