This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Jg9UXomR67ddbwvE12iwfmdXVUY.roa File: Jg9UXomR67ddbwvE12iwfmdXVUY.roa (raw, json) Hash identifier: erQTlvEuRH+/RugmpxhUl/Z+VWvMHHjTv7sIc+sSjyw= Subject key identifier: 26:0F:54:5E:89:91:EB:B7:5D:6F:0B:C4:D7:68:B0:7E:67:57:55:46 Certificate issuer: /CN=63b147f67e8795d959ed3530396d1256055b126e Certificate serial: 019B7FF1E872635DE8EABE9E638AB2AB16BA Authority key identifier: 63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Jg9UXomR67ddbwvE12iwfmdXVUY.roa Signing time: Fri 02 Jan 2026 18:21:58 +0000 ROA not before: Fri 02 Jan 2026 18:21:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208214 IP address blocks: 2a0f:8d00::/48 maxlen: 48 2a0f:8d00:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:e8:72:63:5d:e8:ea:be:9e:63:8a:b2:ab:16:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63b147f67e8795d959ed3530396d1256055b126e Validity Not Before: Jan 2 18:21:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=260f545e8991ebb75d6f0bc4d768b07e67575546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8a:5c:5e:b6:80:8f:6c:dd:89:d5:63:e9:34: e7:7e:d3:af:f9:38:42:54:ed:d9:e2:43:0b:ec:b3: 04:41:5b:24:cb:17:e7:9d:8b:01:b2:68:86:92:a4: 2c:f3:2e:1b:bd:80:9b:68:19:1d:4c:e6:0a:ae:af: e4:4f:4c:9b:c3:22:fe:7e:35:7a:1b:0b:b7:e3:2e: 00:a9:da:cd:9d:6f:ba:fe:a7:58:4b:28:8f:33:88: de:1d:e9:46:98:08:a3:06:88:41:ed:5a:dc:85:86: dd:db:64:95:4d:1f:9d:f1:e2:1a:2a:76:d4:a4:62: 70:35:f6:78:51:05:c3:d1:58:ef:8d:91:59:8a:78: 36:d6:5a:48:af:aa:79:b5:81:5d:72:93:fd:50:0b: d8:af:ff:d2:0f:02:9c:d9:9e:9b:32:bd:eb:d1:23: 43:c1:fc:a5:18:f5:80:07:cc:d5:30:a4:80:58:e6: 69:63:b5:6c:93:06:5f:85:77:36:78:5f:6b:e4:c4: e6:5d:45:63:42:dd:d1:02:5d:7f:8f:83:14:f1:ba: 72:41:b5:65:16:b5:e2:4f:e7:80:4d:c2:ee:c7:6b: aa:dd:bb:8c:54:8b:dd:f5:f9:3e:0c:dc:e1:39:eb: de:80:07:29:3f:0d:56:ba:db:c1:e2:c1:6a:05:83: 85:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:0F:54:5E:89:91:EB:B7:5D:6F:0B:C4:D7:68:B0:7E:67:57:55:46 X509v3 Authority Key Identifier: keyid:63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Jg9UXomR67ddbwvE12iwfmdXVUY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:8d00::/47 Signature Algorithm: sha256WithRSAEncryption a5:b9:eb:f6:63:b7:6f:f3:1a:cc:b1:f2:e3:07:98:d3:20:95: 14:84:e3:fc:99:83:20:94:a9:06:e6:f5:20:8b:8e:96:42:e9: 61:93:99:74:83:5c:8a:56:9e:d5:4f:f5:32:f7:16:51:f0:b5: