This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/Jmzy3-4zurAMtIj3WkPaeinffGA.roa File: Jmzy3-4zurAMtIj3WkPaeinffGA.roa (raw, json) Hash identifier: Pad0PXd2gD3r/aSU+yhw1Su0+h12IEMiety8Gflbx8I= Subject key identifier: 26:6C:F2:DF:EE:33:BA:B0:0C:B4:88:F7:5A:43:DA:7A:29:DF:7C:60 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C802C6CD45E55BAD8A2D03E4B73F343 Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/Jmzy3-4zurAMtIj3WkPaeinffGA.roa Signing time: Fri 02 Jan 2026 02:18:53 +0000 ROA not before: Fri 02 Jan 2026 02:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214711 IP address blocks: 2a0f:7803:fa30::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:2c:6c:d4:5e:55:ba:d8:a2:d0:3e:4b:73:f3:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=266cf2dfee33bab00cb488f75a43da7a29df7c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:aa:32:23:a8:1c:1d:a6:9b:7a:d5:73:ab:5a: 23:1d:f7:51:af:23:8f:e5:68:3f:b1:9d:f5:b8:30: 49:0c:28:26:b0:38:e9:d1:3d:c7:a3:01:2b:2f:1c: 92:37:bf:de:8c:e5:a5:88:95:0b:f2:89:82:7b:cd: 2c:b9:1d:82:0e:fa:fa:f5:8f:00:1f:f9:82:0e:7d: 1b:d0:a9:5a:8a:ec:51:3e:b5:b0:0d:0f:1c:54:de: 9c:31:5c:b9:c7:8c:d7:d8:38:97:95:2c:8b:e9:32: 7c:1d:de:a1:e5:a8:fe:0a:77:b4:11:4b:f6:03:04: 28:e7:19:8a:29:58:99:ac:1a:8c:da:3d:a1:9d:bf: 4a:8a:04:3e:af:76:40:3f:c8:b8:d5:6e:b2:fc:2c: 25:64:7f:57:f0:b6:99:f9:07:0f:44:2c:b3:44:96: 15:91:35:a2:4c:88:72:d5:fe:ca:96:8e:31:a2:55: d2:1a:85:82:9c:75:8c:21:ab:f7:d2:00:24:75:9d: 2d:95:58:6a:e1:f1:70:d6:53:04:04:e9:02:48:fa: 00:dc:61:01:dc:c7:7e:9f:d1:44:82:34:92:79:86: ec:6a:d4:b7:f7:6b:ba:1a:fe:17:d7:8d:eb:fa:a4: 12:10:9d:88:b3:35:98:0f:44:5d:2b:c4:f0:a5:b6: 5f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:6C:F2:DF:EE:33:BA:B0:0C:B4:88:F7:5A:43:DA:7A:29:DF:7C:60 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/Jmzy3-4zurAMtIj3WkPaeinffGA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:fa30::/44 Signature Algorithm: sha256WithRSAEncryption 91:4d:44:0c:59:cc:59:c0:85:53:b7:0a:76:ba:d0:45:28:30: 55:ea:01:43:05:55:46:49:ea:56:a3:e0:a6:54:d0:c4:2c:d9: 95:dd:69:d9:b7:e0:be:47:c8:21:f4:58:99:7e:d8:bf:35:6e: a8:38:e6:cc:84:66:4d:da:72:ea:19:06:58:fc:cf:12:43:05: 5b:17:9c:da:25:f3:7e:57:1a:48:4a:57:4d:43:fa:78:93:8c: 79:79:f1:4d:ed:73:2f:e2:66:57:8e:d8:ba:3b:d8:12:dc:d9: ce:19:e7:c6:fa:20:bb:3d:85:f8:b7:24:33:ea:b2:95:75:f2: 81:b1:d6:e4:15:8b:94:7b:08:9b:05:4d:87:64:79:be:19:a9: d3:fa:af:d9:a0:bd:2c:ce:fd:d5:d4:48:f3:70:aa:e7:9d:b0: 1e:2c:eb:f3:f2:86:0c:da:a1:02:52:98:29:83:22:74:1d:29: a9:90:fb:6f:46:35:03:33:eb:54:ab:8f:ce:b7:c0:5f:f9:72: a4:82:cc:a6:80:1a:f4:16:ca:70:85:25:eb:08:da:e7:19:e0: 61:0b:26:e7:47:f8:b3:cb:eb:78:74:0c:05:0c:39:8e:b9:ae: c7:9d:0e:38:bd:4d:88:05:70:8b:4f:83:75:35:fb:6d:9b:94: 95:5b:e7:29 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gCxs1F5Vutii0D5Lc/NDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjZjZjJkZmVlMzNiYWIwMGNiNDg4Zjc1YTQzZGE3YTI5ZGY3YzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKoyI6gcHaabetVzq1ojHfdRryOP 5Wg/sZ31uDBJDCgmsDjp0T3HowErLxySN7/ejOWliJUL8omCe80suR2CDvr69Y8A H/mCDn0b0KlaiuxRPrWwDQ8cVN6cMVy5x4zX2DiXlSyL6TJ8Hd6h5aj+Cne0EUv2 AwQo5xmKKViZrBqM2j2hnb9KigQ+r3ZAP8i41W6y/CwlZH9X8LaZ+QcPRCyzRJYV kTWiTIhy1f7Klo4xolXSGoWCnHWMIav30gAkdZ0tlVhq4fFw1lMEBOkCSPoA3GEB 3Md+n9FEgjSSeYbsatS392u6Gv4X143r+qQSEJ2IszWYD0RdK8TwpbZfGQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCZs8t/uM7qwDLSI91pD2nop33xgMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvSm16eTMtNHp1ckFNdElqM1drUGFlaW5mZkdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg94A/ow MA0GCSqGSIb3DQEBCwUAA4IBAQCRTUQMWcxZwIVTtwp2utBFKDBV6gFDBVVGSepW o+CmVNDELNmV3WnZt+C+R8gh9FiZfti/NW6oOObMhGZN2nLqGQZY/M8SQwVbF5za JfN+VxpISldNQ/p4k4x5efFN7XMv4mZXjti6O9gS3NnOGefG+iC7PYX4tyQz6rKV dfKBsdbkFYuUewibBU2HZHm+GanT+q/ZoL0szv3V1EjzcKrnnbAeLOvz8oYM2qEC UpgpgyJ0HSmpkPtvRjUDM+tUq4/Ot8Bf+XKkgsymgBr0FspwhSXrCNrnGeBhCybn R/izy+t4dAwFDDmOua7HnQ44vU2IBXCLT4N1Nfttm5SVW+cp -----END CERTIFICATE-----Generated at Wed Jan 21 16:58:21 2026 by rpki-client