This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/JlsqZ6riHbHZDT1nfft-TTbSWJw.roa File: JlsqZ6riHbHZDT1nfft-TTbSWJw.roa (raw, json) Hash identifier: kmDoBIgAR0ST5nz2Xe1yvElvTFNkMoNTPUVA43pptOA= Subject key identifier: 26:5B:2A:67:AA:E2:1D:B1:D9:0D:3D:67:7D:FB:7E:4D:36:D2:58:9C Certificate issuer: /CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078 Certificate serial: 019B7D5AD6BB066EE16D2DDE03CC44B2F512 Authority key identifier: 9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/JlsqZ6riHbHZDT1nfft-TTbSWJw.roa Signing time: Fri 02 Jan 2026 06:17:43 +0000 ROA not before: Fri 02 Jan 2026 06:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44514 IP address blocks: 46.228.224.0/20 maxlen: 20 91.192.250.0/23 maxlen: 23 212.67.128.0/19 maxlen: 19 217.170.160.0/20 maxlen: 20 2a02:78::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:d6:bb:06:6e:e1:6d:2d:de:03:cc:44:b2:f5:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078 Validity Not Before: Jan 2 06:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=265b2a67aae21db1d90d3d677dfb7e4d36d2589c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d6:be:d3:43:d7:db:a5:bc:c8:83:4f:e4:df: f6:45:ea:b2:6c:7b:3f:ca:31:2d:5c:cd:5d:14:88: 23:df:a8:0e:5b:30:16:46:e2:77:b3:df:64:52:fe: 2e:45:6b:43:0c:3a:53:80:55:d7:bc:a3:ac:65:80: 16:4d:6d:34:b5:f1:c0:95:d2:37:0b:08:96:1b:d9: c1:5a:67:e9:19:b8:a3:07:f0:4f:00:5b:2c:7e:14: 24:55:4e:2d:a9:cb:d3:5f:26:0b:dc:9a:ea:38:d2: b3:47:f6:b5:b3:41:e3:af:af:c5:6a:dd:36:c6:c7: 06:96:26:9b:4d:26:61:09:8f:f4:6d:e5:71:e0:2b: 6f:fb:b9:4b:d5:ca:d7:2e:a3:56:25:18:b7:a0:59: a5:c9:55:86:f4:69:1d:04:1b:61:74:22:7a:52:3f: ab:95:c8:be:84:9e:90:aa:4c:fe:12:3d:bf:d2:28: f5:79:85:2e:9d:6a:b9:fa:1f:25:bf:1e:33:cb:5b: 7b:1d:9a:4c:a5:b2:e1:28:d1:f6:43:01:d3:07:09: 6b:da:1e:ba:74:90:c8:31:bf:02:7c:76:31:ee:eb: b8:84:2e:65:b1:9c:e3:50:6e:ec:b1:47:be:06:59: da:5b:1b:42:60:e0:bb:03:4d:ad:29:6e:09:28:89: 8b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:5B:2A:67:AA:E2:1D:B1:D9:0D:3D:67:7D:FB:7E:4D:36:D2:58:9C X509v3 Authority Key Identifier: keyid:9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/JlsqZ6riHbHZDT1nfft-TTbSWJw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.228.224.0/20 91.192.250.0/23 212.67.128.0/19 217.170.160.0/20 IPv6: 2a02:78::/32 Signature Algorithm: sha256WithRSAEncryption df:4a:05:f9:c8:d2:32:0f:fa:aa:d4:1c:1d:ee:3d:1c:61:70: 8d:c1:22:66:9e:d5:1a:6e:90:f3:0d:92:8f:3c:89:85:1f:fc: