This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/j9a9LhuRAJuWTaILJzS2rkPfi2g.roa File: j9a9LhuRAJuWTaILJzS2rkPfi2g.roa (raw, json) Hash identifier: VqHpMGCrjweaKE6M6nVNJe7hrw4fqkqNMzrKXaefqEI= Subject key identifier: 8F:D6:BD:2E:1B:91:00:9B:96:4D:A2:0B:27:34:B6:AE:43:DF:8B:68 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E393F2783A828407FCF3FF7723C096B Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/j9a9LhuRAJuWTaILJzS2rkPfi2g.roa Signing time: Fri 02 Jan 2026 10:20:39 +0000 ROA not before: Fri 02 Jan 2026 10:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207268 IP address blocks: 2a0c:b641:7a0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:3f:27:83:a8:28:40:7f:cf:3f:f7:72:3c:09:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8fd6bd2e1b91009b964da20b2734b6ae43df8b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fc:ba:54:fc:bd:4f:96:5c:c4:9a:14:e8:12: a6:fa:55:8d:85:e7:dc:b7:1a:93:df:a2:ed:2a:e9: 9a:5e:a7:ec:e7:87:f1:48:b4:f2:a1:40:72:01:53: f7:61:38:ae:bd:13:72:2a:17:5b:18:14:53:e4:e9: f4:7f:db:0e:a8:33:2f:2c:5d:c9:72:fd:04:24:d4: fd:60:a6:9d:0b:47:7e:cb:4e:85:d2:1c:61:dd:74: 54:c1:a8:7d:0e:39:88:df:bf:29:6d:0c:21:b2:8d: a6:bf:9d:67:01:b9:07:4f:89:cb:be:86:30:59:b2: ab:11:b6:9d:a4:6d:0c:8e:57:ae:f4:36:21:cc:d6: 89:97:fc:0a:b1:71:fc:01:2b:98:2f:53:f1:22:34: 41:0c:7c:e1:dc:8d:8a:4a:b5:5c:1b:42:c6:dd:41: f7:dd:02:c5:70:5c:f3:1b:08:10:c3:7d:39:e8:99: 46:e1:f5:f4:e4:ae:74:69:c9:90:cb:ed:30:81:73: 85:6e:02:f7:f0:77:bc:57:02:26:cb:9f:75:50:56: 46:db:c0:7d:5b:ba:83:35:75:3e:06:f0:80:59:e1: 68:26:e5:d7:4d:93:8c:e3:87:74:d6:99:a8:ab:70: 14:81:50:cd:95:20:31:92:76:e9:40:de:08:d9:1a: 52:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D6:BD:2E:1B:91:00:9B:96:4D:A2:0B:27:34:B6:AE:43:DF:8B:68 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/j9a9LhuRAJuWTaILJzS2rkPfi2g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:7a0::/44 Signature Algorithm: sha256WithRSAEncryption 10:89:63:bd:15:2d:b5:10:a6:a4:bf:34:9c:c8:a3:7d:f1:09: 76:ef:cb:37:10:4e:12:9c:d9:ef:1f:bb:ca:ea:1e:7d:52:9e: ba:ad:b6:9f:ec:21:09:ea:f8:bd:a0:04:20:f6:70:72:30:5b: 74:27:2b:a9:7b:1d:19:87:66:b6:fd:69:69:a2:c6:0e:3b:74: 7c:cb:18:f6:6d:6f:a2:02:16:7f:49:7d:82:68:02:88:d7:81: 56:21:f7:2c:f2:07:26:16:71:5a:89:c4:67:81:6e:86:45:37: 59:e8:ed:96:fd:a3:bc:ef:a7:1e:d3:63:93:25:b8:3a:99:c0: 64:de:3e:9e:00:b6:90:02:9b:25:35:16:db:0a:7f:65:8e:70: ef:66:fb:01:34:17:3a:d3:b4:ee:e8:11:2e:d2:2b:cb:79:c1: b5:1e:6f:f6:7e:1c:28:25:89:f4:dc:fc:53:27:7c:5a:37:8f: 3b:58:78:bb:5c:fb:35:db:16:96:05:eb:48:11:f4:aa:42:77: 09:c3:c9:e4:b3:73:c7:79:15:0b:c6:76:33:0b:19:0b:d3:09: c9:48:8a:3c:28:d5:40:99:08:89:26:5f:9a:10:60:a1:49:29: b3:a1:e7:a3:45:3d:47:18:2a:3c:fb:aa:06:76:ea:57:1d:fb: a8:01:65:3b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OT8ng6goQH/PP/dyPAlrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmQ2YmQyZTFiOTEwMDliOTY0ZGEyMGIyNzM0YjZhZTQzZGY4YjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fy6VPy9T5ZcxJoU6BKm+lWNhefc txqT36LtKumaXqfs54fxSLTyoUByAVP3YTiuvRNyKhdbGBRT5On0f9sOqDMvLF3J cv0EJNT9YKadC0d+y06F0hxh3XRUwah9DjmI378pbQwhso2mv51nAbkHT4nLvoYw WbKrEbadpG0Mjleu9DYhzNaJl/wKsXH8ASuYL1PxIjRBDHzh3I2KSrVcG0LG3UH3 3QLFcFzzGwgQw3056JlG4fX05K50acmQy+0wgXOFbgL38He8VwImy591UFZG28B9 W7qDNXU+BvCAWeFoJuXXTZOM44d01pmoq3AUgVDNlSAxknbpQN4I2RpShwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFI/WvS4bkQCblk2iCyc0tq5D34toMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvajlhOUxodVJBSnVXVGFJTEp6UzJya1BmaTJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQeg MA0GCSqGSIb3DQEBCwUAA4IBAQAQiWO9FS21EKakvzScyKN98Ql278s3EE4SnNnv H7vK6h59Up66rbaf7CEJ6vi9oAQg9nByMFt0Jyupex0Zh2a2/WlposYOO3R8yxj2 bW+iAhZ/SX2CaAKI14FWIfcs8gcmFnFaicRngW6GRTdZ6O2W/aO876ce02OTJbg6 mcBk3j6eALaQApslNRbbCn9ljnDvZvsBNBc607Tu6BEu0ivLecG1Hm/2fhwoJYn0 3PxTJ3xaN487WHi7XPs12xaWBetIEfSqQncJw8nks3PHeRULxnYzCxkL0wnJSIo8 KNVAmQiJJl+aEGChSSmzoeejRT1HGCo8+6oGdupXHfuoAWU7 -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:06 2026 by rpki-client