This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Jg-ke51Ud0i2cx1YfZGxPGQ5A7I.roa File: Jg-ke51Ud0i2cx1YfZGxPGQ5A7I.roa (raw, json) Hash identifier: JhjoX/qpm9GKJ2JT8oQsDV4HT4tgcCNFSICdEWjwyl4= Subject key identifier: 26:0F:A4:7B:9D:54:77:48:B6:73:1D:58:7D:91:B1:3C:64:39:03:B2 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EA951FC2E97055A44D3DD0F71A46F Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Jg-ke51Ud0i2cx1YfZGxPGQ5A7I.roa Signing time: Thu 01 Jan 2026 12:18:22 +0000 ROA not before: Thu 01 Jan 2026 12:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203023 IP address blocks: 2a0e:aa07:e150::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a9:51:fc:2e:97:05:5a:44:d3:dd:0f:71:a4:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=260fa47b9d547748b6731d587d91b13c643903b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f0:31:62:85:f5:fb:44:c5:50:87:7d:7a:66: 87:4d:41:f0:bf:f6:79:62:b7:ac:07:d7:06:8b:7a: ad:ee:ad:46:dd:d0:f2:53:fa:e5:61:80:7a:4f:17: 98:6b:73:4c:80:e0:06:05:f2:c6:14:e9:7f:cc:ef: 65:3c:59:86:2c:3e:09:b0:3a:c0:48:72:90:c1:7e: 37:45:bb:00:65:f6:63:ca:76:31:71:0a:b4:45:18: a0:df:bb:bb:a1:9e:4c:b5:89:f3:34:e6:4e:1b:b1: 83:42:a4:5e:f4:37:92:d7:2c:9e:4f:fd:21:c7:05: 67:8a:19:aa:2c:f1:c7:9a:c1:4d:99:52:69:db:a5: 7c:50:f0:a1:dd:73:c9:03:17:c5:7a:b1:83:3c:41: 8b:66:49:11:92:df:41:87:97:3f:25:b1:dc:19:3a: b3:ee:bc:bb:71:b2:9f:2f:09:7f:d6:50:33:74:2f: 17:b9:8c:18:0f:62:51:0d:dd:f0:b6:37:68:e5:99: 8b:9f:c5:bd:c3:98:22:a3:b3:7d:7f:50:1e:76:ad: d3:70:55:c4:5c:d7:80:36:29:3b:76:d1:87:3c:e9: 10:1a:a3:7d:d1:31:83:d1:80:a0:ad:e0:d3:8b:de: 31:17:7f:59:77:78:94:37:b6:24:c6:0c:48:12:69: 94:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:0F:A4:7B:9D:54:77:48:B6:73:1D:58:7D:91:B1:3C:64:39:03:B2 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Jg-ke51Ud0i2cx1YfZGxPGQ5A7I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e150::/44 Signature Algorithm: sha256WithRSAEncryption 86:a1:db:e6:5a:e1:ad:aa:c6:39:3b:13:05:c4:80:96:ed:d4: a2:67:0c:cf:ab:1c:60:5e:29:63:3b:b0:bb:58:cc:ad:29:89: a1:b3:4f:5a:2e:cf:64:e9:21:1c:2d:78:1d:5c:72:35:61:df: af:a5:b3:77:5a:a3:e9:bb:5c:29:77:48:eb:59:c4:20:e6:e0: 45:e0:e4:19:36:0c:80:4e:b4:ad:c7:15:14:44:56:10:4c:8f: 40:e3:8b:b0:ab:b3:a9:c0:f4:d7:e8:cc:62:19:6c:4f:3d:60: 1b:48:3b:eb:c5:77:30:8e:c0:6d:e8:e9:53:7f:01:58:7e:96: 6b:3f:3f:14:4d:ee:4f:78:b3:02:65:52:a5:86:b6:7f:8d:71: 3c:64:bb:a7:9d:28:cc:ed:a2:4f:ad:cf:21:f9:15:00:9b:6e: 63:1c:29:a9:43:fe:5e:03:18:3a:f3:56:f9:fb:80:6f:04:1d: 39:ac:35:a9:31:b5:d7:bf:95:8a:91:7e:14:08:7f:09:9b:aa: 1e:af:81:ad:ac:64:40:49:f3:61:91:c4:5d:2a:2c:de:51:c3: 6f:a2:ae:78:8b:9a:eb:79:f3:96:ef:f8:04:65:4e:3b:46:2b: 38:fb:83:d6:b7:20:47:27:53:bd:74:d3:ac:b4:cf:bc:02:6e: 5c:95:7c:25 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fqlR/C6XBVpE090PcaRvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjBmYTQ3YjlkNTQ3NzQ4YjY3MzFkNTg3ZDkxYjEzYzY0MzkwM2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPAxYoX1+0TFUId9emaHTUHwv/Z5 YresB9cGi3qt7q1G3dDyU/rlYYB6TxeYa3NMgOAGBfLGFOl/zO9lPFmGLD4JsDrA SHKQwX43RbsAZfZjynYxcQq0RRig37u7oZ5MtYnzNOZOG7GDQqRe9DeS1yyeT/0h xwVnihmqLPHHmsFNmVJp26V8UPCh3XPJAxfFerGDPEGLZkkRkt9Bh5c/JbHcGTqz 7ry7cbKfLwl/1lAzdC8XuYwYD2JRDd3wtjdo5ZmLn8W9w5gio7N9f1Aedq3TcFXE XNeANik7dtGHPOkQGqN90TGD0YCgreDTi94xF39Zd3iUN7YkxgxIEmmUiwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCYPpHudVHdItnMdWH2RsTxkOQOyMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvSmcta2U1MVVkMGkyY3gxWWZaR3hQR1E1QTdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qB+FQ MA0GCSqGSIb3DQEBCwUAA4IBAQCGodvmWuGtqsY5OxMFxICW7dSiZwzPqxxgXilj O7C7WMytKYmhs09aLs9k6SEcLXgdXHI1Yd+vpbN3WqPpu1wpd0jrWcQg5uBF4OQZ NgyATrStxxUURFYQTI9A44uwq7OpwPTX6MxiGWxPPWAbSDvrxXcwjsBt6OlTfwFY fpZrPz8UTe5PeLMCZVKlhrZ/jXE8ZLunnSjM7aJPrc8h+RUAm25jHCmpQ/5eAxg6 81b5+4BvBB05rDWpMbXXv5WKkX4UCH8Jm6oer4GtrGRASfNhkcRdKizeUcNvoq54 i5rrefOW7/gEZU47Ris4+4PWtyBHJ1O9dNOstM+8Am5clXwl -----END CERTIFICATE-----Generated at Tue Jan 6 21:32:11 2026 by rpki-client