This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/Jj0jEgN0s0RHQAkO15SajS55C0A.roa File: Jj0jEgN0s0RHQAkO15SajS55C0A.roa (raw, json) Hash identifier: KgQWnB7rByCt2a7NBk1T5VdA/q78Z/cDRW9Jsn2kZXI= Subject key identifier: 26:3D:23:12:03:74:B3:44:47:40:09:0E:D7:94:9A:8D:2E:79:0B:40 Certificate issuer: /CN=9416fa6a90ed94e221db69d21fcdda7c66d13c91 Certificate serial: 019B77592A4F4940EDD84C52585B711EBAC0 Authority key identifier: 94:16:FA:6A:90:ED:94:E2:21:DB:69:D2:1F:CD:DA:7C:66:D1:3C:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/Jj0jEgN0s0RHQAkO15SajS55C0A.roa Signing time: Thu 01 Jan 2026 02:18:10 +0000 ROA not before: Thu 01 Jan 2026 02:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207463 IP address blocks: 2a10:1800:1::/48 maxlen: 48 2a10:1800:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.crl rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:2a:4f:49:40:ed:d8:4c:52:58:5b:71:1e:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9416fa6a90ed94e221db69d21fcdda7c66d13c91 Validity Not Before: Jan 1 02:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=263d23120374b3444740090ed7949a8d2e790b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5e:88:8c:7b:d6:48:f4:23:3c:91:94:65:5b: 6e:16:0c:b9:27:f7:3e:98:d1:cf:78:55:1a:67:ab: 40:78:dc:c4:73:97:09:49:72:44:e1:15:b9:d8:b0: e7:35:e6:09:32:e1:21:c5:06:28:ee:ba:ba:f7:6d: f3:84:bc:13:73:39:d6:72:81:6b:98:49:f1:77:99: d2:3b:1f:12:7e:b4:57:7f:d7:41:bc:38:9a:54:36: d8:c5:e4:e2:d2:b4:ca:64:bb:6f:79:ba:48:19:81: b8:64:ff:2a:c4:52:f0:7e:2c:1a:0a:32:df:b3:d7: 83:cd:4c:b6:d9:cb:5c:68:1e:b6:5b:92:63:5d:4a: 50:36:68:c4:43:69:d0:0d:a1:bd:9c:fa:d3:2b:98: d2:68:ac:79:4e:9a:c7:4e:ea:e1:be:34:bb:e3:fb: e7:12:8f:b0:3c:13:e0:19:06:b0:fe:3e:52:d8:3a: 15:e5:a0:b3:bb:a7:c9:45:8e:1d:7b:dc:88:a0:c2: f9:38:97:21:d2:e4:8b:ed:78:4b:77:c5:1a:44:1d: 5e:01:1c:a7:05:3f:4d:84:ce:25:d7:d9:7f:6e:e2: bf:b6:cc:09:7a:3e:b9:9f:76:6f:bd:30:e7:1f:ef: cb:e3:a7:97:76:17:4a:03:6f:50:bc:22:ea:5d:71: 2c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:3D:23:12:03:74:B3:44:47:40:09:0E:D7:94:9A:8D:2E:79:0B:40 X509v3 Authority Key Identifier: keyid:94:16:FA:6A:90:ED:94:E2:21:DB:69:D2:1F:CD:DA:7C:66:D1:3C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/Jj0jEgN0s0RHQAkO15SajS55C0A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:1800:1::-2a10:1800:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 53:a8:c2:ce:0b:b9:47:a4:62:ad:a1:a4:fb:19:20:12:d0:97: 