This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/JJDPAskgUp2o2RpHKBF_CXroQLU.roa File: JJDPAskgUp2o2RpHKBF_CXroQLU.roa (raw, json) Hash identifier: wdXFLxjEchT+58QLxNy3o9YWuwMcllorgBcJ37PiQWk= Subject key identifier: 24:90:CF:02:C9:20:52:9D:A8:D9:1A:47:28:11:7F:09:7A:E8:40:B5 Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019B7EA764066B177CADBC9832D8C5FFB968 Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/JJDPAskgUp2o2RpHKBF_CXroQLU.roa Signing time: Fri 02 Jan 2026 12:20:57 +0000 ROA not before: Fri 02 Jan 2026 12:20:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213261 IP address blocks: 2a0d:6f80:2a43::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:64:06:6b:17:7c:ad:bc:98:32:d8:c5:ff:b9:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Jan 2 12:20:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2490cf02c920529da8d91a4728117f097ae840b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bc:cf:66:ca:79:3a:61:ad:5f:a7:05:d3:c9: 38:30:57:e5:ef:32:de:db:0d:2b:dd:5f:b7:34:a2: df:fe:11:86:26:86:af:16:c1:54:fa:c4:f3:b3:51: 76:c4:02:3e:c6:e3:ab:68:de:0b:81:7d:4d:1f:0d: 65:22:96:a7:33:f4:ad:30:18:4c:e6:5e:21:da:d1: 93:54:ac:02:bc:5c:4a:4d:ea:00:7f:9c:b9:6d:2c: fe:63:62:7c:71:f5:64:35:ee:c3:22:d3:a2:e7:77: c5:a8:50:f3:5c:ce:cf:39:50:e1:61:46:5b:f0:85: b8:10:0c:c8:6b:0f:df:2c:bb:14:f8:8f:02:d6:f1: e7:c2:af:52:b1:00:bf:e6:40:8f:8e:a0:a0:bc:fd: 8a:f0:ff:d1:80:58:01:ff:17:18:53:68:5e:d4:c5: 57:b4:88:a0:91:79:46:e0:ea:0c:15:e6:9f:66:fa: 42:5b:43:75:a7:d6:e3:72:1a:70:d0:e6:83:24:9f: f6:49:4a:5b:9a:f9:3c:bf:0a:04:e7:90:ac:c8:12: c2:27:2e:0d:e0:0f:ca:6d:b9:46:13:56:67:0e:59: b4:e9:8c:71:62:5b:14:2a:54:77:22:3b:0d:2c:6a: 46:6c:4c:37:65:e2:31:af:60:9d:df:3f:3d:7d:9f: 1a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:90:CF:02:C9:20:52:9D:A8:D9:1A:47:28:11:7F:09:7A:E8:40:B5 X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/JJDPAskgUp2o2RpHKBF_CXroQLU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:6f80:2a43::/48 Signature Algorithm: sha256WithRSAEncryption ca:ba:92:58:37:7e:e1:79:89:ae:16:67:41:11:7b:e6:99:90: 82:e7:97:77:6e:53:9d:c4:f9:83:db:5f:6d:67:e2:51:48:de: fe:c9:b0:78:4f:4e:32:b0:e6:40:96:f9:30:f5:4f:31:ab:aa: c7:11:50:50:a0:bf:d1:5b:54:de:ca:fb:33:98:07:71:16:d1: 48:78:26:72:1e:63:72:8f:27:ba:04:9b:4e:56:2c:e7:36:ed: c4:c8:fa:7a:17:75:f5:74:50:a8:31:bc:ce:70:aa:0d:e3:54: 98:07:f6:44:39:28:af:58:d5:9c:6f:b4:f7:1d:87:f7:b3:29: b1:6c:09:82:f3:56:da:75:e3:f8:99:3f:f8:27:94:a9:51:b8: ae:d7:17:d2:0e:68:c4:8a:b3:5c:44:c0:0b:07:99:9d:df:f5: ce:a3:1d:15:ee:da:c2:e9:73:8a:a0:ed:38:32:af:b8:84:58: ef:4f:e0:bd:ba:af:64:ea:9f:45:0a:87:a2:ba:64:b2:f2:c0: a2:3b:8f:ed:05:45:84:d6:34:7c:b7:f5:5e:ef:7c:1c:c4:f1: 7e:a4:3d:d5:e9:eb:9c:98:ed:e7:3f:2a:be:9f:68:86:7d:ab: b1:38:c2:5c:0f:81:4a:64:52:ce:d9:2c:54:15:0f:74:33:99: 69:3d:bc:84 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+p2QGaxd8rbyYMtjF/7loMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjYwMTAyMTIyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDkwY2YwMmM5MjA1MjlkYThkOTFhNDcyODExN2YwOTdhZTg0MGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rzPZsp5OmGtX6cF08k4MFfl7zLe 2w0r3V+3NKLf/hGGJoavFsFU+sTzs1F2xAI+xuOraN4LgX1NHw1lIpanM/StMBhM 5l4h2tGTVKwCvFxKTeoAf5y5bSz+Y2J8cfVkNe7DItOi53fFqFDzXM7POVDhYUZb 8IW4EAzIaw/fLLsU+I8C1vHnwq9SsQC/5kCPjqCgvP2K8P/RgFgB/xcYU2he1MVX tIigkXlG4OoMFeafZvpCW0N1p9bjchpw0OaDJJ/2SUpbmvk8vwoE55CsyBLCJy4N 4A/KbblGE1ZnDlm06YxxYlsUKlR3IjsNLGpGbEw3ZeIxr2Cd3z89fZ8abwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCSQzwLJIFKdqNkaRygRfwl66EC1MB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvSkpEUEFza2dVcDJvMlJwSEtCRl9DWHJvUUxVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg1vgCpD MA0GCSqGSIb3DQEBCwUAA4IBAQDKupJYN37heYmuFmdBEXvmmZCC55d3blOdxPmD 219tZ+JRSN7+ybB4T04ysOZAlvkw9U8xq6rHEVBQoL/RW1TeyvszmAdxFtFIeCZy HmNyjye6BJtOViznNu3EyPp6F3X1dFCoMbzOcKoN41SYB/ZEOSivWNWcb7T3HYf3 symxbAmC81badeP4mT/4J5SpUbiu1xfSDmjEirNcRMALB5md3/XOox0V7trC6XOK oO04Mq+4hFjvT+C9uq9k6p9FCoeiumSy8sCiO4/tBUWE1jR8t/Ve73wcxPF+pD3V 6eucmO3nPyq+n2iGfauxOMJcD4FKZFLO2SxUFQ90M5lpPbyE -----END CERTIFICATE-----Generated at Sat Jan 3 18:57:54 2026 by rpki-client