This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/jwL6ZedQy9jrx6zRLmC34t2VuNI.roa File: jwL6ZedQy9jrx6zRLmC34t2VuNI.roa (raw, json) Hash identifier: JjbOSGoIoxnMnWQdAupasyiznFb2Rz/tCe7dz0MfJkM= Subject key identifier: 8F:02:FA:65:E7:50:CB:D8:EB:C7:AC:D1:2E:60:B7:E2:DD:95:B8:D2 Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Certificate serial: 019B7758E8640682045CA15CE67D55FEFE12 Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/jwL6ZedQy9jrx6zRLmC34t2VuNI.roa Signing time: Thu 01 Jan 2026 02:17:53 +0000 ROA not before: Thu 01 Jan 2026 02:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23470 IP address blocks: 2a04:ff00:500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e8:64:06:82:04:5c:a1:5c:e6:7d:55:fe:fe:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Validity Not Before: Jan 1 02:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f02fa65e750cbd8ebc7acd12e60b7e2dd95b8d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:38:ff:4b:f5:c9:7b:97:41:a6:3d:67:54:61: b0:1c:66:de:f2:43:ea:4d:86:f6:ee:2a:da:82:3b: a7:1d:94:0f:27:5a:7c:61:86:19:52:5c:75:d9:92: 96:99:b8:d9:b6:04:a1:cf:0d:2c:01:16:9a:03:8f: 30:b4:8b:99:9c:a9:fb:ee:b2:a7:2b:62:9e:b3:bb: dd:12:33:f7:fa:05:da:26:ac:ba:8c:b5:e4:4d:88: 76:39:f4:af:c2:01:ef:68:f2:ef:23:1c:ee:3d:2a: ed:04:35:61:f8:ec:78:0b:0f:16:4b:c2:0e:cb:ff: 21:45:15:ba:43:49:3a:f7:40:18:7f:c2:4c:ac:e6: 92:58:43:7d:50:2b:49:bb:82:11:9c:53:ac:6e:b3: 17:f4:63:c6:8a:3e:eb:61:f5:c8:75:db:eb:11:be: 53:89:b3:41:1f:25:f8:da:f1:62:0c:a2:bb:25:a6: a8:46:09:62:04:56:84:aa:5d:fc:c8:93:75:02:af: 80:87:1b:3f:2a:df:8c:e1:81:b3:82:cb:92:1e:51: d3:90:82:54:26:e1:66:ae:05:1b:0a:e4:3b:31:f2: 8e:4b:19:be:ad:bb:30:91:ae:1e:f4:3c:63:d6:a8: e0:2e:87:bb:4a:87:3a:71:0d:2c:b0:f9:60:28:c1: 44:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:02:FA:65:E7:50:CB:D8:EB:C7:AC:D1:2E:60:B7:E2:DD:95:B8:D2 X509v3 Authority Key Identifier: keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/jwL6ZedQy9jrx6zRLmC34t2VuNI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:ff00:500::/48 Signature Algorithm: sha256WithRSAEncryption 70:d6:24:b0:2b:6e:cb:dd:32:11:fc:0e:ed:42:cc:c0:08:b0: ac:a0:10:53:be:9c:60:89:69:6d:8d:fc:bb:ce:2d:ca:34:4e: 94:32:f3:ac:2e:9d:e2:86:14:f0:01:21:a4:28:5f:48:06:2c: d1:bb:17:7a:ae:d7:71:41:06:51:ac:3c:0e:2c:02:5a:4b:09: 1f:f6:39:82:c4:8b:43:74:43:bc:63:f3:aa:37:e2:9e:55:8d: c6:86:db:19:9c:ba:1b:fd:d7:f9:7c:61:51:21:c9:bb:3c:f6: 79:1c:9e:79:08:55:e4:1e:40:f8:eb:2b:4c:7a:15:45:a4:e5: b7:33:60:36:e1:a5:f8:f7:16:a1:38:e2:d1:0a:4b:54:92:76: d1:f4:3c:9f:57:f1:d3:75:e2:6f:02:0c:10:30:f9:67:94:d9: 66:fa:43:42:60:36:a7:b0:b2:1c:8c:4b:72:0d:f9:0c:2b:04: 56:dc:ac:79:8a:c1:80:de:3a:53:bb:f4:44:07:3b:d6:34:92: 3c:40:b9:74:40:04:0a:9b:a1:47:f0:08:83:d9:59:e5:ee:71: 9d:1f:77:85:c6:e8:13:00:63:3b:61:c6:5b:3d:58:ac:49:29: 13:65:60:2a:37:72:f7:14:85:f1:c5:0e:bf:cd:06:8a:e9:1e: 71:7e:4d:cc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WOhkBoIEXKFc5n1V/v4SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk MGEwYTkwHhcNMjYwMTAxMDIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjAyZmE2NWU3NTBjYmQ4ZWJjN2FjZDEyZTYwYjdlMmRkOTViOGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Dj/S/XJe5dBpj1nVGGwHGbe8kPq TYb27iragjunHZQPJ1p8YYYZUlx12ZKWmbjZtgShzw0sARaaA48wtIuZnKn77rKn K2Kes7vdEjP3+gXaJqy6jLXkTYh2OfSvwgHvaPLvIxzuPSrtBDVh+Ox4Cw8WS8IO y/8hRRW6Q0k690AYf8JMrOaSWEN9UCtJu4IRnFOsbrMX9GPGij7rYfXIddvrEb5T ibNBHyX42vFiDKK7JaaoRgliBFaEql38yJN1Aq+Ahxs/Kt+M4YGzgsuSHlHTkIJU JuFmrgUbCuQ7MfKOSxm+rbswka4e9Dxj1qjgLoe7Soc6cQ0ssPlgKMFEawIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFI8C+mXnUMvY68es0S5gt+LdlbjSMB8GA1UdIwQY MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt ZTYzZTk0Y2JhMDlmLzEvandMNlplZFF5OWpyeDZ6UkxtQzM0dDJWdU5JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgT/AAUA MA0GCSqGSIb3DQEBCwUAA4IBAQBw1iSwK27L3TIR/A7tQszACLCsoBBTvpxgiWlt jfy7zi3KNE6UMvOsLp3ihhTwASGkKF9IBizRuxd6rtdxQQZRrDwOLAJaSwkf9jmC xItDdEO8Y/OqN+KeVY3GhtsZnLob/df5fGFRIcm7PPZ5HJ55CFXkHkD46ytMehVF pOW3M2A24aX49xahOOLRCktUknbR9DyfV/HTdeJvAgwQMPlnlNlm+kNCYDansLIc jEtyDfkMKwRW3Kx5isGA3jpTu/REBzvWNJI8QLl0QAQKm6FH8AiD2Vnl7nGdH3eF xugTAGM7YcZbPVisSSkTZWAqN3L3FIXxxQ6/zQaK6R5xfk3M -----END CERTIFICATE-----Generated at Thu Jan 8 09:23:44 2026 by rpki-client