This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/JIW3gpUn0EfbnZkaWVX0STf1Gtk.roa File: JIW3gpUn0EfbnZkaWVX0STf1Gtk.roa (raw, json) Hash identifier: f+Rq/5BHi2GIfZj8H9/BebdhtaRnbP2DJXGG21DcEic= Subject key identifier: 24:85:B7:82:95:27:D0:47:DB:9D:99:1A:59:55:F4:49:37:F5:1A:D9 Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA75C5E0E576BF937457E12F37EA5CB Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/JIW3gpUn0EfbnZkaWVX0STf1Gtk.roa Signing time: Fri 02 Jan 2026 12:20:55 +0000 ROA not before: Fri 02 Jan 2026 12:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208487 IP address blocks: 2a0a:79c0:c00::/44 maxlen: 44 2a0a:79c0:c00::/48 maxlen: 48 2a0a:79c0:c01::/48 maxlen: 48 2a0a:79c0:c02::/48 maxlen: 48 2a0a:79c0:c03::/48 maxlen: 48 2a0a:79c0:c04::/48 maxlen: 48 2a0a:79c0:c05::/48 maxlen: 48 2a0a:79c0:c06::/48 maxlen: 48 2a0a:79c0:c07::/48 maxlen: 48 2a0a:79c0:c08::/48 maxlen: 48 2a0a:79c0:c09::/48 maxlen: 48 2a0a:79c0:c0a::/48 maxlen: 48 2a0a:79c0:c0b::/48 maxlen: 48 2a0a:79c0:c0c::/48 maxlen: 48 2a0a:79c0:c0d::/48 maxlen: 48 2a0a:79c0:c0e::/48 maxlen: 48 2a0a:79c0:c0f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:5c:5e:0e:57:6b:f9:37:45:7e:12:f3:7e:a5:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2485b7829527d047db9d991a5955f44937f51ad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4e:dc:2f:e8:9e:3e:68:4f:e9:b0:73:2c:42: 6c:3e:9d:f7:a0:dc:73:7f:c1:fd:ae:2f:9b:a8:2d: 22:38:16:47:e6:a8:74:ef:46:09:de:e6:7d:35:d3: f1:f9:dc:15:ec:ba:2b:a4:e1:07:f3:21:9b:10:9f: 3b:74:17:ea:c2:80:1f:0b:31:c5:31:c0:ae:3c:e2: 53:f1:bc:02:6d:4e:b3:e9:0d:0e:30:79:f5:57:55: 0e:ac:c2:cf:fc:61:cd:2a:8c:ff:5b:0f:0a:33:b7: fe:8b:f2:9b:14:02:65:3e:00:26:85:19:4b:47:85: 27:ff:8e:11:f6:54:18:97:18:14:8b:a4:c0:d8:55: 2e:04:73:2a:5a:7d:89:25:92:b7:8c:49:6c:fa:d9: 96:6a:8b:c2:cf:c3:62:d1:cd:88:b1:fd:14:21:8a: 1a:9e:a1:ec:bd:70:4b:c7:ff:e9:61:3e:92:b2:71: b2:d6:01:8a:4a:45:ff:d0:4e:60:30:51:79:47:64: 3a:f5:9d:f1:43:ef:e2:01:a6:4d:ba:28:00:d1:f1: 07:a9:76:a0:cf:fc:a9:e9:6d:f1:5c:b8:7f:1b:db: 3c:c4:7c:39:53:16:7a:42:ef:0f:15:cf:6a:00:9e: 57:72:c2:3f:11:51:c2:eb:30:3a:c1:aa:26:4a:ba: a3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:85:B7:82:95:27:D0:47:DB:9D:99:1A:59:55:F4:49:37:F5:1A:D9 