This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/pjHhxvfzqbl1t_jh_zgtAOtXGCI.roa File: pjHhxvfzqbl1t_jh_zgtAOtXGCI.roa (raw, json) Hash identifier: J2AB7iNkE74xp/danYqI2bqPyjgASaXExqMW9bFv38g= Subject key identifier: A6:31:E1:C6:F7:F3:A9:B9:75:B7:F8:E1:FF:38:2D:00:EB:57:18:22 Certificate issuer: /CN=8daf61f6608f9a9eac14b18224854807bcdc1324 Certificate serial: 019AF960EAB026C43821DF35B6B37768E8CF Authority key identifier: 8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/pjHhxvfzqbl1t_jh_zgtAOtXGCI.roa Signing time: Sun 07 Dec 2025 15:14:29 +0000 ROA not before: Sun 07 Dec 2025 15:14:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213426 IP address blocks: 2a09:9340:1801::/48 maxlen: 48 2a09:9340:1805::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 21:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:60:ea:b0:26:c4:38:21:df:35:b6:b3:77:68:e8:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8daf61f6608f9a9eac14b18224854807bcdc1324 Validity Not Before: Dec 7 15:14:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a631e1c6f7f3a9b975b7f8e1ff382d00eb571822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:92:e5:ff:c7:bb:46:67:8d:7a:c1:48:23:eb: ea:94:70:db:a0:62:43:1e:8e:51:20:a9:5e:63:d7: 65:77:c8:96:0a:88:df:40:bc:35:25:f4:b7:9b:0e: b1:ad:94:dd:6a:d4:95:a9:e0:14:34:28:a6:53:26: 5a:4a:39:bc:48:0c:7a:d9:73:66:40:f2:5f:d1:0b: b6:71:67:9a:08:12:98:b0:dc:9c:83:bb:e3:c3:00: 59:c6:3c:dd:29:bf:79:a2:72:06:68:4f:36:f7:8a: de:c3:e3:92:87:0e:13:87:45:64:af:4d:b1:88:b9: d3:34:51:c8:2d:aa:a2:9e:aa:4d:69:23:b0:09:d2: 1f:68:3f:88:bc:9a:3c:11:1b:bd:c1:c4:33:01:b9: 48:f7:32:8e:69:02:25:26:d4:03:3a:bb:a6:65:bd: e8:14:d7:1a:2e:44:17:ce:b7:6c:f6:13:d2:3e:21: 7d:8d:8c:d8:74:70:6c:f3:ec:c7:b0:e2:d2:32:7a: 01:63:38:52:80:d6:d4:c2:78:a8:bb:0b:e2:6e:9d: 5c:ee:51:d1:d6:7e:c0:5b:5c:ce:db:63:c9:2e:9e: 6a:6e:39:49:be:33:58:ac:25:57:d5:08:10:c8:c8: 82:40:38:80:28:ac:e3:26:12:6e:8a:cd:cb:52:39: 30:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:31:E1:C6:F7:F3:A9:B9:75:B7:F8:E1:FF:38:2D:00:EB:57:18:22 X509v3 Authority Key Identifier: keyid:8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/pjHhxvfzqbl1t_jh_zgtAOtXGCI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:9340:1801::/48 2a09:9340:1805::/48 Signature Algorithm: sha256WithRSAEncryption 4f:6e:bf:30:51:34:95:cf:a0:db:52:4b:7d:bf:90:60:c6:a1: 39:19:da:5b:4b:40:dc:0f:5b:3b:f6:76:fe:21:09:cd:10:c1: