This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jAj_gEyMObHk_0mFBs58ux2DGeE.roa File: jAj_gEyMObHk_0mFBs58ux2DGeE.roa (raw, json) Hash identifier: Xm11mZOmowSFyoUw1vmWFnVN08qqV6nAD7op4auSQtY= Subject key identifier: 8C:08:FF:80:4C:8C:39:B1:E4:FF:49:85:06:CE:7C:BB:1D:83:19:E1 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1BEDF18EEFFD796F74B7EFE0960A9 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jAj_gEyMObHk_0mFBs58ux2DGeE.roa Signing time: Fri 02 Jan 2026 18:21:47 +0000 ROA not before: Fri 02 Jan 2026 18:21:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197992 IP address blocks: 2a0d:a9c0::/29 maxlen: 29 2a10:3040::/29 maxlen: 29 2a10:6300::/29 maxlen: 29 2a10:6900::/29 maxlen: 29 2a11:1880::/29 maxlen: 29 2a11:90c0::/29 maxlen: 29 2a11:9340::/29 maxlen: 29 2a11:9e00::/29 maxlen: 29 2a11:b740::/29 maxlen: 29 2a11:f040::/29 maxlen: 29 2a13:2f40::/29 maxlen: 29 2a13:4f00::/29 maxlen: 29 2a13:9100::/29 maxlen: 29 2a13:c700::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:be:df:18:ee:ff:d7:96:f7:4b:7e:fe:09:60:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c08ff804c8c39b1e4ff498506ce7cbb1d8319e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4a:16:70:0a:61:8e:5a:43:88:c1:11:4d:87: d4:92:db:17:30:e8:ee:e5:d6:b6:8b:2b:98:6c:c7: 44:d6:46:2e:96:a5:64:9b:29:6f:c5:9a:88:e8:28: 34:c4:82:b1:84:81:52:e1:2b:35:80:4d:c3:0a:11: dd:64:89:78:30:8e:cc:b5:3a:e5:77:5b:0e:66:2b: db:2d:d8:0c:27:3b:19:5c:74:44:ec:d7:c8:e2:26: 58:96:ad:3e:47:21:2c:f4:af:60:b1:43:09:5b:de: a9:d5:65:2a:5b:1c:18:54:67:68:7a:4d:54:80:80: 52:6b:39:98:7a:74:da:f2:3b:fe:dd:e8:63:31:22: 85:39:79:bf:09:09:0a:29:94:57:9a:a8:3a:9d:37: 12:51:5f:04:f0:88:7b:98:90:6f:c7:e9:9f:7e:44: 3b:16:17:99:85:65:b7:98:bb:4d:67:b7:96:da:45: ec:75:ee:5b:1e:5b:58:f0:01:21:8a:2b:c9:0c:7e: 2e:10:a2:4b:44:92:27:20:f1:74:d5:f8:ed:99:85: 5a:6e:5b:5f:56:e9:5f:bd:44:46:a9:fd:b5:f7:66: 9c:40:bc:f7:65:bd:ba:8c:c6:b9:81:62:5a:e9:ce: d4:b5:5a:c6:85:a0:23:94:b0:13:6b:65:0d:d4:02: 22:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:08:FF:80:4C:8C:39:B1:E4:FF:49:85:06:CE:7C:BB:1D:83:19:E1 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jAj_gEyMObHk_0mFBs58ux2DGeE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:a9c0::/29 2a10:3040::/29 2a10:6300::/29 2a10:6900::/29 2a11:1880::/29 2a11:90c0::/29 2a11:9340::/29 