This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/jNIo4jwvqz1IelLRu8GvtQg4OJM.roa File: jNIo4jwvqz1IelLRu8GvtQg4OJM.roa (raw, json) Hash identifier: NZFhvQtEgj4btkeWoTCHHe2LlPOEV+ZMhUCQO45Afok= Subject key identifier: 8C:D2:28:E2:3C:2F:AB:3D:48:7A:52:D1:BB:C1:AF:B5:08:38:38:93 Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8 Certificate serial: 019B7CEE707F5FD5C33BE22142760E3B139C Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/jNIo4jwvqz1IelLRu8GvtQg4OJM.roa Signing time: Fri 02 Jan 2026 04:19:19 +0000 ROA not before: Fri 02 Jan 2026 04:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209990 IP address blocks: 2a14:ae00:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:70:7f:5f:d5:c3:3b:e2:21:42:76:0e:3b:13:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8 Validity Not Before: Jan 2 04:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8cd228e23c2fab3d487a52d1bbc1afb508383893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4a:4c:6f:a4:f0:7a:28:2a:65:22:dc:91:33: 71:62:8d:1f:1d:3f:f4:25:90:15:7c:7f:d9:0c:36: 85:5d:9e:73:64:e3:2e:57:ac:b4:af:9f:26:7f:27: f6:a1:40:3c:1d:b7:eb:34:ea:bb:1c:3f:c0:20:79: c5:e6:d1:b8:79:af:19:2e:6d:87:48:04:df:d7:5d: 04:79:d3:04:79:94:54:86:8b:36:95:8b:61:e4:1a: a0:bb:20:4a:03:12:54:b2:cf:f1:b7:21:d9:fd:8c: e7:e6:64:c7:ae:15:af:13:17:59:14:9c:96:2a:91: 69:7e:6f:46:a4:d1:ec:f0:68:e2:8c:e8:6e:73:4b: 39:f6:2c:cf:3d:66:cb:f2:ee:3f:25:2f:06:e0:d9: d9:b3:65:bf:e7:a9:62:4d:84:61:a1:e3:2f:2e:7b: 7f:f3:36:2a:c8:c1:12:af:fc:6c:66:28:a8:d4:e6: 36:74:79:5f:ba:47:7b:fe:13:ed:66:c1:b3:73:2c: cd:c1:43:10:fc:a9:fc:52:3d:c4:26:d3:19:bb:e6: 5d:ff:be:a5:04:45:7f:b0:20:68:4e:74:64:38:e4: 3d:30:7b:6f:df:06:cc:f9:f6:7c:a1:5c:3f:cb:da: d7:48:67:81:f3:8b:07:e6:ef:35:75:0a:25:74:73: f3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D2:28:E2:3C:2F:AB:3D:48:7A:52:D1:BB:C1:AF:B5:08:38:38:93 X509v3 Authority Key Identifier: keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/jNIo4jwvqz1IelLRu8GvtQg4OJM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:ae00:8::/48 Signature Algorithm: sha256WithRSAEncryption 31:6c:21:a3:de:e4:05:10:12:a0:6a:78:10:9d:37:57:02:ba: f6:6c:e9:cc:d2:80:a5:12:69:ba:3f:7c:08:9e:b8:b5:df:e9: de:03:71:03:a8:52:42:ed:3c:21:89:1e:6b:96:84:6a:76:47: ce:09:11:4c:e2:d1:41:0d:44:40:7b:f9:2c:d5:ea:1d:0a:64: fe:c9:f5:cb:ce:76:ff:65:32:be:a6:c8:4a:3a:58:7f:93:74: 20:4d:bf:d0:a0:c2:91:40:38:07:2f:90:f2:27:3d:43:cd:4e: b7:86:91:da:49:8d:03:f3:d5:b4:42:13:73:de:25:44:7e:0c: 59:1f:34:13:b5:1e:c9:1b:1a:24:b5:69:28:6d:1c:ad:88:3a: 34:8b:4b:f7:13:4b:73:04:29:64:74:b4:a3:5c:25:98:54:12: 40:9b:d1:0f:a8:f0:6e:1f:60:0b:8a:72:36:6e:39:07:62:42: f4:f7:9c:91:92:dd:a5:74:03:50:af:dd:12:ed:86:a9:a7:6e: 5d:94:6d:4c:27:04:16:69:94:ba:8d:04:1a:89:5b:61:cf:9a: 21:00:f0:1d:02:42:54:d0:cc:54:fb:91:da:a0:e8:8c:4b:e7: 8e:6e:30:f4:58:e5:cc:22:9a:3c:8a:2f:9b:bb:1f:bd:af:f3: 20:a9:6b:a4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87nB/X9XDO+IhQnYOOxOcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YTRlMjM0ODIyNjg0NzVjMWI5MzU2MzdkMDAwMmMyZmQy OTkzYjgwHhcNMjYwMTAyMDQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2QyMjhlMjNjMmZhYjNkNDg3YTUyZDFiYmMxYWZiNTA4MzgzODkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkpMb6TweigqZSLckTNxYo0fHT/0 JZAVfH/ZDDaFXZ5zZOMuV6y0r58mfyf2oUA8HbfrNOq7HD/AIHnF5tG4ea8ZLm2H SATf110EedMEeZRUhos2lYth5BqguyBKAxJUss/xtyHZ/Yzn5mTHrhWvExdZFJyW KpFpfm9GpNHs8GjijOhuc0s59izPPWbL8u4/JS8G4NnZs2W/56liTYRhoeMvLnt/ 8zYqyMESr/xsZiio1OY2dHlfukd7/hPtZsGzcyzNwUMQ/Kn8Uj3EJtMZu+Zd/76l BEV/sCBoTnRkOOQ9MHtv3wbM+fZ8oVw/y9rXSGeB84sH5u81dQoldHPz2wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIzSKOI8L6s9SHpS0bvBr7UIODiTMB8GA1UdIwQY MBaAFKek4jSCJoR1wbk1Y30AAsL9KZO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYt MjMzMzFiNjQ5MTZjLzEvak5JbzRqd3ZxejFJZWxMUnU4R3Z0UWc0T0pNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYtMjMzMzFiNjQ5MTZj LzEvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhSuAAAI MA0GCSqGSIb3DQEBCwUAA4IBAQAxbCGj3uQFEBKgangQnTdXArr2bOnM0oClEmm6 P3wInri13+neA3EDqFJC7TwhiR5rloRqdkfOCRFM4tFBDURAe/ks1eodCmT+yfXL znb/ZTK+pshKOlh/k3QgTb/QoMKRQDgHL5DyJz1DzU63hpHaSY0D89W0QhNz3iVE fgxZHzQTtR7JGxoktWkobRytiDo0i0v3E0tzBClkdLSjXCWYVBJAm9EPqPBuH2AL inI2bjkHYkL095yRkt2ldANQr90S7Yapp25dlG1MJwQWaZS6jQQaiVthz5ohAPAd AkJU0MxU+5HaoOiMS+eObjD0WOXMIpo8ii+bux+9r/MgqWuk -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:38 2026 by rpki-client