This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/jg4t7SrnuYvRZomc0XCPotAh4u0.roa File: jg4t7SrnuYvRZomc0XCPotAh4u0.roa (raw, json) Hash identifier: 9RmoUuo6041b6kGDwKKpPE71TUf5ltFSivOlPvvgN5o= Subject key identifier: 8E:0E:2D:ED:2A:E7:B9:8B:D1:66:89:9C:D1:70:8F:A2:D0:21:E2:ED Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 019B7FF23D244928E0DE4A36C7F6CAFD038C Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/jg4t7SrnuYvRZomc0XCPotAh4u0.roa Signing time: Fri 02 Jan 2026 18:22:20 +0000 ROA not before: Fri 02 Jan 2026 18:22:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48266 IP address blocks: 2a0e:da40:3000::/36 maxlen: 128 2a12:8c00::/36 maxlen: 128 2a12:8c00:1000::/36 maxlen: 128 2a12:8c00:2000::/36 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 18:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:3d:24:49:28:e0:de:4a:36:c7:f6:ca:fd:03:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Jan 2 18:22:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e0e2ded2ae7b98bd166899cd1708fa2d021e2ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7d:9e:ef:0a:99:87:ef:53:29:16:93:51:2f: 81:d6:2c:0a:4b:d0:ba:81:b5:75:d9:8c:20:66:5f: 85:db:2d:93:d0:74:8e:27:5c:88:bb:e6:55:24:4b: f1:0b:e1:c4:f4:8f:e0:c1:b5:19:05:f6:e9:b7:d5: ac:a8:dd:ce:3a:d6:7c:81:92:47:b5:de:83:6e:b5: 25:c5:f2:62:bf:65:50:7e:33:48:26:a9:b9:56:00: 60:95:d5:65:40:1c:6e:ee:41:07:67:c7:99:d5:68: 19:41:40:85:99:60:f3:30:ed:36:ec:60:ef:e6:c0: a9:f9:33:a0:9a:5a:f0:17:e4:c8:51:ac:58:47:99: f8:9e:61:d2:7a:b6:41:bb:c9:5a:e6:f6:0f:73:f7: a7:fc:03:ad:bc:98:59:54:b7:31:52:e6:e0:35:a6: 99:db:31:2a:c0:59:b0:16:a6:03:51:4b:9f:a8:5d: d6:a6:be:18:38:bb:d5:32:14:6f:54:c4:38:15:e8: 2a:56:d4:cd:5e:6f:15:99:c0:46:ca:d8:61:84:e3: 14:af:87:60:1c:d4:8c:38:29:4a:ea:c6:85:0d:16: 1f:7c:26:67:25:74:93:c3:ed:05:4e:1b:03:5b:4a: 88:5b:71:d8:85:25:fe:89:e1:4f:91:98:ef:06:1a: 97:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:0E:2D:ED:2A:E7:B9:8B:D1:66:89:9C:D1:70:8F:A2:D0:21:E2:ED X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/jg4t7SrnuYvRZomc0XCPotAh4u0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:da40:3000::/36 2a12:8c00::-2a12:8c00:2fff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption d8:3e:08:a1:60:b8:83:b8:18:2e:1e:23:e2:c1:d6:35:73:2c: 55:42:dc:1c:39:e8:4c:c6:b8:84:d9:9a:03:d3:a6:ca:59:9f: 91:56:0d:11:f0:0e:78:08:b4:80:40:27:dc:6b:98:d4:c7:6a: 3d:44:50:18:76:9a:c7:27:19:0b:33:e7:38:64:19:fb:68:4c: 3f:a0:d1:24:39:80:6d:38:91:1c:62:09:d1:98:f7:7d:64:d0: d0:b2:26:fa:aa:07:13:38:98:71:48:c7:e4:ed:44:49:48:3a: 6f:c5:f2:99:a6:b0:bd:a4:a3:35:97:c8:b8:5a:84:af:c9:b7: ea:4f:64:c0:ad:64:2d:c1:80:3e:40:d2:29:54:ae:c6:a0:a7: 83:20:36:a2:54:9c:2a:c6:6e:22:09:92:7f:22:59:7d:56:01: 65:00:7a:42:0f:9a:95:ad:2c:c2:36:bd:5b:57:6d:47:38:be: 66:e3:65:6f:d5:86:c3:19:e1:bf:30:92:07:97:f6:03:10:51: ee:b0:ea:a5:55:60:0d:b0:7c:8f:e4:04:78:51:81:57:83:c9: 21:21:bf:f1:f7:0f:8d:84:b8:9d:5a:c6:e0:bc:40:e9:14:2e: 07:97:10:0f:e2:d5:1e:19:84:d7:20:9f:67:88:46:d9:62:c6: c7:53:25:45 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/8j0kSSjg3ko2x/bK/QOMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjYwMTAyMTgyMjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTBlMmRlZDJhZTdiOThiZDE2Njg5OWNkMTcwOGZhMmQwMjFlMmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn32e7wqZh+9TKRaTUS+B1iwKS9C6 gbV12YwgZl+F2y2T0HSOJ1yIu+ZVJEvxC+HE9I/gwbUZBfbpt9WsqN3OOtZ8gZJH td6DbrUlxfJiv2VQfjNIJqm5VgBgldVlQBxu7kEHZ8eZ1WgZQUCFmWDzMO027GDv 5sCp+TOgmlrwF+TIUaxYR5n4nmHSerZBu8la5vYPc/en/AOtvJhZVLcxUubgNaaZ 2zEqwFmwFqYDUUufqF3Wpr4YOLvVMhRvVMQ4FegqVtTNXm8VmcBGythhhOMUr4dg HNSMOClK6saFDRYffCZnJXSTw+0FThsDW0qIW3HYhSX+ieFPkZjvBhqX6QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFI4OLe0q57mL0WaJnNFwj6LQIeLtMB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvamc0dDdTcm51WXZSWm9tYzBYQ1BvdEFoNHUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAAjAYAwYEKg7aQDAw DgMEAioSjAMGBCoSjAAgMA0GCSqGSIb3DQEBCwUAA4IBAQDYPgihYLiDuBguHiPi wdY1cyxVQtwcOehMxriE2ZoD06bKWZ+RVg0R8A54CLSAQCfca5jUx2o9RFAYdprH JxkLM+c4ZBn7aEw/oNEkOYBtOJEcYgnRmPd9ZNDQsib6qgcTOJhxSMfk7URJSDpv xfKZprC9pKM1l8i4WoSvybfqT2TArWQtwYA+QNIpVK7GoKeDIDaiVJwqxm4iCZJ/ Ill9VgFlAHpCD5qVrSzCNr1bV21HOL5m42Vv1YbDGeG/MJIHl/YDEFHusOqlVWAN sHyP5AR4UYFXg8khIb/x9w+NhLidWsbgvEDpFC4HlxAP4tUeGYTXIJ9niEbZYsbH UyVF -----END CERTIFICATE-----Generated at Wed Jan 21 04:21:58 2026 by rpki-client