This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/JExJtb-2H86T5l_2TNtSXSkGdK4.roa File: JExJtb-2H86T5l_2TNtSXSkGdK4.roa (raw, json) Hash identifier: PhyjLCVkG5sspCrwOMxylvOtWm2ph/t/PSTEggPhL8U= Subject key identifier: 24:4C:49:B5:BF:B6:1F:CE:93:E6:5F:F6:4C:DB:52:5D:29:06:74:AE Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea Certificate serial: 019B79ED5F754B9AAFCBD0C5FDE9E3E2CC00 Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/JExJtb-2H86T5l_2TNtSXSkGdK4.roa Signing time: Thu 01 Jan 2026 14:19:18 +0000 ROA not before: Thu 01 Jan 2026 14:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 2a07:4584::/30 maxlen: 32 2a07:a900::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:5f:75:4b:9a:af:cb:d0:c5:fd:e9:e3:e2:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea Validity Not Before: Jan 1 14:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=244c49b5bfb61fce93e65ff64cdb525d290674ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:d3:bc:d0:b6:b8:c9:4a:b5:d4:01:ad:ea:dd: bb:19:9c:51:15:ea:f9:29:49:bc:39:00:a0:f1:eb: af:f5:5b:b2:0b:b5:7d:c0:cc:e0:a2:03:ee:78:1d: d7:8e:3d:04:4c:cb:9b:21:fb:da:6b:91:f2:69:8e: 1a:98:7a:31:73:db:88:47:d7:0c:9d:ee:8c:d0:7f: 9e:2c:b1:d2:12:51:c1:61:57:c1:7e:4b:b9:cf:1e: 6f:36:d4:0d:fe:80:48:1c:0b:dc:71:bf:bc:aa:0e: 14:ef:ba:12:4d:45:7b:bb:0b:b0:0e:5c:13:05:38: 72:65:ac:f9:80:c0:71:e7:f4:af:81:3f:76:32:10: 3a:66:51:9d:12:dc:3f:f7:f5:43:ae:e7:83:d3:45: 83:ee:b7:18:1f:39:25:73:72:ce:d9:4d:b9:f1:8f: f0:d8:96:b0:7d:42:62:6d:84:21:ec:8a:f2:35:3d: 56:47:18:39:ea:a9:7e:46:69:ee:25:80:31:b5:cf: 0f:fc:bc:70:fd:7e:34:c0:40:d3:bd:07:23:06:ef: 6c:f1:4e:77:1e:c1:58:15:40:32:6f:d0:f9:b5:b7: 90:f5:49:87:74:f6:8b:05:84:a9:4d:8b:c4:71:76: e8:76:31:16:25:ba:75:2a:ae:2c:ef:19:2f:7a:cc: 5f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:4C:49:B5:BF:B6:1F:CE:93:E6:5F:F6:4C:DB:52:5D:29:06:74:AE X509v3 Authority Key Identifier: keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/JExJtb-2H86T5l_2TNtSXSkGdK4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:4584::/30 2a07:a900::/29 Signature Algorithm: sha256WithRSAEncryption 3d:02:54:34:c5:77:c0:23:ce:2a:b7:d7:e1:0d:9e:b7:4d:24: 90:98:35:11:e6:f3:fc:03:28:73:62:dd:60:3f:a0:7f:99:5a: d4:93:23:36:b8:eb:36:6f:f5:ff:d9:d2:dc:81:fd:ae:11:01: 88:63:88:17:2e:34:1c:b3:9b:12:0b:64:10:f0:bc:4b:53:d4: f2:48:ce:89:5c:f1:79:c0:6d:a3:d4:15:70:9d:28:fd:cc:e5: 70:64:6b:6c:f5:75:cf:30:97:e9:ec:9a:e8:77:37:a2:10:5b: 2d:81:41:43:c1:b9:25:31:8a:f6:c5:c2:19:7f:72:cd:58:95: c0:d2:9c:16:a4:68:8b:46:37:10:1c:e9:c7:a5:14:de:ff:19: 58:26:e4:85:15:4e:26:64:04:7c:5c:bb:c9:49:dd:3d:aa:10: 71:6b:94:42:71:7d:5b:6a:e8:1d:89:69:c1:04:26:0d:92:a4: 3c:c2:95:d3:06:07:60:b9:ea:15:01:10:8a:98:c0:9a:fc:6b: 82:c9:ad:2e:5d:06:2b:4e:f2:2d:3c:78:fd:69:01:59:0f:77: 9b:41:fc:31:36:cf:f7:06:27:19:9a:02:5a:4d:01:3a:08:05: 1c:c7:b2:31:4c:24:29:aa:bf:7d:87:fa:cb:9c:29:19:0d:b4: 1c:52:86:29 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt57V91S5qvy9DF/enj4swAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTEyNzcyM2VhMGNmZDA3MjQ3MTNiMjkxNzM0Y2FhMzUz ZTIwZWEwHhcNMjYwMTAxMTQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDRjNDliNWJmYjYxZmNlOTNlNjVmZjY0Y2RiNTI1ZDI5MDY3NGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+NO80La4yUq11AGt6t27GZxRFer5 KUm8OQCg8euv9VuyC7V9wMzgogPueB3Xjj0ETMubIfvaa5HyaY4amHoxc9uIR9cM ne6M0H+eLLHSElHBYVfBfku5zx5vNtQN/oBIHAvccb+8qg4U77oSTUV7uwuwDlwT BThyZaz5gMBx5/SvgT92MhA6ZlGdEtw/9/VDrueD00WD7rcYHzklc3LO2U258Y/w 2JawfUJibYQh7IryNT1WRxg56ql+RmnuJYAxtc8P/Lxw/X40wEDTvQcjBu9s8U53 HsFYFUAyb9D5tbeQ9UmHdPaLBYSpTYvEcXbodjEWJbp1Kq4s7xkvesxfHwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFCRMSbW/th/Ok+Zf9kzbUl0pBnSuMB8GA1UdIwQY MBaAFFBRJ3I+oM/QckcTspFzTKo1PiDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYt NTU2MDhiNjk0NDU2LzEvSkV4SnRiLTJIODZUNWxfMlROdFNYU2tHZEs0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYtNTU2MDhiNjk0NDU2 LzEvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUCKgdFhAMF AyoHqQAwDQYJKoZIhvcNAQELBQADggEBAD0CVDTFd8Ajziq31+ENnrdNJJCYNRHm 8/wDKHNi3WA/oH+ZWtSTIza46zZv9f/Z0tyB/a4RAYhjiBcuNByzmxILZBDwvEtT 1PJIzolc8XnAbaPUFXCdKP3M5XBka2z1dc8wl+nsmuh3N6IQWy2BQUPBuSUxivbF whl/cs1YlcDSnBakaItGNxAc6celFN7/GVgm5IUVTiZkBHxcu8lJ3T2qEHFrlEJx fVtq6B2JacEEJg2SpDzCldMGB2C56hUBEIqYwJr8a4LJrS5dBitO8i08eP1pAVkP d5tB/DE2z/cGJxmaAlpNAToIBRzHsjFMJCmqv32H+sucKRkNtBxShik= -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:29 2026 by rpki-client