This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/Ju3RYBGHfTVJ0ig9g8xu4WdMw30.roa File: Ju3RYBGHfTVJ0ig9g8xu4WdMw30.roa (raw, json) Hash identifier: 4oJ1sds8f+aiGxncxPG+ThQtMKqUYAuJ1K3qDV4TzDE= Subject key identifier: 26:ED:D1:60:11:87:7D:35:49:D2:28:3D:83:CC:6E:E1:67:4C:C3:7D Certificate issuer: /CN=9af9d0d4befda09e999eabd0c8724e217364de10 Certificate serial: 019B7CEE0BD85A666DDC177690ED1F3A9973 Authority key identifier: 9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/Ju3RYBGHfTVJ0ig9g8xu4WdMw30.roa Signing time: Fri 02 Jan 2026 04:18:53 +0000 ROA not before: Fri 02 Jan 2026 04:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 2a0e:fd80:a03::/48 maxlen: 48 2a0e:fd80:a04::/48 maxlen: 48 2a0e:fd80:a05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:0b:d8:5a:66:6d:dc:17:76:90:ed:1f:3a:99:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9af9d0d4befda09e999eabd0c8724e217364de10 Validity Not Before: Jan 2 04:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26edd16011877d3549d2283d83cc6ee1674cc37d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:13:15:f0:06:13:e1:87:0c:60:73:bf:a2:6f: 6b:41:14:c3:24:88:7c:0e:46:70:eb:81:1f:e7:47: 83:e3:a0:dc:a5:ec:95:77:cf:a4:d2:a4:91:2f:5b: 94:62:b5:7d:69:01:ed:5b:00:1d:ea:64:0f:2c:f6: a1:3f:5b:74:42:4b:29:f3:25:83:e7:12:7c:82:07: 73:e2:7c:38:94:40:71:59:22:3c:62:70:93:de:8d: 82:bd:cf:fc:03:00:37:26:c5:27:d2:3d:b7:47:16: 78:37:cf:1d:a6:0e:6a:fb:f0:58:ad:93:f5:73:03: b9:85:38:42:0f:e6:e4:40:ee:0f:dd:6d:9e:2c:14: ae:08:b6:17:b9:d5:94:24:c9:2c:19:9e:58:79:82: 25:4b:64:16:d4:1c:00:ce:b8:d2:34:fb:1a:f7:91: d0:ad:f4:15:b7:9c:ac:81:30:ae:cc:54:b4:d0:00: fb:c7:56:77:36:8f:30:98:ee:0b:96:3d:c2:4d:e3: f1:f0:c1:bf:b9:17:84:26:ec:51:38:82:1a:f2:a4: 35:22:f9:52:97:91:d8:12:20:0b:c2:61:4e:e1:0d: 53:ee:87:6a:16:15:08:af:f3:43:c8:a8:53:39:e1: e1:23:5e:9d:49:43:90:ad:7f:a4:ce:70:c4:09:3f: 02:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:ED:D1:60:11:87:7D:35:49:D2:28:3D:83:CC:6E:E1:67:4C:C3:7D X509v3 Authority Key Identifier: keyid:9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/Ju3RYBGHfTVJ0ig9g8xu4WdMw30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:fd80:a03::-2a0e:fd80:a05:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 16:07:c6:c1:ef:fa:23:a9:dc:12:4e:2c:ba:04:56:53:56:ac: 3c:91:4d:b4:f9:97:2c:7b:4d:f3:a7:b5:03:cb:16:2c:fd:e8: 