This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/JhK6gKaIDyzXMy7nriH8Zh8Wjc0.roa File: JhK6gKaIDyzXMy7nriH8Zh8Wjc0.roa (raw, json) Hash identifier: rObYpAP50FsAJbWUILnwA87gkFrmltk/+8uJWoHJQsw= Subject key identifier: 26:12:BA:80:A6:88:0F:2C:D7:33:2E:E7:AE:21:FC:66:1F:16:8D:CD Certificate issuer: /CN=e791851680b72c9691225e1bf36c47260ea244fa Certificate serial: 019B7DCB3AA500EA79F7BB5341C03D4D3F67 Authority key identifier: E7:91:85:16:80:B7:2C:96:91:22:5E:1B:F3:6C:47:26:0E:A2:44:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/JhK6gKaIDyzXMy7nriH8Zh8Wjc0.roa Signing time: Fri 02 Jan 2026 08:20:29 +0000 ROA not before: Fri 02 Jan 2026 08:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21221 IP address blocks: 109.71.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 23:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:3a:a5:00:ea:79:f7:bb:53:41:c0:3d:4d:3f:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e791851680b72c9691225e1bf36c47260ea244fa Validity Not Before: Jan 2 08:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2612ba80a6880f2cd7332ee7ae21fc661f168dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ec:a9:a5:9b:5e:66:3f:7d:6c:42:65:0f:76: 0b:5f:65:d7:1a:64:cd:7d:9d:39:b0:52:30:f7:59: c4:ed:71:5d:cf:f9:24:99:fd:3f:32:2d:de:ce:15: ab:cf:00:f1:6c:82:9a:18:3c:18:1b:d6:d1:28:4a: 67:0a:e0:09:8a:b9:09:8b:e7:d6:08:64:af:0b:bf: f9:a0:2e:1d:b4:d0:90:d0:a8:8a:ef:bc:56:6a:1a: cf:7f:11:de:48:a4:d6:55:17:90:24:45:40:4f:94: dc:1e:80:ac:7a:d5:04:55:da:e7:90:86:22:9e:5e: b5:87:e0:bc:35:90:81:45:4f:5f:b1:af:57:65:45: 76:c8:7e:10:3c:3e:0d:27:92:22:fb:f2:41:bd:c1: a2:63:7e:79:84:f4:f6:fb:57:0c:6b:6a:48:d4:64: 8d:ce:0d:82:9c:e7:32:f8:09:85:67:0d:d3:12:21: c2:ac:d2:f5:19:b0:9c:fc:7c:47:81:44:95:4b:a0: 45:90:62:3a:d0:15:ba:86:75:54:8e:46:04:ae:32: c8:3a:ea:74:22:40:00:f4:c2:d4:1f:da:73:0f:bf: e7:db:fe:d5:82:8f:45:a3:b7:bc:ca:70:f6:d3:da: 85:95:29:dc:cf:fe:c1:16:d4:e9:0d:10:94:a4:8c: c7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:12:BA:80:A6:88:0F:2C:D7:33:2E:E7:AE:21:FC:66:1F:16:8D:CD X509v3 Authority Key Identifier: keyid:E7:91:85:16:80:B7:2C:96:91:22:5E:1B:F3:6C:47:26:0E:A2:44:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/JhK6gKaIDyzXMy7nriH8Zh8Wjc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.71.104.0/22 Signature Algorithm: sha256WithRSAEncryption 06:ad:61:0e:62:8d:6f:03:7c:2e:19:1a:b0:a7:0e:19:70:f3: 