This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/JF07sn7QrzOmEXVQvSHvq0XwU2o.roa File: JF07sn7QrzOmEXVQvSHvq0XwU2o.roa (raw, json) Hash identifier: mtCgfNU4r5OAZHJF9wtKTT3GkNR0tJW0C+cnvzTb+LM= Subject key identifier: 24:5D:3B:B2:7E:D0:AF:33:A6:11:75:50:BD:21:EF:AB:45:F0:53:6A Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3935103FC175AFAEFBDDD86E42CC9F Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/JF07sn7QrzOmEXVQvSHvq0XwU2o.roa Signing time: Fri 02 Jan 2026 10:20:36 +0000 ROA not before: Fri 02 Jan 2026 10:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202858 IP address blocks: 2a0c:b641:820::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:35:10:3f:c1:75:af:ae:fb:dd:d8:6e:42:cc:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=245d3bb27ed0af33a6117550bd21efab45f0536a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:81:6d:9b:47:6f:7a:ae:e9:55:8a:81:e2:47: 64:99:ab:da:01:7d:ca:4c:5d:6c:60:58:27:f0:3b: 6a:f5:b7:f0:64:85:9d:e6:3c:97:71:fc:96:a0:8a: 9a:e1:3f:2c:7d:df:fb:4c:75:c9:c8:c6:d5:4b:c5: 2d:fc:a7:04:cf:ad:73:6a:66:74:fd:5f:0b:5f:92: 3f:65:40:e2:de:b3:c8:af:b1:34:8f:99:fa:40:c8: 2a:67:ec:39:43:d4:69:9d:e0:8e:56:f8:52:44:5f: 35:c3:69:09:5f:93:c9:3f:4c:fa:52:47:f0:e3:c8: 26:59:e0:44:b2:f3:f7:24:ca:a3:1d:a2:ef:51:f7: ff:32:a1:7f:95:0e:7e:57:5f:10:4d:09:a5:72:b6: 50:8a:7d:c5:b6:5b:63:1f:57:45:34:e3:d4:5f:b4: 66:be:b0:d5:f1:23:5d:19:9c:29:f9:a3:1f:be:33: 34:b1:15:1c:17:47:f9:f8:ed:f2:0b:ab:98:22:3e: 93:d1:4d:95:ad:91:89:72:81:28:15:08:b4:54:f9: e0:45:7b:88:9f:59:87:ea:a2:ed:7f:ab:ce:db:c2: 13:7f:bb:24:1d:df:1e:01:10:99:89:0e:0e:18:a4: 78:34:69:d8:5e:2a:af:08:f5:16:8a:d5:87:5d:d8: ae:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:5D:3B:B2:7E:D0:AF:33:A6:11:75:50:BD:21:EF:AB:45:F0:53:6A X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/JF07sn7QrzOmEXVQvSHvq0XwU2o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:820::/44 Signature Algorithm: sha256WithRSAEncryption 99:63:9f:55:1b:04:94:5e:c5:99:ae:b0:e8:4d:dc:93:57:0f: 72:f0:81:13:94:cf:f4:7c:20:f9:1d:c9:4f:4b:88:6f:2d:ba: de:0e:51:3f:03:d2:8a:a0:f9:38:dc:6b:1d:04:b1:b3:ec:6f: bd:24:cc:f4:f9:c6:ab:50:64:c6:7a:3e:04:9d:ea:6b:39:83: 5e:23:84:b0:58:15:60:eb:ac:56:80:25:c3:63:33:91:f7:fb: fd:60:43:9b:de:d2:3d:78:a3:d6:f7:38:a1:a2:dc:37:97:a0: 60:48:9f:e0:87:cd:f1:5f:a4:95:59:eb:8c:30:fc:ed:71:bd: 8f:c8:e9:ec:be:2a:12:9d:55:85:9f:2a:66:52:db:a6:15:ff: 10:14:7d:5b:a9:c9:58:53:cc:44:7d:1b:65:c7:16:df:f3:70: 13:e8:19:a8:9c:fa:31:fb:46:b3:bd:fb:9a:a8:b7:d0:19:05: 38:f6:5a:78:8f:05:3c:a6:c9:03:b4:2b:50:ff:ca:8e:a9:49: 20:e1:10:72:fe:59:46:43:e1:dc:35:ac:cc:b0:39:5c:7c:7a: 53:c3:84:12:c9:20:e0:59:78:fd:ba:31:fd:05:fb:9e:a8:a8: 9a:b4:39:69:05:75:70:76:3f:89:f6:44:44:bf:e0:c1:e2:f8: 8c:d9:20:bc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OTUQP8F1r6773dhuQsyfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDVkM2JiMjdlZDBhZjMzYTYxMTc1NTBiZDIxZWZhYjQ1ZjA1MzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4Ftm0dveq7pVYqB4kdkmavaAX3K TF1sYFgn8Dtq9bfwZIWd5jyXcfyWoIqa4T8sfd/7THXJyMbVS8Ut/KcEz61zamZ0 /V8LX5I/ZUDi3rPIr7E0j5n6QMgqZ+w5Q9RpneCOVvhSRF81w2kJX5PJP0z6Ukfw 48gmWeBEsvP3JMqjHaLvUff/MqF/lQ5+V18QTQmlcrZQin3FtltjH1dFNOPUX7Rm vrDV8SNdGZwp+aMfvjM0sRUcF0f5+O3yC6uYIj6T0U2VrZGJcoEoFQi0VPngRXuI n1mH6qLtf6vO28ITf7skHd8eARCZiQ4OGKR4NGnYXiqvCPUWitWHXdiuGQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCRdO7J+0K8zphF1UL0h76tF8FNqMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvSkYwN3NuN1Fyek9tRVhWUXZTSHZxMFh3VTJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQgg MA0GCSqGSIb3DQEBCwUAA4IBAQCZY59VGwSUXsWZrrDoTdyTVw9y8IETlM/0fCD5 HclPS4hvLbreDlE/A9KKoPk43GsdBLGz7G+9JMz0+carUGTGej4EneprOYNeI4Sw WBVg66xWgCXDYzOR9/v9YEOb3tI9eKPW9zihotw3l6BgSJ/gh83xX6SVWeuMMPzt cb2PyOnsvioSnVWFnypmUtumFf8QFH1bqclYU8xEfRtlxxbf83AT6BmonPox+0az vfuaqLfQGQU49lp4jwU8pskDtCtQ/8qOqUkg4RBy/llGQ+HcNazMsDlcfHpTw4QS ySDgWXj9ujH9BfueqKiatDlpBXVwdj+J9kREv+DB4viM2SC8 -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:34 2026 by rpki-client