a8:28:f0:8a:d3:ea:71:95:0d:ac:4b:f9:15:e0:e4:f8:0b:b3: c4:d4:ce:c6:54:1e:27:06:37:75:3a:72:7d:a5:6b:3f:1f:f1: 71:af:54:eb:2d:70:f6:5d:79:74:06:7a:73:c9:ac:6e:b1:dc: ab:6d:0d:70:90:47:53:60:55:9c:73:dc:ea:f7:8d:01:34:86: db:ff:ee:0d:21:cc:3c:99:f3:4e:ee:2f:81:f6:08:3f:8e:8f: 4c:b9:07:fa:08:23:89:f3:da:4f:e6:50:ca:02:53:4d:b3:e9: 6b:5c:34:99:3b:4c:89:69:94:3f:5c:32:dc:1a:cc:80:57:e5: 9e:8d:32:0e:fe:83:19:09:0e:fa:5f:5a:cf:bb:aa:35:03:ef: 6e:ce:fa:0d:c3:c0:d9:40:b9:5c:f3:eb:75:ae:8f:a7:ac:59: 16:7f:72:a2:a6:3f:15:76:60:ac:46:18:42:a5:f0:d3:51:df: 05:1b:fd:ad:6d:5a:8a:a3:64:38:27:d0:87:91:f7:e5:92:bf: 12:f7:b2:a9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8ehyY13o6r6eY4qyqxa6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzYjE0N2Y2N2U4Nzk1ZDk1OWVkMzUzMDM5NmQxMjU2MDU1 YjEyNmUwHhcNMjYwMTAyMTgyMTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjBmNTQ1ZTg5OTFlYmI3NWQ2ZjBiYzRkNzY4YjA3ZTY3NTc1NTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtopcXraAj2zdidVj6TTnftOv+ThC VO3Z4kML7LMEQVskyxfnnYsBsmiGkqQs8y4bvYCbaBkdTOYKrq/kT0ybwyL+fjV6 Gwu34y4AqdrNnW+6/qdYSyiPM4jeHelGmAijBohB7VrchYbd22SVTR+d8eIaKnbU pGJwNfZ4UQXD0VjvjZFZing21lpIr6p5tYFdcpP9UAvYr//SDwKc2Z6bMr3r0SND wfylGPWAB8zVMKSAWOZpY7VskwZfhXc2eF9r5MTmXUVjQt3RAl1/j4MU8bpyQbVl FrXiT+eATcLux2uq3buMVIvd9fk+DNzhOevegAcpPw1WutvB4sFqBYOFuQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCYPVF6Jkeu3XW8LxNdosH5nV1VGMB8GA1UdIwQY MBaAFGOxR/Z+h5XZWe01MDltElYFWxJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTdGSDluNkhsZGxaN1RVd09XMFNWZ1ZiRW00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8wZjg3ZTItYjgwNS00YmY5LWEzNjYt MGYyYzMzNGU1ZTA1LzEvSmc5VVhvbVI2N2RkYnd2RTEyaXdmbWRYVlVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8wZjg3ZTItYjgwNS00YmY5LWEzNjYtMGYyYzMzNGU1ZTA1 LzEvWTdGSDluNkhsZGxaN1RVd09XMFNWZ1ZiRW00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKg+NAAAA MA0GCSqGSIb3DQEBCwUAA4IBAQCluev2Y7dv8xrMsfLjB5jTIJUUhOP8mYMglKkG 5vUgi46WQulhk5l0g1yKVp7VT/Uy9xZR8LWoKPCK0+pxlQ2sS/kV4OT4C7PE1M7G VB4nBjd1OnJ9pWs/H/Fxr1TrLXD2XXl0BnpzyaxusdyrbQ1wkEdTYFWcc9zq940B NIbb/+4NIcw8mfNO7i+B9gg/jo9MuQf6CCOJ89pP5lDKAlNNs+lrXDSZO0yJaZQ/ XDLcGsyAV+WejTIO/oMZCQ76X1rPu6o1A+9uzvoNw8DZQLlc8+t1ro+nrFkWf3Ki pj8VdmCsRhhCpfDTUd8FG/2tbVqKo2Q4J9CHkfflkr8S97Kp -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:24 2026 by rpki-client