This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/JsojVSNGW_6MQsylEevXw37Un4I.roa File: JsojVSNGW_6MQsylEevXw37Un4I.roa (raw, json) Hash identifier: uyp9vv7Icxi5xYgKVSefYCJmGLo/DyClRuzzUQ+0KJI= Subject key identifier: 26:CA:23:55:23:46:5B:FE:8C:42:CC:A5:11:EB:D7:C3:7E:D4:9F:82 Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Certificate serial: 019A731E530246B7E24532EF08322C991118 Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/JsojVSNGW_6MQsylEevXw37Un4I.roa Signing time: Tue 11 Nov 2025 13:32:38 +0000 ROA not before: Tue 11 Nov 2025 13:32:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 62240 IP address blocks: 2a11:b687::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:1e:53:02:46:b7:e2:45:32:ef:08:32:2c:99:11:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Validity Not Before: Nov 11 13:32:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=26ca235523465bfe8c42cca511ebd7c37ed49f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fb:06:f5:de:0c:33:45:40:83:dd:e2:dd:77: db:9b:de:6c:8f:87:ac:cf:79:ac:40:69:28:71:85: 06:d2:9f:59:f5:df:2c:08:c0:40:5a:ef:ac:ee:7a: 37:8a:ba:75:c2:51:81:1c:ac:93:17:a5:6a:78:84: 1b:aa:12:d7:22:0b:cc:ed:e2:59:59:b2:a6:a8:37: a2:3e:80:1f:7f:8b:72:1f:13:b9:c6:81:f4:95:b8: 83:c8:3b:5e:2e:05:24:38:63:97:65:27:a4:66:d9: 12:64:45:18:9c:10:99:e0:ac:45:23:8d:87:f0:e8: c4:ea:61:de:6d:70:22:b9:11:c6:a7:e8:7d:14:db: 18:e9:f5:4b:aa:93:9b:86:14:e3:66:17:d6:ad:f5: 5c:f8:95:15:4e:ff:f7:c6:c8:e3:a7:87:f3:e9:22: 77:cc:14:00:73:56:c0:67:22:e9:a4:d9:3d:e2:cb: ba:1f:ce:51:aa:af:f9:17:e9:b0:4f:1b:98:29:ba: e6:68:15:c3:52:44:38:e1:3a:81:f4:da:c1:82:37: 57:20:46:b2:12:81:85:7a:06:29:84:ed:b4:38:e6: a4:be:db:27:4c:83:49:15:29:4f:05:11:1b:d9:a9: 0a:bb:dc:ea:58:22:ee:be:75:cf:3a:3d:5d:6c:f4: af:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:CA:23:55:23:46:5B:FE:8C:42:CC:A5:11:EB:D7:C3:7E:D4:9F:82 X509v3 Authority Key Identifier: keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/JsojVSNGW_6MQsylEevXw37Un4I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:b687::/32 Signature Algorithm: sha256WithRSAEncryption 40:d7:ec:22:d5:f5:8f:2a:b8:74:7f:f4:1f:a7:83:43:02:20: 75:d7:ad:74:68:7c:37:64:53:38:93:63:64:d3:73:dd:20:ec: 45:a9:07:d4:43:0f:2c:ab:ee:99:7a:3d:41:7c:dd:29:31:dc: 28:55:4a:6a:46:2b:9f:e8:e1:de:f1:ab:45:8a:41:53:72:29: e6:72:0d:50:a2:ab:6c:0a:c9:96:3a:4d:0f:61:49:96:4c:8a: c5:4c:cf:34:d0:29:82:d3:57:6f:05:59:c3:8a:ef:00:52:67: a0:a7:f6:6b:eb:b8:f3:a7:01:11:7f:df:68:87:16:97:0c:dd: 9c:d6:74:d8:17:a3:80:d3:b8:ea:86:b1:f6:fc:e7:a1:5b:9c: 7f:86:ec:8e:e6:e2:2b:6d:06:08:69:21:7a:97:71:46:c0:39: a6:e7:eb:97:15:9e:38:be:5b:a8:51:ec:2e:e5:2e:bc:0b:80: ea:b5:b6:7a:54:98:a8:06:0d:eb:06:4e:5c:6b:c5:a4:02:cb: 48:45:70:68:15:dd:e9:5d:bb:d4:3c:d1:75:46:16:d0:68:02: 2c:e3:5a:0c:ee:55:0c:e0:dd:86:63:01:2f:eb:db:22:3f:da: 4c:2f:07:dc:32:46:29:7b:72:02:4a:c3:8a:54:46:8d:9a:dc: d1:79:2a:59 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZpzHlMCRrfiRTLvCDIsmREYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk NTBjM2YwHhcNMjUxMTExMTMzMjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmNhMjM1NTIzNDY1YmZlOGM0MmNjYTUxMWViZDdjMzdlZDQ5ZjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPsG9d4MM0VAg93i3Xfbm95sj4es z3msQGkocYUG0p9Z9d8sCMBAWu+s7no3irp1wlGBHKyTF6VqeIQbqhLXIgvM7eJZ WbKmqDeiPoAff4tyHxO5xoH0lbiDyDteLgUkOGOXZSekZtkSZEUYnBCZ4KxFI42H 8OjE6mHebXAiuRHGp+h9FNsY6fVLqpObhhTjZhfWrfVc+JUVTv/3xsjjp4fz6SJ3 zBQAc1bAZyLppNk94su6H85Rqq/5F+mwTxuYKbrmaBXDUkQ44TqB9NrBgjdXIEay EoGFegYphO20OOakvtsnTINJFSlPBREb2akKu9zqWCLuvnXPOj1dbPSvJQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFCbKI1UjRlv+jELMpRHr18N+1J+CMB8GA1UdIwQY MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt OWZjZWI0NWQ2ZmRiLzEvSnNvalZTTkdXXzZNUXN5bEVldlh3MzdVbjRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhG2hzAN BgkqhkiG9w0BAQsFAAOCAQEAQNfsItX1jyq4dH/0H6eDQwIgddetdGh8N2RTOJNj ZNNz3SDsRakH1EMPLKvumXo9QXzdKTHcKFVKakYrn+jh3vGrRYpBU3Ip5nINUKKr bArJljpND2FJlkyKxUzPNNApgtNXbwVZw4rvAFJnoKf2a+u486cBEX/faIcWlwzd nNZ02BejgNO46oax9vznoVucf4bsjubiK20GCGkhepdxRsA5pufrlxWeOL5bqFHs LuUuvAuA6rW2elSYqAYN6wZOXGvFpALLSEVwaBXd6V271DzRdUYW0GgCLONaDO5V DODdhmMBL+vbIj/aTC8H3DJGKXtyAkrDilRGjZrc0XkqWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:44:59 2025 by rpki-client