This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/j4aPOI4c0SdvtsLU5py5qGdc5-g.roa File: j4aPOI4c0SdvtsLU5py5qGdc5-g.roa (raw, json) Hash identifier: bsFiCLCrhE/1RcQacPGG1ZYum/RU+6ALQdUjZFN36Eo= Subject key identifier: 8F:86:8F:38:8E:1C:D1:27:6F:B6:C2:D4:E6:9C:B9:A8:67:5C:E7:E8 Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Certificate serial: 019B7F82E5011C2E31D3FAA61D0E26F6A793 Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/j4aPOI4c0SdvtsLU5py5qGdc5-g.roa Signing time: Fri 02 Jan 2026 16:20:43 +0000 ROA not before: Fri 02 Jan 2026 16:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 2a01:b960::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 16:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:e5:01:1c:2e:31:d3:fa:a6:1d:0e:26:f6:a7:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Validity Not Before: Jan 2 16:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f868f388e1cd1276fb6c2d4e69cb9a8675ce7e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:af:46:f9:26:2c:52:98:e4:26:e5:43:d7:2e: 37:18:47:57:9c:a4:63:81:72:72:f3:a8:09:1f:02: 40:bd:98:98:02:03:65:74:86:56:02:07:3c:4b:eb: b0:6e:64:d5:69:8d:77:ea:bb:ae:ea:3c:1b:87:39: 99:9a:11:c4:1c:60:28:e2:75:e3:ca:b1:d9:08:b4: 25:04:31:b0:86:be:1f:07:c7:07:d3:a4:ed:25:43: ef:f7:df:60:89:e7:66:a0:e2:90:fd:ef:4d:ea:36: 3a:27:00:9d:f8:df:e0:68:c3:0c:b5:70:d1:9a:fe: 66:da:0b:e2:92:af:dc:73:5b:a3:31:a7:8d:f9:04: da:e8:83:a9:e3:5d:a4:0e:2a:06:73:cf:b0:04:1c: 80:bc:8e:13:ee:09:52:59:32:e3:0e:f3:d6:a4:d6: 07:28:56:72:cd:89:0b:fc:2b:fa:29:a2:41:b9:fe: 0d:6e:19:bc:e6:ec:4e:a2:00:a8:ce:ac:81:03:02: 78:8e:cb:f5:03:38:53:3a:34:f1:c6:6b:64:f6:1a: f9:e3:a9:d8:e3:33:89:71:83:d6:fa:1a:a2:32:6d: 7f:e1:6e:db:1a:94:a3:d2:a4:a0:e3:7f:35:f7:2d: d7:a0:61:71:2f:46:c8:55:dd:29:82:42:15:c4:fb: 64:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:86:8F:38:8E:1C:D1:27:6F:B6:C2:D4:E6:9C:B9:A8:67:5C:E7:E8 X509v3 Authority Key Identifier: keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/j4aPOI4c0SdvtsLU5py5qGdc5-g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:b960::/32 Signature Algorithm: sha256WithRSAEncryption 60:c1:73:8d:b0:6d:0d:e1:74:ca:b3:17:1d:4b:6b:54:4a:fb: dd:aa:ef:b3:f5:58:cb:e2:3b:23:a1:93:61:38:4e:0f:72:f7: 8c:08:a2:63:9e:b1:60:d2:c2:c0:13:7c:58:a8:f5:e7:56:76: 40:70:17:21:f4:f8:b9:e1:16:00:45:7a:a5:1c:36:96:da:4c: dc:f1:ff:58:12:2d:f3:8c:5c:d4:1f:3c:ea:9c:cf:0d:91:c1: 16:ec:6a:22:30:9b:94:90:5a:98:ff:21:5b:48:57:3f:58:b0: 12:45:b3:43:67:92:d8:5e:af:55:f6:a6:84:a9:e3:fa:03:63: b2:ff:1d:14:35:89:ff:a6:12:6f:6e:0d:3e:4b:46:ee:8f:02: 1e:30:f3:f9:c5:58:f3:41:02:fa:13:c6:60:40:ea:13:e9:f7: 95:50:8c:a0:69:b4:97:2b:cd:97:3b:50:ec:b4:16:63:af:8d: 01:0c:51:1a:07:3b:61:ec:dd:10:a1:c0:0b:54:e7:f2:6b:17: b3:fb:f8:2a:09:e4:21:9e:46:3d:8e:7c:77:7d:e4:49:52:4a: 0f:dc:09:06:42:2f:24:57:ca:b7:3d:f5:ec:8c:29:cb:59:dc: 65:8d:4b:39:a5:1b:8d:cd:27:06:c7:ca:57:cd:10:8c:9c:34: a8:80:45:e5 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/guUBHC4x0/qmHQ4m9qeTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjE3MjZlYTRiZDZkM2M4MDkxYWUwYzhhZDFhMDNlOTFl MzU5YTIwHhcNMjYwMTAyMTYyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Zjg2OGYzODhlMWNkMTI3NmZiNmMyZDRlNjljYjlhODY3NWNlN2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0K9G+SYsUpjkJuVD1y43GEdXnKRj gXJy86gJHwJAvZiYAgNldIZWAgc8S+uwbmTVaY136ruu6jwbhzmZmhHEHGAo4nXj yrHZCLQlBDGwhr4fB8cH06TtJUPv999giedmoOKQ/e9N6jY6JwCd+N/gaMMMtXDR mv5m2gvikq/cc1ujMaeN+QTa6IOp412kDioGc8+wBByAvI4T7glSWTLjDvPWpNYH KFZyzYkL/Cv6KaJBuf4Nbhm85uxOogCozqyBAwJ4jsv1AzhTOjTxxmtk9hr546nY 4zOJcYPW+hqiMm1/4W7bGpSj0qSg43819y3XoGFxL0bIVd0pgkIVxPtkHwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFI+GjziOHNEnb7bC1OacuahnXOfoMB8GA1UdIwQY MBaAFDTxcm6kvW08gJGuDIrRoD6R41miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQt ZThlOGQyZmU3MGZlLzEvajRhUE9JNGMwU2R2dHNMVTVweTVxR2RjNS1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQtZThlOGQyZmU3MGZl LzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgG5YDAN BgkqhkiG9w0BAQsFAAOCAQEAYMFzjbBtDeF0yrMXHUtrVEr73arvs/VYy+I7I6GT YThOD3L3jAiiY56xYNLCwBN8WKj151Z2QHAXIfT4ueEWAEV6pRw2ltpM3PH/WBIt 84xc1B886pzPDZHBFuxqIjCblJBamP8hW0hXP1iwEkWzQ2eS2F6vVfamhKnj+gNj sv8dFDWJ/6YSb24NPktG7o8CHjDz+cVY80EC+hPGYEDqE+n3lVCMoGm0lyvNlztQ 7LQWY6+NAQxRGgc7YezdEKHAC1Tn8msXs/v4KgnkIZ5GPY58d33kSVJKD9wJBkIv JFfKtz317Iwpy1ncZY1LOaUbjc0nBsfKV80QjJw0qIBF5Q== -----END CERTIFICATE-----Generated at Fri Jan 9 00:58:32 2026 by rpki-client