2a11:9e00::/29 2a11:b740::/29 2a11:f040::/29 2a13:2f40::/29 2a13:4f00::/29 2a13:9100::/29 2a13:c700::/29 Signature Algorithm: sha256WithRSAEncryption 5f:18:87:62:6b:46:5f:04:60:4a:77:61:f1:3a:a8:d6:29:0e: 21:52:97:8c:86:de:6f:b5:9a:51:f8:16:0e:dc:7e:c2:c7:7f: 9f:9d:ff:e0:a9:4e:e2:5e:fc:8f:2c:2c:3e:1a:8d:67:14:6b: 89:70:cf:5f:b7:02:c1:00:fd:93:26:b3:10:59:b0:40:5f:72: 9b:2e:e1:f9:93:7f:a0:84:ef:e6:37:bd:54:3e:dc:31:ae:18: 50:ab:0b:cf:9f:f9:80:e8:04:59:3b:02:90:3f:0e:06:b3:d7: 0a:0c:9c:d2:a5:85:8d:4b:f0:52:ff:03:fa:f3:72:3d:d5:da: 07:d5:e9:69:b6:75:29:8c:61:be:35:b4:58:f9:f3:2d:c4:59: a5:56:4d:49:72:50:f0:90:0a:e9:fc:cd:e4:cc:63:10:cc:42: e3:13:86:4c:33:8a:52:61:c7:f4:3e:b0:f1:d2:6c:83:0a:de: fb:4d:f5:63:1d:f8:04:5d:8a:b8:f2:49:ca:04:fd:d3:43:2f: 9b:05:fe:35:b6:5d:b5:92:58:ad:08:29:be:bc:5b:05:30:0e: 04:3a:d6:13:70:9a:8c:c3:4f:7a:36:f7:bf:77:dd:3c:b9:69: ae:c4:73:62:75:cb:05:1a:ed:c5:fe:98:21:e7:04:b0:1b:37: 60:8f:7d:92 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgISAZt/8b7fGO7/15b3S37+CWCpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzA4ZmY4MDRjOGMzOWIxZTRmZjQ5ODUwNmNlN2NiYjFkODMxOWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUoWcAphjlpDiMERTYfUktsXMOju 5da2iyuYbMdE1kYulqVkmylvxZqI6Cg0xIKxhIFS4Ss1gE3DChHdZIl4MI7MtTrl d1sOZivbLdgMJzsZXHRE7NfI4iZYlq0+RyEs9K9gsUMJW96p1WUqWxwYVGdoek1U gIBSazmYenTa8jv+3ehjMSKFOXm/CQkKKZRXmqg6nTcSUV8E8Ih7mJBvx+mffkQ7 FheZhWW3mLtNZ7eW2kXsde5bHltY8AEhiivJDH4uEKJLRJInIPF01fjtmYVabltf VulfvURGqf2192acQLz3Zb26jMa5gWJa6c7UtVrGhaAjlLATa2UN1AIiGwIDAQAB o4ICZTCCAmEwHQYDVR0OBBYEFIwI/4BMjDmx5P9JhQbOfLsdgxnhMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvakFqX2dFeU1PYkhrXzBtRkJzNTh1eDJER2VFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajBoBAIAAjBiAwUDKg2pwAMF AyoQMEADBQMqEGMAAwUDKhBpAAMFAyoRGIADBQMqEZDAAwUDKhGTQAMFAyoRngAD BQMqEbdAAwUDKhHwQAMFAyoTL0ADBQMqE08AAwUDKhORAAMFAyoTxwAwDQYJKoZI hvcNAQELBQADggEBAF8Yh2JrRl8EYEp3YfE6qNYpDiFSl4yG3m+1mlH4Fg7cfsLH f5+d/+CpTuJe/I8sLD4ajWcUa4lwz1+3AsEA/ZMmsxBZsEBfcpsu4fmTf6CE7+Y3 vVQ+3DGuGFCrC8+f+YDoBFk7ApA/Dgaz1woMnNKlhY1L8FL/A/rzcj3V2gfV6Wm2 dSmMYb41tFj58y3EWaVWTUlyUPCQCun8zeTMYxDMQuMThkwzilJhx/Q+sPHSbIMK 3vtN9WMd+ARdirjyScoE/dNDL5sF/jW2XbWSWK0IKb68WwUwDgQ61hNwmozDT3o2 97933Ty5aa7Ec2J1ywUa7cX+mCHnBLAbN2CPfZI= -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:51 2026 by rpki-client