This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/jjcLF7vH_6kvhdbuJiucTbxqBvg.roa File: jjcLF7vH_6kvhdbuJiucTbxqBvg.roa (raw, json) Hash identifier: 9CdEC+k58JtQfXt8cCMHjsV9l0T5+udg+CTuc06zGlA= Subject key identifier: 8E:37:0B:17:BB:C7:FF:A9:2F:85:D6:EE:26:2B:9C:4D:BC:6A:06:F8 Certificate issuer: /CN=7870621fc0afc8ec18eef20633f6148813279976 Certificate serial: 019B7AC914A336EFAFBF5EAEE0B6578DA10B Authority key identifier: 78:70:62:1F:C0:AF:C8:EC:18:EE:F2:06:33:F6:14:88:13:27:99:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/jjcLF7vH_6kvhdbuJiucTbxqBvg.roa Signing time: Thu 01 Jan 2026 18:19:16 +0000 ROA not before: Thu 01 Jan 2026 18:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16189 IP address blocks: 2001:67c:e20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:14:a3:36:ef:af:bf:5e:ae:e0:b6:57:8d:a1:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7870621fc0afc8ec18eef20633f6148813279976 Validity Not Before: Jan 1 18:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e370b17bbc7ffa92f85d6ee262b9c4dbc6a06f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:91:b6:d9:06:b7:89:52:a2:78:db:73:1a:e1: fa:c3:a7:22:88:ac:fb:b0:4a:b9:d4:6f:17:2f:f9: 5b:d3:3e:74:86:99:f0:c6:5e:d1:c4:4f:4e:a0:0a: 9d:4b:96:89:98:ea:b2:a5:d2:46:d8:e4:d2:e6:46: 0d:98:40:1c:20:cd:cc:de:14:af:f8:af:de:d2:4e: fb:f5:87:93:c5:47:cd:7c:34:a2:7f:18:dc:f6:38: f3:a7:26:d6:8b:c6:83:4a:c4:63:66:63:8e:11:c3: 0a:14:4e:32:6c:ca:a7:be:69:a6:7c:ba:85:10:77: a7:6f:4f:14:fa:95:6f:64:24:b2:7d:3e:58:8d:6e: 72:77:af:ec:86:f2:97:60:6a:f3:c5:f9:a7:d4:f2: 06:e5:ef:f7:a8:08:06:71:b9:79:56:49:51:cb:7d: 0c:2c:6f:bb:02:6b:93:24:28:8b:a8:e9:fc:29:ae: e1:fa:34:39:28:02:e1:7a:19:b1:5d:d7:2b:f0:20: ec:d8:ec:14:da:59:4f:3f:f0:b5:e0:db:4f:bb:58: b5:d7:80:4f:94:d0:5d:b9:88:b9:b0:4f:ce:91:c2: 70:31:b1:2c:e3:13:e5:94:11:cc:e9:b5:fa:04:18: 47:19:28:d0:7f:06:ca:ee:4f:e0:c1:cd:23:08:40: 56:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:37:0B:17:BB:C7:FF:A9:2F:85:D6:EE:26:2B:9C:4D:BC:6A:06:F8 X509v3 Authority Key Identifier: keyid:78:70:62:1F:C0:AF:C8:EC:18:EE:F2:06:33:F6:14:88:13:27:99:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/jjcLF7vH_6kvhdbuJiucTbxqBvg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:e20::/48 Signature Algorithm: sha256WithRSAEncryption 9b:c2:f9:c5:ed:f6:df:a1:28:f7:98:69:92:5c:34:72:a9:6f: a6:dc:2f:61:7a:02:78:73:5e:61:d5:49:f9:a8:f5:5e:c7:a3: