This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/JcVGPhWnkMRJb_6AS5BE4UdgIEw.roa File: JcVGPhWnkMRJb_6AS5BE4UdgIEw.roa (raw, json) Hash identifier: VrfYbxNdPm7D2bv5Uci/cWOWObfG66V34riUCFRCVUs= Subject key identifier: 25:C5:46:3E:15:A7:90:C4:49:6F:FE:80:4B:90:44:E1:47:60:20:4C Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910C4A31200B6F21C2CE4178BAB7265 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/JcVGPhWnkMRJb_6AS5BE4UdgIEw.roa Signing time: Thu 01 Jan 2026 10:18:20 +0000 ROA not before: Thu 01 Jan 2026 10:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216043 IP address blocks: 2a12:bec4:13f0::/44 maxlen: 48 2a12:bec4:1c10::/44 maxlen: 48 2a12:bec4:1c10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c4:a3:12:00:b6:f2:1c:2c:e4:17:8b:ab:72:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25c5463e15a790c4496ffe804b9044e14760204c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7f:e7:36:bd:7a:ea:1e:fc:d8:13:f2:99:f9: 05:ad:fa:dc:cb:0c:e0:8d:a2:08:69:b1:8e:c3:93: ab:d6:6f:63:1f:76:9d:78:3d:99:3f:d9:32:21:73: c8:a2:f0:93:cb:b5:b8:d8:ed:59:99:65:44:c5:c1: 38:95:be:4c:3b:0f:d4:54:4b:02:c1:01:fb:1a:96: a7:36:57:82:ef:a8:2c:73:1e:4c:e0:2e:6e:4a:35: ae:f3:5c:4c:a0:79:49:4c:2e:b1:aa:ac:f2:a4:42: 44:3a:51:a2:90:a7:72:06:b6:c5:73:49:93:8b:41: ce:c9:7f:c9:fa:e8:6d:66:cb:73:8e:60:6a:f9:e5: 75:71:89:88:9c:ec:c6:80:71:77:33:51:06:ad:96: 68:47:0a:08:7f:a6:6a:d0:07:65:0c:dd:12:a2:6c: 17:a9:89:98:3c:ab:0c:b3:9d:1c:50:71:47:9b:4d: 9b:2d:55:41:e6:86:1a:dc:bc:15:f5:80:ee:41:44: c1:39:36:ba:76:8f:76:61:4f:3e:4c:49:e2:05:65: ca:49:79:6e:0b:58:5a:3d:a1:72:8a:d5:15:9a:bd: e9:1f:5a:fd:93:c7:3d:00:71:73:33:c2:be:d8:4b: 8e:b5:0f:86:58:76:f2:cc:f4:05:6a:b0:2b:2d:a2: 7a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C5:46:3E:15:A7:90:C4:49:6F:FE:80:4B:90:44:E1:47:60:20:4C X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/JcVGPhWnkMRJb_6AS5BE4UdgIEw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:13f0::/44 2a12:bec4:1c10::/44 Signature Algorithm: sha256WithRSAEncryption c0:ef:6f:aa:e9:f0:89:8a:bc:bb:62:92:76:de:ac:e2:b1:c1: f5:de:48:7e:0f:d5:6e:4b:85:ba:20:6a:0d:88:f9:43:a2:4d: 1b:ee:fa:8a:5e:5c:85:30:e4:f9:87:76:79:6f:6e:a7:4d:35: e1:8b:76:80:5d:91:43:4f:6a:e9:c2:fa:f0:b1:3d:6c:0e:87: 19:b0:5d:6c:72:ef:8d:3a:c6:5b:69:11:58:16:d9:5a:04:a1: 8a:6c:9e:ce:48:49:d7:be:95:17:de:62:8f:b1:3b:0c:4e:30: ba:7e:42:2a:57:33:20:1d:a2:38:d2:1b:b7:7b:be:fc:53:44: 8e:90:d5:8f:b4:91:c4:cb:80:b4:5e:ff:ea:a1:24:47:1b:3e: 56:24:fb:46:f1:c0:a9:16:0e:d1:ce:68:c0:80:4a:a2:55:f7: e4:a4:ae:18:f9:ef:8f:21:57:74:18:e4:d6:54:7f:93:9f:2f: fd:91:b4:4c:05:41:4d:1f:62:ab:ef:56:1b:bc:23:44:83:40: d0:fc:4e:a7:fa:c8:f2:0d:8a:c4:19:50:c0:fb:7b:6a:8e:46: ae:22:a1:f2:a8:a2:9f:ea:0b:25:0e:91:a6:73:da:43:19:e6: 2f:77:e8:93:87:65:da:2f:8a:8b:1e:ff:be:d9:62:fa:dd:5c: b2:4b:2f:11 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5EMSjEgC28hws5BeLq3JlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWM1NDYzZTE1YTc5MGM0NDk2ZmZlODA0YjkwNDRlMTQ3NjAyMDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwn/nNr166h782BPymfkFrfrcywzg jaIIabGOw5Or1m9jH3adeD2ZP9kyIXPIovCTy7W42O1ZmWVExcE4lb5MOw/UVEsC wQH7GpanNleC76gscx5M4C5uSjWu81xMoHlJTC6xqqzypEJEOlGikKdyBrbFc0mT i0HOyX/J+uhtZstzjmBq+eV1cYmInOzGgHF3M1EGrZZoRwoIf6Zq0AdlDN0SomwX qYmYPKsMs50cUHFHm02bLVVB5oYa3LwV9YDuQUTBOTa6do92YU8+TEniBWXKSXlu C1haPaFyitUVmr3pH1r9k8c9AHFzM8K+2EuOtQ+GWHbyzPQFarArLaJ6bwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCXFRj4Vp5DESW/+gEuQROFHYCBMMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvSmNWR1BoV25rTVJKYl82QVM1QkU0VWRnSUV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKhK+xBPw AwcEKhK+xBwQMA0GCSqGSIb3DQEBCwUAA4IBAQDA72+q6fCJiry7YpJ23qziscH1 3kh+D9VuS4W6IGoNiPlDok0b7vqKXlyFMOT5h3Z5b26nTTXhi3aAXZFDT2rpwvrw sT1sDocZsF1scu+NOsZbaRFYFtlaBKGKbJ7OSEnXvpUX3mKPsTsMTjC6fkIqVzMg HaI40hu3e778U0SOkNWPtJHEy4C0Xv/qoSRHGz5WJPtG8cCpFg7RzmjAgEqiVffk pK4Y+e+PIVd0GOTWVH+Tny/9kbRMBUFNH2Kr71YbvCNEg0DQ/E6n+sjyDYrEGVDA +3tqjkauIqHyqKKf6gslDpGmc9pDGeYvd+iTh2XaL4qLHv++2WL63VyySy8R -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:02 2026 by rpki-client