d2:3d:4c:0f:e8:b4:47:c7:fb:e1:cc:4a:01:13:e2:35:02:6d: 82:34:11:69:6b:16:02:a6:7f:9b:ff:2c:93:82:0b:e8:61:d8: 0b:74:6c:ba:a3:f4:38:47:0d:74:b7:c2:84:70:3e:0e:0d:a6: 0b:ed:7e:fe:9e:50:29:8a:42:d8:2a:43:d3:c7:a0:cf:d0:86: 50:32:63:0e:dc:a4:e0:fd:56:7e:b7:1c:5f:17:15:15:51:9a: 94:c1:6d:06:e2:b9:ac:df:85:f0:50:0e:a3:e8:8c:61:d1:b3: 3e:48:c0:2b:f7:01:ad:5c:c0:22:4e:b1:17:d2:c1:75:5c:32: 1a:b6:5e:1f:cb:6c:c1:51:2d:49:82:40:9d:6c:04:aa:42:2c: 2b:37:71:57:22:f1:56:c8:20:2d:66:79:22:18:9c:53:5c:a6: 44:dd:21:53:48:90:d9:77:9c:9b:1b:15:b0:44:77:b4:ac:ea: 6c:b5:c9:3e:ca:35:1a:c0:b4:39:98:35:2f:ec:22:18:0d:69: 8d:29:e2:a5:16:c0:ab:69:e8:bd:89:d5:a3:29:74:df:fd:32: de:e4:e0:d2 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt9Wta7Bm7hbS3eA8xEsvUSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNmI3YjNlYTYwZWZiNGE1NzlhNGY1ZTIzN2VhN2E4OGQz YmMwNzgwHhcNMjYwMTAyMDYxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjViMmE2N2FhZTIxZGIxZDkwZDNkNjc3ZGZiN2U0ZDM2ZDI1ODljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuta+00PX26W8yINP5N/2ReqybHs/ yjEtXM1dFIgj36gOWzAWRuJ3s99kUv4uRWtDDDpTgFXXvKOsZYAWTW00tfHAldI3 CwiWG9nBWmfpGbijB/BPAFssfhQkVU4tqcvTXyYL3JrqONKzR/a1s0Hjr6/Fat02 xscGliabTSZhCY/0beVx4Ctv+7lL1crXLqNWJRi3oFmlyVWG9GkdBBthdCJ6Uj+r lci+hJ6Qqkz+Ej2/0ij1eYUunWq5+h8lvx4zy1t7HZpMpbLhKNH2QwHTBwlr2h66 dJDIMb8CfHYx7uu4hC5lsZzjUG7ssUe+BlnaWxtCYOC7A02tKW4JKImLdwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFCZbKmeq4h2x2Q09Z337fk020licMB8GA1UdIwQY MBaAFJtrez6mDvtKV5pPXiN+p6iNO8B4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTJ0N1BxWU8tMHBYbWs5ZUkzNm5xSTA3d0hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lMjdkNzEtZWZiYy00N2VmLTk4NDAt ZTc0ZDhkMWQ0ZTAyLzEvSmxzcVo2cmlIYkhaRFQxbmZmdC1UVGJTV0p3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9lMjdkNzEtZWZiYy00N2VmLTk4NDAtZTc0ZDhkMWQ0ZTAy LzEvbTJ0N1BxWU8tMHBYbWs5ZUkzNm5xSTA3d0hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQELuTgAwQB W8D6AwQF1EOAAwQE2aqgMA0EAgACMAcDBQAqAgB4MA0GCSqGSIb3DQEBCwUAA4IB AQDfSgX5yNIyD/qq1Bwd7j0cYXCNwSJmntUabpDzDZKPPImFH/zSPUwP6LRHx/vh zEoBE+I1Am2CNBFpaxYCpn+b/yyTggvoYdgLdGy6o/Q4Rw10t8KEcD4ODaYL7X7+ nlApikLYKkPTx6DP0IZQMmMO3KTg/VZ+txxfFxUVUZqUwW0G4rms34XwUA6j6Ixh 0bM+SMAr9wGtXMAiTrEX0sF1XDIatl4fy2zBUS1JgkCdbASqQiwrN3FXIvFWyCAt ZnkiGJxTXKZE3SFTSJDZd5ybGxWwRHe0rOpstck+yjUawLQ5mDUv7CIYDWmNKeKl FsCraei9idWjKXTf/TLe5ODS -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:28 2026 by rpki-client