This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/jVsZ0ASEkelKMcwQ-amT5hqa9K0.roa
File: jVsZ0ASEkelKMcwQ-amT5hqa9K0.roa (raw, json)
Hash identifier: K0akq9Iq9DZmiNN1Axy2fJVUiCY4NzycyW1Nu6gD96Q=
Subject key identifier: 8D:5B:19:D0:04:84:91:E9:4A:31:CC:10:F9:A9:93:E6:1A:9A:F4:AD
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 019B7CEDF68D20EB8DEE2186D76A89E13AB0
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/jVsZ0ASEkelKMcwQ-amT5hqa9K0.roa
Signing time: Fri 02 Jan 2026 04:18:48 +0000
ROA not before: Fri 02 Jan 2026 04:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212483
IP address blocks: 2a0d:2587::/33 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:f6:8d:20:eb:8d:ee:21:86:d7:6a:89:e1:3a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 2 04:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d5b19d0048491e94a31cc10f9a993e61a9af4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a2:0b:53:72:6d:58:51:a9:05:26:48:6e:e1:
a3:fe:8f:db:c9:5c:37:2b:60:8c:29:1b:31:15:70:
a6:d1:06:fd:75:63:b0:b1:85:ae:e9:ec:d7:3c:be:
8e:21:72:03:40:14:ed:23:78:08:51:a0:2d:54:b6:
92:78:12:6a:57:44:0b:46:48:82:68:47:1d:e6:4e:
24:7f:4e:77:1b:cb:4c:d8:8f:22:75:ca:ac:b0:34:
09:0b:de:a1:a4:02:27:a4:64:e1:16:42:a3:d2:bb:
6e:69:28:cd:63:b7:c5:db:78:d3:0c:89:ba:55:38:
b2:12:d3:f4:33:8e:a3:24:4b:41:ec:af:f4:96:1c:
63:41:dc:f9:2d:7a:5b:07:50:45:af:35:e1:9c:8b:
5f:79:34:f4:5a:07:a1:7b:da:c7:4c:c7:40:84:8d:
d2:d4:24:af:ed:7f:e8:0e:8b:4f:20:70:78:78:62:
18:ad:18:08:39:88:a3:06:c2:7f:d5:39:57:22:91:
22:58:f7:65:bd:a0:14:37:52:4b:43:74:1b:4a:1b:
ad:bb:00:50:0f:45:13:f1:fa:50:54:90:1c:e1:9e:
79:40:b0:4b:80:18:1a:8c:39:e2:85:0b:4c:ae:e2:
b5:76:6f:d3:49:cf:19:26:d4:71:e1:18:74:d0:fc:
8c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5B:19:D0:04:84:91:E9:4A:31:CC:10:F9:A9:93:E6:1A:9A:F4:AD
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/jVsZ0ASEkelKMcwQ-amT5hqa9K0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2587::/33
Signature Algorithm: sha256WithRSAEncryption
39:3b:83:1a:11:79:7d:92:a9:b6:c7:bb:74:70:b8:6d:96:71:
ae:d1:d9:0e:6e:9b:c3:59:af:1c:f4:8f:6b:50:84:86:28:70:
9d:0b:69:37:74:cb:fe:57:af:14:13:d2:3a:c9:bf:33:e7:16:
b4:f3:6a:bf:4a:14:24:96:b2:5c:f7:b0:3b:f9:58:ba:99:7d:
99:83:e8:72:f2:59:92:1e:c8:21:ef:7b:ec:ba:b6:7b:d5:96:
3f:73:7f:7e:63:8f:67:b0:27:af:9f:85:61:fb:22:7c:a6:e8:
ee:84:1b:3b:e9:45:15:71:94:73:77:37:eb:4f:d9:71:e6:92:
21:99:03:9e:ba:0b:27:a7:3d:f8:6b:24:c0:dd:34:cc:c5:db:
6f:78:71:86:38:af:2c:db:d4:88:c4:c4:83:ce:83:c0:e2:8e:
9e:1e:cf:39:93:25:79:9d:30:23:11:a4:7f:c2:5d:2d:37:ef:
5e:49:6a:5d:12:8f:e7:b4:41:a3:be:2f:be:bb:24:5a:ac:04:
1f:23:a2:19:8d:18:23:d8:54:e6:70:f4:12:2e:b2:73:4e:2d:
8b:6b:42:65:ce:ab:2b:ee:1d:46:78:64:6c:d4:70:d9:15:ca:
41:37:78:14:46:6e:ff:20:2c:b1:ed:e9:cd:ce:e9:0a:44:4b:
9c:1f:1a:af
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZt87faNIOuN7iGG12qJ4TqwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYzY5ZDA0NTgzNTAwYzVlZjgxMTM2ODMxMjM3NTkzZTBi
Yjg2Y2UwHhcNMjYwMTAyMDQxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDViMTlkMDA0ODQ5MWU5NGEzMWNjMTBmOWE5OTNlNjFhOWFmNGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56ILU3JtWFGpBSZIbuGj/o/byVw3
K2CMKRsxFXCm0Qb9dWOwsYWu6ezXPL6OIXIDQBTtI3gIUaAtVLaSeBJqV0QLRkiC
aEcd5k4kf053G8tM2I8idcqssDQJC96hpAInpGThFkKj0rtuaSjNY7fF23jTDIm6
VTiyEtP0M46jJEtB7K/0lhxjQdz5LXpbB1BFrzXhnItfeTT0Wgehe9rHTMdAhI3S
1CSv7X/oDotPIHB4eGIYrRgIOYijBsJ/1TlXIpEiWPdlvaAUN1JLQ3QbShutuwBQ
D0UT8fpQVJAc4Z55QLBLgBgajDnihQtMruK1dm/TSc8ZJtRx4Rh00PyMxwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFI1bGdAEhJHpSjHMEPmpk+YamvStMB8GA1UdIwQY
MBaAFHPGnQRYNQDF74ETaDEjdZPgu4bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQt
ZjljYjBhN2IyMDZjLzEvalZzWjBBU0VrZWxLTWN3US1hbVQ1aHFhOUswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQtZjljYjBhN2IyMDZj
LzEvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHKg0lhwAw
DQYJKoZIhvcNAQELBQADggEBADk7gxoReX2SqbbHu3RwuG2Wca7R2Q5um8NZrxz0
j2tQhIYocJ0LaTd0y/5XrxQT0jrJvzPnFrTzar9KFCSWslz3sDv5WLqZfZmD6HLy
WZIeyCHve+y6tnvVlj9zf35jj2ewJ6+fhWH7Inym6O6EGzvpRRVxlHN3N+tP2XHm
kiGZA566CyenPfhrJMDdNMzF2294cYY4ryzb1IjExIPOg8Dijp4ezzmTJXmdMCMR
pH/CXS03715Jal0Sj+e0QaO+L767JFqsBB8johmNGCPYVOZw9BIusnNOLYtrQmXO
qyvuHUZ4ZGzUcNkVykE3eBRGbv8gLLHt6c3O6QpES5wfGq8=
-----END CERTIFICATE-----
Generated at Thu Jan 22 03:22:51 2026 by rpki-client