This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/jfVY-EoEv0L0H8pPEnR45nnXQHA.roa File: jfVY-EoEv0L0H8pPEnR45nnXQHA.roa (raw, json) Hash identifier: 6X5hlmw7C+KQlNlHKYnCiVq0JLRd5zBI+aX2mHENMyw= Subject key identifier: 8D:F5:58:F8:4A:04:BF:42:F4:1F:CA:4F:12:74:78:E6:79:D7:40:70 Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA7621ABE6CD51654F2EA10751143D7 Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/jfVY-EoEv0L0H8pPEnR45nnXQHA.roa Signing time: Fri 02 Jan 2026 12:20:57 +0000 ROA not before: Fri 02 Jan 2026 12:20:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210464 IP address blocks: 2a0a:79c7:f100::/40 maxlen: 40 2a0a:79c7:f200::/40 maxlen: 40 2a0a:79c7:f300::/40 maxlen: 40 2a0a:79c7:f500::/40 maxlen: 40 2a0a:79c7:f600::/40 maxlen: 40 2a0a:79c7:f800::/40 maxlen: 40 2a0a:79c7:fa00::/40 maxlen: 40 2a0a:79c7:fc00::/40 maxlen: 40 2a0a:79c7:ff00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:62:1a:be:6c:d5:16:54:f2:ea:10:75:11:43:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8df558f84a04bf42f41fca4f127478e679d74070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4a:0d:3c:62:9f:7e:87:cf:76:33:d2:af:c8: 68:51:d6:b9:2a:b0:4b:bd:82:db:9e:f3:42:14:27: ee:66:7b:2f:f4:7d:d4:82:6c:5b:b4:31:9e:ee:69: 45:44:b1:24:98:24:70:a3:7e:f3:22:b1:97:a5:0c: 7c:29:41:6e:4c:c9:47:d7:94:67:14:3d:3e:d5:1f: 51:58:17:61:a0:f4:1b:31:66:48:75:d0:c7:05:f7: 5e:ee:30:70:dd:23:d0:00:28:a2:32:e3:58:9d:40: 40:d3:1f:8f:49:6f:c3:36:8c:df:d0:15:51:14:cf: 6c:92:c7:f6:32:49:3a:04:bc:02:cc:8b:f6:b8:92: 27:a5:03:95:f5:af:4b:76:0b:e9:bf:b6:59:a3:6a: 2a:a3:87:96:8d:17:62:21:70:11:47:a7:de:a0:a7: fd:26:fd:73:10:66:c6:55:dd:8b:f1:c2:31:fc:57: 73:81:00:6a:55:f0:e6:ec:bc:4b:76:ba:46:70:ee: fa:3a:00:1c:a3:fc:b6:a9:87:8c:39:22:60:b6:cf: 7a:7e:3c:5e:82:2e:fe:2b:15:d8:08:db:e0:f5:cf: a6:70:cc:1a:c6:40:3c:a9:1c:ad:ac:a7:67:cb:22: 6d:1e:5f:7e:f1:79:03:a7:d8:fc:61:ed:59:dd:78: cd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F5:58:F8:4A:04:BF:42:F4:1F:CA:4F:12:74:78:E6:79:D7:40:70 X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/jfVY-EoEv0L0H8pPEnR45nnXQHA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:79c7:f100::-2a0a:79c7:f3ff:ffff:ffff:ffff:ffff:ffff 2a0a:79c7:f500::-2a0a:79c7:f6ff:ffff:ffff:ffff:ffff:ffff 