This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JJu_n_bJNSAnWziKMOXnGeR1rdg.roa File: JJu_n_bJNSAnWziKMOXnGeR1rdg.roa (raw, json) Hash identifier: jnNIliCMdL1bzizYqQbRiy9rv+5S9LrxV2qN2gJvrus= Subject key identifier: 24:9B:BF:9F:F6:C9:35:20:27:5B:38:8A:30:E5:E7:19:E4:75:AD:D8 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D6FEABA11AB31118091E6BC33A94A Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JJu_n_bJNSAnWziKMOXnGeR1rdg.roa Signing time: Fri 02 Jan 2026 06:20:34 +0000 ROA not before: Fri 02 Jan 2026 06:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214701 IP address blocks: 2a0e:97c0:1d0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 17:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:6f:ea:ba:11:ab:31:11:80:91:e6:bc:33:a9:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=249bbf9ff6c93520275b388a30e5e719e475add8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c2:bd:9a:8f:d3:97:12:df:0c:c4:da:81:bf: 32:95:84:35:6a:ba:42:89:b7:d9:c8:8a:4f:27:dc: b1:c5:b4:b8:a1:84:60:11:24:ec:25:e4:c7:b3:20: 74:6f:49:a9:c6:9b:50:08:f4:fc:e5:2b:16:31:cd: 28:d0:6e:15:85:83:38:bb:77:d4:2d:19:74:63:54: 54:2b:9e:92:f7:e6:5b:6d:d0:2c:72:74:64:24:4b: 06:45:d4:2a:c7:4c:0e:3b:79:3a:64:ec:43:a8:3d: 68:87:c3:94:18:65:29:88:82:e0:f5:69:3a:86:f4: 2b:2f:61:a3:e4:fe:36:88:ad:b2:c2:57:e0:18:d3: e3:94:eb:14:51:51:f0:58:fa:56:e3:62:a0:f9:4b: ca:95:9c:f5:f6:13:97:1e:e7:2b:5b:18:a9:9e:86: 8b:a2:b8:cd:ca:69:df:f1:89:36:33:c1:30:16:f6: 5b:4d:d0:52:de:97:6a:22:d9:59:e0:16:a2:e8:27: 93:24:70:0a:82:c4:8b:d2:30:a2:f3:a9:9c:8a:f9: 4d:a6:ec:de:7c:09:14:cd:32:55:33:0e:15:34:8b: 0b:ad:16:c7:64:e5:81:8c:4b:44:4a:5d:f1:1b:44: a5:31:b1:b7:b4:8a:2b:f6:60:60:17:6b:e0:a3:5e: f4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:9B:BF:9F:F6:C9:35:20:27:5B:38:8A:30:E5:E7:19:E4:75:AD:D8 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JJu_n_bJNSAnWziKMOXnGeR1rdg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:1d0::/44 Signature Algorithm: sha256WithRSAEncryption 26:cb:a3:1a:1e:8b:3d:84:0c:9c:ad:72:ad:26:9e:cf:98:a5: f4:2e:52:a0:e1:6e:39:db:b4:54:54:90:48:d4:98:29:69:be: 47:e6:5f:6c:16:b7:4f:8c:11:17:cd:86:6a:62:23:9c:5a:05: 94:c7:bd:03:9f:f0:5d:31:5e:e4:54:37:44:96:81:68:42:79: c1:d8:ba:96:7e:b9:54:3f:be:d9:15:8a:b0:c3:86:39:16:1f: 5e:f5:44:e6:a0:81:4c:f1:81:22:54:28:6f:fa:f3:34:41:ce: a9:84:4a:db:a3:0b:3a:a3:e8:f2:3a:4e:68:d5:e7:45:ab:ff: b0:e4:c1:35:ef:15:0d:fa:a8:76:d7:6f:37:5f:b1:69:08:ea: 55:b1:18:49:c1:12:49:bc:d9:50:a7:a7:b5:9c:10:af:53:eb: 13:06:ec:5e:03:6b:32:49:ec:cf:9e:a2:54:72:36:63:21:7f: d5:41:7d:d1:ca:f1:28:40:dc:03:2d:8d:09:9e:eb:dc:39:a0: 4e:9b:96:15:32:bf:65:2c:0a:81:16:74:14:0b:5a:3c:90:f5: 7b:6a:60:e2:c2:9e:76:a6:ef:e7:73:95:fd:2a:f1:4d:21:fb: 9f:df:4c:f0:f9:cf:87:b2:5d:1d:e3:fc:a6:8e:8f:4e:fb:bd: ce:32:cb:54 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XW/quhGrMRGAkea8M6lKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDliYmY5ZmY2YzkzNTIwMjc1YjM4OGEzMGU1ZTcxOWU0NzVhZGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsK9mo/TlxLfDMTagb8ylYQ1arpC ibfZyIpPJ9yxxbS4oYRgESTsJeTHsyB0b0mpxptQCPT85SsWMc0o0G4VhYM4u3fU LRl0Y1RUK56S9+ZbbdAscnRkJEsGRdQqx0wOO3k6ZOxDqD1oh8OUGGUpiILg9Wk6 hvQrL2Gj5P42iK2ywlfgGNPjlOsUUVHwWPpW42Kg+UvKlZz19hOXHucrWxipnoaL orjNymnf8Yk2M8EwFvZbTdBS3pdqItlZ4Bai6CeTJHAKgsSL0jCi86mcivlNpuze fAkUzTJVMw4VNIsLrRbHZOWBjEtESl3xG0SlMbG3tIor9mBgF2vgo170NwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCSbv5/2yTUgJ1s4ijDl5xnkda3YMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvSkp1X25fYkpOU0FuV3ppS01PWG5HZVIxcmRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAHQ MA0GCSqGSIb3DQEBCwUAA4IBAQAmy6MaHos9hAycrXKtJp7PmKX0LlKg4W4527RU VJBI1Jgpab5H5l9sFrdPjBEXzYZqYiOcWgWUx70Dn/BdMV7kVDdEloFoQnnB2LqW frlUP77ZFYqww4Y5Fh9e9UTmoIFM8YEiVChv+vM0Qc6phErbows6o+jyOk5o1edF q/+w5ME17xUN+qh21283X7FpCOpVsRhJwRJJvNlQp6e1nBCvU+sTBuxeA2sySezP nqJUcjZjIX/VQX3RyvEoQNwDLY0JnuvcOaBOm5YVMr9lLAqBFnQUC1o8kPV7amDi wp52pu/nc5X9KvFNIfuf30zw+c+Hsl0d4/ymjo9O+73OMstU -----END CERTIFICATE-----Generated at Sat Jan 10 02:19:30 2026 by rpki-client