This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/J68_9Qnogqu4jKJivniTi4srlPw.roa File: J68_9Qnogqu4jKJivniTi4srlPw.roa (raw, json) Hash identifier: ByPXDVPbgAkUrv0lsY2eYA3GFGZu05MRA9WYa9fH2qw= Subject key identifier: 27:AF:3F:F5:09:E8:82:AB:B8:8C:A2:62:BE:78:93:8B:8B:2B:94:FC Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071 Certificate serial: 019B7E389A802C421BC93A7A7858BEFC03C9 Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/J68_9Qnogqu4jKJivniTi4srlPw.roa Signing time: Fri 02 Jan 2026 10:19:57 +0000 ROA not before: Fri 02 Jan 2026 10:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33915 IP address blocks: 2a07:3500:1170::/48 maxlen: 48 2a07:3500:1240::/46 maxlen: 46 2a07:3500:12d0::/48 maxlen: 48 2a07:3500:12f8::/48 maxlen: 48 2a07:3500:15a0::/48 maxlen: 48 2a07:3500:15c0::/48 maxlen: 48 2a07:3500:1778::/48 maxlen: 48 2a07:3500:17f8::/48 maxlen: 48 2a07:3500:1890::/48 maxlen: 48 2a07:3500:1b90::/48 maxlen: 48 2a07:3501:1340::/48 maxlen: 48 2a07:3502:1050::/48 maxlen: 48 2a07:3502:1060::/48 maxlen: 48 2a07:3502:10a1::/48 maxlen: 48 2a07:3502:10c0::/48 maxlen: 48 2a07:3502:11a0::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:9a:80:2c:42:1b:c9:3a:7a:78:58:be:fc:03:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071 Validity Not Before: Jan 2 10:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27af3ff509e882abb88ca262be78938b8b2b94fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:53:33:09:de:39:1a:f8:12:dc:89:a7:ed:1b: 6a:6f:56:42:8e:23:8f:bc:80:41:46:57:13:9f:f7: 34:ea:c1:02:8c:0d:7f:2d:88:ff:c7:37:e1:3f:d4: 04:8d:28:68:a3:42:d3:5b:5c:9c:b4:4d:2b:17:0a: 72:0f:09:c7:f5:55:31:84:3f:0d:7b:38:47:51:1a: 72:fc:39:80:16:e6:95:31:0e:d0:2e:3c:15:08:a2: c7:1c:e0:65:8b:fe:3e:91:29:0a:71:92:fb:af:7e: 18:89:4d:7d:20:73:e0:88:dd:ff:d5:45:7d:96:3a: 65:63:9d:db:89:ec:e5:33:e7:3d:df:8a:4f:05:e0: 30:50:77:3f:85:d8:95:97:c7:c6:b9:62:50:9d:2b: 14:c9:5b:83:52:cf:84:8e:36:3b:b1:b0:86:13:2e: cc:40:eb:3f:70:12:03:86:84:5b:6c:f3:9b:4e:3a: e7:d1:7d:42:02:98:ca:cd:fa:48:d3:7b:0b:44:e4: 3c:96:dd:c4:7c:e9:ac:0a:65:e7:d7:94:60:f3:f9: 54:ca:c8:e9:1b:c2:9e:b3:4d:73:b1:5c:c0:9e:19: 34:ba:fb:a2:e2:26:9f:4e:90:67:a7:f1:ac:15:a6: 74:43:ef:26:07:e0:da:8a:f9:9c:ec:4c:01:94:55: d2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:AF:3F:F5:09:E8:82:AB:B8:8C:A2:62:BE:78:93:8B:8B:2B:94:FC X509v3 Authority Key Identifier: keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/J68_9Qnogqu4jKJivniTi4srlPw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:3500:1170::/48 2a07:3500:1240::/46 2a07:3500:12d0::/48 2a07:3500:12f8::/48 2a07:3500:15a0::/48 2a07:3500:15c0::/48 