64:a3:59:71:e0:6e:32:60:14:64:ec:27:8a:f3:83:46:ed:e5: 80:72:51:3b:5d:5d:d6:8d:1e:7e:58:7a:e0:6e:09:69:7e:55: 85:3c:33:95:00:27:85:d6:8d:f8:8b:af:a3:87:a9:a4:bc:c7: 0d:a7:f9:af:85:bb:66:22:23:c8:e8:33:fe:17:cf:a1:07:b2: a2:43:0a:48:2c:2f:fb:b4:9b:fc:b3:2f:e1:4e:2d:35:cf:3c: d8:28:bb:87:24:41:89:2a:85:1f:26:5e:aa:06:e7:4e:34:d5: 09:29:c7:83:6a:84:8a:4e:4d:33:07:eb:5f:24:8e:7d:e4:87: 28:89:2e:f7:94:09:08:f0:f9:e2:fd:0b:68:8d:ac:83:8e:7f: c1:b0:9e:e4:07:b3:1f:c9:63:1e:4d:f4:23:f9:6e:b4:d1:b1: d9:2a:d1:b5:bf:43:a4:da:41:24:d7:0f:44:e3:ee:5c:0a:33: c5:8e:39:f3:a4:92:c1:8e:9e:4f:47:3e:46:f3:94:c8:1f:ea: fe:b8:7a:f6:ce:df:2e:ea:b2:fb:cd:d1:e5:14:38:01:0e:95: 7e:91:a0:0e:e0:d6:e1:ac:cf:46:90:76:30:ba:27:3e:b0:e8: 1e:df:5f:97 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt3WSpPSUDt2ExSWFtxHrrAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MTZmYTZhOTBlZDk0ZTIyMWRiNjlkMjFmY2RkYTdjNjZk MTNjOTEwHhcNMjYwMTAxMDIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjNkMjMxMjAzNzRiMzQ0NDc0MDA5MGVkNzk0OWE4ZDJlNzkwYjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV6IjHvWSPQjPJGUZVtuFgy5J/c+ mNHPeFUaZ6tAeNzEc5cJSXJE4RW52LDnNeYJMuEhxQYo7rq6923zhLwTcznWcoFr mEnxd5nSOx8SfrRXf9dBvDiaVDbYxeTi0rTKZLtvebpIGYG4ZP8qxFLwfiwaCjLf s9eDzUy22ctcaB62W5JjXUpQNmjEQ2nQDaG9nPrTK5jSaKx5TprHTurhvjS74/vn Eo+wPBPgGQaw/j5S2DoV5aCzu6fJRY4de9yIoML5OJch0uSL7XhLd8UaRB1eARyn BT9NhM4l19l/buK/tswJej65n3ZvvTDnH+/L46eXdhdKA29QvCLqXXEsWwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFCY9IxIDdLNER0AJDteUmo0ueQtAMB8GA1UdIwQY MBaAFJQW+mqQ7ZTiIdtp0h/N2nxm0TyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEJiNmFwRHRsT0loMjJuU0g4M2FmR2JSUEpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8wMzYyMTMtNzRiMS00MjVjLTllNTYt N2RlOTEwZTAwYmVkLzEvSmowakVnTjBzMFJIUUFrTzE1U2FqUzU1QzBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8wMzYyMTMtNzRiMS00MjVjLTllNTYtN2RlOTEwZTAwYmVk LzEvbEJiNmFwRHRsT0loMjJuU0g4M2FmR2JSUEpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqEBgA AAEDBwAqEBgAAAIwDQYJKoZIhvcNAQELBQADggEBAFOows4LuUekYq2hpPsZIBLQ l2SjWXHgbjJgFGTsJ4rzg0bt5YByUTtdXdaNHn5YeuBuCWl+VYU8M5UAJ4XWjfiL r6OHqaS8xw2n+a+Fu2YiI8joM/4Xz6EHsqJDCkgsL/u0m/yzL+FOLTXPPNgou4ck QYkqhR8mXqoG50401Qkpx4NqhIpOTTMH618kjn3khyiJLveUCQjw+eL9C2iNrIOO f8GwnuQHsx/JYx5N9CP5brTRsdkq0bW/Q6TaQSTXD0Tj7lwKM8WOOfOkksGOnk9H PkbzlMgf6v64evbO3y7qsvvN0eUUOAEOlX6RoA7g1uGsz0aQdjC6Jz6w6B7fX5c= -----END CERTIFICATE-----Generated at Tue Feb 10 00:10:03 2026 by rpki-client