This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/jPQoehqzjLAGUch6Ki5vOe9Q4p8.roa File: jPQoehqzjLAGUch6Ki5vOe9Q4p8.roa (raw, json) Hash identifier: TD8JYBVxPMbC9w7CyBa/n3yLGwuHv5es9HqJ2XvkWDI= Subject key identifier: 8C:F4:28:7A:1A:B3:8C:B0:06:51:C8:7A:2A:2E:6F:39:EF:50:E2:9F Certificate issuer: /CN=07f0ba59b1c76cf20dc4382e5a2854d7142c26ba Certificate serial: 019B7CED3E0B9E4A5149C71E5A3CE1908559 Authority key identifier: 07:F0:BA:59:B1:C7:6C:F2:0D:C4:38:2E:5A:28:54:D7:14:2C:26:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/jPQoehqzjLAGUch6Ki5vOe9Q4p8.roa Signing time: Fri 02 Jan 2026 04:18:01 +0000 ROA not before: Fri 02 Jan 2026 04:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214160 IP address blocks: 2a14:6:10::/48 maxlen: 48 2a14:6:11::/48 maxlen: 48 2a14:6:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.mft rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:3e:0b:9e:4a:51:49:c7:1e:5a:3c:e1:90:85:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07f0ba59b1c76cf20dc4382e5a2854d7142c26ba Validity Not Before: Jan 2 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8cf4287a1ab38cb00651c87a2a2e6f39ef50e29f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:28:c3:c6:e5:1b:89:bc:a5:62:28:44:53:72: 6e:1c:a6:f6:80:2d:b6:7e:03:0a:c4:1b:a8:2b:1d: 3c:4b:9d:f8:6a:f0:4c:bb:83:7f:90:a5:4c:69:45: ec:52:36:2d:9d:a9:7e:fa:3a:38:ed:85:6b:15:2c: bd:42:5e:0c:1e:5b:ab:2e:83:12:23:e0:f1:0e:37: 89:87:df:c3:07:11:55:ff:5f:a5:c4:e1:d2:4c:c8: 71:fc:45:ff:f0:93:1c:4b:72:53:22:cf:09:f5:ef: 6a:26:38:70:09:b9:2d:73:ee:6c:4c:51:d8:08:6b: 01:37:c0:c9:88:a6:8d:81:4e:a5:5c:28:a5:0a:3b: 9c:23:dd:18:d4:20:f4:11:a2:e8:88:fa:b3:70:a5: 74:7b:6c:a0:2b:64:65:42:73:1e:7f:58:d7:35:e5: 93:d4:3b:75:7a:c0:d8:ad:97:c8:35:b4:03:6f:9d: bf:f5:ba:59:05:f7:73:b4:a5:0f:ef:d8:f0:8e:08: d4:8d:17:21:15:ac:6a:2f:da:d0:e1:44:53:98:a9: 83:c0:6b:79:3e:ec:f6:c6:e1:44:c5:ef:6a:57:bb: 11:36:05:7e:bf:06:20:4e:e7:52:85:72:8b:1b:ff: 0a:51:a2:f7:e5:da:e0:61:d8:19:a2:f2:94:22:e3: 8d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F4:28:7A:1A:B3:8C:B0:06:51:C8:7A:2A:2E:6F:39:EF:50:E2:9F X509v3 Authority Key Identifier: keyid:07:F0:BA:59:B1:C7:6C:F2:0D:C4:38:2E:5A:28:54:D7:14:2C:26:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/jPQoehqzjLAGUch6Ki5vOe9Q4p8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:6:10::-2a14:6:12:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 45:e2:16:d3:b6:d1:ff:d3:f2:05:68:1a:69:35:a2:c6:7b:9d: 