f1:ca:d0:13:36:ad:54:33:20:1d:02:9a:59:0c:f9:ea:0c:78: 9f:a9:a2:a5:1b:16:7e:b5:64:a5:19:88:05:db:b5:44:f4:80: b2:ef:fe:de:dd:3d:ef:96:9d:de:b6:8e:e4:be:b6:d3:c2:5c: 42:59:1e:95:3c:97:b2:46:22:9f:1e:7c:a1:77:9c:76:42:3b: 00:91:1c:11:c3:ef:67:80:cd:96:a2:19:45:db:83:1b:99:8e: b4:6c:6b:97:b8:a0:55:4a:42:af:9e:36:24:21:f5:7a:54:3c: 3a:0a:14:03:d3:36:db:4d:eb:4c:e9:f3:9d:b1:4b:e4:9a:2a: f8:8a:4a:cb:1e:04:72:51:24:9e:51:a9:16:0e:88:65:fa:9f: f1:26:f9:a5:db:7c:3b:77:c7:83:9d:e8:61:ac:26:23:84:3b: 06:f8:fe:a9:67:2d:5b:1e:ae:89:bd:e3:ff:b3:9d:29:a4:a0: a6:7a:f4:8c:20:92:12:9e:e2:54:e2:b7:6d:3e:cc:f9:af:16: 08:12:cb:94:94:6b:62:75:c5:53:1c:46:ca:4e:2f:ec:40:81: 41:d3:31:6e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6yRSjNu+vv16u4LZXjaELMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4NzA2MjFmYzBhZmM4ZWMxOGVlZjIwNjMzZjYxNDg4MTMy Nzk5NzYwHhcNMjYwMTAxMTgxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTM3MGIxN2JiYzdmZmE5MmY4NWQ2ZWUyNjJiOWM0ZGJjNmEwNmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5G22Qa3iVKieNtzGuH6w6ciiKz7 sEq51G8XL/lb0z50hpnwxl7RxE9OoAqdS5aJmOqypdJG2OTS5kYNmEAcIM3M3hSv +K/e0k779YeTxUfNfDSifxjc9jjzpybWi8aDSsRjZmOOEcMKFE4ybMqnvmmmfLqF EHenb08U+pVvZCSyfT5YjW5yd6/shvKXYGrzxfmn1PIG5e/3qAgGcbl5VklRy30M LG+7AmuTJCiLqOn8Ka7h+jQ5KALhehmxXdcr8CDs2OwU2llPP/C14NtPu1i114BP lNBduYi5sE/OkcJwMbEs4xPllBHM6bX6BBhHGSjQfwbK7k/gwc0jCEBW3QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFI43Cxe7x/+pL4XW7iYrnE28agb4MB8GA1UdIwQY MBaAFHhwYh/Ar8jsGO7yBjP2FIgTJ5l2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUhCaUg4Q3Z5T3dZN3ZJR01fWVVpQk1ubVhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi84YjRlODQtYmVjZC00ZWNmLWJlYjUt OTZhNzlhMWQxYmIzLzEvampjTEY3dkhfNmt2aGRidUppdWNUYnhxQnZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi84YjRlODQtYmVjZC00ZWNmLWJlYjUtOTZhNzlhMWQxYmIz LzEvZUhCaUg4Q3Z5T3dZN3ZJR01fWVVpQk1ubVhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA4g MA0GCSqGSIb3DQEBCwUAA4IBAQCbwvnF7fbfoSj3mGmSXDRyqW+m3C9hegJ4c15h 1Un5qPVex6PxytATNq1UMyAdAppZDPnqDHifqaKlGxZ+tWSlGYgF27VE9ICy7/7e 3T3vlp3eto7kvrbTwlxCWR6VPJeyRiKfHnyhd5x2QjsAkRwRw+9ngM2WohlF24Mb mY60bGuXuKBVSkKvnjYkIfV6VDw6ChQD0zbbTetM6fOdsUvkmir4ikrLHgRyUSSe UakWDohl+p/xJvml23w7d8eDnehhrCYjhDsG+P6pZy1bHq6JveP/s50ppKCmevSM IJISnuJU4rdtPsz5rxYIEsuUlGtidcVTHEbKTi/sQIFB0zFu -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:06 2026 by rpki-client