This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/jqAABMq-zg8_lm5zwr2bQbPByUw.roa File: jqAABMq-zg8_lm5zwr2bQbPByUw.roa (raw, json) Hash identifier: 1VlVKHLM9DYGLrOv/oDOrqg85oV4LQKYGMgXw/lS5Ow= Subject key identifier: 8E:A0:00:04:CA:BE:CE:0F:3F:96:6E:73:C2:BD:9B:41:B3:C1:C9:4C Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F854CBBECB9BD09E28AE980DFA29AED Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/jqAABMq-zg8_lm5zwr2bQbPByUw.roa Signing time: Fri 02 Jan 2026 16:23:20 +0000 ROA not before: Fri 02 Jan 2026 16:23:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209883 IP address blocks: 2a0e:f8c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:4c:bb:ec:b9:bd:09:e2:8a:e9:80:df:a2:9a:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ea00004cabece0f3f966e73c2bd9b41b3c1c94c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8c:c3:27:47:76:4d:6b:ba:c0:4b:6b:e0:e2: f9:cb:b1:ec:d8:51:0e:69:6c:84:e0:f2:c0:ee:71: cc:be:4c:4b:0b:80:c0:64:e2:ca:d0:f2:27:01:83: 38:92:0e:72:37:72:df:d3:fa:94:9b:87:b3:8e:f0: 45:d8:ac:4d:ae:50:45:44:ba:ae:21:e0:58:7f:7d: 22:08:07:de:ac:90:f5:05:4c:a7:d3:9e:d0:ce:9d: c6:92:a6:9b:ab:a2:16:be:4d:2e:97:38:04:af:a7: e9:a3:03:dc:fc:cd:b8:3f:00:38:d2:1e:73:7d:a7: 95:60:11:01:e4:e9:23:36:50:60:f3:82:a3:01:c6: 42:33:23:70:19:34:30:49:df:44:51:85:e2:be:8f: b6:ce:d3:9b:32:f9:97:64:45:76:b8:c6:8c:31:71: 65:0d:a9:fc:73:58:4b:65:cf:ae:5c:f5:ed:55:1d: 76:f2:2f:78:43:9d:61:5e:d8:45:de:42:67:61:36: 2e:7e:7d:90:e8:05:5a:c4:6b:61:36:df:40:08:2c: c9:1c:9c:b7:be:57:88:d3:c9:97:49:68:fc:df:55: 91:a9:20:e0:8e:0f:50:bf:a5:8f:e5:48:33:43:df: f0:7d:2a:f6:6a:85:b7:8b:46:2e:53:16:26:83:51: ad:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A0:00:04:CA:BE:CE:0F:3F:96:6E:73:C2:BD:9B:41:B3:C1:C9:4C X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/jqAABMq-zg8_lm5zwr2bQbPByUw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:f8c0::/29 Signature Algorithm: sha256WithRSAEncryption ab:ae:44:58:d1:0f:cc:e4:9a:8c:be:ff:49:9e:a0:bb:3f:b5: ae:e1:cb:6a:c5:f7:bd:6a:72:09:83:c3:2a:97:40:48:33:8c: c9:bb:69:f9:55:f2:80:c5:bc:76:31:bb:8a:fb:75:d1:3d:c4: d7:61:c9:4e:1a:20:7c:67:05:d6:66:b6:10:29:41:52:36:83: 89:fd:94:fc:0e:01:87:70:09:63:23:fc:0a:96:f0:97:8d:49: 30:7e:fb:e7:49:16:ea:7e:ad:71:81:4a:fb:0c:e2:89:e9:ca: df:8f:72:14:79:f5:86:e8:47:4a:18:a5:36:f6:a7:0b:cd:a8: 9a:e0:d3:cc:f7:8b:b5:5e:f2:34:57:7f:e5:85:e7:39:11:01: db:48:a8:a4:49:1a:18:5c:5f:8e:c9:86:19:07:7c:80:5f:b3: 46:c1:01:e0:f0:3f:06:54:41:4b:3e:2f:13:93:b3:d4:b0:aa: 39:ed:05:d6:61:2a:76:c4:cb:28:d4:ca:d5:71:79:24:6e:13: d1:05:3a:a9:5f:72:b2:a4:7e:9a:a5:59:08:9c:95:1c:c8:f1: 9b:e0:6f:a8:8d:a5:23:7b:51:fa:50:15:3b:e0:a6:7c:64:1e: fe:66:eb:63:fe:c7:75:c6:2b:21:5f:da:f0:3d:16:1f:4f:3c: d4:b7:d0:a9 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/hUy77Lm9CeKK6YDfoprtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWEwMDAwNGNhYmVjZTBmM2Y5NjZlNzNjMmJkOWI0MWIzYzFjOTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYzDJ0d2TWu6wEtr4OL5y7Hs2FEO aWyE4PLA7nHMvkxLC4DAZOLK0PInAYM4kg5yN3Lf0/qUm4ezjvBF2KxNrlBFRLqu IeBYf30iCAferJD1BUyn057Qzp3Gkqabq6IWvk0ulzgEr6fpowPc/M24PwA40h5z faeVYBEB5OkjNlBg84KjAcZCMyNwGTQwSd9EUYXivo+2ztObMvmXZEV2uMaMMXFl Dan8c1hLZc+uXPXtVR128i94Q51hXthF3kJnYTYufn2Q6AVaxGthNt9ACCzJHJy3 vleI08mXSWj831WRqSDgjg9Qv6WP5UgzQ9/wfSr2aoW3i0YuUxYmg1GtUQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFI6gAATKvs4PP5Zuc8K9m0GzwclMMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvanFBQUJNcS16ZzhfbG01endyMmJRYlBCeVV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg74wDAN BgkqhkiG9w0BAQsFAAOCAQEAq65EWNEPzOSajL7/SZ6guz+1ruHLasX3vWpyCYPD KpdASDOMybtp+VXygMW8djG7ivt10T3E12HJThogfGcF1ma2EClBUjaDif2U/A4B h3AJYyP8Cpbwl41JMH7750kW6n6tcYFK+wziienK349yFHn1huhHShilNvanC82o muDTzPeLtV7yNFd/5YXnOREB20iopEkaGFxfjsmGGQd8gF+zRsEB4PA/BlRBSz4v E5Oz1LCqOe0F1mEqdsTLKNTK1XF5JG4T0QU6qV9ysqR+mqVZCJyVHMjxm+BvqI2l I3tR+lAVO+CmfGQe/mbrY/7HdcYrIV/a8D0WH0881LfQqQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:28:36 2026 by rpki-client