This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/JLgki92L26vgomF3wfSSuh1nDvo.roa File: JLgki92L26vgomF3wfSSuh1nDvo.roa (raw, json) Hash identifier: CiXEqBng4Y1tHGwa/wiL3CgsnavhpNvBwwl4OGe5/4I= Subject key identifier: 24:B8:24:8B:DD:8B:DB:AB:E0:A2:61:77:C1:F4:92:BA:1D:67:0E:FA Certificate issuer: /CN=a9f2fdea263b79fce11389052b0cd940995c6dfe Certificate serial: 019B7CEE14581F680CCD25637279BF1A6FB2 Authority key identifier: A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/JLgki92L26vgomF3wfSSuh1nDvo.roa Signing time: Fri 02 Jan 2026 04:18:56 +0000 ROA not before: Fri 02 Jan 2026 04:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 2a12:d8c2::/32 maxlen: 48 2a12:d8c3::/32 maxlen: 48 2a12:d8c4::/32 maxlen: 48 2a12:d8c5::/32 maxlen: 48 2a12:d8c7::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:14:58:1f:68:0c:cd:25:63:72:79:bf:1a:6f:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9f2fdea263b79fce11389052b0cd940995c6dfe Validity Not Before: Jan 2 04:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24b8248bdd8bdbabe0a26177c1f492ba1d670efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:34:df:69:59:23:6e:3a:22:e4:02:f4:7b:b9: a7:fa:93:22:ec:7a:99:4e:9e:43:a7:78:fb:6b:9a: 63:8f:6b:bb:8f:e4:66:20:b0:2a:89:e2:70:a2:50: 3b:a6:5a:88:ba:f5:49:38:28:e0:d9:4e:92:76:c4: ac:b7:33:c1:17:19:7d:42:b1:59:6a:e8:68:15:9a: 63:d6:11:32:a2:fd:33:65:71:42:c7:e2:d3:31:42: 83:80:42:d7:e2:19:ea:e3:33:44:65:21:a0:ee:a7: 51:94:e9:f7:06:00:1f:5a:64:4c:6e:d6:a1:68:0e: ae:2b:58:dd:0f:b1:5e:ce:8c:29:4f:5c:80:16:e3: a6:6a:70:35:3b:25:16:3f:30:fc:85:8c:c7:09:4d: 39:79:77:c4:1a:fe:86:45:4e:dc:cf:65:18:22:24: 64:15:96:cb:a2:ac:0d:27:7b:b3:ad:b8:d7:2e:34: 46:0c:50:cf:fa:3f:25:e2:1c:ec:ca:9a:66:da:06: cf:4b:a9:3a:94:8a:6c:d3:82:0a:3a:19:a3:19:11: e2:e7:7e:28:b5:28:22:54:e7:cb:3a:c1:c0:a1:6a: 80:2c:fe:0e:0f:bd:f1:a3:af:2e:fc:fc:6b:82:be: 70:a9:3d:f9:6e:57:9b:b6:55:79:ab:8a:c5:f0:29: cd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B8:24:8B:DD:8B:DB:AB:E0:A2:61:77:C1:F4:92:BA:1D:67:0E:FA X509v3 Authority Key Identifier: keyid:A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/JLgki92L26vgomF3wfSSuh1nDvo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:d8c2::-2a12:d8c5:ffff:ffff:ffff:ffff:ffff:ffff 2a12:d8c7::/32 Signature Algorithm: sha256WithRSAEncryption 75:f3:47:1f:ca:e0:fb:5a:0a:41:cf:b6:fd:41:63:8c:60:77: 40:06:05:b3:61:e7:b3:e6:d9:56:44:69:72:fd:9c:61:c9:1c: 