This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/JusMkeLnpwZerjRmrLfh18Ll6fs.roa File: JusMkeLnpwZerjRmrLfh18Ll6fs.roa (raw, json) Hash identifier: 3QHrOt+mUzTsdAhnaZvehOeizpN1D+y9MLiru36nQ0s= Subject key identifier: 26:EB:0C:91:E2:E7:A7:06:5E:AE:34:66:AC:B7:E1:D7:C2:E5:E9:FB Certificate issuer: /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095 Certificate serial: 019B7834C3BB583E92A8BFDE48D9BAD49B4D Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/JusMkeLnpwZerjRmrLfh18Ll6fs.roa Signing time: Thu 01 Jan 2026 06:18:02 +0000 ROA not before: Thu 01 Jan 2026 06:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 2a00:18b0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:c3:bb:58:3e:92:a8:bf:de:48:d9:ba:d4:9b:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095 Validity Not Before: Jan 1 06:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26eb0c91e2e7a7065eae3466acb7e1d7c2e5e9fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:18:e8:e2:b3:9a:c6:10:85:fe:7c:60:c7:fb: ae:3b:36:04:19:ac:b1:16:9d:6c:e2:88:3e:75:25: 9e:62:05:5e:a9:7c:c4:cb:ae:df:24:1e:c2:a6:4e: 0f:bc:4f:ec:ef:fb:27:b3:b0:a5:ff:64:16:f5:8f: 07:de:de:9f:af:2f:af:41:14:db:a0:f3:a0:76:6b: 0c:e7:01:de:d3:9d:2d:95:f3:6e:4d:17:68:60:06: bf:8b:74:49:8d:25:e2:71:53:9d:9c:c9:8d:b9:7f: 49:da:59:06:fd:ef:fa:38:84:3c:c6:4c:78:d4:43: 2e:05:af:0b:76:0c:cf:b5:6d:8c:85:fd:b5:1e:59: a7:06:f6:92:ac:08:92:77:6b:f2:73:d9:ab:2a:1a: fc:f4:d1:f7:4d:4b:7f:3f:4b:bd:55:67:2f:09:f4: fc:82:71:db:91:2f:71:83:a4:db:ae:16:9f:53:ea: b6:9c:56:a6:42:0b:52:a7:b7:1a:20:b5:b8:7b:62: 3c:8a:3b:eb:cd:ec:6a:64:35:df:48:83:49:b4:72: dc:3a:96:a8:58:3f:75:ba:b3:74:a7:ae:8f:76:a0: 04:4c:49:8f:69:33:eb:36:2b:f8:1f:09:1a:2a:f6: 47:2c:9d:59:5c:7e:90:40:ab:5e:cf:ae:12:9d:36: cf:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:EB:0C:91:E2:E7:A7:06:5E:AE:34:66:AC:B7:E1:D7:C2:E5:E9:FB X509v3 Authority Key Identifier: keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/JusMkeLnpwZerjRmrLfh18Ll6fs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:18b0::/29 Signature Algorithm: sha256WithRSAEncryption 0c:0c:8b:77:6c:f2:26:b8:e0:ee:45:9d:e5:50:51:9e:b1:fc: c2:73:d8:d0:eb:59:11:87:ce:e1:8b:5e:39:6d:b2:09:c1:d3: cc:65:23:41:95:27:ac:b9:b5:79:13:a6:97:7c:d6:f2:0e:7b: d9:60:75:91:46:a9:ce:fe:4f:a6:ae:0a:f9:3a:7b:fe:a3:15: 56:15:f0:4a:6c:6e:35:69:a9:c2:a3:a1:a5:5a:4d:a3:db:bf: f8:b6:9f:51:9a:bc:27:98:16:ea:b5:a6:e4:ca:64:87:46:e2: 4e:c9:39:86:93:27:5e:8e:59:a2:93:4b:03:7a:b8:f0:a7:7e: ed:7a:de:5e:16:32:c4:2b:82:fb:24:1f:3d:06:0c:2b:52:5f: 79:57:49:a9:89:06:68:fb:57:20:5f:64:3b:d8:d3:20:e6:b7: c1:46:c1:50:81:73:fb:12:af:9a:04:cd:61:88:22:d4:15:b3: 89:7b:c7:b8:f5:bc:60:fc:d3:19:49:1f:b4:8f:d4:06:f0:4a: d6:9d:e9:25:e1:1f:96:00:6a:5d:8a:9f:95:15:78:50:e2:9f: 10:35:3d:03:6c:b3:52:bf:1c:71:27:77:b6:e6:e3:e3:d1:41: d3:74:50:a3:b4:4e:c9:48:d2:f1:29:ca:f3:12:a0:32:d7:a3: 1f:f3:67:ad -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4NMO7WD6SqL/eSNm61JtNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxYzEwYmZkZTU4MTNhYjQ3YzM4YzVjMTkwNGVjMjZiMzJj MmEwOTUwHhcNMjYwMTAxMDYxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmViMGM5MWUyZTdhNzA2NWVhZTM0NjZhY2I3ZTFkN2MyZTVlOWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxjo4rOaxhCF/nxgx/uuOzYEGayx Fp1s4og+dSWeYgVeqXzEy67fJB7Cpk4PvE/s7/sns7Cl/2QW9Y8H3t6fry+vQRTb oPOgdmsM5wHe050tlfNuTRdoYAa/i3RJjSXicVOdnMmNuX9J2lkG/e/6OIQ8xkx4 1EMuBa8LdgzPtW2Mhf21HlmnBvaSrAiSd2vyc9mrKhr89NH3TUt/P0u9VWcvCfT8 gnHbkS9xg6TbrhafU+q2nFamQgtSp7caILW4e2I8ijvrzexqZDXfSINJtHLcOpao WD91urN0p66PdqAETEmPaTPrNiv4HwkaKvZHLJ1ZXH6QQKtez64SnTbPcQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFCbrDJHi56cGXq40Zqy34dfC5en7MB8GA1UdIwQY MBaAFJHBC/3lgTq0fDjFwZBOwmsywqCVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTct MDRkNzRmMzY4Njk4LzEvSnVzTWtlTG5wd1plcmpSbXJMZmgxOExsNmZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTctMDRkNzRmMzY4Njk4 LzEva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgAYsDAN BgkqhkiG9w0BAQsFAAOCAQEADAyLd2zyJrjg7kWd5VBRnrH8wnPY0OtZEYfO4Yte OW2yCcHTzGUjQZUnrLm1eROml3zW8g572WB1kUapzv5Ppq4K+Tp7/qMVVhXwSmxu NWmpwqOhpVpNo9u/+LafUZq8J5gW6rWm5Mpkh0biTsk5hpMnXo5ZopNLA3q48Kd+ 7XreXhYyxCuC+yQfPQYMK1JfeVdJqYkGaPtXIF9kO9jTIOa3wUbBUIFz+xKvmgTN YYgi1BWziXvHuPW8YPzTGUkftI/UBvBK1p3pJeEflgBqXYqflRV4UOKfEDU9A2yz Ur8ccSd3tubj49FB03RQo7ROyUjS8SnK8xKgMtejH/NnrQ== -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:35 2026 by rpki-client