This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/hEkW5mPaiOAxddilnP_CPLFDXhc.roa File: hEkW5mPaiOAxddilnP_CPLFDXhc.roa (raw, json) Hash identifier: /6ykYqPmG+XWL1O5y4iJk4sExLVT7VAvltUQvirqw3w= Subject key identifier: 84:49:16:E6:63:DA:88:E0:31:75:D8:A5:9C:FF:C2:3C:B1:43:5E:17 Certificate issuer: /CN=8e9f898cf75daf6800093f2567aaf72aa986e29c Certificate serial: 019B7BA37BE46EB15DC610E166D1DDDBA20B Authority key identifier: 8E:9F:89:8C:F7:5D:AF:68:00:09:3F:25:67:AA:F7:2A:A9:86:E2:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/hEkW5mPaiOAxddilnP_CPLFDXhc.roa Signing time: Thu 01 Jan 2026 22:17:50 +0000 ROA not before: Thu 01 Jan 2026 22:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50572 IP address blocks: 2001:67c:2834::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.crl rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.mft rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:7b:e4:6e:b1:5d:c6:10:e1:66:d1:dd:db:a2:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e9f898cf75daf6800093f2567aaf72aa986e29c Validity Not Before: Jan 1 22:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=844916e663da88e03175d8a59cffc23cb1435e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:38:b5:c0:a1:c7:4f:dd:34:6d:22:0c:3e:ad: ff:7a:d6:0b:97:fd:7d:6f:b8:30:68:51:f0:66:65: 23:23:02:a3:15:f3:8b:c6:bc:1c:63:b4:53:b9:20: 49:85:4d:e3:1d:8d:9d:51:06:9a:0e:7f:d0:5c:54: 71:8a:61:4e:5b:1a:a5:d8:81:a7:9c:ab:66:7d:89: 79:f0:ff:d7:dd:10:3a:49:d4:43:49:56:e8:79:7e: 1b:34:9f:38:c6:a5:19:53:40:a5:ea:ad:22:da:48: 22:b7:85:08:fa:af:17:62:11:3a:fc:9c:c7:6c:cd: b7:8b:8d:c3:fe:5d:14:38:63:21:d8:20:7e:67:39: 05:59:ff:53:f9:be:b1:47:80:2b:c3:d2:66:d4:e4: 2c:bf:96:05:b4:63:d0:f4:39:a5:96:ac:be:23:dc: 0c:f1:d7:49:b0:37:a8:61:08:90:09:e9:1e:31:20: 0c:86:e3:05:d5:bc:6d:df:cc:6a:98:31:5e:eb:09: e2:40:ee:b8:65:34:68:08:04:7a:94:38:6a:62:ff: 0e:d9:4a:f9:f6:6e:57:ab:26:ca:00:cb:f1:bf:31: c7:67:2a:72:6c:c0:f9:0f:26:0c:ad:dc:d5:7c:5b: 72:f1:cf:40:66:bb:1b:a2:a3:16:9d:0b:0d:c6:0f: eb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:49:16:E6:63:DA:88:E0:31:75:D8:A5:9C:FF:C2:3C:B1:43:5E:17 X509v3 Authority Key Identifier: keyid:8E:9F:89:8C:F7:5D:AF:68:00:09:3F:25:67:AA:F7:2A:A9:86:E2:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/hEkW5mPaiOAxddilnP_CPLFDXhc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2834::/48 Signature Algorithm: sha256WithRSAEncryption c4:33:77:9a:46:2a:8d:2d:5b:66:c0:ed:dd:60:d4:46:15:60: b5:07:d2:71:e7:3f:44:b6:2b:14:72:c0:34:d3:65:c5:2e:3e: 40:e8:78:83:23:a7:8f:31:a3:f6:d5:17:3c:72:87:84:bb:f4: 83:dc:b8:2a:51:b5:b5:2d:0e:ea:6e:0e:55:f3:a5:85:3b:a5: 45:66:79:32:f4:0d:24:59:58:fd:2e:b7:e6:86:c9:72:2b:99: 4d:51:81:4c:28:97:03:68:99:1c:80:10:ce:c6:39:a6:fa:ad: 52:1d:3b:5c:ea:9a:ae:1f:78:8f:50:ea:0d:23:d1:39:82:28: 6e:a6:65:fd:a0:5c:de:69:e8:52:09:e9:e1:d1:34:c5:66:8f: 9d:71:bb:d5:6a:20:9c:82:97:d7:8a:12:f8:6b:44:3f:5f:34: 03:cb:27:6a:c0:72:a1:67:34:f2:2b:28:69:2e:3f:ac:84:d2: a1:31:53:ff:01:d8:76:68:9f:19:ec:d6:15:5e:3c:e7:87:c7: f0:34:54:3e:5a:8a:ad:d1:04:b9:8c:35:de:04:79:94:15:4e: 14:62:39:30:6d:b2:c3:c4:f9:98:a8:cc:2d:41:3f:e8:66:1d: ee:a8:07:57:7e:30:d3:73:b5:97:a2:05:79:f8:07:4a:ea:49: 66:93:b0:b0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7o3vkbrFdxhDhZtHd26ILMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlOWY4OThjZjc1ZGFmNjgwMDA5M2YyNTY3YWFmNzJhYTk4 NmUyOWMwHhcNMjYwMTAxMjIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDQ5MTZlNjYzZGE4OGUwMzE3NWQ4YTU5Y2ZmYzIzY2IxNDM1ZTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTi1wKHHT900bSIMPq3/etYLl/19 b7gwaFHwZmUjIwKjFfOLxrwcY7RTuSBJhU3jHY2dUQaaDn/QXFRximFOWxql2IGn nKtmfYl58P/X3RA6SdRDSVboeX4bNJ84xqUZU0Cl6q0i2kgit4UI+q8XYhE6/JzH bM23i43D/l0UOGMh2CB+ZzkFWf9T+b6xR4Arw9Jm1OQsv5YFtGPQ9Dmllqy+I9wM 8ddJsDeoYQiQCekeMSAMhuMF1bxt38xqmDFe6wniQO64ZTRoCAR6lDhqYv8O2Ur5 9m5XqybKAMvxvzHHZypybMD5DyYMrdzVfFty8c9AZrsboqMWnQsNxg/rnQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIRJFuZj2ojgMXXYpZz/wjyxQ14XMB8GA1UdIwQY MBaAFI6fiYz3Xa9oAAk/JWeq9yqphuKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanAtSmpQZGRyMmdBQ1Q4bFo2cjNLcW1HNHB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lMTYzNjEtOTAzMC00YjUyLTgwNmQt YjNjZWM5ZDEwNjExLzEvaEVrVzVtUGFpT0F4ZGRpbG5QX0NQTEZEWGhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9lMTYzNjEtOTAzMC00YjUyLTgwNmQtYjNjZWM5ZDEwNjEx LzEvanAtSmpQZGRyMmdBQ1Q4bFo2cjNLcW1HNHB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCg0 MA0GCSqGSIb3DQEBCwUAA4IBAQDEM3eaRiqNLVtmwO3dYNRGFWC1B9Jx5z9EtisU csA002XFLj5A6HiDI6ePMaP21Rc8coeEu/SD3LgqUbW1LQ7qbg5V86WFO6VFZnky 9A0kWVj9LrfmhslyK5lNUYFMKJcDaJkcgBDOxjmm+q1SHTtc6pquH3iPUOoNI9E5 gihupmX9oFzeaehSCenh0TTFZo+dcbvVaiCcgpfXihL4a0Q/XzQDyydqwHKhZzTy KyhpLj+shNKhMVP/Adh2aJ8Z7NYVXjznh8fwNFQ+Woqt0QS5jDXeBHmUFU4UYjkw bbLDxPmYqMwtQT/oZh3uqAdXfjDTc7WXogV5+AdK6klmk7Cw -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:19 2026 by rpki-client