This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JlYmCF7iB1itdoPcN4iQU1Dmi-E.roa File: JlYmCF7iB1itdoPcN4iQU1Dmi-E.roa (raw, json) Hash identifier: kfdEQ+nWOFfdi4oNMWug000TZDzDgWNL2lXluXgekTw= Subject key identifier: 26:56:26:08:5E:E2:07:58:AD:76:83:DC:37:88:90:53:50:E6:8B:E1 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1D4FEAA149F06E781481212BC6120 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JlYmCF7iB1itdoPcN4iQU1Dmi-E.roa Signing time: Fri 02 Jan 2026 18:21:53 +0000 ROA not before: Fri 02 Jan 2026 18:21:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396362 IP address blocks: 2a0f:1e80:1::/48 maxlen: 48 2a0f:3d87::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:d4:fe:aa:14:9f:06:e7:81:48:12:12:bc:61:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=265626085ee20758ad7683dc3788905350e68be1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c5:53:d0:c0:0b:d4:2d:38:f4:08:f0:ed:f8: 47:44:65:87:4f:65:5d:b6:91:46:d8:82:1e:ca:8c: 3a:81:fc:76:4f:6d:09:77:21:b3:66:c1:88:21:69: 46:f7:00:16:f3:da:fc:31:ca:25:06:29:73:fe:e3: 73:f6:08:29:6b:2c:bf:18:75:11:b2:b0:13:9b:1a: c8:1e:af:2f:6b:07:c0:75:20:f1:67:6c:89:5a:1b: 47:ff:a9:8b:ff:40:f8:eb:76:62:59:d4:d9:54:48: 02:9e:1c:a4:f6:9b:c5:cd:5d:77:98:45:a9:7d:29: 9c:64:43:90:ef:3b:f9:07:da:41:e0:c3:8f:a6:7d: bb:da:3e:26:1b:b0:c4:a4:1f:1a:41:f8:aa:e6:a5: 02:0c:d8:bd:2d:bc:17:df:3a:f2:e1:02:8b:ab:19: 6e:4e:74:d6:ad:47:90:0e:fd:af:ad:0c:86:10:0d: cf:20:9d:0d:75:8d:c8:3e:0c:57:e4:51:5e:e4:7f: fb:fc:83:4d:7a:5b:3e:98:11:6f:f5:00:96:db:ee: b3:46:4b:67:c5:c5:91:bc:d9:19:48:ff:86:c9:52: f4:ef:76:d9:86:e8:cd:d4:b6:14:4b:6f:36:ef:61: de:ae:55:ab:45:40:83:d7:23:77:f4:7a:f3:1b:79: d6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:56:26:08:5E:E2:07:58:AD:76:83:DC:37:88:90:53:50:E6:8B:E1 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JlYmCF7iB1itdoPcN4iQU1Dmi-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1e80:1::/48 2a0f:3d87::/32 Signature Algorithm: sha256WithRSAEncryption 1c:a3:93:37:b1:04:46:46:50:9e:99:45:3d:7a:11:55:22:4a: cb:47:2c:8c:e8:d7:9a:64:b9:a6:e5:e0:7a:8c:d4:ca:4c:1d: 77:94:31:55:b6:27:7a:9a:44:5b:b3:92:b2:c9:2b:bb:e6:8e: db:13:72:55:2f:2e:15:ca:41:c2:c4:e0:b8:6c:75:fd:77:93: 6e:8f:d7:d1:0b:dd:69:28:1f:5b:c0:22:0a:0f:db:db:0f:b1: 24:fd:e2:6f:bb:98:2a:a5:ab:54:c5:a6:c5:d2:94:59:29:79: 70:1f:34:3e:87:ae:45:07:92:29:1f:d8:f7:dd:c9:88:15:69: 08:75:25:82:16:bf:4d:c4:fb:d5:3f:02:03:a4:07:78:03:99: b9:c6:ec:25:45:31:bd:dc:fd:18:5d:8a:a6:33:df:10:35:16: e4:f1:53:02:dc:de:16:88:8d:25:ee:e6:3a:ef:43:93:9c:59: b1:dd:b1:9a:69:a3:d1:55:24:b3:da:7f:11:d1:13:f8:15:6c: 05:5d:ff:e3:d8:be:b0:6b:2f:14:fe:33:78:08:ff:be:06:85: 5a:a2:1a:d5:9f:4a:54:1c:e7:8d:c8:82:ea:62:16:f9:62:22: 2a:28:d9:c6:ae:9b:0b:2f:61:ab:ac:f3:9f:dc:8c:2a:37:13: e1:de:2f:ac -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt/8dT+qhSfBueBSBISvGEgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjU2MjYwODVlZTIwNzU4YWQ3NjgzZGMzNzg4OTA1MzUwZTY4YmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMVT0MAL1C049Ajw7fhHRGWHT2Vd tpFG2IIeyow6gfx2T20JdyGzZsGIIWlG9wAW89r8McolBilz/uNz9ggpayy/GHUR srATmxrIHq8vawfAdSDxZ2yJWhtH/6mL/0D463ZiWdTZVEgCnhyk9pvFzV13mEWp fSmcZEOQ7zv5B9pB4MOPpn272j4mG7DEpB8aQfiq5qUCDNi9LbwX3zry4QKLqxlu TnTWrUeQDv2vrQyGEA3PIJ0NdY3IPgxX5FFe5H/7/INNels+mBFv9QCW2+6zRktn xcWRvNkZSP+GyVL073bZhujN1LYUS28272HerlWrRUCD1yN39HrzG3nWzwIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFCZWJghe4gdYrXaD3DeIkFNQ5ovhMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvSmxZbUNGN2lCMWl0ZG9QY040aVFVMURtaS1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwcAKg8egAAB AwUAKg89hzANBgkqhkiG9w0BAQsFAAOCAQEAHKOTN7EERkZQnplFPXoRVSJKy0cs jOjXmmS5puXgeozUykwdd5QxVbYneppEW7OSsskru+aO2xNyVS8uFcpBwsTguGx1 /XeTbo/X0QvdaSgfW8AiCg/b2w+xJP3ib7uYKqWrVMWmxdKUWSl5cB80PoeuRQeS KR/Y993JiBVpCHUlgha/TcT71T8CA6QHeAOZucbsJUUxvdz9GF2KpjPfEDUW5PFT AtzeFoiNJe7mOu9Dk5xZsd2xmmmj0VUks9p/EdET+BVsBV3/49i+sGsvFP4zeAj/ vgaFWqIa1Z9KVBznjciC6mIW+WIiKijZxq6bCy9hq6zzn9yMKjcT4d4vrA== -----END CERTIFICATE-----Generated at Tue Jan 20 09:06:51 2026 by rpki-client