This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/jIwaLjqt-xdZuLLeeQ6b9JM9ktU.roa File: jIwaLjqt-xdZuLLeeQ6b9JM9ktU.roa (raw, json) Hash identifier: NBpvqEDHRttth2lk+QrdtGdQaHXJVWBfDcwb8ITbXwo= Subject key identifier: 8C:8C:1A:2E:3A:AD:FB:17:59:B8:B2:DE:79:0E:9B:F4:93:3D:92:D5 Certificate issuer: /CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d Certificate serial: 019B7B36A9C67E7357A4764721926ED4326F Authority key identifier: CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/jIwaLjqt-xdZuLLeeQ6b9JM9ktU.roa Signing time: Thu 01 Jan 2026 20:18:58 +0000 ROA not before: Thu 01 Jan 2026 20:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 2001:67c:fc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a9:c6:7e:73:57:a4:76:47:21:92:6e:d4:32:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d Validity Not Before: Jan 1 20:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c8c1a2e3aadfb1759b8b2de790e9bf4933d92d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f9:ef:f8:b8:7f:dc:ce:8d:a6:e5:f4:90:cd: eb:4a:47:12:62:bf:bc:f6:a9:dd:b9:33:71:52:7d: c7:f6:f8:5e:e0:0a:bc:cd:66:76:0e:ed:2e:87:e7: f4:42:19:70:2b:f2:af:67:a6:b7:3f:13:6e:00:f8: fa:6e:61:70:29:8a:c5:72:cf:fb:c8:d1:59:d9:1c: 1a:1e:ff:94:3f:ba:5f:b9:ce:a9:ec:98:44:46:a6: 9b:7c:94:89:75:1f:5d:14:50:ef:de:5e:fd:b8:c7: 2d:79:60:17:11:e7:bc:eb:c7:b4:07:db:34:31:ba: cb:9f:cd:2e:33:4d:e5:fa:3f:84:27:5d:88:fe:b5: 23:27:6b:0c:77:4c:21:c3:f5:b7:a9:fa:6b:b9:20: 16:4b:57:36:e1:e6:a5:f6:de:cf:df:c8:1a:7a:52: a5:24:a8:aa:68:22:fd:ff:99:38:31:7e:27:7e:92: 2d:73:86:99:6e:b6:06:9d:ee:02:ca:70:3e:f9:e0: 52:a5:d2:37:28:e1:01:dc:a1:da:26:85:10:6a:c5: 3b:fc:8a:47:1f:18:96:f5:32:21:2b:f6:c0:a7:fe: 27:d9:fe:08:73:46:ff:0e:6c:84:e5:2c:b5:72:1a: 71:4c:71:1a:55:6c:45:eb:dd:01:d8:a5:d2:ca:5c: b9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:8C:1A:2E:3A:AD:FB:17:59:B8:B2:DE:79:0E:9B:F4:93:3D:92:D5 X509v3 Authority Key Identifier: keyid:CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/jIwaLjqt-xdZuLLeeQ6b9JM9ktU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:fc0::/48 Signature Algorithm: sha256WithRSAEncryption 94:03:74:33:9d:57:c0:72:b4:ad:0f:6b:85:9d:68:3c:3f:b2: c4:03:f4:14:e2:c8:21:c4:7e:ed:1b:60:1b:6d:d9:b2:55:20: 85:30:3d:df:e1:90:49:c1:33:83:6a:56:e6:44:d0:ad:35:e7: 27:9c:17:49:e1:d8:f2:02:21:3e:99:1e:a6:ef:d8:ef:74:08: a2:bd:f4:77:f3:5d:09:27:80:64:bf:f5:c3:ef:64:2b:7b:86: 35:c6:0a:61:94:e0:c3:26:a9:54:fe:69:8c:a0:4f:a8:85:8d: 5a:87:1b:26:65:cc:a7:41:df:44:56:94:8f:6a:d0:8a:1f:71: 3e:ac:ae:0b:4b:c8:59:96:8c:31:0f:57:9f:64:f4:0e:f0:e5: 0c:ff:bf:78:fa:32:82:2d:df:2a:7f:c4:d3:f9:ba:25:ba:20: e2:70:fa:66:bc:ec:8c:17:34:c9:14:d8:f2:d0:6e:85:de:71: 05:a5:ef:e1:d1:24:41:71:9f:88:e1:42:7b:8d:a0:53:84:b9: 0e:2d:a3:04:61:8d:f2:a2:92:5b:14:26:68:89:1e:d9:8a:4e: a2:58:31:c0:cf:91:8b:f3:4b:1a:ba:2a:f2:c1:e7:f5:a3:8d: d1:d4:9e:41:9e:51:13:d9:2b:52:67:f7:f4:67:28:d7:21:aa: 04:a7:5d:6c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7NqnGfnNXpHZHIZJu1DJvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMzVmNTRhM2IwZTJlNDhkZDVlZmIzNjI0YzFmZTBlODVm ZTI2MWQwHhcNMjYwMTAxMjAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzhjMWEyZTNhYWRmYjE3NTliOGIyZGU3OTBlOWJmNDkzM2Q5MmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPnv+Lh/3M6NpuX0kM3rSkcSYr+8 9qnduTNxUn3H9vhe4Aq8zWZ2Du0uh+f0QhlwK/KvZ6a3PxNuAPj6bmFwKYrFcs/7 yNFZ2RwaHv+UP7pfuc6p7JhERqabfJSJdR9dFFDv3l79uMcteWAXEee868e0B9s0 MbrLn80uM03l+j+EJ12I/rUjJ2sMd0whw/W3qfpruSAWS1c24eal9t7P38gaelKl JKiqaCL9/5k4MX4nfpItc4aZbrYGne4CynA++eBSpdI3KOEB3KHaJoUQasU7/IpH HxiW9TIhK/bAp/4n2f4Ic0b/DmyE5Sy1chpxTHEaVWxF690B2KXSyly5SwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIyMGi46rfsXWbiy3nkOm/STPZLVMB8GA1UdIwQY MBaAFMo19Uo7Di5I3V77NiTB/g6F/iYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC85YTA0OTctY2QwZC00OGRjLTg2YWUt NTFjOTliYzhlOGQwLzEvakl3YUxqcXQteGRadUxMZWVRNmI5Sk05a3RVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC85YTA0OTctY2QwZC00OGRjLTg2YWUtNTFjOTliYzhlOGQw LzEveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA/A MA0GCSqGSIb3DQEBCwUAA4IBAQCUA3QznVfAcrStD2uFnWg8P7LEA/QU4sghxH7t G2AbbdmyVSCFMD3f4ZBJwTODalbmRNCtNecnnBdJ4djyAiE+mR6m79jvdAiivfR3 810JJ4Bkv/XD72Qre4Y1xgphlODDJqlU/mmMoE+ohY1ahxsmZcynQd9EVpSPatCK H3E+rK4LS8hZlowxD1efZPQO8OUM/794+jKCLd8qf8TT+boluiDicPpmvOyMFzTJ FNjy0G6F3nEFpe/h0SRBcZ+I4UJ7jaBThLkOLaMEYY3yopJbFCZoiR7Zik6iWDHA z5GL80sauirywef1o43R1J5BnlET2StSZ/f0ZyjXIaoEp11s -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:46 2026 by rpki-client