This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/jpJhO1X3Fr9hUb-DG-MGkaYcksw.roa File: jpJhO1X3Fr9hUb-DG-MGkaYcksw.roa (raw, json) Hash identifier: qr2NzVnl1VJwrzaYNmZtgYoQsTO097Vnonun3IEMl60= Subject key identifier: 8E:92:61:3B:55:F7:16:BF:61:51:BF:83:1B:E3:06:91:A6:1C:92:CC Certificate issuer: /CN=52eb03d211996e99a49e3c3f9ce4b3f2a15723c5 Certificate serial: 019B7F12CD02D2E884E9B017E5AA8F67158D Authority key identifier: 52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/jpJhO1X3Fr9hUb-DG-MGkaYcksw.roa Signing time: Fri 02 Jan 2026 14:18:17 +0000 ROA not before: Fri 02 Jan 2026 14:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47367 IP address blocks: 2a0f:eb80:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.crl rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:12:cd:02:d2:e8:84:e9:b0:17:e5:aa:8f:67:15:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52eb03d211996e99a49e3c3f9ce4b3f2a15723c5 Validity Not Before: Jan 2 14:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e92613b55f716bf6151bf831be30691a61c92cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:21:f9:b2:b9:f6:ce:09:21:4e:33:01:f3:9e: e5:d7:5b:f5:b3:be:5e:06:ea:5e:3a:b5:4a:0c:16: 84:22:40:99:bf:7f:f1:03:3a:99:ce:9a:77:a6:b9: 42:f5:1c:cc:f7:88:ba:96:4b:cd:41:fc:76:0e:dc: 93:c6:ef:79:5e:a8:fb:2c:e5:5c:08:42:a4:3b:19: ae:e9:d9:30:b6:6e:2d:18:02:f9:36:6f:a5:b5:97: a6:f9:ac:3a:f4:92:d5:1a:6f:8a:22:aa:41:4b:b0: 41:80:8c:96:43:6e:8c:76:e1:0c:54:8a:23:e0:9b: a7:e8:a7:87:5b:8d:65:b5:a1:6e:8d:4f:06:22:1c: 3c:3a:62:bd:67:0f:13:ca:a5:78:13:57:54:0f:c6: 80:3f:02:69:5a:48:cc:87:79:3a:27:34:75:45:88: b7:1e:71:86:d9:24:cb:87:6a:97:fd:e9:c4:e8:54: d7:61:02:11:dc:a3:20:a5:45:cd:c0:1a:98:74:16: a3:f5:31:34:f4:71:da:a3:b9:14:3d:43:e7:03:4b: a7:24:75:02:67:b9:2f:60:84:19:4a:87:f6:3b:4a: 88:7b:35:00:85:1b:d2:1f:c8:a9:c0:be:06:07:ad: 24:eb:27:45:2b:97:30:71:eb:6d:60:c7:08:10:82: 1c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:92:61:3B:55:F7:16:BF:61:51:BF:83:1B:E3:06:91:A6:1C:92:CC X509v3 Authority Key Identifier: keyid:52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/jpJhO1X3Fr9hUb-DG-MGkaYcksw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:eb80:2::/48 Signature Algorithm: sha256WithRSAEncryption 62:00:62:de:3e:e7:fc:63:66:44:66:3c:3c:3c:2a:ce:8c:33: 5a:0e:b4:e6:41:87:5d:f1:be:17:18:c3:a5:60:7d:71:29:7f: