This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/jkqGxR1193tH-HpG6FCidOMGlew.roa File: jkqGxR1193tH-HpG6FCidOMGlew.roa (raw, json) Hash identifier: m1WsC0zkTDIRW5PeFfcaixOxVBhdNi36TSkJPA9LJqw= Subject key identifier: 8E:4A:86:C5:1D:75:F7:7B:47:F8:7A:46:E8:50:A2:74:E3:06:95:EC Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 019B79ED4A34EBD6601F2D526FF3641077E5 Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/jkqGxR1193tH-HpG6FCidOMGlew.roa Signing time: Thu 01 Jan 2026 14:19:12 +0000 ROA not before: Thu 01 Jan 2026 14:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 131668 IP address blocks: 2a0f:607:1051::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:4a:34:eb:d6:60:1f:2d:52:6f:f3:64:10:77:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: Jan 1 14:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e4a86c51d75f77b47f87a46e850a274e30695ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e8:b5:8a:25:fa:7c:62:8b:da:11:ff:74:5e: be:e8:cc:d1:3a:4e:ad:a8:b8:12:3e:e3:d4:e1:f7: e4:b1:30:4a:4d:62:25:b9:47:20:54:ec:21:83:12: 0c:3b:c7:62:09:85:0e:a8:e5:c9:96:62:d9:99:42: e1:20:34:11:6e:12:6a:c6:04:e4:50:16:45:62:5c: 19:65:c8:20:3c:b7:80:99:7e:6b:4c:8f:b0:18:1b: 21:3a:6c:02:ec:ff:2e:47:50:3d:6d:ca:55:c7:1e: a8:82:e2:ff:6c:e0:3e:9c:80:d3:ff:55:3c:c4:d8: 2a:01:0e:4e:aa:94:60:d5:5a:c5:cd:10:e6:2a:22: 76:5d:3d:1d:14:b4:2a:45:af:0a:ab:5f:0b:c8:35: 37:97:f2:02:58:df:ae:0e:7a:a6:5b:d5:79:e7:9a: 2a:84:c1:db:92:9a:f2:f6:e5:98:29:75:5a:4c:90: 5e:07:94:52:30:bd:55:9c:5d:ef:74:30:d5:b4:04: bf:ca:05:6f:96:1e:3e:45:75:78:41:ab:04:38:8f: f2:e5:66:4c:b4:56:a2:60:63:78:9e:ff:88:10:f5: 08:3c:a2:38:22:d8:14:7c:21:60:74:55:a6:19:ec: 84:d6:42:72:b9:a9:ee:48:5b:a9:ec:d3:6e:b6:4a: d6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:4A:86:C5:1D:75:F7:7B:47:F8:7A:46:E8:50:A2:74:E3:06:95:EC X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/jkqGxR1193tH-HpG6FCidOMGlew.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:607:1051::/48 Signature Algorithm: sha256WithRSAEncryption 39:08:eb:8b:ca:a9:18:c4:ef:7d:97:ff:20:a0:7f:23:f7:0f: c9:f9:35:78:f1:2c:8d:2a:9d:01:74:c4:89:65:42:dd:3e:19: 76:b9:ef:56:d9:3f:a7:9c:a5:3e:c0:6b:38:24:fb:68:78:f3: 37:81:88:e7:ab:f3:ba:c9:fe:3e:f2:e6:7c:20:8b:a0:af:f5: 71:e6:4c:5e:a5:21:69:4f:a9:03:bc:c5:c1:c5:f0:a4:b7:4d: e1:8d:69:4d:82:d3:db:74:4e:d9:24:30:55:0b:72:f1:49:21: 35:4e:7a:03:ac:fb:88:79:99:c0:a3:fc:21:b9:18:1f:9a:a1: 53:00:73:c3:b7:8f:93:13:10:b2:6b:f9:c3:d6:42:3d:44:95: db:23:dc:56:8f:8d:29:a5:05:57:fb:3c:e1:55:42:4e:13:6f: 65:ba:bd:51:5d:a5:2d:2a:a9:88:69:b2:07:e1:d5:62:5a:f4: 0d:47:30:e8:b0:53:48:07:c2:83:22:bd:d8:a7:d7:7f:a6:46: 48:55:92:ce:80:f3:0a:73:99:dd:10:08:ee:be:0b:74:b7:0d: be:11:ad:74:53:55:cc:06:fe:43:d1:53:55:4b:51:b6:27:86: a2:be:ea:92:a8:96:44:05:a1:89:28:87:54:19:db:18:d7:cd: af:c0:72:ff -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57Uo069ZgHy1Sb/NkEHflMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjYwMTAxMTQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTRhODZjNTFkNzVmNzdiNDdmODdhNDZlODUwYTI3NGUzMDY5NWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApei1iiX6fGKL2hH/dF6+6MzROk6t qLgSPuPU4ffksTBKTWIluUcgVOwhgxIMO8diCYUOqOXJlmLZmULhIDQRbhJqxgTk UBZFYlwZZcggPLeAmX5rTI+wGBshOmwC7P8uR1A9bcpVxx6oguL/bOA+nIDT/1U8 xNgqAQ5OqpRg1VrFzRDmKiJ2XT0dFLQqRa8Kq18LyDU3l/ICWN+uDnqmW9V555oq hMHbkpry9uWYKXVaTJBeB5RSML1VnF3vdDDVtAS/ygVvlh4+RXV4QasEOI/y5WZM tFaiYGN4nv+IEPUIPKI4ItgUfCFgdFWmGeyE1kJyuanuSFup7NNutkrW3QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFI5KhsUddfd7R/h6RuhQonTjBpXsMB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvamtxR3hSMTE5M3RILUhwRzZGQ2lkT01HbGV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg8GBxBR MA0GCSqGSIb3DQEBCwUAA4IBAQA5COuLyqkYxO99l/8goH8j9w/J+TV48SyNKp0B dMSJZULdPhl2ue9W2T+nnKU+wGs4JPtoePM3gYjnq/O6yf4+8uZ8IIugr/Vx5kxe pSFpT6kDvMXBxfCkt03hjWlNgtPbdE7ZJDBVC3LxSSE1TnoDrPuIeZnAo/whuRgf mqFTAHPDt4+TExCya/nD1kI9RJXbI9xWj40ppQVX+zzhVUJOE29lur1RXaUtKqmI abIH4dViWvQNRzDosFNIB8KDIr3Yp9d/pkZIVZLOgPMKc5ndEAjuvgt0tw2+Ea10 U1XMBv5D0VNVS1G2J4aivuqSqJZEBaGJKIdUGdsY182vwHL/ -----END CERTIFICATE-----Generated at Thu Jan 8 00:39:53 2026 by rpki-client