This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/jr3Qwfg8Z9qypQ7083QLXtA-1bs.roa File: jr3Qwfg8Z9qypQ7083QLXtA-1bs.roa (raw, json) Hash identifier: BStTXqRwyFgu7NL9U4UDu4snXF66XXGZwBXM2f9Q63k= Subject key identifier: 8E:BD:D0:C1:F8:3C:67:DA:B2:A5:0E:F4:F3:74:0B:5E:D0:3E:D5:BB Certificate issuer: /CN=0a23e2f0b064087fd84f048b1fa9997023d599e1 Certificate serial: 019B7CED1D4064D98CBCDE512A32824723DF Authority key identifier: 0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/jr3Qwfg8Z9qypQ7083QLXtA-1bs.roa Signing time: Fri 02 Jan 2026 04:17:52 +0000 ROA not before: Fri 02 Jan 2026 04:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208272 IP address blocks: 2a0b:7980::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:1d:40:64:d9:8c:bc:de:51:2a:32:82:47:23:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a23e2f0b064087fd84f048b1fa9997023d599e1 Validity Not Before: Jan 2 04:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ebdd0c1f83c67dab2a50ef4f3740b5ed03ed5bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c3:48:47:3d:ce:e0:6e:d4:86:b5:3b:59:33: 98:e7:f8:b2:99:24:44:9f:40:c8:e1:b1:bf:c6:30: c3:fa:6d:51:23:26:cf:03:5d:43:3c:56:21:1d:5f: 1d:48:89:0e:d0:1d:40:ae:98:4c:ad:ec:5c:92:c6: b8:8b:2f:8f:b2:d8:7a:5a:3e:90:59:f9:31:1e:21: 59:46:ef:26:6c:a3:d5:e7:62:99:f8:d1:97:e8:5c: 18:dd:3f:77:2d:7c:56:58:7a:bf:eb:0f:02:35:0c: fe:80:3d:f1:6a:78:d2:a4:ea:14:c4:3f:03:fe:e1: 52:4c:20:19:4a:04:31:1c:3c:fe:a8:f3:74:e2:f9: 63:74:c8:64:63:d9:5c:41:87:7c:d9:d5:38:8a:f2: 57:aa:17:53:22:bc:45:8d:d9:ed:a2:6d:2a:7b:75: f3:4e:17:b0:f1:61:eb:9d:19:a0:92:f7:c5:7f:48: fe:97:be:95:6c:96:de:f8:57:7b:83:c2:f8:dc:2a: 1f:fb:8e:e3:61:18:85:25:7c:82:72:49:dd:46:7f: 00:a5:c0:d9:d3:5f:ed:70:a5:54:06:e7:3f:f8:10: b0:49:07:03:ee:42:a3:94:e0:d0:7c:7e:f6:85:03: c5:e6:1c:77:64:54:2e:1f:f4:a7:7d:90:c7:8f:04: b8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:BD:D0:C1:F8:3C:67:DA:B2:A5:0E:F4:F3:74:0B:5E:D0:3E:D5:BB X509v3 Authority Key Identifier: keyid:0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/jr3Qwfg8Z9qypQ7083QLXtA-1bs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:7980::/29 Signature Algorithm: sha256WithRSAEncryption 91:85:1e:a4:e0:64:c4:a0:86:3b:d9:e8:a9:91:b5:55:8e:84: ad:c1:d8:8a:60:f9:df:f8:71:08:03:50:ad:79:ff:70:b2:f5: 70:e5:ba:71:73:54:a5:59:a9:05:b1:5a:de:ee:18:fd:e2:d7: bb:6f:3f:60:05:98:bf:a7:48:38:19:1b:ba:6e:06:92:7b:41: c9:aa:20:1a:3e:30:44:36:d9:d8:cc:6e:05:30:5c:5f:1d:a4: 07:16:3a:e8:60:36:7d:7e:24:c8:46:48:7e:38:b6:ce:38:f8: 7e:ea:9c:7d:16:27:35:73:6f:b2:44:c9:d9:2a:7b:3a:09:6f: d6:e9:9d:36:4c:29:e0:1f:19:b8:26:01:28:e1:b3:f6:ee:39: 9e:b6:d9:f3:bb:be:3a:3b:56:6f:72:64:9a:ac:fd:3d:2f:1e: 22:2f:55:dd:d3:1b:47:bf:07:cb:25:fe:6d:3d:d5:2a:6a:f3: 4e:fd:4b:b6:c3:ff:96:8f:45:09:40:b0:73:bf:c7:83:3a:6a: 95:8a:5a:ef:4f:fe:01:6d:f5:29:f8:da:06:02:f0:8e:d9:f7: 21:cc:6f:37:02:15:98:af:e5:8b:a9:9a:09:b0:96:ea:a2:9d: 79:0b:71:5a:24:c8:33:8a:9e:75:56:0d:1c:cf:dd:dd:db:6d: 19:b2:fa:aa -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt87R1AZNmMvN5RKjKCRyPfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMjNlMmYwYjA2NDA4N2ZkODRmMDQ4YjFmYTk5OTcwMjNk NTk5ZTEwHhcNMjYwMTAyMDQxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWJkZDBjMWY4M2M2N2RhYjJhNTBlZjRmMzc0MGI1ZWQwM2VkNWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMNIRz3O4G7UhrU7WTOY5/iymSRE n0DI4bG/xjDD+m1RIybPA11DPFYhHV8dSIkO0B1ArphMrexcksa4iy+Psth6Wj6Q WfkxHiFZRu8mbKPV52KZ+NGX6FwY3T93LXxWWHq/6w8CNQz+gD3xanjSpOoUxD8D /uFSTCAZSgQxHDz+qPN04vljdMhkY9lcQYd82dU4ivJXqhdTIrxFjdntom0qe3Xz Thew8WHrnRmgkvfFf0j+l76VbJbe+Fd7g8L43Cof+47jYRiFJXyCckndRn8ApcDZ 01/tcKVUBuc/+BCwSQcD7kKjlODQfH72hQPF5hx3ZFQuH/SnfZDHjwS40wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFI690MH4PGfasqUO9PN0C17QPtW7MB8GA1UdIwQY MBaAFAoj4vCwZAh/2E8Eix+pmXAj1ZnhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2lQaThMQmtDSF9ZVHdTTEg2bVpjQ1BWbWVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jOTgzYWEtYjYxZS00ZWQ4LThlODEt YmMxZTU1YzY5NzU1LzEvanIzUXdmZzhaOXF5cFE3MDgzUUxYdEEtMWJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9jOTgzYWEtYjYxZS00ZWQ4LThlODEtYmMxZTU1YzY5NzU1 LzEvQ2lQaThMQmtDSF9ZVHdTTEg2bVpjQ1BWbWVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgt5gDAN BgkqhkiG9w0BAQsFAAOCAQEAkYUepOBkxKCGO9noqZG1VY6ErcHYimD53/hxCANQ rXn/cLL1cOW6cXNUpVmpBbFa3u4Y/eLXu28/YAWYv6dIOBkbum4GkntByaogGj4w RDbZ2MxuBTBcXx2kBxY66GA2fX4kyEZIfji2zjj4fuqcfRYnNXNvskTJ2Sp7Oglv 1umdNkwp4B8ZuCYBKOGz9u45nrbZ87u+OjtWb3Jkmqz9PS8eIi9V3dMbR78HyyX+ bT3VKmrzTv1LtsP/lo9FCUCwc7/HgzpqlYpa70/+AW31KfjaBgLwjtn3IcxvNwIV mK/li6maCbCW6qKdeQtxWiTIM4qedVYNHM/d3dttGbL6qg== -----END CERTIFICATE-----Generated at Mon Feb 9 23:54:37 2026 by rpki-client