16:99:8a:93:41:47:10:30:2d:94:36:01:72:6f:15:a8:ad:1f: 16:3d:1a:de:0f:f6:d2:04:74:6a:0e:bc:74:b8:dc:c7:e4:a9: 22:31:98:a0:3d:51:64:c3:3e:20:2b:7a:bb:67:36:5c:b5:1c: 09:2d:12:7a:31:5d:bf:1f:6c:3a:0a:d6:85:c6:b5:98:a1:ca: 0a:b8:dc:2d:35:2c:23:ed:62:4e:65:db:8a:57:0d:4d:73:0c: 7f:8e:f7:8f:3a:4c:5e:cd:f2:99:e6:fc:00:87:3c:9b:ff:6e: 20:00:7b:cf:f1:f2:1a:73:a0:41:e4:87:67:1e:0c:9d:56:78: 9e:af:bb:bd:18:7c:bb:7e:2d:0f:25:3b:e8:61:c0:4c:68:e1: 3b:4d:b7:94:2f:f5:36:fe:7c:4a:d3:a2:2f:17:c1:98:5f:5d: ce:8d:bc:25:10:8e:d1:ea:07:6e:ea:50:0f:10:24:09:67:4b: fa:08:74:4d:dc:6f:1a:a6:bc:73:6c:cd:df:77:68:d2:36:ce: 3b:a1:ce:e5:36:2d:91:07:9c:23:d8:a8:f6:92:02:11:9f:30: 58:87:1f:6d -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt87gvYWmZt3Bd2kO0fOplzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZjlkMGQ0YmVmZGEwOWU5OTllYWJkMGM4NzI0ZTIxNzM2 NGRlMTAwHhcNMjYwMTAyMDQxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmVkZDE2MDExODc3ZDM1NDlkMjI4M2Q4M2NjNmVlMTY3NGNjMzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxMV8AYT4YcMYHO/om9rQRTDJIh8 DkZw64Ef50eD46DcpeyVd8+k0qSRL1uUYrV9aQHtWwAd6mQPLPahP1t0Qksp8yWD 5xJ8ggdz4nw4lEBxWSI8YnCT3o2Cvc/8AwA3JsUn0j23RxZ4N88dpg5q+/BYrZP1 cwO5hThCD+bkQO4P3W2eLBSuCLYXudWUJMksGZ5YeYIlS2QW1BwAzrjSNPsa95HQ rfQVt5ysgTCuzFS00AD7x1Z3No8wmO4Llj3CTePx8MG/uReEJuxROIIa8qQ1IvlS l5HYEiALwmFO4Q1T7odqFhUIr/NDyKhTOeHhI16dSUOQrX+kznDECT8CXQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFCbt0WARh301SdIoPYPMbuFnTMN9MB8GA1UdIwQY MBaAFJr50NS+/aCemZ6r0MhyTiFzZN4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXZuUTFMNzlvSjZabnF2UXlISk9JWE5rM2hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wMWQ5ZmUtZTE0YS00MGE0LTg0NTgt MjY3MDFiMTYyZmMzLzEvSnUzUllCR0hmVFZKMGlnOWc4eHU0V2RNdzMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wMWQ5ZmUtZTE0YS00MGE0LTg0NTgtMjY3MDFiMTYyZmMz LzEvbXZuUTFMNzlvSjZabnF2UXlISk9JWE5rM2hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqDv2A CgMDBwEqDv2ACgQwDQYJKoZIhvcNAQELBQADggEBABYHxsHv+iOp3BJOLLoEVlNW rDyRTbT5lyx7TfOntQPLFiz96BaZipNBRxAwLZQ2AXJvFaitHxY9Gt4P9tIEdGoO vHS43MfkqSIxmKA9UWTDPiArertnNly1HAktEnoxXb8fbDoK1oXGtZihygq43C01 LCPtYk5l24pXDU1zDH+O9486TF7N8pnm/ACHPJv/biAAe8/x8hpzoEHkh2ceDJ1W eJ6vu70YfLt+LQ8lO+hhwExo4TtNt5Qv9Tb+fErToi8XwZhfXc6NvCUQjtHqB27q UA8QJAlnS/oIdE3cbxqmvHNszd93aNI2zjuhzuU2LZEHnCPYqPaSAhGfMFiHH20= -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:37 2026 by rpki-client