This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/jijjZm8F0HuGbRUkGeKsiJGoBFo.roa File: jijjZm8F0HuGbRUkGeKsiJGoBFo.roa (raw, json) Hash identifier: hUZRf3MQesRJN0lUd55TxEVUNeDlDom/sll33tzce6c= Subject key identifier: 8E:28:E3:66:6F:05:D0:7B:86:6D:15:24:19:E2:AC:88:91:A8:04:5A Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA718FADB0D1A145EC8E3BD21A0225E Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/jijjZm8F0HuGbRUkGeKsiJGoBFo.roa Signing time: Fri 02 Jan 2026 12:20:38 +0000 ROA not before: Fri 02 Jan 2026 12:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216191 IP address blocks: 2a0c:9a40:8c00::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:18:fa:db:0d:1a:14:5e:c8:e3:bd:21:a0:22:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e28e3666f05d07b866d152419e2ac8891a8045a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fc:85:65:5f:c3:7d:4c:37:51:dd:87:45:b3: aa:4b:0c:83:3f:41:54:aa:73:6c:ea:e4:bd:53:f8: fa:83:f8:60:dc:e8:07:6f:e3:b6:51:72:c7:08:60: 2c:81:5c:a1:86:10:25:a3:0d:ea:22:e1:82:82:11: 6f:06:fb:bd:9f:9f:92:9f:2d:e0:81:09:2d:14:c2: 6e:64:ce:c8:5a:a0:4b:b5:04:75:90:d9:61:bf:54: 5e:09:35:29:a9:1c:b6:cb:ca:12:05:0c:08:a4:17: 19:0c:1f:04:21:0f:d2:43:4a:79:31:03:98:c0:fe: 58:69:76:03:be:59:f7:3a:be:4c:20:ea:2c:53:f5: 97:58:c7:6d:80:0d:51:cc:0c:87:c1:a3:68:e0:39: 1a:a2:1b:b3:cd:08:4e:4b:2f:86:10:f6:71:4a:ea: 49:1c:a6:dd:73:4e:31:ec:45:34:42:ff:ea:6f:99: 73:74:ef:d0:8f:2f:2d:72:21:6c:49:72:65:bc:fc: 75:61:38:34:61:14:0f:e7:4f:98:51:d7:9c:29:90: 7a:e1:ce:23:bc:22:af:52:37:f3:4e:9e:90:15:21: b7:63:e2:c7:1f:0a:44:fd:88:e4:da:63:a1:9f:85: 5b:cb:44:cf:e8:e3:50:90:a0:b0:0b:f8:96:9b:5f: 8b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:28:E3:66:6F:05:D0:7B:86:6D:15:24:19:E2:AC:88:91:A8:04:5A X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/jijjZm8F0HuGbRUkGeKsiJGoBFo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8c00::/44 Signature Algorithm: sha256WithRSAEncryption 85:d2:4a:13:a5:60:67:93:de:2e:43:af:01:49:03:29:60:fb: 19:5e:0e:0c:14:1c:b4:bb:5a:d5:2a:b0:b3:d8:c3:02:6f:e4: a2:c7:5e:18:fc:ef:c4:eb:62:63:11:ca:04:43:95:33:ef:ef: 21:1e:ae:61:a8:dc:45:72:4c:3f:d1:91:69:a7:d2:1d:a4:e5: 01:b9:b7:25:9e:46:15:a4:b8:78:73:87:b3:98:fa:18:20:3c: 97:6c:7b:e3:ed:66:7c:28:c8:4c:b3:74:f5:0e:4a:f9:60:a7: bc:c9:ab:bb:1f:f0:9a:aa:b1:52:c6:61:6e:5b:0b:77:c4:4e: 80:f2:90:84:0b:99:2e:b8:0e:03:22:58:90:48:26:c0:47:c1: ba:06:2e:5f:2a:11:e4:62:74:61:00:4f:4b:a9:e9:f7:37:4b: 93:68:0e:29:21:e0:9f:f8:da:99:0b:e6:8f:d0:d6:0c:86:b5: 1d:9c:73:60:2f:a9:31:5f:9d:ce:ff:f2:06:57:8b:96:c2:c2: 44:85:c2:c8:d4:f1:7a:f9:1a:07:f2:6b:2a:51:8c:3a:12:7a: 0b:c6:29:30:1f:ba:28:e9:e2:ab:1d:f9:36:b2:8c:5f:1c:96: dc:e8:38:57:55:aa:8a:9a:91:78:29:40:18:99:16:4b:b7:88: 43:e8:2a:ec -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pxj62w0aFF7I470hoCJeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTI4ZTM2NjZmMDVkMDdiODY2ZDE1MjQxOWUyYWM4ODkxYTgwNDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfyFZV/DfUw3Ud2HRbOqSwyDP0FU qnNs6uS9U/j6g/hg3OgHb+O2UXLHCGAsgVyhhhAlow3qIuGCghFvBvu9n5+Sny3g gQktFMJuZM7IWqBLtQR1kNlhv1ReCTUpqRy2y8oSBQwIpBcZDB8EIQ/SQ0p5MQOY wP5YaXYDvln3Or5MIOosU/WXWMdtgA1RzAyHwaNo4DkaohuzzQhOSy+GEPZxSupJ HKbdc04x7EU0Qv/qb5lzdO/Qjy8tciFsSXJlvPx1YTg0YRQP50+YUdecKZB64c4j vCKvUjfzTp6QFSG3Y+LHHwpE/Yjk2mOhn4Vby0TP6ONQkKCwC/iWm1+LawIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFI4o42ZvBdB7hm0VJBnirIiRqARaMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvamlqalptOEYwSHVHYlJVa0dlS3NpSkdvQkZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQIwA MA0GCSqGSIb3DQEBCwUAA4IBAQCF0koTpWBnk94uQ68BSQMpYPsZXg4MFBy0u1rV KrCz2MMCb+Six14Y/O/E62JjEcoEQ5Uz7+8hHq5hqNxFckw/0ZFpp9IdpOUBubcl nkYVpLh4c4ezmPoYIDyXbHvj7WZ8KMhMs3T1Dkr5YKe8yau7H/CaqrFSxmFuWwt3 xE6A8pCEC5kuuA4DIliQSCbAR8G6Bi5fKhHkYnRhAE9Lqen3N0uTaA4pIeCf+NqZ C+aP0NYMhrUdnHNgL6kxX53O//IGV4uWwsJEhcLI1PF6+RoH8msqUYw6EnoLxikw H7oo6eKrHfk2soxfHJbc6DhXVaqKmpF4KUAYmRZLt4hD6Crs -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:34 2026 by rpki-client