2a0a:79c7:f800::/40 2a0a:79c7:fa00::/40 2a0a:79c7:fc00::/40 2a0a:79c7:ff00::/40 Signature Algorithm: sha256WithRSAEncryption d9:28:06:7e:af:63:46:db:e6:22:19:55:84:ed:15:19:c5:e5: 11:88:98:64:2b:c7:30:f6:f5:50:a2:6f:83:4b:db:9d:f4:4e: b6:04:3c:9d:e4:3f:37:f7:ec:17:74:b8:2d:e3:a0:42:a9:be: e3:d9:b8:d5:1a:8a:5b:7c:d0:5b:cc:40:06:5b:7f:82:5f:c1: 48:a8:f6:c4:2e:19:7a:37:d9:d6:5f:d8:6f:24:10:3f:c1:86: a7:5f:93:47:45:7e:fa:6c:2e:dc:39:e4:7e:41:21:e4:f5:b6: 09:e0:e5:8f:4e:16:c0:62:12:b1:4a:8a:0e:64:32:27:f6:87: 3d:bd:40:48:24:d5:fd:64:f0:fa:df:53:d5:dd:fc:a6:51:e5: 13:cf:94:4b:06:91:23:be:5e:41:4f:2a:41:b1:d6:f6:ef:af: 5d:0b:7c:81:0a:3e:66:54:d7:e9:40:07:14:ad:40:00:b2:b6: ae:68:d7:38:b0:91:b5:98:6f:06:64:b8:1c:d7:c3:6c:65:26: 43:89:7a:d2:99:36:7c:c2:c1:40:e6:5d:a7:9b:ea:99:e1:b4: 08:f0:a4:7a:d1:f6:9b:0e:99:8a:9a:40:8e:5c:6d:1b:00:e9: 76:83:21:18:c4:be:ec:f5:3c:b2:0c:24:2f:bb:b9:bb:f8:83: 0a:0e:60:dc -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgISAZt+p2IavmzVFlTy6hB1EUPXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGY1NThmODRhMDRiZjQyZjQxZmNhNGYxMjc0NzhlNjc5ZDc0MDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEoNPGKffofPdjPSr8hoUda5KrBL vYLbnvNCFCfuZnsv9H3UgmxbtDGe7mlFRLEkmCRwo37zIrGXpQx8KUFuTMlH15Rn FD0+1R9RWBdhoPQbMWZIddDHBfde7jBw3SPQACiiMuNYnUBA0x+PSW/DNozf0BVR FM9sksf2Mkk6BLwCzIv2uJInpQOV9a9Ldgvpv7ZZo2oqo4eWjRdiIXARR6feoKf9 Jv1zEGbGVd2L8cIx/FdzgQBqVfDm7LxLdrpGcO76OgAco/y2qYeMOSJgts96fjxe gi7+KxXYCNvg9c+mcMwaxkA8qRytrKdnyyJtHl9+8XkDp9j8Ye1Z3XjNXQIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFI31WPhKBL9C9B/KTxJ0eOZ510BwMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvamZWWS1Fb0V2MEwwSDhwUEVuUjQ1bm5YUUhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAAjBEMBADBgAqCnnH 8QMGAioKecfwMBADBgAqCnnH9QMGACoKecf2AwYAKgp5x/gDBgAqCnnH+gMGACoK ecf8AwYAKgp5x/8wDQYJKoZIhvcNAQELBQADggEBANkoBn6vY0bb5iIZVYTtFRnF 5RGImGQrxzD29VCib4NL2530TrYEPJ3kPzf37Bd0uC3joEKpvuPZuNUailt80FvM QAZbf4JfwUio9sQuGXo32dZf2G8kED/Bhqdfk0dFfvpsLtw55H5BIeT1tgng5Y9O FsBiErFKig5kMif2hz29QEgk1f1k8PrfU9Xd/KZR5RPPlEsGkSO+XkFPKkGx1vbv r10LfIEKPmZU1+lABxStQACytq5o1ziwkbWYbwZkuBzXw2xlJkOJetKZNnzCwUDm Xaeb6pnhtAjwpHrR9psOmYqaQI5cbRsA6XaDIRjEvuz1PLIMJC+7ubv4gwoOYNw= -----END CERTIFICATE-----Generated at Tue Jan 20 22:47:35 2026 by rpki-client