This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/jsOREpG4zVM_TKwZv3Klb86agJI.roa File: jsOREpG4zVM_TKwZv3Klb86agJI.roa (raw, json) Hash identifier: qFS8Sx57PXVFpR5JoMnf99bRh1FhyTpHNNL9rajwgjU= Subject key identifier: 8E:C3:91:12:91:B8:CD:53:3F:4C:AC:19:BF:72:A5:6F:CE:9A:80:92 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA70CE68F826665F33228004A72CB15 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/jsOREpG4zVM_TKwZv3Klb86agJI.roa Signing time: Fri 02 Jan 2026 12:20:35 +0000 ROA not before: Fri 02 Jan 2026 12:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214496 IP address blocks: 2a0c:9a40:8af0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:0c:e6:8f:82:66:65:f3:32:28:00:4a:72:cb:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ec3911291b8cd533f4cac19bf72a56fce9a8092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ff:4b:7d:2b:cb:90:0f:35:52:af:49:bb:70: c5:53:50:26:86:64:e1:3e:66:fe:05:f7:b6:52:49: 25:94:c9:82:97:bd:bc:e0:7e:8e:12:c0:86:bd:c5: 82:dd:02:b2:a3:fc:4b:db:eb:c1:f7:3f:19:d9:4f: 5d:a3:11:ae:8c:82:8c:78:37:49:6a:0c:f5:b1:ab: 3a:c9:c9:f3:15:36:53:3e:47:b8:f0:a7:9f:54:c7: 7d:2c:1c:90:b4:1f:46:be:6f:dc:a2:e3:14:87:71: 8c:c9:2a:46:8e:51:90:07:c9:f6:56:87:9c:44:5b: 61:33:e2:e1:8e:11:9b:5a:2b:9d:83:ff:50:31:02: 04:e1:08:b9:6d:5b:52:bb:18:77:13:96:17:2a:48: 4f:62:55:8a:ef:a5:4d:d9:6d:43:bc:9f:9e:2e:a3: a8:3b:be:ae:b5:34:52:3b:e6:29:0a:5f:da:44:7d: 30:c3:fa:0d:68:5a:9d:27:10:d3:05:53:1d:22:53: 3a:a6:40:d6:a8:d8:7a:5a:9a:c2:4c:bc:ce:2a:07: fc:4a:1e:13:fe:aa:c6:1a:41:6f:8e:1a:3c:07:43: b9:9c:e8:3f:62:47:2f:5d:52:22:39:da:6b:64:d1: 4a:93:93:01:31:69:3c:09:c1:36:6d:5b:61:76:8f: f9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C3:91:12:91:B8:CD:53:3F:4C:AC:19:BF:72:A5:6F:CE:9A:80:92 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/jsOREpG4zVM_TKwZv3Klb86agJI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8af0::/48 Signature Algorithm: sha256WithRSAEncryption 31:0b:11:85:73:ff:d5:24:88:d6:a3:2e:61:02:5f:06:55:24: 3f:cd:83:b7:fb:ef:fe:f6:65:8d:3b:1a:0d:8f:1a:32:a4:9f: e0:c8:b4:8b:e1:6e:f2:3a:78:c9:24:c0:bf:c8:02:2a:75:e9: 5d:90:fc:12:ee:40:da:ca:a9:8d:28:a8:ff:18:91:ed:29:9e: e1:6c:32:83:61:12:b6:7b:df:31:05:75:4b:7f:eb:ad:d5:b6: 80:0f:d3:98:bd:dd:be:03:3f:72:15:5f:ec:71:95:57:4a:b6: 0c:b9:fd:35:94:70:cb:23:37:b7:1b:0b:ab:83:8d:29:33:4f: 60:10:6f:b9:2e:75:eb:49:0c:7c:85:00:8f:c1:d4:14:14:7f: cc:59:bb:42:e1:f4:1a:b0:10:b2:4a:07:22:38:15:33:f3:a0: 40:38:fb:89:35:6d:f4:95:44:72:77:ae:e9:22:b5:75:91:7e: 74:b9:75:d2:b7:5c:05:c9:c5:61:be:dd:8d:91:b7:ce:f4:b6: 5c:9a:cd:62:8d:3c:1f:2c:2b:cf:96:94:03:3a:35:13:e6:47: c5:af:4d:e6:5b:ae:f7:a6:8c:46:63:0d:d6:ec:1f:fa:f3:ed: 3c:21:6c:c8:19:24:4a:fe:41:c5:59:ea:53:5a:53:f6:9f:88: de:d6:74:32 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pwzmj4JmZfMyKABKcssVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWMzOTExMjkxYjhjZDUzM2Y0Y2FjMTliZjcyYTU2ZmNlOWE4MDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/9LfSvLkA81Uq9Ju3DFU1AmhmTh Pmb+Bfe2UkkllMmCl7284H6OEsCGvcWC3QKyo/xL2+vB9z8Z2U9doxGujIKMeDdJ agz1sas6ycnzFTZTPke48KefVMd9LByQtB9Gvm/couMUh3GMySpGjlGQB8n2Voec RFthM+LhjhGbWiudg/9QMQIE4Qi5bVtSuxh3E5YXKkhPYlWK76VN2W1DvJ+eLqOo O76utTRSO+YpCl/aRH0ww/oNaFqdJxDTBVMdIlM6pkDWqNh6WprCTLzOKgf8Sh4T /qrGGkFvjho8B0O5nOg/YkcvXVIiOdprZNFKk5MBMWk8CcE2bVthdo/5owIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFI7DkRKRuM1TP0ysGb9ypW/OmoCSMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvanNPUkVwRzR6Vk1fVEt3WnYzS2xiODZhZ0pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIrw MA0GCSqGSIb3DQEBCwUAA4IBAQAxCxGFc//VJIjWoy5hAl8GVSQ/zYO3++/+9mWN OxoNjxoypJ/gyLSL4W7yOnjJJMC/yAIqdeldkPwS7kDayqmNKKj/GJHtKZ7hbDKD YRK2e98xBXVLf+ut1baAD9OYvd2+Az9yFV/scZVXSrYMuf01lHDLIze3Gwurg40p M09gEG+5LnXrSQx8hQCPwdQUFH/MWbtC4fQasBCySgciOBUz86BAOPuJNW30lURy d67pIrV1kX50uXXSt1wFycVhvt2NkbfO9LZcms1ijTwfLCvPlpQDOjUT5kfFr03m W673poxGYw3W7B/68+08IWzIGSRK/kHFWepTWlP2n4je1nQy -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:39 2026 by rpki-client