This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/Jy63By-FZQfSxze4pLedxCdRCZ0.roa File: Jy63By-FZQfSxze4pLedxCdRCZ0.roa (raw, json) Hash identifier: jlnfFTI0k7/ojNNgBH9AiRYF9L1A99AIRcADl9339mo= Subject key identifier: 27:2E:B7:07:2F:85:65:07:D2:C7:37:B8:A4:B7:9D:C4:27:51:09:9D Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984 Certificate serial: 019B77591AC449BB9F72378952EF7CADF8AD Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/Jy63By-FZQfSxze4pLedxCdRCZ0.roa Signing time: Thu 01 Jan 2026 02:18:06 +0000 ROA not before: Thu 01 Jan 2026 02:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206804 IP address blocks: 2a03:efc0:2100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:1a:c4:49:bb:9f:72:37:89:52:ef:7c:ad:f8:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984 Validity Not Before: Jan 1 02:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=272eb7072f856507d2c737b8a4b79dc42751099d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:14:9f:fe:3d:43:67:66:80:78:72:a3:65:17: 2d:1c:e7:b8:c0:82:97:a9:1d:5a:a4:78:78:53:bc: 4c:8d:c8:20:da:3d:85:a7:9e:a7:2c:b0:ec:bd:48: b6:77:57:e9:fc:36:42:d2:9a:a5:0b:1b:32:b5:c2: 79:16:fa:2b:e5:e9:b3:3c:b1:5f:68:15:bb:6b:91: a5:95:6c:ea:0a:67:c6:ff:6d:b1:21:dd:ec:c2:06: 94:ab:96:85:9a:de:31:23:bf:b2:8f:e7:3e:6a:20: 7a:a5:c7:45:df:60:b2:04:07:e0:22:3f:48:7d:dd: 3f:cd:ae:42:83:01:78:ec:57:57:40:4d:d2:a6:93: 36:6a:7f:c8:5f:16:6b:60:27:84:70:59:7a:83:58: 46:95:77:f5:6b:b7:6a:86:68:a4:d3:a3:a4:f2:cb: 6a:b7:e3:5b:0e:20:fc:86:09:96:85:93:96:76:c5: 96:75:91:c3:36:8a:c4:11:8c:5f:ee:90:ca:ce:65: 72:d8:a7:3c:b5:46:cc:58:fa:7d:75:7d:4a:29:41: 50:34:1f:4f:79:20:bf:80:fe:08:99:f6:39:aa:52: 3b:fb:54:4a:d3:46:62:d6:55:86:ef:34:97:c2:94: 64:2e:36:c8:84:08:a1:e6:92:c6:48:fe:a9:0f:8d: 93:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:2E:B7:07:2F:85:65:07:D2:C7:37:B8:A4:B7:9D:C4:27:51:09:9D X509v3 Authority Key Identifier: keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/Jy63By-FZQfSxze4pLedxCdRCZ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:efc0:2100::/40 Signature Algorithm: sha256WithRSAEncryption 65:a3:69:2f:16:40:53:d7:7f:12:a3:27:c5:c1:1a:9d:73:5a: f6:db:e2:f5:42:6b:1d:a9:b0:6f:f8:16:20:c6:98:5b:b7:e9: c0:dc:54:a3:9c:20:b1:47:03:92:26:d7:06:62:f1:17:82:de: b2:d4:3b:f4:44:1c:02:62:ed:27:78:a6:71:48:42:00:d7:fd: 29:96:9c:27:52:82:13:24:3d:93:d6:6d:dd:49:2f:00:be:00: 02:d5:23:12:69:4f:2b:a1:68:ba:1b:6c:0f:32:4c:a0:58:87: d5:7d:a1:fc:93:6d:a1:05:fe:9c:5a:d2:78:e3:88:c0:dc:fe: 67:d6:52:3d:30:66:bb:9c:bb:cb:f2:68:71:e2:f7:aa:0c:f9: ea:4a:eb:3a:2a:ad:89:f1:bc:09:c6:77:4e:67:7f:b7:57:e0: b2:d0:a6:03:e1:c1:36:96:ee:bc:73:e3:aa:ba:ba:3f:af:98: 95:89:bb:12:06:a5:5c:fc:f0:09:e5:15:5d:cc:17:bb:24:50: f1:0d:81:9a:c9:42:3b:ce:0c:88:23:24:f7:11:82:51:f5:fd: f3:63:74:19:46:7e:b1:8d:1f:25:e8:da:2d:4a:78:d3:45:d1: 16:a9:fd:0b:3f:07:75:ba:51:65:81:8a:c4:17:f5:d0:27:4a: d8:d5:7a:8f -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WRrESbufcjeJUu98rfitMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MDJkOGI4MjY5YzZiMDdmODE0YWNmMGM3ZWQ3MjliM2Y0 YjU5ODQwHhcNMjYwMTAxMDIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzJlYjcwNzJmODU2NTA3ZDJjNzM3YjhhNGI3OWRjNDI3NTEwOTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBSf/j1DZ2aAeHKjZRctHOe4wIKX qR1apHh4U7xMjcgg2j2Fp56nLLDsvUi2d1fp/DZC0pqlCxsytcJ5Fvor5emzPLFf aBW7a5GllWzqCmfG/22xId3swgaUq5aFmt4xI7+yj+c+aiB6pcdF32CyBAfgIj9I fd0/za5CgwF47FdXQE3SppM2an/IXxZrYCeEcFl6g1hGlXf1a7dqhmik06Ok8stq t+NbDiD8hgmWhZOWdsWWdZHDNorEEYxf7pDKzmVy2Kc8tUbMWPp9dX1KKUFQNB9P eSC/gP4ImfY5qlI7+1RK00Zi1lWG7zSXwpRkLjbIhAih5pLGSP6pD42ThQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFCcutwcvhWUH0sc3uKS3ncQnUQmdMB8GA1UdIwQY MBaAFJUC2LgmnGsH+BSs8Mftcps/S1mEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFFMWXVDYWNhd2Y0Rkt6d3gtMXltejlMV1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85ZGVjYWYtNDdlYi00MzQ5LTllODYt MDFiOGJiNmFkOTBhLzEvSnk2M0J5LUZaUWZTeHplNHBMZWR4Q2RSQ1owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS85ZGVjYWYtNDdlYi00MzQ5LTllODYtMDFiOGJiNmFkOTBh LzEvbFFMWXVDYWNhd2Y0Rkt6d3gtMXltejlMV1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgPvwCEw DQYJKoZIhvcNAQELBQADggEBAGWjaS8WQFPXfxKjJ8XBGp1zWvbb4vVCax2psG/4 FiDGmFu36cDcVKOcILFHA5Im1wZi8ReC3rLUO/REHAJi7Sd4pnFIQgDX/SmWnCdS ghMkPZPWbd1JLwC+AALVIxJpTyuhaLobbA8yTKBYh9V9ofyTbaEF/pxa0njjiMDc /mfWUj0wZrucu8vyaHHi96oM+epK6zoqrYnxvAnGd05nf7dX4LLQpgPhwTaW7rxz 46q6uj+vmJWJuxIGpVz88AnlFV3MF7skUPENgZrJQjvODIgjJPcRglH1/fNjdBlG frGNHyXo2i1KeNNF0Rap/Qs/B3W6UWWBisQX9dAnStjVeo8= -----END CERTIFICATE-----Generated at Wed Jan 21 06:06:35 2026 by rpki-client