X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/JIW3gpUn0EfbnZkaWVX0STf1Gtk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:79c0:c00::/44 Signature Algorithm: sha256WithRSAEncryption cb:d6:f5:f8:a8:97:d5:6b:58:2d:02:07:ea:90:37:8b:43:19: 03:c5:8d:65:86:ba:27:41:4a:aa:0f:e4:1f:b1:00:b9:0d:89: 46:8c:4f:1e:74:9f:e4:7a:14:8b:1e:de:5b:24:b9:ac:18:60: d1:1b:e4:ec:c1:7c:49:72:db:84:c0:10:99:57:4a:c7:b0:2d: 89:9a:6d:0e:0d:ca:5e:b0:8f:ea:8b:37:9a:88:b0:62:0a:98: 8f:bc:4b:03:39:d4:a8:36:13:68:a4:a2:e7:75:81:ed:e0:db: 83:88:38:6e:71:72:a3:ba:c3:78:e0:79:80:a0:fd:6a:5d:c1: 8e:2a:34:e7:67:d2:f2:fe:d3:8a:ea:4a:f7:aa:49:4b:a6:ee: 80:cc:14:94:b8:fe:ad:10:83:bb:d2:12:52:02:ef:e6:10:56: 39:98:9f:d4:7a:37:57:8d:39:f6:e1:36:3b:1d:64:1f:68:3d: fa:58:f9:da:d2:3c:67:45:7f:b4:95:eb:d7:07:bf:46:f9:76: bf:e4:5b:e4:6a:ad:7b:cd:f0:18:2c:f8:0a:a8:c2:45:55:c1: da:c4:57:79:b9:53:81:d8:c9:e2:87:39:89:4c:27:e7:75:95: 14:e2:54:4a:86:8e:95:7e:01:16:1c:da:64:75:8a:53:92:f8: 80:9c:35:b4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+p1xeDldr+TdFfhLzfqXLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDg1Yjc4Mjk1MjdkMDQ3ZGI5ZDk5MWE1OTU1ZjQ0OTM3ZjUxYWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU7cL+iePmhP6bBzLEJsPp33oNxz f8H9ri+bqC0iOBZH5qh070YJ3uZ9NdPx+dwV7LorpOEH8yGbEJ87dBfqwoAfCzHF McCuPOJT8bwCbU6z6Q0OMHn1V1UOrMLP/GHNKoz/Ww8KM7f+i/KbFAJlPgAmhRlL R4Un/44R9lQYlxgUi6TA2FUuBHMqWn2JJZK3jEls+tmWaovCz8Ni0c2Isf0UIYoa nqHsvXBLx//pYT6SsnGy1gGKSkX/0E5gMFF5R2Q69Z3xQ+/iAaZNuigA0fEHqXag z/yp6W3xXLh/G9s8xHw5UxZ6Qu8PFc9qAJ5XcsI/EVHC6zA6waomSrqjWwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCSFt4KVJ9BH252ZGllV9Ek39RrZMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvSklXM2dwVW4wRWZiblprYVdWWDBTVGYxR3RrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgp5wAwA MA0GCSqGSIb3DQEBCwUAA4IBAQDL1vX4qJfVa1gtAgfqkDeLQxkDxY1lhronQUqq D+QfsQC5DYlGjE8edJ/kehSLHt5bJLmsGGDRG+TswXxJctuEwBCZV0rHsC2Jmm0O DcpesI/qizeaiLBiCpiPvEsDOdSoNhNopKLndYHt4NuDiDhucXKjusN44HmAoP1q XcGOKjTnZ9Ly/tOK6kr3qklLpu6AzBSUuP6tEIO70hJSAu/mEFY5mJ/UejdXjTn2 4TY7HWQfaD36WPna0jxnRX+0levXB79G+Xa/5Fvkaq17zfAYLPgKqMJFVcHaxFd5 uVOB2MnihzmJTCfndZUU4lRKho6VfgEWHNpkdYpTkviAnDW0 -----END CERTIFICATE-----Generated at Tue Jan 20 22:47:40 2026 by rpki-client