This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/jrdUT9ZxJxzqlMRnHVJnnefEJPE.roa File: jrdUT9ZxJxzqlMRnHVJnnefEJPE.roa (raw, json) Hash identifier: FxYjIY5awSFaZzGjU6N3ODWHu4ZSbBlhd+wx8DBxv6E= Subject key identifier: 8E:B7:54:4F:D6:71:27:1C:EA:94:C4:67:1D:52:67:9D:E7:C4:24:F1 Certificate issuer: /CN=72cae9657c2d84d101ad8500d5d236ea8eb85481 Certificate serial: 019B7DC893C75D420D13DCD95BBFA0D3F563 Authority key identifier: 72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/jrdUT9ZxJxzqlMRnHVJnnefEJPE.roa Signing time: Fri 02 Jan 2026 08:17:35 +0000 ROA not before: Fri 02 Jan 2026 08:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212165 IP address blocks: 2a14:5240::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 11:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:93:c7:5d:42:0d:13:dc:d9:5b:bf:a0:d3:f5:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cae9657c2d84d101ad8500d5d236ea8eb85481 Validity Not Before: Jan 2 08:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8eb7544fd671271cea94c4671d52679de7c424f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:60:8e:33:7a:10:2e:5c:fc:50:ec:9c:a2:bc: 79:b0:c2:aa:90:8e:71:75:54:61:df:1b:70:e0:b1: a4:fc:34:ac:32:5f:d6:b2:83:38:87:61:8d:ba:84: b0:45:0c:63:2f:05:a5:74:ed:05:c0:58:26:7b:8e: b8:7b:27:13:47:17:a2:71:da:18:08:87:3b:b8:38: ca:d2:d6:12:3a:33:95:3e:2e:40:93:cd:8d:78:3d: 7d:cb:da:3e:fb:00:ef:c7:ee:85:06:75:ae:ca:3f: 73:b2:93:ab:bc:38:4c:62:40:53:15:95:0d:d4:3b: 97:47:d8:2a:af:04:c1:95:26:dd:ac:34:2a:2b:83: f4:36:70:c0:63:81:dd:d4:8f:13:c3:30:a6:5d:b7: 2f:d6:47:ae:65:be:2b:40:95:4c:76:6e:41:06:c6: b3:54:0e:08:e3:ec:bc:38:bc:1c:22:6b:a8:94:b0: fa:c0:e7:5e:37:9d:cb:a7:47:6a:c0:2e:1f:dd:5e: a8:bb:af:f3:3e:ac:c1:ed:05:08:d8:70:33:c7:35: fe:29:1f:4e:62:ad:eb:52:31:23:62:1b:6e:fd:c1: ce:63:16:d5:e3:eb:e9:7c:c3:f6:52:e7:07:20:00: af:a0:8f:99:20:7c:4a:bb:4c:51:60:10:f9:85:9b: df:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B7:54:4F:D6:71:27:1C:EA:94:C4:67:1D:52:67:9D:E7:C4:24:F1 X509v3 Authority Key Identifier: keyid:72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/jrdUT9ZxJxzqlMRnHVJnnefEJPE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:5240::/29 Signature Algorithm: sha256WithRSAEncryption 7b:dd:b8:b9:24:b4:d1:bd:9e:01:3d:46:8d:99:ea:3e:05:7f: e1:d6:57:6f:7a:08:be:92:85:15:b7:e9:42:85:fd:6e:26:4e: 64:ae:53:55:ee:37:53:61:b4:c2:b0:42:03:4a:64:a5:10:4e: ce:f4:0b:23:1d:28:26:dd:f7:47:2e:a0:96:a4:60:a1:d7:d1: fd:2a:32:61:60:dc:9d:46:57:12:43:93:b4:56:f2:2c:a1:68: 59:43:15:69:e5:dd:80:32:81:c7:d8:95:5d:ee:9c:30:eb:f4: a6:dc:74:3c:6f:38:af:f1:95:4b:ae:34:c6:55:33:7c:45:c3: ba:6c:a4:e2:5a:1e:39:ac:8c:76:a7:3e:30:10:c7:2a:bb:20: 45:cd:f5:ef:f6:eb:25:17:69:cc:ce:a5:8c:f7:88:11:39:0f: 8e:26:f6:f3:28:72:db:c5:13:f7:83:a5:f3:e1:05:87:23:8d: 5a:5e:13:2d:90:cf:26:d7:5e:01:7c:ed:0a:42:1f:23:57:20: cd:82:2c:9d:54:1e:cb:d4:43:b7:21:4b:54:f5:1a:c1:e2:16: 7f:d0:96:3f:64:a5:12:d7:cd:f1:29:32:28:09:bb:01:12:4a: 61:34:b2:db:75:50:2b:d9:9d:11:30:e0:80:d1:34:97:ed:c4: 36:2c:4b:90 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9yJPHXUINE9zZW7+g0/VjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyY2FlOTY1N2MyZDg0ZDEwMWFkODUwMGQ1ZDIzNmVhOGVi ODU0ODEwHhcNMjYwMTAyMDgxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWI3NTQ0ZmQ2NzEyNzFjZWE5NGM0NjcxZDUyNjc5ZGU3YzQyNGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWCOM3oQLlz8UOycorx5sMKqkI5x dVRh3xtw4LGk/DSsMl/WsoM4h2GNuoSwRQxjLwWldO0FwFgme464eycTRxeicdoY CIc7uDjK0tYSOjOVPi5Ak82NeD19y9o++wDvx+6FBnWuyj9zspOrvDhMYkBTFZUN 1DuXR9gqrwTBlSbdrDQqK4P0NnDAY4Hd1I8TwzCmXbcv1keuZb4rQJVMdm5BBsaz VA4I4+y8OLwcImuolLD6wOdeN53Lp0dqwC4f3V6ou6/zPqzB7QUI2HAzxzX+KR9O Yq3rUjEjYhtu/cHOYxbV4+vpfMP2UucHIACvoI+ZIHxKu0xRYBD5hZvfcQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFI63VE/WcScc6pTEZx1SZ53nxCTxMB8GA1UdIwQY MBaAFHLK6WV8LYTRAa2FANXSNuqOuFSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3NycFpYd3RoTkVCcllVQTFkSTI2bzY0VklFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9kZWQ3MGMtMTA1OS00MzQ1LWI0NTkt NGFlNWZmOWY0ZmM2LzEvanJkVVQ5WnhKeHpxbE1SbkhWSm5uZWZFSlBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9kZWQ3MGMtMTA1OS00MzQ1LWI0NTktNGFlNWZmOWY0ZmM2 LzEvY3NycFpYd3RoTkVCcllVQTFkSTI2bzY0VklFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhRSQDAN BgkqhkiG9w0BAQsFAAOCAQEAe924uSS00b2eAT1GjZnqPgV/4dZXb3oIvpKFFbfp QoX9biZOZK5TVe43U2G0wrBCA0pkpRBOzvQLIx0oJt33Ry6glqRgodfR/SoyYWDc nUZXEkOTtFbyLKFoWUMVaeXdgDKBx9iVXe6cMOv0ptx0PG84r/GVS640xlUzfEXD umyk4loeOayMdqc+MBDHKrsgRc317/brJRdpzM6ljPeIETkPjib28yhy28UT94Ol 8+EFhyONWl4TLZDPJtdeAXztCkIfI1cgzYIsnVQey9RDtyFLVPUaweIWf9CWP2Sl EtfN8SkyKAm7ARJKYTSy23VQK9mdETDggNE0l+3ENixLkA== -----END CERTIFICATE-----Generated at Wed Jan 21 17:07:03 2026 by rpki-client