This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/Jy_fzgVxHf9zx-pZlXoW-eUhQ5Y.roa File: Jy_fzgVxHf9zx-pZlXoW-eUhQ5Y.roa (raw, json) Hash identifier: L1aIopxOUtbBLkdUuaCRDC0ncbpwnY8QrLA/wvRFK5A= Subject key identifier: 27:2F:DF:CE:05:71:1D:FF:73:C7:EA:59:95:7A:16:F9:E5:21:43:96 Certificate issuer: /CN=6aa8fa75c5020cd6218cf7f109de420265204bac Certificate serial: 019B7FF206B35AB3F5AF9B176F71A57CFDCF Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/Jy_fzgVxHf9zx-pZlXoW-eUhQ5Y.roa Signing time: Fri 02 Jan 2026 18:22:06 +0000 ROA not before: Fri 02 Jan 2026 18:22:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215913 IP address blocks: 46.29.36.0/24 maxlen: 24 2a13:d040:2::/48 maxlen: 48 2a13:d040:3::/48 maxlen: 48 2a13:d040:4::/48 maxlen: 48 2a13:d046:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:06:b3:5a:b3:f5:af:9b:17:6f:71:a5:7c:fd:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac Validity Not Before: Jan 2 18:22:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=272fdfce05711dff73c7ea59957a16f9e5214396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ca:47:77:87:e3:59:a3:1b:65:fc:19:0d:60: 1e:98:ea:9e:30:4a:01:36:6b:a2:c6:36:10:44:e0: 12:a4:c6:d9:94:af:dc:7e:3a:a3:77:a0:a2:13:17: aa:46:af:b7:ec:2e:b8:77:36:7f:ae:d0:b0:3a:4c: 14:0b:56:e2:f3:77:3b:28:70:85:7b:ea:c9:bb:c5: 5e:86:da:1e:74:a4:5e:21:3d:44:02:3a:3c:8f:e8: 7d:95:7f:4f:5c:51:19:a3:11:61:1d:50:8f:e1:ad: 51:f6:25:aa:8e:5a:39:10:f2:ef:32:59:d9:03:1e: 35:02:69:b2:88:6d:4c:71:e6:30:a3:02:95:29:cb: e2:51:6b:9c:85:8d:ba:9c:aa:0d:f7:f3:78:3a:87: d5:e2:bd:44:5a:d2:db:ac:fc:a5:15:28:e1:17:38: ec:8a:74:be:28:bc:42:cf:8e:6d:81:59:0e:f1:29: 39:e4:a9:a7:0c:aa:40:7a:89:6c:e7:11:11:1e:30: 5c:61:90:37:1b:75:79:cf:4f:05:86:d6:77:40:93: 29:fa:e1:9c:05:a5:26:3b:fd:de:35:f5:90:e8:df: 14:71:76:c4:1d:be:cb:e4:06:c9:92:90:05:53:4b: e6:fa:a9:78:ab:ee:98:23:ed:0b:05:98:d0:e2:4d: 97:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:2F:DF:CE:05:71:1D:FF:73:C7:EA:59:95:7A:16:F9:E5:21:43:96 X509v3 Authority Key Identifier: keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/Jy_fzgVxHf9zx-pZlXoW-eUhQ5Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.29.36.0/24 IPv6: 2a13:d040:2::-2a13:d040:4:ffff:ffff:ffff:ffff:ffff 2a13:d046:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 3e:a6:58:ee:41:d0:4a:cf:be:17:ef:4e:4a:be:bf:18:fc:e5: c7:96:dc:d7:ac:57:2d:ed:4f:64:96:0d:71:26:c8:76:d0:72: