This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/JFjstjo68SJEb5gcMj4pqV8vk3s.roa File: JFjstjo68SJEb5gcMj4pqV8vk3s.roa (raw, json) Hash identifier: P2JJXBpcapKD1DQdyLJrITLhCF/C/wcW5rC39KImyVg= Subject key identifier: 24:58:EC:B6:3A:3A:F1:22:44:6F:98:1C:32:3E:29:A9:5F:2F:93:7B Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C8026B4E13D7EE759A3A88F111C216B Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/JFjstjo68SJEb5gcMj4pqV8vk3s.roa Signing time: Fri 02 Jan 2026 02:18:51 +0000 ROA not before: Fri 02 Jan 2026 02:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207529 IP address blocks: 2a0f:7803:fd20::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:26:b4:e1:3d:7e:e7:59:a3:a8:8f:11:1c:21:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2458ecb63a3af122446f981c323e29a95f2f937b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b6:fb:6b:2b:95:8d:71:c1:fa:c8:97:7a:2b: 6e:28:44:f7:79:50:98:5c:3d:17:41:39:d7:34:60: e1:26:76:fb:1c:d4:7f:1e:1a:0b:80:eb:e6:3d:fd: b3:cf:f2:83:9d:df:9f:a8:a1:c4:71:fb:c4:67:7f: 41:d9:f4:3f:e4:3a:c8:3b:92:b9:f3:93:bf:05:94: 09:6b:31:8b:ae:c4:ec:a8:53:e6:e8:1a:85:54:aa: 75:3c:73:0c:9e:c7:d9:58:45:5c:c1:0a:2a:89:41: aa:96:f8:4b:6a:98:d0:a3:45:27:74:93:9d:74:6c: 85:55:31:d2:75:03:4b:f6:c9:fa:c9:2a:39:6d:0c: e5:32:8f:e2:40:d2:72:b1:a6:1e:d7:14:21:14:7f: ab:32:71:cc:79:40:bd:58:0b:60:58:f9:e5:df:ff: a6:de:64:d4:c9:36:74:5e:93:cf:c3:3d:4f:0d:05: 2d:62:97:0b:11:fa:7f:41:3a:f1:c7:a5:4a:8d:e8: 51:67:89:e3:ac:b4:91:83:69:50:de:6e:27:6f:4d: 49:df:ae:68:f4:6f:53:0c:aa:4c:ba:7e:4a:12:84: a3:91:68:fb:d9:38:83:a5:2a:10:27:6c:70:08:a5: 16:7a:27:4c:51:39:a1:73:06:05:ef:50:6d:3a:54: 3f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:58:EC:B6:3A:3A:F1:22:44:6F:98:1C:32:3E:29:A9:5F:2F:93:7B X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/JFjstjo68SJEb5gcMj4pqV8vk3s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:fd20::/44 Signature Algorithm: sha256WithRSAEncryption 2e:36:a2:17:c5:77:88:f6:30:dc:ae:d9:ea:f9:2f:3a:d1:a7: 5c:44:67:33:34:9d:5e:24:40:c3:37:7d:a1:f9:e1:ca:03:a9: 59:df:6a:31:5d:d2:14:cb:95:b8:7d:28:41:66:ba:af:78:fe: 1b:2e:fd:42:d4:33:79:04:34:75:15:f5:0f:86:aa:12:98:57: d3:37:47:77:7b:35:c2:e6:73:fb:fe:fe:c1:c3:ee:97:28:83: 6c:44:3f:0f:27:09:e0:2f:b0:30:f5:99:cc:81:40:94:6a:50: 52:3d:0b:1e:66:0f:60:62:bf:29:ae:b3:33:29:da:ec:b9:25: 57:5e:ee:f8:91:d9:c0:48:4a:f4:6f:99:4f:db:19:72:7f:fd: 30:b9:29:83:c5:28:ee:17:65:13:bf:1c:95:72:0d:11:1e:a3: d7:93:8e:e3:32:bb:e3:a2:8e:a6:a8:ca:95:0b:cd:58:9e:bf: a8:67:1b:37:c4:83:19:21:12:a9:f8:d9:40:58:94:db:95:b2: 82:d9:35:ff:99:15:37:a3:10:74:d5:34:03:ec:fc:3e:a2:6c: b7:13:61:76:7f:13:9d:11:db:17:5b:75:a6:4f:45:1f:d8:9e: bc:c2:6e:55:e1:68:8b:9b:40:16:e4:f1:6c:f1:ac:12:27:0a: ad:25:04:44 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gCa04T1+51mjqI8RHCFrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDU4ZWNiNjNhM2FmMTIyNDQ2Zjk4MWMzMjNlMjlhOTVmMmY5MzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57b7ayuVjXHB+siXeituKET3eVCY XD0XQTnXNGDhJnb7HNR/HhoLgOvmPf2zz/KDnd+fqKHEcfvEZ39B2fQ/5DrIO5K5 85O/BZQJazGLrsTsqFPm6BqFVKp1PHMMnsfZWEVcwQoqiUGqlvhLapjQo0UndJOd dGyFVTHSdQNL9sn6ySo5bQzlMo/iQNJysaYe1xQhFH+rMnHMeUC9WAtgWPnl3/+m 3mTUyTZ0XpPPwz1PDQUtYpcLEfp/QTrxx6VKjehRZ4njrLSRg2lQ3m4nb01J365o 9G9TDKpMun5KEoSjkWj72TiDpSoQJ2xwCKUWeidMUTmhcwYF71BtOlQ/kwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCRY7LY6OvEiRG+YHDI+KalfL5N7MB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvSkZqc3RqbzY4U0pFYjVnY01qNHBxVjh2azNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg94A/0g MA0GCSqGSIb3DQEBCwUAA4IBAQAuNqIXxXeI9jDcrtnq+S860adcRGczNJ1eJEDD N32h+eHKA6lZ32oxXdIUy5W4fShBZrqveP4bLv1C1DN5BDR1FfUPhqoSmFfTN0d3 ezXC5nP7/v7Bw+6XKINsRD8PJwngL7Aw9ZnMgUCUalBSPQseZg9gYr8prrMzKdrs uSVXXu74kdnASEr0b5lP2xlyf/0wuSmDxSjuF2UTvxyVcg0RHqPXk47jMrvjoo6m qMqVC81Ynr+oZxs3xIMZIRKp+NlAWJTblbKC2TX/mRU3oxB01TQD7Pw+omy3E2F2 fxOdEdsXW3WmT0Uf2J68wm5V4WiLm0AW5PFs8awSJwqtJQRE -----END CERTIFICATE-----Generated at Wed Jan 21 17:00:31 2026 by rpki-client