This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cjPKe_OXyFR6UVo7EH-9BfsAA50.roa File: cjPKe_OXyFR6UVo7EH-9BfsAA50.roa (raw, json) Hash identifier: jvAbAtnX5hxW9MkZKknpsOypHrKxkBJJARl0BRe7fqo= Subject key identifier: 72:33:CA:7B:F3:97:C8:54:7A:51:5A:3B:10:7F:BD:05:FB:00:03:9D Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1B8C7E68C064809E001F855CD97E6 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cjPKe_OXyFR6UVo7EH-9BfsAA50.roa Signing time: Fri 02 Jan 2026 18:21:46 +0000 ROA not before: Fri 02 Jan 2026 18:21:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 2a0f:bc06::/32 maxlen: 32 2a0f:bc07::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 06:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:b8:c7:e6:8c:06:48:09:e0:01:f8:55:cd:97:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7233ca7bf397c8547a515a3b107fbd05fb00039d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:36:4a:2c:01:e1:15:0e:9b:13:93:cb:a8:e3: 88:b8:3a:4f:ed:fa:25:25:38:19:3e:c2:74:86:20: 3d:f8:9d:47:d8:8c:d7:07:8d:df:9e:bc:8a:fe:15: cd:58:bc:78:30:a5:17:d5:52:98:c6:8a:e2:83:a3: 3e:e0:c0:f6:8d:70:fe:94:0b:40:1e:bc:d8:46:01: d2:95:cd:b5:a6:a9:96:12:01:b7:2c:7b:71:27:40: 89:ee:7e:a0:69:f8:43:1d:c1:72:6f:e5:21:79:dd: 6b:44:83:34:7f:d1:1e:42:47:26:1c:c8:b7:50:66: b6:3a:0d:58:21:3d:df:35:a3:56:ca:71:60:32:f7: b2:dc:52:87:37:6a:e5:f1:c6:45:60:8b:58:42:74: 7e:e1:02:d4:e0:dd:17:19:f9:ee:59:d7:00:dc:71: 29:56:3d:51:eb:35:74:c7:3b:76:cb:7a:31:ae:2a: 7b:f8:b0:4e:13:a8:b9:e9:53:8e:01:6a:ce:57:2b: ec:f5:97:a6:d3:a5:fd:6c:bd:34:b1:ee:d3:cb:27: 43:14:ca:02:89:e0:55:4a:12:e9:fc:f9:30:67:75: d8:69:9c:e7:17:1e:b2:2e:93:2e:bd:fc:ef:7b:f2: b1:79:e4:2b:bc:ff:26:4e:bb:c6:ed:df:8b:63:e3: 04:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:33:CA:7B:F3:97:C8:54:7A:51:5A:3B:10:7F:BD:05:FB:00:03:9D X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cjPKe_OXyFR6UVo7EH-9BfsAA50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:bc06::/31 Signature Algorithm: sha256WithRSAEncryption 42:5e:90:02:33:6f:df:c3:6c:6c:27:d6:e8:35:fb:c8:f8:e6: 23:51:3f:f0:72:ac:68:f2:9c:3c:ea:bb:bc:b8:08:e8:5e:90: 1b:ed:f7:35:7e:67:3e:95:f9:19:a5:92:cf:00:2a:d5:df:2f: 35:3e:9a:6a:76:55:ae:8d:5f:4e:3d:a2:c9:41:66:a7:53:d5: a5:1a:42:04:c3:4e:ab:8d:a5:1a:17:47:c4:d7:c9:99:8f:0a: 1e:a9:89:7f:17:3c:fb:f2:59:3e:a0:25:66:54:c6:99:cf:e9: 9c:86:73:3d:50:3b:a4:cf:f4:f0:7b:20:34:b1:fb:9c:f6:97: 8b:e9:c5:f8:1f:23:36:6e:1b:02:39:ca:cd:d5:78:81:99:c1: 64:52:47:f9:6c:70:37:28:dd:c8:83:21:bb:33:b6:64:58:aa: 02:70:d0:c9:f9:88:91:4e:d5:c0:a1:f4:e8:b7:30:27:24:2f: 0d:dd:2e:ec:71:f1:e8:cd:84:14:8f:70:5c:d4:ed:f2:05:79: 51:72:2f:05:01:89:65:1c:b9:0a:80:65:6b:f1:88:4e:b8:07: 23:9c:a6:6f:d2:94:bf:17:e3:66:c1:13:fb:d5:b6:01:da:f9: 34:90:41:5a:27:46:9d:1e:bf:69:0d:54:a3:91:08:a2:49:f1: 43:5e:0f:85 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/8bjH5owGSAngAfhVzZfmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjMzY2E3YmYzOTdjODU0N2E1MTVhM2IxMDdmYmQwNWZiMDAwMzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzZKLAHhFQ6bE5PLqOOIuDpP7fol JTgZPsJ0hiA9+J1H2IzXB43fnryK/hXNWLx4MKUX1VKYxorig6M+4MD2jXD+lAtA HrzYRgHSlc21pqmWEgG3LHtxJ0CJ7n6gafhDHcFyb+Uhed1rRIM0f9EeQkcmHMi3 UGa2Og1YIT3fNaNWynFgMvey3FKHN2rl8cZFYItYQnR+4QLU4N0XGfnuWdcA3HEp Vj1R6zV0xzt2y3oxrip7+LBOE6i56VOOAWrOVyvs9Zem06X9bL00se7TyydDFMoC ieBVShLp/PkwZ3XYaZznFx6yLpMuvfzve/KxeeQrvP8mTrvG7d+LY+MEnwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFHIzynvzl8hUelFaOxB/vQX7AAOdMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvY2pQS2VfT1h5RlI2VVZvN0VILTlCZnNBQTUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUBKg+8BjAN BgkqhkiG9w0BAQsFAAOCAQEAQl6QAjNv38NsbCfW6DX7yPjmI1E/8HKsaPKcPOq7 vLgI6F6QG+33NX5nPpX5GaWSzwAq1d8vNT6aanZVro1fTj2iyUFmp1PVpRpCBMNO q42lGhdHxNfJmY8KHqmJfxc8+/JZPqAlZlTGmc/pnIZzPVA7pM/08HsgNLH7nPaX i+nF+B8jNm4bAjnKzdV4gZnBZFJH+WxwNyjdyIMhuzO2ZFiqAnDQyfmIkU7VwKH0 6LcwJyQvDd0u7HHx6M2EFI9wXNTt8gV5UXIvBQGJZRy5CoBla/GITrgHI5ymb9KU vxfjZsET+9W2Adr5NJBBWidGnR6/aQ1Uo5EIoknxQ14PhQ== -----END CERTIFICATE-----Generated at Thu Jan 8 12:59:40 2026 by rpki-client