This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/JhF3GOLtCx8WeH-5uNg9S7FjsLc.roa File: JhF3GOLtCx8WeH-5uNg9S7FjsLc.roa (raw, json) Hash identifier: Hkt3N4XjIsBhmx5Q0jNaJHb86kkU9pM6VSOMdFnRN1c= Subject key identifier: 26:11:77:18:E2:ED:0B:1F:16:78:7F:B9:B8:D8:3D:4B:B1:63:B0:B7 Certificate issuer: /CN=9c7122f2f7fa530bf1a8ffcf96a930f69b30f786 Certificate serial: 019B7C803E36E78947ABA7FC23393A9486E1 Authority key identifier: 9C:71:22:F2:F7:FA:53:0B:F1:A8:FF:CF:96:A9:30:F6:9B:30:F7:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHEi8vf6UwvxqP_Plqkw9psw94Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/JhF3GOLtCx8WeH-5uNg9S7FjsLc.roa Signing time: Fri 02 Jan 2026 02:18:57 +0000 ROA not before: Fri 02 Jan 2026 02:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213792 IP address blocks: 2a01:e0c0::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.mft rsync://rpki.ripe.net/repository/DEFAULT/nHEi8vf6UwvxqP_Plqkw9psw94Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:3e:36:e7:89:47:ab:a7:fc:23:39:3a:94:86:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c7122f2f7fa530bf1a8ffcf96a930f69b30f786 Validity Not Before: Jan 2 02:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26117718e2ed0b1f16787fb9b8d83d4bb163b0b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:41:74:28:9d:6c:a1:7b:f6:ee:b6:c7:c2:ff: fa:ab:ed:61:0d:15:e5:de:fc:4e:d1:9a:2a:4c:4a: fa:ec:23:c9:a6:46:6e:a0:7e:6d:bd:0e:9c:33:80: 97:19:5d:39:68:de:84:a1:06:84:da:e3:0c:68:c0: 64:2f:a2:e4:f4:a2:28:66:84:8c:07:25:ae:ba:5d: 4c:dc:14:74:bd:5d:04:46:20:30:48:46:19:89:c6: a3:88:ad:ce:16:ad:84:d0:d0:39:26:60:e3:8c:16: 66:0d:9b:a5:95:23:5e:06:76:2b:5d:f1:25:08:fc: 70:3d:7a:1a:a4:ba:96:82:af:f3:1d:80:c1:6b:72: c7:e8:06:fd:4c:d7:62:d2:8b:63:b0:0e:41:84:e8: 4b:c8:93:cb:9e:02:b6:de:2a:73:0a:17:5f:2e:d6: f8:8f:74:b1:52:1b:f9:b0:67:63:26:0d:08:b6:0d: 62:7d:a3:e6:a4:cf:53:5f:02:88:fe:96:cd:f8:7d: 5c:af:32:08:b6:87:aa:9e:53:68:bc:81:2a:23:0e: c1:8c:13:37:d0:f1:fc:b0:c5:eb:2a:24:eb:da:ae: ec:01:6d:77:61:62:be:a7:76:b4:0e:76:4b:fd:6a: 7d:d3:99:b9:08:16:d9:22:62:81:a6:c0:54:6c:07: cd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:11:77:18:E2:ED:0B:1F:16:78:7F:B9:B8:D8:3D:4B:B1:63:B0:B7 X509v3 Authority Key Identifier: keyid:9C:71:22:F2:F7:FA:53:0B:F1:A8:FF:CF:96:A9:30:F6:9B:30:F7:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHEi8vf6UwvxqP_Plqkw9psw94Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/JhF3GOLtCx8WeH-5uNg9S7FjsLc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:e0c0::/32 Signature