This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Jm2_5M2ujv37cjE1PYsGhvH15E4.roa File: Jm2_5M2ujv37cjE1PYsGhvH15E4.roa (raw, json) Hash identifier: CMKzM0cVDSz1jYefI8O3Co4Vg+gMnOUGarYpNZHAanQ= Subject key identifier: 26:6D:BF:E4:CD:AE:8E:FD:FB:72:31:35:3D:8B:06:86:F1:F5:E4:4E Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E394B4605ED7651B035514ED7E721FD Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Jm2_5M2ujv37cjE1PYsGhvH15E4.roa Signing time: Fri 02 Jan 2026 10:20:42 +0000 ROA not before: Fri 02 Jan 2026 10:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209861 IP address blocks: 2a0c:b641:80::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:4b:46:05:ed:76:51:b0:35:51:4e:d7:e7:21:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=266dbfe4cdae8efdfb7231353d8b0686f1f5e44e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5d:3c:50:df:f7:f0:7e:d9:b9:32:91:d0:cb: c0:ad:6c:16:1b:11:ce:c8:38:75:06:4e:d3:ba:1e: db:76:f7:af:cc:24:90:54:5f:52:61:c4:96:be:80: e3:28:bf:bc:59:eb:b4:d0:5d:ee:09:a5:f6:1c:45: 57:f6:1d:8b:11:5c:c6:25:f5:90:7c:db:54:96:0e: 25:76:17:34:94:76:fa:96:e8:fe:b3:13:d3:00:eb: 43:15:3a:5f:82:75:bf:56:61:07:91:46:1e:e2:d5: 0a:8b:50:02:37:94:45:ed:ea:a2:74:82:41:c3:76: 58:ce:4c:28:76:88:fb:4f:56:df:f5:81:17:f6:02: e9:4e:9a:c2:c1:35:a0:44:66:81:35:02:90:10:1d: a6:b0:b9:3b:10:dd:3b:43:58:86:38:d5:0c:2c:a5: 97:8f:86:7f:29:aa:1e:61:47:78:a3:ad:62:22:1f: 11:38:7f:dd:67:86:52:0e:c5:43:75:12:51:38:9a: 89:8f:b6:65:97:52:5e:cf:89:8b:08:68:aa:e1:65: bb:9d:6e:2a:1b:69:b3:97:16:b9:79:99:97:f8:bc: 32:a9:1a:3a:56:3e:65:23:cb:59:f9:70:54:49:dc: bf:42:0e:30:8e:8f:54:e3:f2:5b:cb:22:c7:43:10: 78:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:6D:BF:E4:CD:AE:8E:FD:FB:72:31:35:3D:8B:06:86:F1:F5:E4:4E X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Jm2_5M2ujv37cjE1PYsGhvH15E4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:80::/44 Signature Algorithm: sha256WithRSAEncryption 08:9e:7f:d8:c3:9e:4a:e6:86:1d:44:77:18:69:53:d4:84:aa: e0:8e:9b:6e:c7:88:0e:d5:b8:31:fe:dd:27:d8:6f:30:25:49: fa:db:18:34:7a:7f:d7:99:eb:ae:75:bc:60:d2:55:b2:3d:f6: 7a:c7:17:3b:fa:96:22:1c:fa:a6:ea:32:8e:8b:5d:a8:cb:a7: 05:d8:d7:58:eb:d8:31:4e:3a:06:f4:82:45:ba:19:06:19:3e: 00:ba:e0:25:0b:2c:ab:ef:00:8d:23:28:b6:d2:74:9c:a2:65: 6f:32:11:b1:63:bc:fe:4e:09:53:6e:fd:47:76:d6:b9:25:73: b6:95:35:c8:71:b4:3c:81:98:51:f9:67:ac:b9:f8:ca:8b:f0: e8:4c:ea:c7:7f:58:a8:96:fb:23:ed:c7:2d:7c:d4:72:16:84: 48:93:fd:d2:b4:a6:b1:1a:a6:f6:6b:2e:b1:bf:75:62:fc:f0: 78:60:f6:57:bb:38:b6:a0:78:af:b8:77:82:60:b7:13:06:83: 3e:07:05:75:a9:a4:a9:64:df:de:22:30:65:4f:85:d1:bf:0a: f5:e4:d8:e9:46:ac:17:90:78:70:5d:c0:25:9a:7e:01:7c:62: 3b:3b:02:fb:5d:f9:4f:af:03:e1:db:9a:56:b0:03:7f:55:b6: 54:06:fd:46 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OUtGBe12UbA1UU7X5yH9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjZkYmZlNGNkYWU4ZWZkZmI3MjMxMzUzZDhiMDY4NmYxZjVlNDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk108UN/38H7ZuTKR0MvArWwWGxHO yDh1Bk7Tuh7bdvevzCSQVF9SYcSWvoDjKL+8Weu00F3uCaX2HEVX9h2LEVzGJfWQ fNtUlg4ldhc0lHb6luj+sxPTAOtDFTpfgnW/VmEHkUYe4tUKi1ACN5RF7eqidIJB w3ZYzkwodoj7T1bf9YEX9gLpTprCwTWgRGaBNQKQEB2msLk7EN07Q1iGONUMLKWX j4Z/KaoeYUd4o61iIh8ROH/dZ4ZSDsVDdRJROJqJj7Zll1Jez4mLCGiq4WW7nW4q G2mzlxa5eZmX+LwyqRo6Vj5lI8tZ+XBUSdy/Qg4wjo9U4/JbyyLHQxB43QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCZtv+TNro79+3IxNT2LBobx9eROMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvSm0yXzVNMnVqdjM3Y2pFMVBZc0dodkgxNUU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQCA MA0GCSqGSIb3DQEBCwUAA4IBAQAInn/Yw55K5oYdRHcYaVPUhKrgjptux4gO1bgx /t0n2G8wJUn62xg0en/Xmeuudbxg0lWyPfZ6xxc7+pYiHPqm6jKOi12oy6cF2NdY 69gxTjoG9IJFuhkGGT4AuuAlCyyr7wCNIyi20nScomVvMhGxY7z+TglTbv1Hdta5 JXO2lTXIcbQ8gZhR+WesufjKi/DoTOrHf1iolvsj7cctfNRyFoRIk/3StKaxGqb2 ay6xv3Vi/PB4YPZXuzi2oHivuHeCYLcTBoM+BwV1qaSpZN/eIjBlT4XRvwr15Njp RqwXkHhwXcAlmn4BfGI7OwL7XflPrwPh25pWsAN/VbZUBv1G -----END CERTIFICATE-----Generated at Tue Jan 20 04:28:20 2026 by rpki-client