This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/J7hqwzNBUJIFCvPHnt3UCUaIkS4.roa File: J7hqwzNBUJIFCvPHnt3UCUaIkS4.roa (raw, json) Hash identifier: dwuiTVtxcw0Gm8ehWtdolENkQjfHnVWwxpd27Y3PhYA= Subject key identifier: 27:B8:6A:C3:33:41:50:92:05:0A:F3:C7:9E:DD:D4:09:46:88:91:2E Certificate issuer: /CN=2631166de785a3531bdc8361f1190a8369a7ed6a Certificate serial: 019B77C735B835D16695AC96F91229F9FB2D Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/J7hqwzNBUJIFCvPHnt3UCUaIkS4.roa Signing time: Thu 01 Jan 2026 04:18:22 +0000 ROA not before: Thu 01 Jan 2026 04:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58061 IP address blocks: 2a00:1ca8:45::/48 maxlen: 48 2a00:1ca8:9c::/48 maxlen: 48 2a00:1ca8:d3::/48 maxlen: 48 2a00:1ca8:d4::/48 maxlen: 48 2a03:3f40:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:35:b8:35:d1:66:95:ac:96:f9:12:29:f9:fb:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a Validity Not Before: Jan 1 04:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27b86ac333415092050af3c79eddd4094688912e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:16:f3:5d:57:76:e2:de:b5:2a:01:23:74:8b: ae:35:5f:f7:3f:7f:2d:09:e1:91:22:d1:bb:61:a5: 31:79:74:1c:d6:61:d3:46:09:cf:e7:c3:41:ea:77: 51:4a:82:d0:42:0d:09:de:1a:fc:d4:9f:ae:ce:1c: 92:ad:46:dc:5f:da:ce:bb:27:3c:85:66:bc:31:07: 3a:60:ed:01:fc:16:19:70:0a:f6:c3:02:f0:cd:13: 43:c9:08:66:98:2c:70:f9:6b:41:10:9e:33:a2:39: cc:22:e4:d5:b2:dd:a6:4a:a6:a7:d5:2c:03:1d:cb: 32:3b:ec:a7:bf:24:3c:67:47:61:5b:26:e2:25:8b: 19:a7:ff:23:1b:9b:2f:71:76:1d:87:9a:df:bf:3b: 77:98:72:70:92:a7:c8:66:21:1d:ff:6e:dc:39:c9: 80:59:f5:df:26:5d:32:f6:fc:28:59:89:ea:4b:55: 73:8c:f9:7d:f9:a2:50:08:35:57:8f:33:f6:72:16: f5:a5:b1:a1:5f:43:ee:2b:5e:98:34:45:4f:2f:9a: 40:25:74:e2:90:e1:49:cb:35:03:b0:f3:3c:e9:6c: 51:21:41:2d:42:41:6a:24:9b:07:2c:2d:71:ff:e1: d9:8c:7a:da:94:9e:65:2e:1e:40:5b:91:5d:8a:53: 60:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B8:6A:C3:33:41:50:92:05:0A:F3:C7:9E:DD:D4:09:46:88:91:2E X509v3 Authority Key Identifier: keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/J7hqwzNBUJIFCvPHnt3UCUaIkS4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:1ca8:45::/48 2a00:1ca8:9c::/48 2a00:1ca8:d3::-2a00:1ca8:d4:ffff:ffff:ffff:ffff:ffff 2a03:3f40:2::/48 Signature Algorithm: sha256WithRSAEncryption 5a:b2:e9:aa:74:93:d5:90:ab:db:71:eb:9f:88:c1:73:cb:dc: 4c:a9:a7:e3:a4:98:fa:9d:07:e9:7e:8d:a3:0c:48:ed:95:87: