This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Jm9Uj04Ps_1gfr5DFJEDthF2QF0.roa File: Jm9Uj04Ps_1gfr5DFJEDthF2QF0.roa (raw, json) Hash identifier: 30F71qHwg9ZZjTg2jy9Y/QbMHDxb9x3w5vRzCv1GG+k= Subject key identifier: 26:6F:54:8F:4E:0F:B3:FD:60:7E:BE:43:14:91:03:B6:11:76:40:5D Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797E9B69627AC71A62ACBB477894EC29 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Jm9Uj04Ps_1gfr5DFJEDthF2QF0.roa Signing time: Thu 01 Jan 2026 12:18:19 +0000 ROA not before: Thu 01 Jan 2026 12:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 2a0e:aa02::/40 maxlen: 40 2a0e:aa06:502::/48 maxlen: 48 2a0e:aa06:503::/48 maxlen: 48 2a0e:aa06:52a::/48 maxlen: 48 2a0e:aa07:f0d0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:9b:69:62:7a:c7:1a:62:ac:bb:47:78:94:ec:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=266f548f4e0fb3fd607ebe43149103b61176405d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0b:ed:b8:3f:b1:42:56:53:f1:f5:49:0c:a7: 4e:e5:12:98:57:f2:7e:ca:b4:c3:70:e5:64:25:69: 0e:be:fd:69:89:c7:7e:df:12:b4:ff:b4:1d:43:b6: a1:5b:1f:cb:44:b7:0b:df:bc:ef:d4:6c:33:e4:2f: 52:54:6d:b8:d6:0c:5a:2f:5b:0c:e3:c9:db:6e:0a: 6b:c1:5f:3e:d5:6f:26:0f:f4:5f:6c:6b:01:14:44: a2:53:3c:e1:6d:2a:c1:ba:4e:ae:12:40:bc:93:c7: da:c1:e4:2f:30:f1:36:02:39:b1:1b:4f:14:e0:b8: f1:6f:54:5f:fe:70:8a:57:fe:72:5a:0c:cc:08:2c: 6c:b4:2f:c0:14:ef:ff:62:8e:4e:cd:7a:be:55:4c: 0f:15:19:0b:33:88:fd:c4:de:de:44:36:2c:68:e0: 9a:e1:7e:c9:25:ba:91:0f:1f:4b:ee:da:73:04:08: 82:f5:55:66:63:69:5f:f2:22:80:7b:b1:45:ee:3f: 43:ca:65:e2:7c:3a:3b:1b:22:ea:f3:f4:cf:89:79: 96:d2:aa:7e:98:04:a8:40:89:85:b7:e8:3f:41:b3: f0:52:2d:51:13:32:ed:33:11:bb:b6:70:52:f0:25: cb:77:a7:5b:77:15:94:23:43:0e:cc:02:d2:5f:2b: 5f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:6F:54:8F:4E:0F:B3:FD:60:7E:BE:43:14:91:03:B6:11:76:40:5D X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Jm9Uj04Ps_1gfr5DFJEDthF2QF0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa02::/40 2a0e:aa06:502::/47 2a0e:aa06:52a::/48 2a0e:aa07:f0d0::/44 Signature Algorithm: sha256WithRSAEncryption 6b:74:d1:b0:fa:db:20:44:91:6f:33:b4:87:8a:55:53:c0:34: b4:eb:40:cf:24:94:8a:d6:c9:e2:23:7b:43:cc:6e:f8:2b:28: ec:85:ba:89:bc:6e:ee:1b:f4:22:22:87:5d:cd:cd:43:d4:14: dc:7c:51:86:60:9f:30:db:a1:51:34:77:db:f6:21:13:7c:9e: 08:30:e2:67:9b:31:74:9c:81:77:e0:07:99:9f:45:ee:c3:b7: 33:19:df:ec:0c:d6:aa:bb:c3:a4:e5:97:4a:6e:ed:64:1d:6d: 3b:36:e5:be:40:ed:87:c2:e2:8f:ee:7f:34:a1:aa:db:1f:79: 4a:59:e7:2e:29:f2:db:8f:f2:f1:e1:3d:65:77:a2:86:3b:1b: 90:65:52:44:21:5a:a6:58:a6:2f:c0:31:26:57:b0:20:8a:e8: 98:5c:59:0a:85:0d:08:ba:d0:aa:4e:ba:1e:93:f5:e3:87:99: 8b:86:d9:31:09:2b:d2:8c:b4:52:3e:f4:f1:c1:af:80:09:9a: 27:a8:05:40:45:b5:df:6f:88:6c:c4:36:19:d5:1c:22:2e:48: 97:b6:17:5b:47:7a:91:d2:45:f3:d2:5c:5c:13:17:90:e1:4d: 5e:70:f6:ab:57:a5:8d:61:fd:ec:99:b9:8a:a7:25:66:d8:25: 2b:40:b6:aa -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt5fptpYnrHGmKsu0d4lOwpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjZmNTQ4ZjRlMGZiM2ZkNjA3ZWJlNDMxNDkxMDNiNjExNzY0MDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AvtuD+xQlZT8fVJDKdO5RKYV/J+ yrTDcOVkJWkOvv1picd+3xK0/7QdQ7ahWx/LRLcL37zv1Gwz5C9SVG241gxaL1sM 48nbbgprwV8+1W8mD/RfbGsBFESiUzzhbSrBuk6uEkC8k8faweQvMPE2AjmxG08U 4Ljxb1Rf/nCKV/5yWgzMCCxstC/AFO//Yo5OzXq+VUwPFRkLM4j9xN7eRDYsaOCa 4X7JJbqRDx9L7tpzBAiC9VVmY2lf8iKAe7FF7j9DymXifDo7GyLq8/TPiXmW0qp+ mASoQImFt+g/QbPwUi1REzLtMxG7tnBS8CXLd6dbdxWUI0MOzALSXytf3wIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFCZvVI9OD7P9YH6+QxSRA7YRdkBdMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvSm05VWowNFBzXzFnZnI1REZKRUR0aEYyUUYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAAjAjAwYAKg6qAgAD BwEqDqoGBQIDBwAqDqoGBSoDBwQqDqoH8NAwDQYJKoZIhvcNAQELBQADggEBAGt0 0bD62yBEkW8ztIeKVVPANLTrQM8klIrWyeIje0PMbvgrKOyFuom8bu4b9CIih13N zUPUFNx8UYZgnzDboVE0d9v2IRN8nggw4mebMXScgXfgB5mfRe7DtzMZ3+wM1qq7 w6Tll0pu7WQdbTs25b5A7YfC4o/ufzShqtsfeUpZ5y4p8tuP8vHhPWV3ooY7G5Bl UkQhWqZYpi/AMSZXsCCK6JhcWQqFDQi60KpOuh6T9eOHmYuG2TEJK9KMtFI+9PHB r4AJmieoBUBFtd9viGzENhnVHCIuSJe2F1tHepHSRfPSXFwTF5DhTV5w9qtXpY1h /eyZuYqnJWbYJStAtqo= -----END CERTIFICATE-----Generated at Fri Jan 2 09:30:06 2026 by rpki-client