7d:27:a2:b9:eb:f4:86:8f:44:24:53:26:08:ce:f5:15:1d:08: 89:86:cd:5b:33:12:2c:ab:3b:75:39:a8:81:0a:9c:1d:bc:38: ff:b5:2f:e3:da:96:47:58:5b:a5:00:00:be:69:52:ad:f7:b8: 53:50:59:69:9d:22:2a:19:77:3c:eb:55:47:cd:c8:d0:0e:34: 7c:c1:f1:02:c1:a1:3f:83:78:d9:44:78:45:76:fc:02:e4:a9: 01:03:29:12:32:a4:06:de:9d:17:1e:bf:20:c5:8b:b8:76:60: c0:7e:71:e2:2c:ef:f9:89:6c:36:f1:a1:ab:d2:3a:52:c9:2c: d4:6f:eb:45:1e:4b:b2:18:be:c1:db:57:45:42:78:39:87:ed: c0:9d:23:72:53:6a:f5:98:11:24:8c:22:10:72:fc:5a:0b:02: 30:06:4f:86:11:fb:58:8a:05:5a:74:b9:cb:8d:d1:be:cb:ca: 71:68:fb:5c:1e:4d:a4:33:13:ea:3a:89:41:7b:e6:57:ab:20: 0d:eb:90:ca:91:ca:a1:50:5a:ae:40:4f:c4:28:35:e5:a3:25: 27:81:76:61:31:e8:48:cc:5f:cd:61:2e:6e:a8:fa:d5:b9:d0: 30:bb:41:b7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yzqlAOp597tTQcA9TT9nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3OTE4NTE2ODBiNzJjOTY5MTIyNWUxYmYzNmM0NzI2MGVh MjQ0ZmEwHhcNMjYwMTAyMDgyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjEyYmE4MGE2ODgwZjJjZDczMzJlZTdhZTIxZmM2NjFmMTY4ZGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+yppZteZj99bEJlD3YLX2XXGmTN fZ05sFIw91nE7XFdz/kkmf0/Mi3ezhWrzwDxbIKaGDwYG9bRKEpnCuAJirkJi+fW CGSvC7/5oC4dtNCQ0KiK77xWahrPfxHeSKTWVReQJEVAT5TcHoCsetUEVdrnkIYi nl61h+C8NZCBRU9fsa9XZUV2yH4QPD4NJ5Ii+/JBvcGiY355hPT2+1cMa2pI1GSN zg2CnOcy+AmFZw3TEiHCrNL1GbCc/HxHgUSVS6BFkGI60BW6hnVUjkYErjLIOup0 IkAA9MLUH9pzD7/n2/7Vgo9Fo7e8ynD209qFlSncz/7BFtTpDRCUpIzHlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCYSuoCmiA8s1zMu564h/GYfFo3NMB8GA1UdIwQY MBaAFOeRhRaAtyyWkSJeG/NsRyYOokT6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTVHRkZvQzNMSmFSSWw0YjgyeEhKZzZpUlBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS81ZmVjNTUtNGQ0YS00ZmE1LWE3NjQt NDJiZDkyZjMwYTk3LzEvSmhLNmdLYUlEeXpYTXk3bnJpSDhaaDhXamMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS81ZmVjNTUtNGQ0YS00ZmE1LWE3NjQtNDJiZDkyZjMwYTk3 LzEvNTVHRkZvQzNMSmFSSWw0YjgyeEhKZzZpUlBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbUdoMA0G CSqGSIb3DQEBCwUAA4IBAQAGrWEOYo1vA3wuGRqwpw4ZcPN9J6K56/SGj0QkUyYI zvUVHQiJhs1bMxIsqzt1OaiBCpwdvDj/tS/j2pZHWFulAAC+aVKt97hTUFlpnSIq GXc861VHzcjQDjR8wfECwaE/g3jZRHhFdvwC5KkBAykSMqQG3p0XHr8gxYu4dmDA fnHiLO/5iWw28aGr0jpSySzUb+tFHkuyGL7B21dFQng5h+3AnSNyU2r1mBEkjCIQ cvxaCwIwBk+GEftYigVadLnLjdG+y8pxaPtcHk2kMxPqOolBe+ZXqyAN65DKkcqh UFquQE/EKDXloyUngXZhMehIzF/NYS5uqPrVudAwu0G3 -----END CERTIFICATE-----Generated at Wed Feb 4 09:16:44 2026 by rpki-client