This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/JZwbViMKsnxZsYX8USYMxbR-wL8.roa File: JZwbViMKsnxZsYX8USYMxbR-wL8.roa (raw, json) Hash identifier: vC5pgOVEE4V7ZzDJwdhrcdyYAHnBWwtpITNJzaoLZ2M= Subject key identifier: 25:9C:1B:56:23:0A:B2:7C:59:B1:85:FC:51:26:0C:C5:B4:7E:C0:BF Certificate issuer: /CN=55843a1b20a2dbe3e4ed53e7548d7689678d5a37 Certificate serial: 019B79ED2D80756E078E19334128B1B187D3 Authority key identifier: 55:84:3A:1B:20:A2:DB:E3:E4:ED:53:E7:54:8D:76:89:67:8D:5A:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/JZwbViMKsnxZsYX8USYMxbR-wL8.roa Signing time: Thu 01 Jan 2026 14:19:05 +0000 ROA not before: Thu 01 Jan 2026 14:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199867 IP address blocks: 2a09:8240:100::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.crl rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:2d:80:75:6e:07:8e:19:33:41:28:b1:b1:87:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55843a1b20a2dbe3e4ed53e7548d7689678d5a37 Validity Not Before: Jan 1 14:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=259c1b56230ab27c59b185fc51260cc5b47ec0bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:90:c8:c5:85:8a:c5:5a:a6:4f:f7:b7:c8:93: e3:d0:bf:1d:72:1d:cb:d2:9b:15:53:55:49:da:fc: e5:5f:db:0b:5c:ea:d0:64:c2:91:81:04:32:2a:b6: 03:2b:16:7b:ef:6d:9f:cf:4a:07:17:cb:a4:30:17: 49:f9:94:e8:bf:6c:c5:9e:57:9d:36:42:bf:7d:c8: 6c:7b:44:60:51:c8:19:f5:ab:a6:21:4e:78:52:85: 97:77:90:da:6b:d9:de:a9:58:91:e3:3d:64:f5:69: 66:53:b0:d5:18:64:4f:4b:90:6c:fd:9f:30:9c:cf: fc:82:0f:9b:86:a4:fe:f2:e1:22:21:fd:7f:d2:57: 19:a9:1b:d1:e3:d2:2e:09:62:80:77:22:8b:ce:9e: c6:41:03:ce:b8:88:7b:b8:d1:ad:32:87:43:c9:a4: 28:bd:d1:1d:48:c1:98:14:07:52:66:e0:2f:e7:4a: ca:73:ee:1b:c3:b1:c5:8a:47:e7:bf:a6:7e:69:b1: 44:d5:2c:a6:91:3c:c6:b7:ca:8b:ab:32:a5:b1:ef: 29:b7:c9:71:e0:24:a9:da:8e:5d:a3:ac:cf:0d:43: 06:50:b3:08:ed:af:81:67:9c:3a:36:b2:80:ec:84: 8b:51:7f:6c:1a:d0:17:cd:6e:52:ef:03:85:88:45: c5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:9C:1B:56:23:0A:B2:7C:59:B1:85:FC:51:26:0C:C5:B4:7E:C0:BF X509v3 Authority Key Identifier: keyid:55:84:3A:1B:20:A2:DB:E3:E4:ED:53:E7:54:8D:76:89:67:8D:5A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/JZwbViMKsnxZsYX8USYMxbR-wL8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:8240:100::/48 Signature Algorithm: sha256WithRSAEncryption 1e:5a:18:07:5a:a0:3a:40:91:4c:2f:25:c5:cf:2e:88:61:4c: da:bf:c9:72:ce:10:da:3b:7e:b7:e7:f4:4c:07:47:9f:46:b4: 71:ba:52:ce:78:7f:6f:1b:f9:b9:c1:8e:0e:bb:9d:63:27:9d: 94:aa:79:f7:9f:0a:ba:88:5b:fa:99:08:66:e7:09:df:1d:cc: b8:a9:a8:ac:52:e2:35:af:38:45:58:9b:78:d5:22:04:16:07: 83:d0:11:d0:ee:ad:d2:b0:3d:d3:66:9d:a5:ba:06:42:e3:47: 18:58:50:92:a1:4f:54:30:ac:ef:62:d1:36:60:83:f7:3d:67: b5:91:7b:48:7b:3e:c2:6e:6a:ee:d1:ee:7b:43:4a:57:0e:68: 53:48:2d:db:e2:1e:ac:48:31:e2:f9:87:34:e4:92:0f:f4:52: 94:54:1e:3a:10:89:f5:f8:93:80:5a:0e:c7:ca:90:a8:94:3e: 64:bf:d4:58:e4:e0:be:bc:96:e7:4c:80:10:ba:d2:30:24:66: be:c9:c6:04:90:2a:4b:bb:de:47:13:86:87:a4:21:1c:14:90: 4a:6a:cb:61:ac:36:83:ab:88:e6:49:61:df:1a:f7:ce:a9:ea: 36:6a:72:db:31:4a:0c:40:e4:a8:64:3c:f3:6a:6b:1f:68:3e: e4:87:83:85 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57S2AdW4HjhkzQSixsYfTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ODQzYTFiMjBhMmRiZTNlNGVkNTNlNzU0OGQ3Njg5Njc4 ZDVhMzcwHhcNMjYwMTAxMTQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTljMWI1NjIzMGFiMjdjNTliMTg1ZmM1MTI2MGNjNWI0N2VjMGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZDIxYWKxVqmT/e3yJPj0L8dch3L 0psVU1VJ2vzlX9sLXOrQZMKRgQQyKrYDKxZ7722fz0oHF8ukMBdJ+ZTov2zFnled NkK/fchse0RgUcgZ9aumIU54UoWXd5Daa9neqViR4z1k9WlmU7DVGGRPS5Bs/Z8w nM/8gg+bhqT+8uEiIf1/0lcZqRvR49IuCWKAdyKLzp7GQQPOuIh7uNGtModDyaQo vdEdSMGYFAdSZuAv50rKc+4bw7HFikfnv6Z+abFE1SymkTzGt8qLqzKlse8pt8lx 4CSp2o5do6zPDUMGULMI7a+BZ5w6NrKA7ISLUX9sGtAXzW5S7wOFiEXFiQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCWcG1YjCrJ8WbGF/FEmDMW0fsC/MB8GA1UdIwQY MBaAFFWEOhsgotvj5O1T51SNdolnjVo3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVllRNkd5Q2kyLVBrN1ZQblZJMTJpV2VOV2pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9kNjFiMzMtYWJkZi00OTAzLWE4MmMt YjUxNzI1OTdmNzNhLzEvSlp3YlZpTUtzbnhac1lYOFVTWU14YlItd0w4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9kNjFiMzMtYWJkZi00OTAzLWE4MmMtYjUxNzI1OTdmNzNh LzEvVllRNkd5Q2kyLVBrN1ZQblZJMTJpV2VOV2pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgmCQAEA MA0GCSqGSIb3DQEBCwUAA4IBAQAeWhgHWqA6QJFMLyXFzy6IYUzav8lyzhDaO363 5/RMB0efRrRxulLOeH9vG/m5wY4Ou51jJ52Uqnn3nwq6iFv6mQhm5wnfHcy4qais UuI1rzhFWJt41SIEFgeD0BHQ7q3SsD3TZp2lugZC40cYWFCSoU9UMKzvYtE2YIP3 PWe1kXtIez7Cbmru0e57Q0pXDmhTSC3b4h6sSDHi+Yc05JIP9FKUVB46EIn1+JOA Wg7HypColD5kv9RY5OC+vJbnTIAQutIwJGa+ycYEkCpLu95HE4aHpCEcFJBKasth rDaDq4jmSWHfGvfOqeo2anLbMUoMQOSoZDzzamsfaD7kh4OF -----END CERTIFICATE-----Generated at Tue Feb 10 00:01:46 2026 by rpki-client