This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/jlEQqU8_vmkBR6hGRkj_btgUHEU.roa File: jlEQqU8_vmkBR6hGRkj_btgUHEU.roa (raw, json) Hash identifier: oUDpi5fHOC9AehxlR0Gt+x3Ku/0yIOWr5eUkAw2h5UA= Subject key identifier: 8E:51:10:A9:4F:3F:BE:69:01:47:A8:46:46:48:FF:6E:D8:14:1C:45 Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071 Certificate serial: 019B7E38A740F988F7F931EC1ECD90CA1871 Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/jlEQqU8_vmkBR6hGRkj_btgUHEU.roa Signing time: Fri 02 Jan 2026 10:20:00 +0000 ROA not before: Fri 02 Jan 2026 10:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212778 IP address blocks: 2a07:3500:12c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a7:40:f9:88:f7:f9:31:ec:1e:cd:90:ca:18:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071 Validity Not Before: Jan 2 10:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e5110a94f3fbe690147a8464648ff6ed8141c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:23:eb:be:0d:25:a5:03:c7:67:65:c5:4f:f8: 20:70:5c:33:bb:be:5e:4a:4f:c6:c7:32:ce:62:32: 30:66:01:ed:38:4a:7b:4f:8c:1b:c3:56:e7:ce:84: 22:93:2b:5e:65:8e:f0:fc:e2:70:e3:d3:ed:e5:57: 84:d4:20:9f:79:3b:e6:6d:c7:85:4d:85:b1:61:42: 07:0c:0a:02:0b:ef:d2:0f:57:d1:8d:41:c0:9e:dd: 91:6a:6f:ed:02:ef:49:0c:6a:ac:4d:4e:35:c5:27: dd:ee:4b:e2:ed:b8:80:bd:5e:58:57:20:7c:b4:08: f8:e0:b4:09:6f:59:e6:5a:44:38:43:57:2b:37:50: dd:82:72:72:fe:e9:59:98:9f:fc:6d:80:f4:d8:f1: 45:ce:c2:70:11:c2:42:d2:b7:9e:9a:77:56:03:3d: d4:5a:65:3f:e1:b5:1e:d4:40:0f:cc:49:b1:4f:c8: a6:cc:fd:58:c3:39:d3:b2:88:ed:e8:67:d9:23:b4: 67:06:db:cb:e6:34:4a:10:c3:d8:7e:63:62:37:a8: 2e:e4:39:86:17:d7:f5:fe:96:17:c2:12:c8:58:38: 1d:6d:77:c8:71:ca:a1:1c:4d:74:f2:99:85:b6:40: cc:ab:79:22:1b:8c:2d:0d:e6:cb:cb:a1:57:a0:9e: dd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:51:10:A9:4F:3F:BE:69:01:47:A8:46:46:48:FF:6E:D8:14:1C:45 X509v3 Authority Key Identifier: keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/jlEQqU8_vmkBR6hGRkj_btgUHEU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:3500:12c0::/48 Signature Algorithm: sha256WithRSAEncryption cb:11:ca:63:67:f1:f4:4d:be:55:e4:ec:28:4d:b5:87:dc:a3: bd:f6:0b:da:18:a6:61:71:5d:1d:9e:91:2c:77:af:69:45:50: ae:f2:9c:eb:a6:10:b6:a0:40:b9:ee:76:5b:10:20:b1:0e:3c: ce:bf:b1:01:ae:43:25:40:2e:18:d1:89:14:aa:ed:62:f2:6d: 31:da:a4:c6:18:f3:3f:b3:b3:34:e4:8e:49:4e:15:c6:c4:99: dd:3e:42:a9:48:8a:ef:23:b1:11:98:57:d3:0a:70:d8:05:3f: aa:34:7b:13:46:01:8e:7b:30:57:12:8c:ea:2b:75:1a:de:a8: 0b:7b:2e:f1:81:3c:27:62:20:11:4d:ea:e2:c6:62:3f:5d:43: f9:fa:f9:7a:59:1d:1c:0b:ee:7b:da:65:58:95:d2:b6:d4:21: fb:e5:20:d1:f2:a2:ec:8c:a4:17:17:04:d2:fb:a9:af:6f:f6: 19:f0:0a:b7:3a:0c:07:bc:5d:31:d0:26:72:62:68:42:43:83: e3:5b:a8:c9:be:6f:8f:5a:02:f8:07:d3:6c:ed:4b:81:51:f8: c8:ed:96:86:26:d4:b3:b9:80:09:90:3b:61:a1:12:85:53:a5: 56:5e:6f:c5:da:93:c8:82:a8:71:73:c7:e8:32:85:a9:f1:b3: ec:db:95:64 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OKdA+Yj3+THsHs2QyhhxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl MTQwNzEwHhcNMjYwMTAyMTAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTUxMTBhOTRmM2ZiZTY5MDE0N2E4NDY0NjQ4ZmY2ZWQ4MTQxYzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SPrvg0lpQPHZ2XFT/ggcFwzu75e Sk/GxzLOYjIwZgHtOEp7T4wbw1bnzoQikyteZY7w/OJw49Pt5VeE1CCfeTvmbceF TYWxYUIHDAoCC+/SD1fRjUHAnt2Ram/tAu9JDGqsTU41xSfd7kvi7biAvV5YVyB8 tAj44LQJb1nmWkQ4Q1crN1DdgnJy/ulZmJ/8bYD02PFFzsJwEcJC0reemndWAz3U WmU/4bUe1EAPzEmxT8imzP1YwznTsojt6GfZI7RnBtvL5jRKEMPYfmNiN6gu5DmG F9f1/pYXwhLIWDgdbXfIccqhHE108pmFtkDMq3kiG4wtDebLy6FXoJ7dnwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFI5REKlPP75pAUeoRkZI/27YFBxFMB8GA1UdIwQY MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt YWQ1NzU1MjJiMzY1LzEvamxFUXFVOF92bWtCUjZoR1Jral9idGdVSEVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1 LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgc1ABLA MA0GCSqGSIb3DQEBCwUAA4IBAQDLEcpjZ/H0Tb5V5OwoTbWH3KO99gvaGKZhcV0d npEsd69pRVCu8pzrphC2oEC57nZbECCxDjzOv7EBrkMlQC4Y0YkUqu1i8m0x2qTG GPM/s7M05I5JThXGxJndPkKpSIrvI7ERmFfTCnDYBT+qNHsTRgGOezBXEozqK3Ua 3qgLey7xgTwnYiARTerixmI/XUP5+vl6WR0cC+572mVYldK21CH75SDR8qLsjKQX FwTS+6mvb/YZ8Aq3OgwHvF0x0CZyYmhCQ4PjW6jJvm+PWgL4B9Ns7UuBUfjI7ZaG JtSzuYAJkDthoRKFU6VWXm/F2pPIgqhxc8foMoWp8bPs25Vk -----END CERTIFICATE-----Generated at Tue Jan 20 04:48:54 2026 by rpki-client