This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/njoUwBCrjs-Ku3x2BJCzZeQXGiA.roa File: njoUwBCrjs-Ku3x2BJCzZeQXGiA.roa (raw, json) Hash identifier: JhdrQRNXYBIGR4eV+utrLxlzCC0MqVvSZ/aqJ6tbldo= Subject key identifier: 9E:3A:14:C0:10:AB:8E:CF:8A:BB:7C:76:04:90:B3:65:E4:17:1A:20 Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Certificate serial: 019B7FF1BA74D14ABD71CFF4A23AB6442ECA Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/njoUwBCrjs-Ku3x2BJCzZeQXGiA.roa Signing time: Fri 02 Jan 2026 18:21:46 +0000 ROA not before: Fri 02 Jan 2026 18:21:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205441 IP address blocks: 2a03:5840:12e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:ba:74:d1:4a:bd:71:cf:f4:a2:3a:b6:44:2e:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Validity Not Before: Jan 2 18:21:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e3a14c010ab8ecf8abb7c760490b365e4171a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f3:49:05:50:81:52:25:66:ab:ef:e6:87:12: 37:ac:97:97:c9:b1:2a:ef:9b:a3:59:62:fc:a9:99: f5:b7:a4:49:b6:c4:e8:0f:b4:43:5a:8a:29:29:3d: c8:31:7d:69:b9:a4:86:5f:bb:e9:b2:2e:6e:4f:49: bc:8e:0d:9f:7a:bb:17:7c:38:4a:aa:e0:93:cf:5c: 3c:de:92:f5:cf:26:a6:32:9d:3a:c2:03:cd:81:d5: 9d:f2:d2:27:eb:11:7e:e5:92:f2:39:b0:68:2a:ff: c0:a9:a2:3d:be:99:9e:62:8a:7a:b6:20:c0:2a:04: 63:d7:72:d1:dd:e6:d1:90:1b:fb:4a:6d:a3:5c:8f: 1f:33:3f:0d:9b:ca:29:50:f7:80:5f:f8:d9:31:23: 17:45:32:84:5e:95:b6:ac:ef:f6:78:73:d1:15:5d: d2:93:25:c5:20:e6:6d:42:9c:4a:f4:46:b0:9c:1f: 37:4b:53:3b:9e:6d:b6:1e:c7:cc:68:f3:36:8b:f9: 78:ee:f3:f0:38:c1:c4:35:52:a2:3b:18:0b:9b:72: 4f:c5:ef:b6:c1:a4:84:0b:a9:54:7a:31:f8:fc:58: 20:ed:70:b6:03:87:9c:b3:09:32:58:1a:6c:9e:40: b9:41:bb:e3:7d:07:8c:f7:22:b3:0b:9f:45:6b:89: 72:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:3A:14:C0:10:AB:8E:CF:8A:BB:7C:76:04:90:B3:65:E4:17:1A:20 X509v3 Authority Key Identifier: keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/njoUwBCrjs-Ku3x2BJCzZeQXGiA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:5840:12e::/48 Signature Algorithm: sha256WithRSAEncryption 58:9b:d7:39:3d:44:fc:01:1a:55:96:4e:d8:d6:08:ca:d6:1a: ce:68:09:11:c2:ea:3f:57:7e:8f:e0:c0:b5:47:23:99:26:92: 03:f4:08:2d:cf:14:da:db:8a:f1:94:84:55:86:17:ec:e8:23: 53:32:6e:2b:8f:b3:bf:1c:2a:03:f9:3b:b0:cd:13:3b:57:db: 97:9b:63:fe:82:3e:b1:04:77:68:d7:65:a8:d9:07:b2:d2:ad: 10:64:16:58:61:c7:ae:60:9c:a9:7e:91:8b:00:e8:d4:1a:04: 05:ee:83:0d:bb:fd:4c:f9:a9:a1:4a:0b:21:04:06:4d:70:a0: 38:d5:58:e7:30:e6:77:d0:f6:0b:f4:67:33:80:24:c2:a3:4b: 5c:25:65:64:da:75:a6:ab:b0:ae:ca:f5:d9:4e:d2:95:e7:69: 7b:1a:a4:1e:57:7f:50:25:58:a4:a5:15:eb:79:b0:6f:6a:99: 45:92:7c:70:7e:91:76:dc:98:97:d6:55:d2:01:d2:e5:09:85: f9:b6:e9:4c:6d:27:c7:20:83:3c:ce:f4:56:86:09:ad:79:dd: bd:d1:1b:a0:17:ad:77:64:10:bf:b2:14:73:2f:90:61:77:9a: 44:6c:27:f8:63:cb:6b:96:4c:6d:7c:f3:17:47:aa:a6:de:dd: af:1d:f6:44 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8bp00Uq9cc/0ojq2RC7KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1 ODYzNWEwHhcNMjYwMTAyMTgyMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTNhMTRjMDEwYWI4ZWNmOGFiYjdjNzYwNDkwYjM2NWU0MTcxYTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvNJBVCBUiVmq+/mhxI3rJeXybEq 75ujWWL8qZn1t6RJtsToD7RDWoopKT3IMX1puaSGX7vpsi5uT0m8jg2fersXfDhK quCTz1w83pL1zyamMp06wgPNgdWd8tIn6xF+5ZLyObBoKv/AqaI9vpmeYop6tiDA KgRj13LR3ebRkBv7Sm2jXI8fMz8Nm8opUPeAX/jZMSMXRTKEXpW2rO/2eHPRFV3S kyXFIOZtQpxK9EawnB83S1M7nm22HsfMaPM2i/l47vPwOMHENVKiOxgLm3JPxe+2 waSEC6lUejH4/Fgg7XC2A4ecswkyWBpsnkC5QbvjfQeM9yKzC59Fa4lylQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJ46FMAQq47Pirt8dgSQs2XkFxogMB8GA1UdIwQY MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt NmNiODk3OTFkN2ZkLzEvbmpvVXdCQ3Jqcy1LdTN4MkJKQ3paZVFYR2lBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgNYQAEu MA0GCSqGSIb3DQEBCwUAA4IBAQBYm9c5PUT8ARpVlk7Y1gjK1hrOaAkRwuo/V36P 4MC1RyOZJpID9AgtzxTa24rxlIRVhhfs6CNTMm4rj7O/HCoD+TuwzRM7V9uXm2P+ gj6xBHdo12Wo2Qey0q0QZBZYYceuYJypfpGLAOjUGgQF7oMNu/1M+amhSgshBAZN cKA41VjnMOZ30PYL9GczgCTCo0tcJWVk2nWmq7CuyvXZTtKV52l7GqQeV39QJVik pRXrebBvaplFknxwfpF23JiX1lXSAdLlCYX5tulMbSfHIIM8zvRWhgmted290Rug F613ZBC/shRzL5Bhd5pEbCf4Y8trlkxtfPMXR6qm3t2vHfZE -----END CERTIFICATE-----Generated at Fri Jan 23 15:23:15 2026 by rpki-client