This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/JbYTcmeKPo3mOunx0Z-jMKOxz48.roa File: JbYTcmeKPo3mOunx0Z-jMKOxz48.roa (raw, json) Hash identifier: /zbvgZqj9ImK5wHvF50pz1/cbzu2MAYXngG5GwrR+io= Subject key identifier: 25:B6:13:72:67:8A:3E:8D:E6:3A:E9:F1:D1:9F:A3:30:A3:B1:CF:8F Certificate issuer: /CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca Certificate serial: 019B78344AA3E54D392A8844627DB8A0C071 Authority key identifier: 44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/JbYTcmeKPo3mOunx0Z-jMKOxz48.roa Signing time: Thu 01 Jan 2026 06:17:31 +0000 ROA not before: Thu 01 Jan 2026 06:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215153 IP address blocks: 2a05:9f04:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:4a:a3:e5:4d:39:2a:88:44:62:7d:b8:a0:c0:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca Validity Not Before: Jan 1 06:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25b61372678a3e8de63ae9f1d19fa330a3b1cf8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:43:2a:a8:8a:98:c8:02:c1:c6:15:20:34:53: 23:31:ef:45:40:f6:ef:27:19:6f:04:e4:ab:b0:39: 28:38:b4:25:5c:51:69:fa:2f:2c:d1:9a:72:b4:a2: 28:5d:70:3d:3f:5c:bb:a5:7f:6d:a0:77:05:0a:98: e9:de:34:b5:0f:6e:6a:d8:a7:94:33:c6:c2:98:d2: 2a:ec:73:6d:e6:c0:22:fa:6d:9c:51:e8:d7:22:b4: 18:56:84:8c:e2:68:a7:e5:cd:2e:48:5e:01:0e:99: 06:0f:14:c9:96:32:04:7b:e3:b4:d4:22:54:a0:45: ee:89:17:0e:45:af:35:a5:f0:3e:12:c9:dd:b0:0b: a2:d6:7f:b9:88:74:c8:24:2f:f5:5c:f0:ee:b5:82: 4a:df:4e:ec:42:84:58:09:47:bb:ea:67:6d:05:bf: cb:28:e5:d1:e2:2b:40:af:aa:d4:23:1c:bb:87:93: 33:85:c2:59:ff:d4:cb:ef:27:d0:f7:8e:de:95:5e: 82:2b:0f:0c:31:2b:ca:d2:ff:61:c0:d1:32:8f:31: f7:d9:40:fc:68:3f:96:ea:0d:19:41:57:58:e1:37: 69:1a:fc:54:22:ea:a7:5c:45:8a:ba:ea:5c:42:87: 0e:5a:7d:24:33:23:6a:84:f6:7c:0d:34:d0:9c:4d: cd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B6:13:72:67:8A:3E:8D:E6:3A:E9:F1:D1:9F:A3:30:A3:B1:CF:8F X509v3 Authority Key Identifier: keyid:44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/JbYTcmeKPo3mOunx0Z-jMKOxz48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:9f04:100::/48 Signature Algorithm: sha256WithRSAEncryption c5:cc:17:0e:15:40:c8:25:81:4b:f0:47:de:25:7e:6f:6f:95: b3:9b:10:98:f1:c3:d8:ba:2f:c8:dc:e3:89:e4:d8:9c:d2:61: d2:5d:7e:21:b3:9d:a2:5e:04:3a:e2:64:fa:95:b2:2b:00:f8: 0f:08:75:03:a8:ff:3c:f5:a0:5d:a2:85:08:4b:72:51:7f:e2: 34:16:14:70:4b:ba:c5:3b:a5:2a:50:99:09:72:a1:2a:ea:3d: b8:cc:3c:83:38:9f:a4:a3:09:97:56:1f:e1:15:b2:d1:15:5b: 3c:13:03:10:48:23:e5:a4:fb:b0:db:42:92:3c:ae:97:c4:9b: 51:f8:c2:59:b0:2e:83:86:f5:2f:f4:2b:7a:02:e3:e5:fc:44: 46:dc:f9:b1:7c:4f:14:a1:b4:bb:02:b1:12:20:55:41:30:67: c1:bd:a4:d9:bb:ec:3f:0d:5c:37:10:7e:1b:bc:b5:39:bf:61: 09:ff:61:3e:ca:80:ec:28:d7:e6:68:85:4c:2f:24:95:d6:bc: 5e:5a:dd:d0:22:ae:b2:3d:aa:b3:c9:74:03:f6:39:0e:6f:78: f4:b1:b3:62:94:0a:ee:ee:b6:c1:08:b7:23:92:ea:fa:92:59: 60:11:04:85:ce:3b:92:a0:93:d1:eb:d8:cd:90:2d:e8:ec:82: 24:2d:36:bd -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4NEqj5U05KohEYn24oMBxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MDA3MTcyZGY5ZmMyZDRhMmRkYmJhOTM0Y2ViYzlmMDI4 NmQzY2EwHhcNMjYwMTAxMDYxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWI2MTM3MjY3OGEzZThkZTYzYWU5ZjFkMTlmYTMzMGEzYjFjZjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UMqqIqYyALBxhUgNFMjMe9FQPbv JxlvBOSrsDkoOLQlXFFp+i8s0ZpytKIoXXA9P1y7pX9toHcFCpjp3jS1D25q2KeU M8bCmNIq7HNt5sAi+m2cUejXIrQYVoSM4min5c0uSF4BDpkGDxTJljIEe+O01CJU oEXuiRcORa81pfA+EsndsAui1n+5iHTIJC/1XPDutYJK307sQoRYCUe76mdtBb/L KOXR4itAr6rUIxy7h5MzhcJZ/9TL7yfQ947elV6CKw8MMSvK0v9hwNEyjzH32UD8 aD+W6g0ZQVdY4TdpGvxUIuqnXEWKuupcQocOWn0kMyNqhPZ8DTTQnE3NQwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCW2E3Jnij6N5jrp8dGfozCjsc+PMB8GA1UdIwQY MBaAFEQAcXLfn8LUot27qTTOvJ8ChtPKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkFCeGN0LWZ3dFNpM2J1cE5NNjhud0tHMDhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85NDVkYmQtMmZiNy00ZGQxLTk2YTYt MDU4NWRlNGQ0ZWU3LzEvSmJZVGNtZUtQbzNtT3VueDBaLWpNS094ejQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS85NDVkYmQtMmZiNy00ZGQxLTk2YTYtMDU4NWRlNGQ0ZWU3 LzEvUkFCeGN0LWZ3dFNpM2J1cE5NNjhud0tHMDhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgWfBAEA MA0GCSqGSIb3DQEBCwUAA4IBAQDFzBcOFUDIJYFL8EfeJX5vb5WzmxCY8cPYui/I 3OOJ5Nic0mHSXX4hs52iXgQ64mT6lbIrAPgPCHUDqP889aBdooUIS3JRf+I0FhRw S7rFO6UqUJkJcqEq6j24zDyDOJ+kowmXVh/hFbLRFVs8EwMQSCPlpPuw20KSPK6X xJtR+MJZsC6DhvUv9Ct6AuPl/ERG3PmxfE8UobS7ArESIFVBMGfBvaTZu+w/DVw3 EH4bvLU5v2EJ/2E+yoDsKNfmaIVMLySV1rxeWt3QIq6yPaqzyXQD9jkOb3j0sbNi lAru7rbBCLcjkur6kllgEQSFzjuSoJPR69jNkC3o7IIkLTa9 -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:23 2026 by rpki-client