d7:5c:91:41:b6:7f:dd:52:39:ac:67:56:c9:e2:ca:88:1a:e5: 11:37:f4:aa:b5:4c:b0:cc:25:eb:9f:fd:d0:fb:b6:4d:44:4d: 19:79:c7:85:2d:cb:cc:c6:3f:7d:a2:58:8e:33:96:0b:d3:f6: 54:37:74:19:f6:e9:0b:f7:43:14:a0:6a:56:35:e7:63:d5:4e: fe:6a:ff:8f:1d:42:80:7b:cc:37:e2:96:a4:ee:5a:ea:d1:3d: 50:eb:b8:74:c2:5b:1b:53:a8:fa:99:82:8b:0d:19:9a:46:19: 37:bc:6d:05:8c:7d:ac:ba:43:1e:60:be:b5:e3:d7:9e:62:ad: f0:fc:94:93:40:c0:76:e1:80:a5:33:32:4c:05:b3:63:91:bf: 95:33:c1:e2:da:51:bc:9e:a6:59:0f:09:1a:ec:0d:e2:18:73: c5:d9:20:76:ec:07:fe:00:2c:64:2e:37:5f:16:49:7f:f7:9e: 50:ac:8a:ce:75:82:41:01:57:0a:1d:b8:ed:e2:50:64:f0:09: 02:0f:3d:6a:96:a3:94:b1:6c:89:7b:88:86:05:84:3c:15:40: 2f:10:01:e9 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt3xzW4NdFmlayW+RIp+fstMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MzExNjZkZTc4NWEzNTMxYmRjODM2MWYxMTkwYTgzNjlh N2VkNmEwHhcNMjYwMTAxMDQxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2I4NmFjMzMzNDE1MDkyMDUwYWYzYzc5ZWRkZDQwOTQ2ODg5MTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhbzXVd24t61KgEjdIuuNV/3P38t CeGRItG7YaUxeXQc1mHTRgnP58NB6ndRSoLQQg0J3hr81J+uzhySrUbcX9rOuyc8 hWa8MQc6YO0B/BYZcAr2wwLwzRNDyQhmmCxw+WtBEJ4zojnMIuTVst2mSqan1SwD HcsyO+ynvyQ8Z0dhWybiJYsZp/8jG5svcXYdh5rfvzt3mHJwkqfIZiEd/27cOcmA WfXfJl0y9vwoWYnqS1VzjPl9+aJQCDVXjzP2chb1pbGhX0PuK16YNEVPL5pAJXTi kOFJyzUDsPM86WxRIUEtQkFqJJsHLC1x/+HZjHralJ5lLh5AW5FdilNgSwIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFCe4asMzQVCSBQrzx57d1AlGiJEuMB8GA1UdIwQY MBaAFCYxFm3nhaNTG9yDYfEZCoNpp+1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmpFV2JlZUZvMU1iM0lOaDhSa0tnMm1uN1dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9mYjAxNTctNjc0Ni00YjAwLThmOGUt Yjg5YTI2MTk5OTc2LzEvSjdocXd6TkJVSklGQ3ZQSG50M1VDVWFJa1M0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9mYjAxNTctNjc0Ni00YjAwLThmOGUtYjg5YTI2MTk5OTc2 LzEvSmpFV2JlZUZvMU1iM0lOaDhSa0tnMm1uN1dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzA1BAIAAjAvAwcAKgAcqABF AwcAKgAcqACcMBIDBwAqAByoANMDBwAqAByoANQDBwAqAz9AAAIwDQYJKoZIhvcN AQELBQADggEBAFqy6ap0k9WQq9tx65+IwXPL3Eypp+OkmPqdB+l+jaMMSO2Vh9dc kUG2f91SOaxnVsniyoga5RE39Kq1TLDMJeuf/dD7tk1ETRl5x4Uty8zGP32iWI4z lgvT9lQ3dBn26Qv3QxSgalY152PVTv5q/48dQoB7zDfilqTuWurRPVDruHTCWxtT qPqZgosNGZpGGTe8bQWMfay6Qx5gvrXj155irfD8lJNAwHbhgKUzMkwFs2ORv5Uz weLaUbyeplkPCRrsDeIYc8XZIHbsB/4ALGQuN18WSX/3nlCsis51gkEBVwoduO3i UGTwCQIPPWqWo5SxbIl7iIYFhDwVQC8QAek= -----END CERTIFICATE-----Generated at Wed Jan 21 15:37:12 2026 by rpki-client