This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/jwaFYCCBFh6POet3cqdjWjHdQaM.roa File: jwaFYCCBFh6POet3cqdjWjHdQaM.roa (raw, json) Hash identifier: XyWM804quM6H5iHU8SCzczQ7AvUJSlLVY35NQtKdxaw= Subject key identifier: 8F:06:85:60:20:81:16:1E:8F:39:EB:77:72:A7:63:5A:31:DD:41:A3 Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0 Certificate serial: 019B7758EE79D2F1A50F02D48BB8673E9D47 Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/jwaFYCCBFh6POet3cqdjWjHdQaM.roa Signing time: Thu 01 Jan 2026 02:17:55 +0000 ROA not before: Thu 01 Jan 2026 02:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211679 IP address blocks: 2a0f:5707:23::/48 maxlen: 48 2a0f:5707:b110::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ee:79:d2:f1:a5:0f:02:d4:8b:b8:67:3e:9d:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0 Validity Not Before: Jan 1 02:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f0685602081161e8f39eb7772a7635a31dd41a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2b:f8:31:77:6b:54:aa:1d:0e:7d:61:cd:13: 6a:74:de:23:47:44:d7:82:8d:57:20:78:53:51:d4: 12:db:54:0f:51:4e:b0:59:00:d4:a5:d5:9e:24:dd: 85:c6:c7:ce:b8:27:43:ff:c2:59:15:c1:94:4c:28: 6f:11:c1:49:d6:52:64:5e:01:06:60:65:c0:eb:b4: f0:d9:d5:f1:23:83:c5:0f:35:d5:f6:68:57:c2:f4: 9e:cb:a3:0e:fa:3c:ba:89:80:2b:c9:2e:3a:a2:8b: 34:a8:91:99:c0:4e:7b:a6:ca:46:e2:0e:b6:a4:a9: dd:af:e1:51:e5:38:36:ff:5a:67:73:e0:b3:15:14: 45:bb:28:d7:92:36:6a:aa:6b:3a:18:ff:e4:f2:89: c0:34:80:20:1c:06:33:a5:ef:00:de:fe:c9:38:72: 04:21:6b:5c:0a:40:b9:1c:07:10:7c:25:bc:7d:7a: 87:57:e1:c6:0b:ef:39:a5:af:2a:b6:82:0b:41:48: 0b:9d:9e:0e:83:00:95:d7:90:ed:09:c2:a9:7d:1d: 38:47:e5:3c:75:3c:f5:b7:ef:8b:cd:19:ef:9c:72: fb:16:df:a7:4a:79:a5:53:9a:75:d0:e8:5c:7d:29: c3:cd:c5:11:99:a9:43:30:83:90:23:15:8d:4d:2f: 1a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:06:85:60:20:81:16:1E:8F:39:EB:77:72:A7:63:5A:31:DD:41:A3 X509v3 Authority Key Identifier: keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/jwaFYCCBFh6POet3cqdjWjHdQaM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:5707:23::/48 2a0f:5707:b110::/44 Signature Algorithm: sha256WithRSAEncryption 0d:05:a3:d7:8e:76:eb:6a:04:84:8c:5b:6d:48:8d:8a:e5:cd: 85:cc:16:b1:3b:16:9e:1d:3f:74:d2:cf:a6:84:d9:7f:c3:b9: fd:fb:f1:84:34:61:da:80:24:f8:88:48:2e:22:a4:ba:c0:35: ec:ef:26:4d:2d:8d:a8:4e:73:1b:5a:9f:68:15:fe:fd:ff:0c: 4c:1a:10:58:3f:9f:af:4a:9a:a5:32:5a:b7:58:6f:c9:b3:2e: 30:36:50:bb:b0:cc:a5:34:e5:59:d2:70:3b:99:4f:1a:03:90: 71:19:f6:fb:57:fe:11:12:73:c2:05:41:2d:17:ff:ea:10:43: fa:6f:c4:1e:84:7b:03:52:4d:17:19:35:47:d9:87:cc:db:68: 00:61:51:4b:64:d7:8a:92:dd:4f:0c:4e:64:91:20:85:c8:36: dd:26:0e:01:97:61:08:c1:16:2c:e6:fa:66:14:39:65:4c:da: 09:89:a9:0b:95:39:67:ae:59:da:4e:7a:83:28:40:fc:6a:de: 56:3c:89:d3:cb:85:00:fa:e2:2f:c9:c5:a3:61:2e:4f:f2:f8: cb:85:1e:67:ef:78:ea:3c:59:ee:c7:cc:42:f6:10:2c:06:d9: a2:12:3f:d2:13:45:97:9a:8c:75:e9:03:1d:fb:3b:4e:5d:30: e6:88:0e:c6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3WO550vGlDwLUi7hnPp1HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk NWFlZjAwHhcNMjYwMTAxMDIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjA2ODU2MDIwODExNjFlOGYzOWViNzc3MmE3NjM1YTMxZGQ0MWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSv4MXdrVKodDn1hzRNqdN4jR0TX go1XIHhTUdQS21QPUU6wWQDUpdWeJN2FxsfOuCdD/8JZFcGUTChvEcFJ1lJkXgEG YGXA67Tw2dXxI4PFDzXV9mhXwvSey6MO+jy6iYAryS46oos0qJGZwE57pspG4g62 pKndr+FR5Tg2/1pnc+CzFRRFuyjXkjZqqms6GP/k8onANIAgHAYzpe8A3v7JOHIE IWtcCkC5HAcQfCW8fXqHV+HGC+85pa8qtoILQUgLnZ4OgwCV15DtCcKpfR04R+U8 dTz1t++LzRnvnHL7Ft+nSnmlU5p10OhcfSnDzcURmalDMIOQIxWNTS8ahwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFI8GhWAggRYejznrd3KnY1ox3UGjMB8GA1UdIwQY MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt Y2MxYzliNWY2NjQwLzEvandhRllDQ0JGaDZQT2V0M2NxZGpXakhkUWFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg9XBwAj AwcEKg9XB7EQMA0GCSqGSIb3DQEBCwUAA4IBAQANBaPXjnbragSEjFttSI2K5c2F zBaxOxaeHT900s+mhNl/w7n9+/GENGHagCT4iEguIqS6wDXs7yZNLY2oTnMbWp9o Ff79/wxMGhBYP5+vSpqlMlq3WG/Jsy4wNlC7sMylNOVZ0nA7mU8aA5BxGfb7V/4R EnPCBUEtF//qEEP6b8QehHsDUk0XGTVH2YfM22gAYVFLZNeKkt1PDE5kkSCFyDbd Jg4Bl2EIwRYs5vpmFDllTNoJiakLlTlnrlnaTnqDKED8at5WPInTy4UA+uIvycWj YS5P8vjLhR5n73jqPFnux8xC9hAsBtmiEj/SE0WXmox16QMd+ztOXTDmiA7G -----END CERTIFICATE-----Generated at Mon Jan 26 12:32:29 2026 by rpki-client