e1:a9:47:59:9e:99:fb:9d:68:ed:5e:b2:26:d4:e4:b9:9d:e5: a9:05:66:9f:b7:f3:d7:c2:fa:de:a1:26:75:46:75:a4:80:d1: 28:fb:39:28:21:0d:cc:bd:9c:99:2f:75:5a:10:c6:51:56:a1: 7b:b9:96:73:34:da:9f:47:40:95:c6:12:45:8b:f2:51:40:a7: 71:4a:60:79:d5:ad:05:bc:1e:a2:14:39:ed:8c:ff:1b:21:4f: 24:92:62:b7:c3:56:24:bc:52:74:a6:ef:c9:b2:77:b9:39:17: 17:02:fd:38:8d:1e:90:97:58:f7:27:33:85:e5:f9:5e:1a:f8: 63:7f:bc:52:03:1f:70:df:6c:ff:96:cf:54:66:4b:7e:84:39: d0:34:86:d6:9e:2e:0b:bd:ae:69:87:68:44:f6:b1:ab:ba:aa: 6c:b6:5b:c8:7d:4a:64:e6:5c:63:9d:b4:86:b0:60:7b:1e:f0: f9:73:1b:ed:cf:88:e6:9c:2e:59:08:03:06:2d:7d:08:11:db: 29:51:8d:8b:0f:e0:a8:6b:7d:84:8a:e4:18:0f:ce:c1:a3:d9: f1:ef:4f:a1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZr5YOqwJsQ4Id81trN3aOjPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYWY2MWY2NjA4ZjlhOWVhYzE0YjE4MjI0ODU0ODA3YmNk YzEzMjQwHhcNMjUxMjA3MTUxNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjMxZTFjNmY3ZjNhOWI5NzViN2Y4ZTFmZjM4MmQwMGViNTcxODIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25Ll/8e7RmeNesFII+vqlHDboGJD Ho5RIKleY9dld8iWCojfQLw1JfS3mw6xrZTdatSVqeAUNCimUyZaSjm8SAx62XNm QPJf0Qu2cWeaCBKYsNycg7vjwwBZxjzdKb95onIGaE8294rew+OShw4Th0Vkr02x iLnTNFHILaqinqpNaSOwCdIfaD+IvJo8ERu9wcQzAblI9zKOaQIlJtQDOrumZb3o FNcaLkQXzrds9hPSPiF9jYzYdHBs8+zHsOLSMnoBYzhSgNbUwniouwvibp1c7lHR 1n7AW1zO22PJLp5qbjlJvjNYrCVX1QgQyMiCQDiAKKzjJhJuis3LUjkwvwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKYx4cb386m5dbf44f84LQDrVxgiMB8GA1UdIwQY MBaAFI2vYfZgj5qerBSxgiSFSAe83BMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamE5aDltQ1BtcDZzRkxHQ0pJVklCN3pjRXlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81MGY5MzUtZDY3NS00MDg5LWFhZTUt ZmIyNGJlNzVhM2Y0LzEvcGpIaHh2ZnpxYmwxdF9qaF96Z3RBT3RYR0NJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS81MGY5MzUtZDY3NS00MDg5LWFhZTUtZmIyNGJlNzVhM2Y0 LzEvamE5aDltQ1BtcDZzRkxHQ0pJVklCN3pjRXlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgmTQBgB AwcAKgmTQBgFMA0GCSqGSIb3DQEBCwUAA4IBAQBPbr8wUTSVz6DbUkt9v5BgxqE5 GdpbS0DcD1s79nb+IQnNEMHhqUdZnpn7nWjtXrIm1OS5neWpBWaft/PXwvreoSZ1 RnWkgNEo+zkoIQ3MvZyZL3VaEMZRVqF7uZZzNNqfR0CVxhJFi/JRQKdxSmB51a0F vB6iFDntjP8bIU8kkmK3w1YkvFJ0pu/Jsne5ORcXAv04jR6Ql1j3JzOF5fleGvhj f7xSAx9w32z/ls9UZkt+hDnQNIbWni4Lva5ph2hE9rGruqpstlvIfUpk5lxjnbSG sGB7HvD5cxvtz4jmnC5ZCAMGLX0IEdspUY2LD+Coa32EiuQYD87Bo9nx70+h -----END CERTIFICATE-----Generated at Tue Dec 16 04:03:05 2025 by rpki-client