2a07:3500:1778::/48 2a07:3500:17f8::/48 2a07:3500:1890::/48 2a07:3500:1b90::/48 2a07:3501:1340::/48 2a07:3502:1050::/48 2a07:3502:1060::/48 2a07:3502:10a1::/48 2a07:3502:10c0::/48 2a07:3502:11a0::/46 Signature Algorithm: sha256WithRSAEncryption 81:a4:58:92:82:53:44:e3:d9:37:3f:ed:5a:d9:b8:60:63:f3: 7e:4f:ff:4d:15:27:37:fe:53:fb:e6:55:f7:ca:93:99:a8:5b: a6:c3:f1:5c:f4:66:d0:36:5c:4e:e5:a9:ee:76:0f:c4:05:31: 22:c2:b3:48:00:33:56:48:57:62:03:b4:03:f3:f0:11:26:04: 9b:24:e0:41:6f:5b:bc:31:51:87:f9:32:21:d8:e5:40:02:ca: 30:b9:50:42:12:da:0d:79:55:85:0c:5e:05:d2:a1:d8:17:cf: 0a:91:42:ba:d3:85:7f:4d:bd:5c:6e:1a:7a:78:ad:43:27:9b: 4c:4c:f8:9a:94:6d:ff:cf:6e:84:7e:7f:98:8e:72:cd:70:f6: f7:72:b3:9f:ff:81:66:64:7c:83:1e:05:10:dd:d3:08:51:df: 7c:02:70:99:36:b9:f3:39:93:46:e7:a0:c7:58:89:7f:dc:e4: d7:df:18:4b:4a:65:39:fd:08:ba:d9:41:84:f1:48:a2:0f:20: 7c:4c:52:ef:93:51:cd:2c:94:64:3c:9c:7c:d7:9d:56:84:76: 09:a9:44:9c:28:89:e1:11:3d:16:1f:04:22:f7:a8:e9:ae:33: 8e:6c:ce:7b:23:2f:2c:86:77:9b:12:d6:e7:f4:c2:b8:b4:57: 9f:81:7b:97 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgISAZt+OJqALEIbyTp6eFi+/APJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl MTQwNzEwHhcNMjYwMTAyMTAxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2FmM2ZmNTA5ZTg4MmFiYjg4Y2EyNjJiZTc4OTM4YjhiMmI5NGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFMzCd45GvgS3Imn7Rtqb1ZCjiOP vIBBRlcTn/c06sECjA1/LYj/xzfhP9QEjShoo0LTW1yctE0rFwpyDwnH9VUxhD8N ezhHURpy/DmAFuaVMQ7QLjwVCKLHHOBli/4+kSkKcZL7r34YiU19IHPgiN3/1UV9 ljplY53biezlM+c934pPBeAwUHc/hdiVl8fGuWJQnSsUyVuDUs+EjjY7sbCGEy7M QOs/cBIDhoRbbPObTjrn0X1CApjKzfpI03sLROQ8lt3EfOmsCmXn15Rg8/lUysjp G8Kes01zsVzAnhk0uvui4iafTpBnp/GsFaZ0Q+8mB+Daivmc7EwBlFXSQQIDAQAB o4ICmDCCApQwHQYDVR0OBBYEFCevP/UJ6IKruIyiYr54k4uLK5T8MB8GA1UdIwQY MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt YWQ1NzU1MjJiMzY1LzEvSjY4XzlRbm9ncXU0aktKaXZuaVRpNHNybFB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1 LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAIwgZADBwAq BzUAEXADBwIqBzUAEkADBwAqBzUAEtADBwAqBzUAEvgDBwAqBzUAFaADBwAqBzUA FcADBwAqBzUAF3gDBwAqBzUAF/gDBwAqBzUAGJADBwAqBzUAG5ADBwAqBzUBE0AD BwAqBzUCEFADBwAqBzUCEGADBwAqBzUCEKEDBwAqBzUCEMADBwIqBzUCEaAwDQYJ KoZIhvcNAQELBQADggEBAIGkWJKCU0Tj2Tc/7VrZuGBj835P/00VJzf+U/vmVffK k5moW6bD8Vz0ZtA2XE7lqe52D8QFMSLCs0gAM1ZIV2IDtAPz8BEmBJsk4EFvW7wx UYf5MiHY5UACyjC5UEIS2g15VYUMXgXSodgXzwqRQrrThX9NvVxuGnp4rUMnm0xM +JqUbf/PboR+f5iOcs1w9vdys5//gWZkfIMeBRDd0whR33wCcJk2ufM5k0bnoMdY iX/c5NffGEtKZTn9CLrZQYTxSKIPIHxMUu+TUc0slGQ8nHzXnVaEdgmpRJwoieER PRYfBCL3qOmuM45sznsjLyyGd5sS1uf0wri0V5+Be5c= -----END CERTIFICATE-----Generated at Tue Jan 20 04:48:49 2026 by rpki-client