37:f7:d1:37:d7:e6:cb:06:50:32:31:8c:79:60:96:d2:8f:a5: 76:cd:42:48:a4:cb:97:b2:81:e4:cc:68:0c:8c:ae:2f:72:df: 7b:0c:b7:3b:85:24:42:12:ee:20:f7:38:06:a5:f3:da:bc:d7: 22:cd:c9:10:28:77:fd:6b:41:81:1f:cc:61:d8:cf:10:8f:81: 40:e2:f3:57:f1:61:66:e4:aa:e3:fc:66:0d:71:bd:a5:2e:9a: b4:8d:cc:6a:fc:07:87:58:6e:06:f4:75:91:94:eb:01:3e:22: 79:b0:b6:fe:b7:34:60:21:6d:b7:75:46:3f:4f:ff:fc:71:94: 1e:14:1b:e3:6f:bd:f6:23:56:14:92:bd:63:af:7a:63:e4:2b: ce:37:3b:cd:a7:a9:73:45:21:b1:cf:e7:bc:a0:00:2b:fe:bf: 24:3f:a9:83:59:fb:2c:3c:db:02:20:94:2d:61:45:ee:14:79: dd:75:22:57:95:28:65:74:10:76:2b:4a:ed:12:25:9b:40:62: 79:22:4e:82:33:60:0f:e6:2c:1a:ae:b3:e5:0c:c6:61:1c:e1: ad:22:c5:3b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt87hRYH2gMzSVjcnm/Gm+yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZjJmZGVhMjYzYjc5ZmNlMTEzODkwNTJiMGNkOTQwOTk1 YzZkZmUwHhcNMjYwMTAyMDQxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGI4MjQ4YmRkOGJkYmFiZTBhMjYxNzdjMWY0OTJiYTFkNjcwZWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDTfaVkjbjoi5AL0e7mn+pMi7HqZ Tp5Dp3j7a5pjj2u7j+RmILAqieJwolA7plqIuvVJOCjg2U6SdsSstzPBFxl9QrFZ auhoFZpj1hEyov0zZXFCx+LTMUKDgELX4hnq4zNEZSGg7qdRlOn3BgAfWmRMbtah aA6uK1jdD7FezowpT1yAFuOmanA1OyUWPzD8hYzHCU05eXfEGv6GRU7cz2UYIiRk FZbLoqwNJ3uzrbjXLjRGDFDP+j8l4hzsyppm2gbPS6k6lIps04IKOhmjGRHi534o tSgiVOfLOsHAoWqALP4OD73xo68u/Pxrgr5wqT35blebtlV5q4rF8CnNOQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCS4JIvdi9ur4KJhd8H0krodZw76MB8GA1UdIwQY MBaAFKny/eomO3n84ROJBSsM2UCZXG3+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWZMOTZpWTdlZnpoRTRrRkt3elpRSmxjYmY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81M2ZmNjItYzFhZC00MjQ0LWI5MWEt ZjhhZmZlZjExMmQ4LzEvSkxna2k5MkwyNnZnb21GM3dmU1N1aDFuRHZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My81M2ZmNjItYzFhZC00MjQ0LWI5MWEtZjhhZmZlZjExMmQ4 LzEvcWZMOTZpWTdlZnpoRTRrRkt3elpRSmxjYmY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIAAjAXMA4DBQEqEtjC AwUBKhLYxAMFACoS2McwDQYJKoZIhvcNAQELBQADggEBAHXzRx/K4PtaCkHPtv1B Y4xgd0AGBbNh57Pm2VZEaXL9nGHJHDf30TfX5ssGUDIxjHlgltKPpXbNQkiky5ey geTMaAyMri9y33sMtzuFJEIS7iD3OAal89q81yLNyRAod/1rQYEfzGHYzxCPgUDi 81fxYWbkquP8Zg1xvaUumrSNzGr8B4dYbgb0dZGU6wE+Inmwtv63NGAhbbd1Rj9P //xxlB4UG+NvvfYjVhSSvWOvemPkK843O82nqXNFIbHP57ygACv+vyQ/qYNZ+yw8 2wIglC1hRe4Ued11IleVKGV0EHYrSu0SJZtAYnkiToIzYA/mLBqus+UMxmEc4a0i xTs= -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:45 2026 by rpki-client