This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/JGXNW_EZO3CqXIz17K7IOO-kVn4.roa File: JGXNW_EZO3CqXIz17K7IOO-kVn4.roa (raw, json) Hash identifier: 0Sbxlefi45eKmJynqHSEH1wYIbMEhcutI222AdmjRas= Subject key identifier: 24:65:CD:5B:F1:19:3B:70:AA:5C:8C:F5:EC:AE:C8:38:EF:A4:56:7E Certificate issuer: /CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01 Certificate serial: 019B7D5ABD8277BE59F04F805EF7C0F6549D Authority key identifier: 1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/JGXNW_EZO3CqXIz17K7IOO-kVn4.roa Signing time: Fri 02 Jan 2026 06:17:37 +0000 ROA not before: Fri 02 Jan 2026 06:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212267 IP address blocks: 2001:678:24c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:bd:82:77:be:59:f0:4f:80:5e:f7:c0:f6:54:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01 Validity Not Before: Jan 2 06:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2465cd5bf1193b70aa5c8cf5ecaec838efa4567e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:25:ed:e3:d6:50:9f:88:9a:e7:1a:61:e1:2e: 71:ca:8a:32:1b:f5:ab:30:49:bf:65:b3:ac:a7:0c: 55:b0:bc:e2:45:0b:4f:37:31:d6:9e:0d:b3:cb:b7: 4e:70:89:ff:9f:b0:3a:44:80:2c:c9:50:91:a7:cf: 8f:fc:2f:ad:ea:3f:6f:89:57:e2:61:52:78:39:8b: 3a:5e:20:15:09:21:95:a3:4d:52:42:d9:71:00:da: 92:40:1c:2b:68:0c:36:6f:49:f2:dd:94:cd:94:16: cb:ac:fc:f3:56:74:89:d0:e3:36:a5:ab:32:44:91: 77:9b:3f:8f:12:20:23:b5:c9:a5:75:72:c8:3d:05: ed:d3:54:0a:ee:be:b1:eb:ca:fd:2a:6c:05:d8:d2: ba:cf:09:3f:df:f4:bf:c1:86:4c:d9:5e:0e:19:40: e3:2f:81:fc:97:60:20:3f:5a:0c:5d:36:dc:83:7a: 55:9b:54:ba:38:a6:46:6e:70:5e:b9:5e:5d:be:0d: c7:de:7d:0c:9b:3f:70:71:5a:05:a7:97:c5:6b:e5: fb:9d:44:14:c8:8a:f0:e4:57:78:f9:ca:2a:78:23: dd:c4:c1:f5:e4:d8:93:5d:38:f1:19:70:ba:ea:c7: 76:f6:15:e8:94:58:df:02:cd:16:e9:c6:b4:26:ee: fa:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:65:CD:5B:F1:19:3B:70:AA:5C:8C:F5:EC:AE:C8:38:EF:A4:56:7E X509v3 Authority Key Identifier: keyid:1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/JGXNW_EZO3CqXIz17K7IOO-kVn4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:24c::/48 Signature Algorithm: sha256WithRSAEncryption 8c:86:17:1e:51:f0:d2:65:5f:7b:8b:46:ed:66:8f:95:c8:f1: a6:13:78:30:c7:1b:38:9a:5b:dc:52:71:f0:0f:cd:9d:35:1d: e6:2c:2a:56:3c:25:33:ab:29:fd:1c:ab:4b:93:99:a0:8c:21: 6e:14:a6:fd:1a:13:77:cb:59:88:70:f0:20:b2:90:30:fc:cd: 8e:8e:dd:1d:73:d5:0f:c6:4f:8e:04:b1:ca:89:0e:c9:81:69: 83:9f:36:a9:aa:17:51:dd:13:89:f3:9f:ee:78:bf:a8:82:46: 26:0d:b1:c6:c1:9f:a2:b5:61:14:53:fb:ef:1d:23:cd:2b:fa: 6d:3f:df:fd:da:aa:68:9d:4c:8f:1e:08:5d:20:bd:ee:d6:ae: c5:c4:4c:5f:68:f9:48:7d:e7:92:d0:2f:9d:52:36:9c:91:07: 83:88:a2:d5:18:7d:ab:86:76:90:a0:a5:45:3c:15:a4:11:60: 98:90:6d:03:92:ff:09:b1:b0:24:d3:20:f4:26:29:50:68:2a: 25:c3:cf:99:54:5c:ff:a4:e2:5b:bc:13:04:b2:38:18:7c:52: 7b:f0:51:66:df:9b:cb:ff:4c:4c:73:79:a4:1a:32:12:40:8f: 9a:0d:3b:75:bd:90:11:43:4d:dd:e9:a3:40:62:ee:ed:e0:05: 7b:df:89:4e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9Wr2Cd75Z8E+AXvfA9lSdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOGM3NzMzNmQ2NmY3YjAyMzhlNmMxODRjNjRmYTRmMjRk MDlmMDEwHhcNMjYwMTAyMDYxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDY1Y2Q1YmYxMTkzYjcwYWE1YzhjZjVlY2FlYzgzOGVmYTQ1NjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyXt49ZQn4ia5xph4S5xyooyG/Wr MEm/ZbOspwxVsLziRQtPNzHWng2zy7dOcIn/n7A6RIAsyVCRp8+P/C+t6j9viVfi YVJ4OYs6XiAVCSGVo01SQtlxANqSQBwraAw2b0ny3ZTNlBbLrPzzVnSJ0OM2pasy RJF3mz+PEiAjtcmldXLIPQXt01QK7r6x68r9KmwF2NK6zwk/3/S/wYZM2V4OGUDj L4H8l2AgP1oMXTbcg3pVm1S6OKZGbnBeuV5dvg3H3n0Mmz9wcVoFp5fFa+X7nUQU yIrw5Fd4+coqeCPdxMH15NiTXTjxGXC66sd29hXolFjfAs0W6ca0Ju760wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCRlzVvxGTtwqlyM9eyuyDjvpFZ+MB8GA1UdIwQY MBaAFB6MdzNtZvewI45sGExk+k8k0J8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC83ZGE3OWQtNjBmNC00N2E4LTgxM2Et OTk5NTdkZjQ5OTdlLzEvSkdYTldfRVpPM0NxWEl6MTdLN0lPTy1rVm40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC83ZGE3OWQtNjBmNC00N2E4LTgxM2EtOTk5NTdkZjQ5OTdl LzEvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAJM MA0GCSqGSIb3DQEBCwUAA4IBAQCMhhceUfDSZV97i0btZo+VyPGmE3gwxxs4mlvc UnHwD82dNR3mLCpWPCUzqyn9HKtLk5mgjCFuFKb9GhN3y1mIcPAgspAw/M2Ojt0d c9UPxk+OBLHKiQ7JgWmDnzapqhdR3ROJ85/ueL+ogkYmDbHGwZ+itWEUU/vvHSPN K/ptP9/92qponUyPHghdIL3u1q7FxExfaPlIfeeS0C+dUjackQeDiKLVGH2rhnaQ oKVFPBWkEWCYkG0Dkv8JsbAk0yD0JilQaColw8+ZVFz/pOJbvBMEsjgYfFJ78FFm 35vL/0xMc3mkGjISQI+aDTt1vZARQ03d6aNAYu7t4AV734lO -----END CERTIFICATE-----Generated at Mon Jan 26 05:33:56 2026 by rpki-client