This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/jYL_MHWzxB2OX15Vxs1hmwy4NzY.roa File: jYL_MHWzxB2OX15Vxs1hmwy4NzY.roa (raw, json) Hash identifier: VfRhELdR7icqL4aOULnTdK+xLakSZDUjVfSg/1rTQ3c= Subject key identifier: 8D:82:FF:30:75:B3:C4:1D:8E:5F:5E:55:C6:CD:61:9B:0C:B8:37:36 Certificate issuer: /CN=8daf61f6608f9a9eac14b18224854807bcdc1324 Certificate serial: 019B7BA33C61C7C674ACFE9E1BF167FA0D2E Authority key identifier: 8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/jYL_MHWzxB2OX15Vxs1hmwy4NzY.roa Signing time: Thu 01 Jan 2026 22:17:33 +0000 ROA not before: Thu 01 Jan 2026 22:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214971 IP address blocks: 2a09:9340:1808::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:3c:61:c7:c6:74:ac:fe:9e:1b:f1:67:fa:0d:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8daf61f6608f9a9eac14b18224854807bcdc1324 Validity Not Before: Jan 1 22:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d82ff3075b3c41d8e5f5e55c6cd619b0cb83736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f1:dc:d6:e8:24:a6:ec:27:c0:ec:6e:18:52: 69:6a:29:90:7c:c4:a8:67:43:6f:29:f6:c0:0c:3c: 09:59:fe:45:fb:cb:ed:d6:4e:08:be:a5:a7:21:ba: fb:60:dc:e8:24:1b:0b:7f:22:3f:08:94:51:42:32: af:46:6c:a8:d4:b3:e1:ae:37:af:f5:17:4f:0f:21: ba:b7:1b:15:d9:cd:62:a4:97:50:06:9a:55:0b:03: 94:d5:5b:f1:a2:01:68:2a:af:8f:4b:65:fc:49:5b: 07:a3:8c:a1:b2:9d:49:53:4e:dd:fb:22:38:07:6c: f7:f3:ac:33:3c:55:df:16:fa:4d:36:a3:9f:28:47: 05:d1:e4:8c:4d:c7:02:91:92:4f:81:f1:6d:28:4f: ad:1e:60:ad:00:b1:87:ee:e3:a2:89:4c:bd:9a:38: 88:2c:6b:a2:dd:98:95:67:44:ac:ea:7c:9c:46:42: a5:c6:e7:38:9f:0b:a1:16:e8:4a:44:c0:92:52:6d: bb:64:15:a8:5a:6a:6a:37:f8:2f:06:e4:f1:e6:53: 92:79:d9:ac:a1:0e:c1:fa:3e:44:f9:34:aa:3f:75: eb:1d:67:cd:b6:4c:07:36:53:bf:64:c2:3e:31:7f: be:c4:f6:e3:22:d9:2e:8f:e8:b5:16:65:5b:53:5b: bd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:82:FF:30:75:B3:C4:1D:8E:5F:5E:55:C6:CD:61:9B:0C:B8:37:36 X509v3 Authority Key Identifier: keyid:8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/jYL_MHWzxB2OX15Vxs1hmwy4NzY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:9340:1808::/48 Signature Algorithm: sha256WithRSAEncryption 24:42:95:f1:3d:c7:3d:88:13:ba:fd:fc:12:3c:a4:99:f4:7b: 7a:36:af:15:8d:50:f5:db:80:20:ee:27:7d:1a:2c:a6:9a:86: ff:b0:28:04:bb:53:02:60:b8:5e:7b:44:bf:96:13:66:69:3c: 