ff:91:0f:0b:ef:30:84:3e:65:3d:3a:95:d0:c6:b1:0d:7b:7b: 2d:f4:93:55:b6:70:35:08:06:64:e0:85:89:a3:b9:27:5d:7d: 5d:1a:c5:21:ee:c9:ee:45:57:f3:25:9d:dd:92:d6:d7:0b:9c: 25:78:f4:5a:19:39:92:29:a7:51:a9:e7:f9:14:02:24:0d:a1: 97:61:cb:3a:8c:5c:db:69:8c:5f:e2:37:00:7a:f8:30:f5:3a: 6b:59:38:87:43:34:04:4f:e1:cc:b7:16:ca:1b:70:15:6a:d5: 90:34:5c:7d:5b:6f:72:26:ea:2d:ec:fb:b0:26:fa:57:29:60: 40:82:9f:9d:ca:02:cf:a7:e9:f2:83:d1:27:95:d6:86:c3:d7: b5:e2:ad:1f:a5:3f:25:4c:cc:74:cf:20:d1:c9:ed:7d:d9:8a: 69:69:19:16:6b:c6:09:07:12:01:44:20:22:f6:cc:8f:b2:85: 6e:49:df:e7:55:81:b3:5d:9b:08:ea:8f:22:04:d6:b5:ef:c1: 36:93:77:e6:40:a0:d3:8d:f6:d0:a3:25:15:2c:a0:65:f7:4a: 7c:6d:b6:2a -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZt/8gazWrP1r5sXb3GlfP3PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhYThmYTc1YzUwMjBjZDYyMThjZjdmMTA5ZGU0MjAyNjUy MDRiYWMwHhcNMjYwMTAyMTgyMjA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzJmZGZjZTA1NzExZGZmNzNjN2VhNTk5NTdhMTZmOWU1MjE0Mzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8pHd4fjWaMbZfwZDWAemOqeMEoB NmuixjYQROASpMbZlK/cfjqjd6CiExeqRq+37C64dzZ/rtCwOkwUC1bi83c7KHCF e+rJu8VehtoedKReIT1EAjo8j+h9lX9PXFEZoxFhHVCP4a1R9iWqjlo5EPLvMlnZ Ax41AmmyiG1MceYwowKVKcviUWuchY26nKoN9/N4OofV4r1EWtLbrPylFSjhFzjs inS+KLxCz45tgVkO8Sk55KmnDKpAeols5xERHjBcYZA3G3V5z08FhtZ3QJMp+uGc BaUmO/3eNfWQ6N8UcXbEHb7L5AbJkpAFU0vm+ql4q+6YI+0LBZjQ4k2XYwIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFCcv384FcR3/c8fqWZV6FvnlIUOWMB8GA1UdIwQY MBaAFGqo+nXFAgzWIYz38QneQgJlIEusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXFqNmRjVUNETlloalBmeENkNUNBbVVnUzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy83MDEyZDgtYWZhMS00MTliLThiNjAt MzVjNjNmYTc2NWEyLzEvSnlfZnpnVnhIZjl6eC1wWmxYb1ctZVVoUTVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy83MDEyZDgtYWZhMS00MTliLThiNjAtMzVjNjNmYTc2NWEy LzEvYXFqNmRjVUNETlloalBmeENkNUNBbVVnUzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAMBAIAATAGAwQALh0kMCME AgACMB0wEgMHASoT0EAAAgMHACoT0EAABAMHACoT0Eb//zANBgkqhkiG9w0BAQsF AAOCAQEAPqZY7kHQSs++F+9OSr6/GPzlx5bc16xXLe1PZJYNcSbIdtBy/5EPC+8w hD5lPTqV0MaxDXt7LfSTVbZwNQgGZOCFiaO5J119XRrFIe7J7kVX8yWd3ZLW1wuc JXj0Whk5kimnUann+RQCJA2hl2HLOoxc22mMX+I3AHr4MPU6a1k4h0M0BE/hzLcW yhtwFWrVkDRcfVtvcibqLez7sCb6VylgQIKfncoCz6fp8oPRJ5XWhsPXteKtH6U/ JUzMdM8g0cntfdmKaWkZFmvGCQcSAUQgIvbMj7KFbknf51WBs12bCOqPIgTWte/B NpN35kCg04320KMlFSygZfdKfG22Kg== -----END CERTIFICATE-----Generated at Sat Jan 10 22:32:57 2026 by rpki-client