b4:91:7f:0d:9c:e4:7b:e0:d3:e8:90:70:b7:0e:1a:69:30:d9: bf:b8:33:bc:b2:94:53:64:9a:16:aa:d8:6e:36:68:c6:31:24: eb:07:33:36:3f:c3:88:f4:44:32:73:73:5a:7c:43:70:70:f8: df:31:06:05:cf:62:4b:5b:42:80:31:cd:d7:8e:0f:12:a5:f6: 03:3d:a0:56:78:e3:4d:c5:8f:56:08:2e:bf:d7:67:75:fc:ba: 2e:22:b4:19:ff:f1:7a:a8:d4:ae:ca:3f:2e:65:68:5f:fe:79: e8:65:62:44:d2:aa:62:ff:8c:41:5b:15:4b:8b:de:c2:00:c4: 7f:d9:47:68:0e:fb:e3:d9:c1:a1:1e:05:d5:c2:4b:b3:14:c9: b2:f7:21:c5:f7:17:f8:89:bd:6e:cc:9d:9c:1c:d8:e4:6d:f6: 66:fe:25:cf:fd:2f:1f:c4:51:08:dc:fa:58:90:2f:00:05:de: fe:07:be:b4:3e:96:f4:1d:50:60:a6:65:56:6d:1f:bc:bc:9c: 9c:79:dc:09:6e:e9:13:ec:70:9a:99:86:61:4b:6d:d5:05:4f: ce:32:1f:2b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/Es0C0uiE6bAX5aqPZxWNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZWIwM2QyMTE5OTZlOTlhNDllM2MzZjljZTRiM2YyYTE1 NzIzYzUwHhcNMjYwMTAyMTQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTkyNjEzYjU1ZjcxNmJmNjE1MWJmODMxYmUzMDY5MWE2MWM5MmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyH5srn2zgkhTjMB857l11v1s75e BupeOrVKDBaEIkCZv3/xAzqZzpp3prlC9RzM94i6lkvNQfx2DtyTxu95Xqj7LOVc CEKkOxmu6dkwtm4tGAL5Nm+ltZem+aw69JLVGm+KIqpBS7BBgIyWQ26MduEMVIoj 4Jun6KeHW41ltaFujU8GIhw8OmK9Zw8TyqV4E1dUD8aAPwJpWkjMh3k6JzR1RYi3 HnGG2STLh2qX/enE6FTXYQIR3KMgpUXNwBqYdBaj9TE09HHao7kUPUPnA0unJHUC Z7kvYIQZSof2O0qIezUAhRvSH8ipwL4GB60k6ydFK5cwcettYMcIEIIc3QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFI6SYTtV9xa/YVG/gxvjBpGmHJLMMB8GA1UdIwQY MBaAFFLrA9IRmW6ZpJ48P5zks/KhVyPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXVzRDBoR1picG1rbmp3X25PU3o4cUZYSThVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82NjY3NmEtM2JhYy00YjZkLWE2Mzgt OTZjZDQyZjBmOTViLzEvanBKaE8xWDNGcjloVWItREctTUdrYVlja3N3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC82NjY3NmEtM2JhYy00YjZkLWE2MzgtOTZjZDQyZjBmOTVi LzEvVXVzRDBoR1picG1rbmp3X25PU3o4cUZYSThVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg/rgAAC MA0GCSqGSIb3DQEBCwUAA4IBAQBiAGLePuf8Y2ZEZjw8PCrOjDNaDrTmQYdd8b4X GMOlYH1xKX+0kX8NnOR74NPokHC3DhppMNm/uDO8spRTZJoWqthuNmjGMSTrBzM2 P8OI9EQyc3NafENwcPjfMQYFz2JLW0KAMc3Xjg8SpfYDPaBWeONNxY9WCC6/12d1 /LouIrQZ//F6qNSuyj8uZWhf/nnoZWJE0qpi/4xBWxVLi97CAMR/2UdoDvvj2cGh HgXVwkuzFMmy9yHF9xf4ib1uzJ2cHNjkbfZm/iXP/S8fxFEI3PpYkC8ABd7+B760 Ppb0HVBgpmVWbR+8vJycedwJbukT7HCamYZhS23VBU/OMh8r -----END CERTIFICATE-----Generated at Mon Feb 9 20:46:28 2026 by rpki-client