55:78:4b:00:8b:bd:b6:1a:d6:36:a3:1b:2d:db:07:18:24:fe: 3a:95:31:3a:46:64:fa:03:61:dd:9d:ce:1c:23:a7:77:7f:6b: 95:58:c0:91:f0:ca:02:f9:b2:09:7b:33:e8:62:8f:b0:2a:e5: 7a:06:84:34:6a:49:49:49:52:aa:68:d7:c6:f0:72:cc:f4:5c: 3b:b4:1f:40:b6:2a:b2:a6:c2:92:77:70:f7:63:27:5e:2d:64: dc:a9:a6:71:eb:8d:39:d3:02:c2:38:c9:28:2d:3a:cc:91:21: 79:7d:70:dd:1b:31:a8:26:a5:4d:b6:5a:32:b4:13:c6:33:3b: f6:83:dc:4b:92:ef:42:e3:f1:bd:10:9f:35:bf:3f:eb:20:a2: 2c:cf:7c:a7:77:0d:26:88:33:90:d7:2c:c9:cb:cf:8e:f5:c6: ac:30:27:77:1f:2b:b1:35:6c:dd:51:25:99:2f:d7:8a:0d:81: ae:dd:ed:e2:95:9a:4e:7f:e1:2e:d1:e3:13:c5:0b:c2:c5:23: 77:0e:8e:8b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7ozxhx8Z0rP6eG/Fn+g0uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYWY2MWY2NjA4ZjlhOWVhYzE0YjE4MjI0ODU0ODA3YmNk YzEzMjQwHhcNMjYwMTAxMjIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDgyZmYzMDc1YjNjNDFkOGU1ZjVlNTVjNmNkNjE5YjBjYjgzNzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/Hc1ugkpuwnwOxuGFJpaimQfMSo Z0NvKfbADDwJWf5F+8vt1k4IvqWnIbr7YNzoJBsLfyI/CJRRQjKvRmyo1LPhrjev 9RdPDyG6txsV2c1ipJdQBppVCwOU1VvxogFoKq+PS2X8SVsHo4yhsp1JU07d+yI4 B2z386wzPFXfFvpNNqOfKEcF0eSMTccCkZJPgfFtKE+tHmCtALGH7uOiiUy9mjiI LGui3ZiVZ0Ss6nycRkKlxuc4nwuhFuhKRMCSUm27ZBWoWmpqN/gvBuTx5lOSedms oQ7B+j5E+TSqP3XrHWfNtkwHNlO/ZMI+MX++xPbjItkuj+i1FmVbU1u9HQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFI2C/zB1s8Qdjl9eVcbNYZsMuDc2MB8GA1UdIwQY MBaAFI2vYfZgj5qerBSxgiSFSAe83BMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamE5aDltQ1BtcDZzRkxHQ0pJVklCN3pjRXlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81MGY5MzUtZDY3NS00MDg5LWFhZTUt ZmIyNGJlNzVhM2Y0LzEvallMX01IV3p4QjJPWDE1VnhzMWhtd3k0TnpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS81MGY5MzUtZDY3NS00MDg5LWFhZTUtZmIyNGJlNzVhM2Y0 LzEvamE5aDltQ1BtcDZzRkxHQ0pJVklCN3pjRXlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgmTQBgI MA0GCSqGSIb3DQEBCwUAA4IBAQAkQpXxPcc9iBO6/fwSPKSZ9Ht6Nq8VjVD124Ag 7id9Giymmob/sCgEu1MCYLhee0S/lhNmaTxVeEsAi722GtY2oxst2wcYJP46lTE6 RmT6A2Hdnc4cI6d3f2uVWMCR8MoC+bIJezPoYo+wKuV6BoQ0aklJSVKqaNfG8HLM 9Fw7tB9AtiqypsKSd3D3YydeLWTcqaZx64050wLCOMkoLTrMkSF5fXDdGzGoJqVN tloytBPGMzv2g9xLku9C4/G9EJ81vz/rIKIsz3yndw0miDOQ1yzJy8+O9casMCd3 HyuxNWzdUSWZL9eKDYGu3e3ilZpOf+Eu0eMTxQvCxSN3Do6L -----END CERTIFICATE-----Generated at Sun Jan 25 10:11:21 2026 by rpki-client