This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/JA2Y-jh-PHCmYhc4L6lveTEQpC8.roa File: JA2Y-jh-PHCmYhc4L6lveTEQpC8.roa (raw, json) Hash identifier: yCR3T9OdwoX7tNGe8kaR3S1PiWc9KBcnYLkTDnQhJyM= Subject key identifier: 24:0D:98:FA:38:7E:3C:70:A6:62:17:38:2F:A9:6F:79:31:10:A4:2F Certificate issuer: /CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0 Certificate serial: 019BE5B87885B589026406DFDDD7C1BDB8F2 Authority key identifier: 2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/JA2Y-jh-PHCmYhc4L6lveTEQpC8.roa Signing time: Thu 22 Jan 2026 12:40:30 +0000 ROA not before: Thu 22 Jan 2026 12:40:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61992 IP address blocks: 2a0e:eac0:1003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:b8:78:85:b5:89:02:64:06:df:dd:d7:c1:bd:b8:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0 Validity Not Before: Jan 22 12:40:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=240d98fa387e3c70a66217382fa96f793110a42f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:68:51:23:ca:f3:4f:90:e8:33:8a:3c:ba:f0: 6e:71:c4:8c:42:18:9c:be:e7:c0:1c:b9:37:cd:a9: 87:97:a1:56:4b:cc:76:ab:13:23:72:32:63:e5:3b: 8c:6a:97:6e:e5:41:40:b9:73:53:44:8e:8c:cc:20: 10:b7:11:c6:e6:13:c4:29:5e:be:73:98:2d:dc:17: 41:27:b2:6c:42:61:aa:c9:c1:8b:32:c3:64:d3:e1: 71:51:b9:7c:61:fc:cc:c6:50:31:86:c8:1f:b6:52: 67:38:62:df:68:7d:53:c3:64:3f:65:48:8d:df:79: cc:99:7e:0b:0c:ef:ad:50:e8:bc:bd:c2:06:dc:91: 27:a7:91:bb:4f:16:c0:8e:9c:61:dd:92:5c:95:8d: a9:e2:46:43:ce:3f:15:61:3b:4f:70:d2:02:c0:34: a7:8f:8d:e7:70:77:99:91:9c:f1:a8:e0:7e:9b:56: ca:38:7b:b3:ec:1b:68:d3:90:98:6e:a5:00:bc:fb: bb:f9:d5:34:6a:c4:20:c0:59:5b:70:31:53:96:5e: 7c:97:ea:96:ad:10:94:ed:d0:f2:73:d0:3a:2c:db: 27:83:60:34:cf:c0:64:b6:0d:99:a0:22:f3:ce:2d: 8d:01:db:22:55:dd:76:73:77:95:48:f8:ea:65:57: 08:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:0D:98:FA:38:7E:3C:70:A6:62:17:38:2F:A9:6F:79:31:10:A4:2F X509v3 Authority Key Identifier: keyid:2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/JA2Y-jh-PHCmYhc4L6lveTEQpC8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:eac0:1003::/48 Signature Algorithm: sha256WithRSAEncryption 4e:76:2c:f3:ee:2a:b9:69:1f:8a:cd:a2:08:e5:b1:b6:2d:2a: 52:75:61:41:84:e9:19:96:07:49:b5:dc:90:72:a9:a3:fc:b4: 2d:26:9d:44:4d:5e:a0:ad:f3:01:77:18:62:ad:59:c5:9d:58: 52:78:26:09:40:36:b9:9c:5a:d9:06:1c:c1:db:7f:79:61:7a: 37:db:2a:83:1e:bb:d6:28:cc:ad:b0:b0:e0:91:89:cd:7b:41: d8:b8:4d:d1:51:49:fa:61:a9:3e:ae:6c:89:b4:61:ca:cf:d2: b7:d7:54:a9:6b:f0:09:14:1a:0f:0c:8d:41:1d:ab:2f:2a:51: 8e:30:d0:f0:7f:8b:7a:39:84:65:23:ad:56:03:a0:96:04:88: c2:23:66:f0:5d:f6:91:cd:6b:95:0f:cb:77:2c:be:9e:24:74: 92:39:5f:3c:b0:bf:f7:39:f7:4d:1c:fd:f3:52:3a:03:e0:76: 45:e8:40:3b:16:c8:f8:3e:77:80:a9:af:1d:b4:85:64:f0:ea: 3e:34:43:7e:f0:ce:85:88:1d:a7:63:7a:bb:01:83:4b:d0:49: 4e:5c:fa:c6:b2:6f:04:a9:d7:e0:5c:21:81:a1:2a:f1:87:d0: 51:73:be:b4:77:b6:c9:ce:20:c4:3f:8a:9d:30:bb:98:42:69: 99:61:bb:41 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZvluHiFtYkCZAbf3dfBvbjyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNmQ3ZTUxOTFmODFmZjBhMTlmMTAyYjE3MThhYjRmOWUw ZWEzYTAwHhcNMjYwMTIyMTI0MDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDBkOThmYTM4N2UzYzcwYTY2MjE3MzgyZmE5NmY3OTMxMTBhNDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWhRI8rzT5DoM4o8uvBuccSMQhic vufAHLk3zamHl6FWS8x2qxMjcjJj5TuMapdu5UFAuXNTRI6MzCAQtxHG5hPEKV6+ c5gt3BdBJ7JsQmGqycGLMsNk0+FxUbl8YfzMxlAxhsgftlJnOGLfaH1Tw2Q/ZUiN 33nMmX4LDO+tUOi8vcIG3JEnp5G7TxbAjpxh3ZJclY2p4kZDzj8VYTtPcNICwDSn j43ncHeZkZzxqOB+m1bKOHuz7Bto05CYbqUAvPu7+dU0asQgwFlbcDFTll58l+qW rRCU7dDyc9A6LNsng2A0z8Bktg2ZoCLzzi2NAdsiVd12c3eVSPjqZVcImQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCQNmPo4fjxwpmIXOC+pb3kxEKQvMB8GA1UdIwQY MBaAFCttflGR+B/woZ8QKxcYq0+eDqOgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzIxLVVaSDRIX0NobnhBckZ4aXJUNTRPbzZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hYjMxNTYtYjA2MS00OWZjLWIxZjAt MDBjYTMxMjZiM2ZlLzEvSkEyWS1qaC1QSENtWWhjNEw2bHZlVEVRcEM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9hYjMxNTYtYjA2MS00OWZjLWIxZjAtMDBjYTMxMjZiM2Zl LzEvSzIxLVVaSDRIX0NobnhBckZ4aXJUNTRPbzZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg7qwBAD MA0GCSqGSIb3DQEBCwUAA4IBAQBOdizz7iq5aR+KzaII5bG2LSpSdWFBhOkZlgdJ tdyQcqmj/LQtJp1ETV6grfMBdxhirVnFnVhSeCYJQDa5nFrZBhzB2395YXo32yqD HrvWKMytsLDgkYnNe0HYuE3RUUn6Yak+rmyJtGHKz9K311Spa/AJFBoPDI1BHasv KlGOMNDwf4t6OYRlI61WA6CWBIjCI2bwXfaRzWuVD8t3LL6eJHSSOV88sL/3OfdN HP3zUjoD4HZF6EA7Fsj4PneAqa8dtIVk8Oo+NEN+8M6FiB2nY3q7AYNL0ElOXPrG sm8EqdfgXCGBoSrxh9BRc760d7bJziDEP4qdMLuYQmmZYbtB -----END CERTIFICATE-----Generated at Mon Jan 26 14:17:27 2026 by rpki-client