Algorithm: sha256WithRSAEncryption 03:99:e5:4b:8a:54:e5:12:d6:9f:9e:f7:14:a4:fe:fe:02:2c: 49:81:68:17:4d:ee:ce:16:01:be:5f:ce:1a:0d:c7:12:36:18: a0:e1:32:be:30:48:73:6d:b6:fb:e5:9f:90:f5:42:76:ec:0a: 24:64:8d:07:c6:c0:cd:96:8d:f1:43:2a:15:95:20:2e:ab:2c: 67:73:9b:77:e0:d3:40:0d:dd:b8:f9:a3:31:47:98:77:61:9d: 62:8a:d7:a8:2d:8d:cf:73:e8:c0:25:71:6a:a0:14:ec:7c:f9: c8:36:d7:fc:a7:d8:b5:40:2e:11:b2:37:db:06:07:1e:62:da: 81:2c:7b:c4:92:e1:6c:21:05:c7:e9:1e:fe:5a:9a:b5:49:3e: 88:ae:8b:d7:e5:9a:d0:8a:8a:ba:7c:d8:96:db:de:05:3d:aa: 9e:98:94:0a:ba:74:50:8d:4b:49:23:f5:87:27:c1:8a:a4:ae: 93:88:ef:0b:f4:0b:b5:69:4b:a3:fa:75:3e:a5:68:df:ac:0b: 14:e8:1a:5b:c4:94:f5:fd:8c:5b:1e:e9:52:b5:91:01:e3:3b: a0:df:00:1e:6a:75:54:64:3a:f3:69:bb:b7:4b:40:25:0e:77: 37:fd:a3:a9:a8:56:b2:3f:40:59:3e:6f:2b:6a:62:97:b2:55: d2:88:f9:2e -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8gD4254lHq6f8Izk6lIbhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNzEyMmYyZjdmYTUzMGJmMWE4ZmZjZjk2YTkzMGY2OWIz MGY3ODYwHhcNMjYwMTAyMDIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjExNzcxOGUyZWQwYjFmMTY3ODdmYjliOGQ4M2Q0YmIxNjNiMGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukF0KJ1soXv27rbHwv/6q+1hDRXl 3vxO0ZoqTEr67CPJpkZuoH5tvQ6cM4CXGV05aN6EoQaE2uMMaMBkL6Lk9KIoZoSM ByWuul1M3BR0vV0ERiAwSEYZicajiK3OFq2E0NA5JmDjjBZmDZullSNeBnYrXfEl CPxwPXoapLqWgq/zHYDBa3LH6Ab9TNdi0otjsA5BhOhLyJPLngK23ipzChdfLtb4 j3SxUhv5sGdjJg0Itg1ifaPmpM9TXwKI/pbN+H1crzIItoeqnlNovIEqIw7BjBM3 0PH8sMXrKiTr2q7sAW13YWK+p3a0DnZL/Wp905m5CBbZImKBpsBUbAfNewIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFCYRdxji7QsfFnh/ubjYPUuxY7C3MB8GA1UdIwQY MBaAFJxxIvL3+lML8aj/z5apMPabMPeGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkhFaTh2ZjZVd3Z4cVBfUGxxa3c5cHN3OTRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS84M2UxZmUtM2Q0OC00Y2Q2LWE2MGIt NmIyNzMzNmQyNjllLzEvSmhGM0dPTHRDeDhXZUgtNXVOZzlTN0Zqc0xjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS84M2UxZmUtM2Q0OC00Y2Q2LWE2MGItNmIyNzMzNmQyNjll LzEvbkhFaTh2ZjZVd3Z4cVBfUGxxa3c5cHN3OTRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgHgwDAN BgkqhkiG9w0BAQsFAAOCAQEAA5nlS4pU5RLWn573FKT+/gIsSYFoF03uzhYBvl/O Gg3HEjYYoOEyvjBIc222++WfkPVCduwKJGSNB8bAzZaN8UMqFZUgLqssZ3Obd+DT QA3duPmjMUeYd2GdYorXqC2Nz3PowCVxaqAU7Hz5yDbX/KfYtUAuEbI32wYHHmLa gSx7xJLhbCEFx+ke/lqatUk+iK6L1+Wa0IqKunzYltveBT2qnpiUCrp0UI1LSSP1 hyfBiqSuk4jvC/QLtWlLo/p1PqVo36wLFOgaW8SU9f2MWx7pUrWRAeM7oN8AHmp1 VGQ682m7t0tAJQ53N/2jqahWsj9AWT5vK2pil7JV0oj5Lg== -----END CERTIFICATE-----Generated at Mon Jan 26 19:39:09 2026 by rpki-client