This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/JP09kOOoDIPck9bP_vL_59ocq9I.roa File: JP09kOOoDIPck9bP_vL_59ocq9I.roa (raw, json) Hash identifier: y6UcXCGlAhYpDHZzGmM1JK8hUvLWF5EeltfmarDuJwQ= Subject key identifier: 24:FD:3D:90:E3:A8:0C:83:DC:93:D6:CF:FE:F2:FF:E7:DA:1C:AB:D2 Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071 Certificate serial: 019B7E389E7756E9B3ADCAAFC97BA206EF66 Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/JP09kOOoDIPck9bP_vL_59ocq9I.roa Signing time: Fri 02 Jan 2026 10:19:58 +0000 ROA not before: Fri 02 Jan 2026 10:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42894 IP address blocks: 2a04:9a02::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:9e:77:56:e9:b3:ad:ca:af:c9:7b:a2:06:ef:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071 Validity Not Before: Jan 2 10:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24fd3d90e3a80c83dc93d6cffef2ffe7da1cabd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d1:57:c3:e6:73:23:ca:a6:53:fb:96:77:b7: c7:89:24:84:ac:1f:59:c2:3b:da:a1:ce:8c:13:95: a3:58:53:bb:c8:a8:0c:18:ea:8d:b4:0f:e9:c4:79: fb:9b:dd:6d:d8:95:8f:15:a6:9a:0b:05:b8:44:02: 48:1b:1e:3d:06:c1:4d:3e:61:3e:18:89:53:54:57: 10:ad:39:e8:32:6b:93:75:39:12:dc:d7:51:87:d0: 6d:0f:0f:05:1b:58:a0:8c:9e:8f:9d:20:75:2a:cc: e7:02:d9:64:5e:a7:32:88:e0:0a:48:f6:27:b3:35: 0c:bb:6e:03:69:e6:8d:6b:33:8b:a2:a9:d8:5d:00: d1:7c:2d:21:71:ef:b9:72:f6:15:7f:82:77:52:b1: 8e:56:52:80:f6:09:a9:5b:80:97:f4:97:b2:b7:63: 52:83:4b:e4:72:51:ac:ea:df:9b:2c:f5:c9:c7:58: 25:8a:8b:80:d6:12:bf:46:44:15:57:f5:e7:ff:34: b9:73:23:67:cd:57:f6:70:a5:1a:a9:f7:a4:6e:01: 17:51:18:8b:4b:01:24:12:42:69:61:20:7e:20:53: b1:f0:3a:15:45:bc:0f:86:b5:29:57:9b:ee:b2:ba: a4:57:4e:45:66:1c:84:70:09:d0:78:ea:c5:78:a9: ee:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:FD:3D:90:E3:A8:0C:83:DC:93:D6:CF:FE:F2:FF:E7:DA:1C:AB:D2 X509v3 Authority Key Identifier: keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/JP09kOOoDIPck9bP_vL_59ocq9I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:9a02::/32 Signature Algorithm: sha256WithRSAEncryption 04:be:f3:66:66:01:c9:cb:98:f7:6f:93:a2:04:03:2d:23:c3: e4:ab:ce:78:df:cb:2f:50:b9:34:aa:d7:40:29:b6:0a:01:08: a4:6f:f8:2d:6e:50:af:4a:da:3b:e4:e8:93:13:46:18:cd:b1: 24:27:65:26:eb:59:e7:b1:81:d2:79:2d:6f:c6:ec:e2:27:35: bc:17:9d:0e:5e:a0:0c:f8:52:dd:1e:f7:2d:b1:cc:16:74:4d: 8c:4e:0f:9f:7a:f8:11:9c:d2:ec:ad:99:5b:64:fc:bd:a9:99: be:3a:01:7e:f9:08:1b:f0:a7:49:99:3e:99:db:4b:6c:59:73: fe:8c:35:92:45:52:b9:fc:7c:12:4a:c7:06:64:f7:86:0b:01: 74:e3:b8:17:1a:46:81:ce:c6:67:9d:f0:6f:85:1a:ca:1d:6e: 14:d8:94:0e:0e:81:36:3b:4b:06:f0:9c:0e:11:2b:56:81:cf: 42:1b:1d:0c:8d:61:8c:64:9b:e2:90:97:af:fb:73:4d:af:ca: 99:f7:70:00:b1:b0:f3:35:a2:b3:ee:24:d3:2e:5e:31:1e:23: 90:dc:d5:b8:13:16:64:5b:22:a5:6a:02:8d:24:95:4c:20:fa: 7e:d2:7d:b6:d4:f5:43:93:85:e8:2d:15:77:df:d4:dc:7c:2d: 4c:e4:85:35 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+OJ53VumzrcqvyXuiBu9mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl MTQwNzEwHhcNMjYwMTAyMTAxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGZkM2Q5MGUzYTgwYzgzZGM5M2Q2Y2ZmZWYyZmZlN2RhMWNhYmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdFXw+ZzI8qmU/uWd7fHiSSErB9Z wjvaoc6ME5WjWFO7yKgMGOqNtA/pxHn7m91t2JWPFaaaCwW4RAJIGx49BsFNPmE+ GIlTVFcQrTnoMmuTdTkS3NdRh9BtDw8FG1igjJ6PnSB1KsznAtlkXqcyiOAKSPYn szUMu24DaeaNazOLoqnYXQDRfC0hce+5cvYVf4J3UrGOVlKA9gmpW4CX9Jeyt2NS g0vkclGs6t+bLPXJx1gliouA1hK/RkQVV/Xn/zS5cyNnzVf2cKUaqfekbgEXURiL SwEkEkJpYSB+IFOx8DoVRbwPhrUpV5vusrqkV05FZhyEcAnQeOrFeKnuFwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFCT9PZDjqAyD3JPWz/7y/+faHKvSMB8GA1UdIwQY MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt YWQ1NzU1MjJiMzY1LzEvSlAwOWtPT29ESVBjazliUF92TF81OW9jcTlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1 LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgSaAjAN BgkqhkiG9w0BAQsFAAOCAQEABL7zZmYBycuY92+TogQDLSPD5KvOeN/LL1C5NKrX QCm2CgEIpG/4LW5Qr0raO+TokxNGGM2xJCdlJutZ57GB0nktb8bs4ic1vBedDl6g DPhS3R73LbHMFnRNjE4Pn3r4EZzS7K2ZW2T8vamZvjoBfvkIG/CnSZk+mdtLbFlz /ow1kkVSufx8EkrHBmT3hgsBdOO4FxpGgc7GZ53wb4Uayh1uFNiUDg6BNjtLBvCc DhErVoHPQhsdDI1hjGSb4pCXr/tzTa/KmfdwALGw8zWis+4k0y5eMR4jkNzVuBMW ZFsipWoCjSSVTCD6ftJ9ttT1Q5OF6C0Vd9/U3HwtTOSFNQ== -----END CERTIFICATE-----Generated at Tue Jan 20 04:47:44 2026 by rpki-client