17:54:7d:69:22:14:fb:3b:08:30:7f:7c:d9:a8:e5:1b:b8:87: 3f:78:79:21:9b:56:40:46:b6:0e:71:f6:bb:58:f0:ea:3f:b7: cb:54:10:e0:58:2e:76:fe:d3:6e:24:7f:02:5f:95:c3:d9:98: 93:af:b2:a9:5d:07:da:26:8e:1b:a0:3d:63:31:a1:f3:2f:d2: c4:51:e8:3a:b5:75:46:cb:42:03:c1:17:6f:91:c2:e6:96:60: 84:30:06:04:ea:e0:78:53:68:a3:27:93:ea:49:00:14:47:7d: fc:d6:9c:a9:4a:b2:d6:f8:3d:13:27:a2:95:e3:57:b5:eb:61: f1:38:a7:c7:ee:92:bf:a4:a1:cf:ac:f2:0a:2b:ca:d3:c0:19: 64:a1:01:31:f0:18:5b:47:15:76:42:82:20:8d:83:80:c1:43: 85:3a:f4:33:c1:17:e2:27:f4:d7:ef:dc:dd:53:f0:cd:00:d3: 2f:d9:0b:25:e7:51:05:66:8f:db:a9:cf:cc:16:ed:66:6f:c5: 87:af:70:19:d3:45:5f:35:aa:92:08:2f:ed:f2:e3:e6:02:44: 87:47:03:18:b0:bf:73:9c:0e:0a:d6:73:ea:24:7b:fa:8a:50: d9:39:33:da -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt87T4LnkpRScceWjzhkIVZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZjBiYTU5YjFjNzZjZjIwZGM0MzgyZTVhMjg1NGQ3MTQy YzI2YmEwHhcNMjYwMTAyMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2Y0Mjg3YTFhYjM4Y2IwMDY1MWM4N2EyYTJlNmYzOWVmNTBlMjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCjDxuUbibylYihEU3JuHKb2gC22 fgMKxBuoKx08S534avBMu4N/kKVMaUXsUjYtnal++jo47YVrFSy9Ql4MHlurLoMS I+DxDjeJh9/DBxFV/1+lxOHSTMhx/EX/8JMcS3JTIs8J9e9qJjhwCbktc+5sTFHY CGsBN8DJiKaNgU6lXCilCjucI90Y1CD0EaLoiPqzcKV0e2ygK2RlQnMef1jXNeWT 1Dt1esDYrZfINbQDb52/9bpZBfdztKUP79jwjgjUjRchFaxqL9rQ4URTmKmDwGt5 Puz2xuFExe9qV7sRNgV+vwYgTudShXKLG/8KUaL35drgYdgZovKUIuONzQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFIz0KHoas4ywBlHIeioubznvUOKfMB8GA1UdIwQY MBaAFAfwulmxx2zyDcQ4LlooVNcULCa6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQl9DNldiSEhiUElOeERndVdpaFUxeFFzSnJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yOTZhNzgtMDFlMi00OTZkLWJhNTkt MjIwMGIzY2M1N2U2LzEvalBRb2VocXpqTEFHVWNoNktpNXZPZTlRNHA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8yOTZhNzgtMDFlMi00OTZkLWJhNTktMjIwMGIzY2M1N2U2 LzEvQl9DNldiSEhiUElOeERndVdpaFUxeFFzSnJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwQqFAAG ABADBwAqFAAGABIwDQYJKoZIhvcNAQELBQADggEBAEXiFtO20f/T8gVoGmk1osZ7 nRdUfWkiFPs7CDB/fNmo5Ru4hz94eSGbVkBGtg5x9rtY8Oo/t8tUEOBYLnb+024k fwJflcPZmJOvsqldB9omjhugPWMxofMv0sRR6Dq1dUbLQgPBF2+RwuaWYIQwBgTq 4HhTaKMnk+pJABRHffzWnKlKstb4PRMnopXjV7XrYfE4p8fukr+koc+s8gorytPA GWShATHwGFtHFXZCgiCNg4DBQ4U69DPBF+In9Nfv3N1T8M0A0y/ZCyXnUQVmj9up z8wW7WZvxYevcBnTRV81qpIIL+3y4+YCRIdHAxiwv3OcDgrWc+oke/qKUNk5M9o= -----END CERTIFICATE-----Generated at Sat Jan 10 14:23:35 2026 by rpki-client