This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/J0EuWLSb3B_xwNJGfbHeQ2JEG5w.roa File: J0EuWLSb3B_xwNJGfbHeQ2JEG5w.roa (raw, json) Hash identifier: MlQZGeS1jAVBfO3R8nnm0N8oigQzbZ43khot/CP8lDM= Subject key identifier: 27:41:2E:58:B4:9B:DC:1F:F1:C0:D2:46:7D:B1:DE:43:62:44:1B:9C Certificate issuer: /CN=17db8bdff22e1a37b0f4a6953424b65169b03429 Certificate serial: 019B77589D4BA8C381C6E870521C51A2C589 Authority key identifier: 17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/J0EuWLSb3B_xwNJGfbHeQ2JEG5w.roa Signing time: Thu 01 Jan 2026 02:17:34 +0000 ROA not before: Thu 01 Jan 2026 02:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197942 IP address blocks: 2001:67c:9c4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:9d:4b:a8:c3:81:c6:e8:70:52:1c:51:a2:c5:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17db8bdff22e1a37b0f4a6953424b65169b03429 Validity Not Before: Jan 1 02:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27412e58b49bdc1ff1c0d2467db1de4362441b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:34:2d:2e:5e:03:79:87:93:7c:6a:5c:53:44: 03:4a:20:d6:c0:f0:38:25:b7:42:ad:c2:74:0b:25: 56:16:b2:22:c4:49:3c:c6:72:31:2e:1c:28:19:da: 4d:ec:98:24:aa:be:ac:f8:93:db:12:2a:c4:85:31: 57:14:fc:f2:3e:a6:bb:13:a3:a5:ce:2a:c4:24:36: 14:24:ed:60:d9:3b:13:b9:77:93:9b:64:b3:5c:85: e9:2f:fd:43:f4:6f:06:5c:5d:54:15:8f:87:8e:98: f0:e1:25:15:6c:4a:25:1a:a6:0a:84:04:f5:d7:29: db:4c:37:0a:5b:ac:0d:20:11:96:db:f5:9c:7f:b4: bb:4f:ab:b5:56:11:7f:4a:2f:a5:8a:62:28:4a:d9: 9a:25:7e:b1:2f:7b:20:4d:96:79:09:74:11:b2:86: 68:fc:3f:ea:d5:c2:e6:bc:45:a5:ca:8a:e0:f4:7c: d6:95:f3:e7:4e:70:09:c4:90:2b:f9:7c:c7:1a:9a: bb:44:1d:1e:ab:ad:e3:4a:37:67:21:08:e7:97:4e: c7:27:a7:15:16:aa:43:e3:6e:b8:e9:c9:b1:4b:5c: 10:4b:4a:7e:af:cb:60:05:67:e3:0d:eb:f8:e0:20: b8:d0:b7:b0:a6:65:74:84:be:5e:7c:59:a3:3e:35: e8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:41:2E:58:B4:9B:DC:1F:F1:C0:D2:46:7D:B1:DE:43:62:44:1B:9C X509v3 Authority Key Identifier: keyid:17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/J0EuWLSb3B_xwNJGfbHeQ2JEG5w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:9c4::/48 Signature Algorithm: sha256WithRSAEncryption a7:b8:69:ef:c8:dd:ef:83:9e:b0:3a:fe:cc:25:00:d3:26:22: 92:db:50:45:b8:b0:61:e2:68:1a:31:31:9e:42:d0:ad:b3:83: 56:2a:a4:76:73:86:ec:9e:0c:e7:65:7f:09:89:99:09:b5:30: 1f:01:cd:96:ec:12:2d:80:42:d6:48:cd:15:f2:71:4f:08:13: bc:03:bb:63:47:89:30:cd:1b:1e:9a:66:49:5f:3c:f3:49:bd: 04:75:63:6d:c8:6b:ea:4d:b2:9c:fd:5c:42:02:82:07:2b:18: 39:b1:86:cf:5b:a0:79:de:40:2b:94:87:6a:ea:30:24:4c:28: d1:8c:3c:17:c3:44:c0:ed:d8:22:3c:dd:b5:a1:3e:9f:9d:5a: 6c:a8:1b:9a:f8:c8:fa:12:bd:5e:53:6d:fe:91:5f:de:a9:73: a8:be:c8:52:7c:d4:e1:b3:13:fd:6e:12:f0:87:d1:7f:68:77: d1:e6:e8:a9:5f:7f:a2:a6:13:35:67:46:70:73:b8:51:85:e6: a2:38:c2:55:be:d7:6a:06:61:8c:e0:28:fe:f8:04:8c:ab:25: 36:48:6d:a7:bf:42:8e:77:44:3a:e6:e3:25:29:f6:52:72:97: 47:cb:35:4b:52:3a:99:9c:97:87:89:bc:ca:0e:00:e8:ca:bc: 89:ae:eb:d8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WJ1LqMOBxuhwUhxRosWJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZGI4YmRmZjIyZTFhMzdiMGY0YTY5NTM0MjRiNjUxNjli MDM0MjkwHhcNMjYwMTAxMDIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzQxMmU1OGI0OWJkYzFmZjFjMGQyNDY3ZGIxZGU0MzYyNDQxYjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTQtLl4DeYeTfGpcU0QDSiDWwPA4 JbdCrcJ0CyVWFrIixEk8xnIxLhwoGdpN7Jgkqr6s+JPbEirEhTFXFPzyPqa7E6Ol zirEJDYUJO1g2TsTuXeTm2SzXIXpL/1D9G8GXF1UFY+Hjpjw4SUVbEolGqYKhAT1 1ynbTDcKW6wNIBGW2/Wcf7S7T6u1VhF/Si+limIoStmaJX6xL3sgTZZ5CXQRsoZo /D/q1cLmvEWlyorg9HzWlfPnTnAJxJAr+XzHGpq7RB0eq63jSjdnIQjnl07HJ6cV FqpD42646cmxS1wQS0p+r8tgBWfjDev44CC40LewpmV0hL5efFmjPjXo5QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCdBLli0m9wf8cDSRn2x3kNiRBucMB8GA1UdIwQY MBaAFBfbi9/yLho3sPSmlTQktlFpsDQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjl1TDNfSXVHamV3OUthVk5DUzJVV213TkNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81YTNlMDgtZWQ0MS00ZDBlLWE2ZTAt MzI3MDJkYmQ0YmM3LzEvSjBFdVdMU2IzQl94d05KR2ZiSGVRMkpFRzV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi81YTNlMDgtZWQ0MS00ZDBlLWE2ZTAtMzI3MDJkYmQ0YmM3 LzEvRjl1TDNfSXVHamV3OUthVk5DUzJVV213TkNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAnE MA0GCSqGSIb3DQEBCwUAA4IBAQCnuGnvyN3vg56wOv7MJQDTJiKS21BFuLBh4mga MTGeQtCts4NWKqR2c4bsngznZX8JiZkJtTAfAc2W7BItgELWSM0V8nFPCBO8A7tj R4kwzRsemmZJXzzzSb0EdWNtyGvqTbKc/VxCAoIHKxg5sYbPW6B53kArlIdq6jAk TCjRjDwXw0TA7dgiPN21oT6fnVpsqBua+Mj6Er1eU23+kV/eqXOovshSfNThsxP9 bhLwh9F/aHfR5uipX3+iphM1Z0Zwc7hRheaiOMJVvtdqBmGM4Cj++ASMqyU2SG2n v0KOd0Q65uMlKfZScpdHyzVLUjqZnJeHibzKDgDoyryJruvY -----END CERTIFICATE-----Generated at Mon Feb 2 07:55:38 2026 by rpki-client