This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/JtAo0nD13EHj6zPEtjAQP2z2fRw.roa File: JtAo0nD13EHj6zPEtjAQP2z2fRw.roa (raw, json) Hash identifier: T3z0j2rj7mb3PXYcHACEeerKIMCybETH9Y0W1/WYoAY= Subject key identifier: 26:D0:28:D2:70:F5:DC:41:E3:EB:33:C4:B6:30:10:3F:6C:F6:7D:1C Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C803228D4B9E0BA5230C46CB3CCE8CC Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/JtAo0nD13EHj6zPEtjAQP2z2fRw.roa Signing time: Fri 02 Jan 2026 02:18:54 +0000 ROA not before: Fri 02 Jan 2026 02:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215269 IP address blocks: 2a0f:7803:fae0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:32:28:d4:b9:e0:ba:52:30:c4:6c:b3:cc:e8:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26d028d270f5dc41e3eb33c4b630103f6cf67d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a6:1e:79:ca:79:58:09:ea:37:42:3e:30:42: 23:00:7b:33:ec:f6:48:9c:ff:4d:ad:05:43:bc:50: cc:d7:5d:87:bd:e5:e8:38:21:c7:5d:51:96:5c:37: 90:48:e3:eb:f0:9e:79:ba:23:37:37:ca:80:42:62: eb:0c:82:76:28:22:46:70:49:af:cc:90:de:b5:67: 18:14:f5:bd:c5:11:90:f2:18:c4:59:96:4b:b2:5d: 7f:4d:02:b9:ca:e9:d0:38:86:d1:4a:27:d6:92:62: 20:99:0f:c6:e4:9f:cf:8e:e7:d4:5b:45:9c:17:37: 56:eb:23:1e:59:49:51:f7:90:8b:ec:e9:63:26:7a: d2:5b:16:dc:93:a2:19:53:ec:3b:eb:0f:f7:10:95: 2e:fc:e8:dc:f2:29:c1:d5:8a:e6:8d:ab:4d:74:0f: a9:7a:36:f1:87:2c:f3:5b:5e:07:67:80:40:0a:a7: b3:70:29:f8:a8:5d:45:b1:57:5c:1b:34:f0:49:a9: 55:5d:24:3f:4f:ee:cd:44:4f:d7:ec:f0:a7:b9:9d: 72:d6:80:3c:2b:47:9f:07:d3:03:3f:92:74:0b:be: 89:cf:c0:e2:20:21:04:3a:d5:39:00:ec:dc:70:95: 64:43:75:c6:b2:31:cb:1f:5b:bd:ce:e8:58:46:10: 6a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D0:28:D2:70:F5:DC:41:E3:EB:33:C4:B6:30:10:3F:6C:F6:7D:1C X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/JtAo0nD13EHj6zPEtjAQP2z2fRw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:fae0::/44 Signature Algorithm: sha256WithRSAEncryption 5f:2b:3e:c5:d2:87:e8:35:0c:95:05:03:43:d1:f9:98:5e:f3: ce:00:c1:e7:c0:ca:45:4d:f3:8e:0e:22:33:93:17:77:e4:d7: b3:5c:a7:e5:f5:6c:db:98:33:7a:4b:21:53:0e:ac:c4:38:30: ba:f4:0e:84:1a:e6:35:8a:11:51:65:0b:c6:7b:03:8f:13:07: 2a:9f:76:f5:cc:01:1c:84:16:9d:cc:53:b5:10:fc:18:55:7e: 21:12:10:e5:4b:09:db:66:00:94:13:4c:31:3e:6c:ce:f4:5f: b6:63:ab:b5:be:20:1d:f2:c6:20:4b:e6:24:60:27:49:a8:c7: 80:04:14:aa:6a:e1:b3:7e:91:0c:21:d6:ac:ca:73:8d:f0:67: 7b:ad:b6:1c:b4:af:91:07:58:ec:88:9d:99:ae:c0:08:d2:87: 40:e0:89:39:80:75:08:be:f4:e4:01:e6:04:88:02:eb:6d:bf: b8:6d:e4:b5:1e:b4:dc:49:55:87:aa:78:41:03:81:e0:23:de: 5b:6b:a8:43:13:a1:41:3c:47:0f:8b:7e:e3:d8:ee:8c:fa:ac: 39:8d:23:35:93:4f:21:64:31:e4:b8:cd:77:c9:48:05:85:e1: 4c:48:43:2d:ea:e1:53:b8:29:60:6b:a0:a6:55:d9:87:6a:89: ad:4c:39:57 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gDIo1LngulIwxGyzzOjMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmQwMjhkMjcwZjVkYzQxZTNlYjMzYzRiNjMwMTAzZjZjZjY3ZDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6Yeecp5WAnqN0I+MEIjAHsz7PZI nP9NrQVDvFDM112HveXoOCHHXVGWXDeQSOPr8J55uiM3N8qAQmLrDIJ2KCJGcEmv zJDetWcYFPW9xRGQ8hjEWZZLsl1/TQK5yunQOIbRSifWkmIgmQ/G5J/PjufUW0Wc FzdW6yMeWUlR95CL7OljJnrSWxbck6IZU+w76w/3EJUu/Ojc8inB1YrmjatNdA+p ejbxhyzzW14HZ4BACqezcCn4qF1FsVdcGzTwSalVXSQ/T+7NRE/X7PCnuZ1y1oA8 K0efB9MDP5J0C76Jz8DiICEEOtU5AOzccJVkQ3XGsjHLH1u9zuhYRhBqBQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCbQKNJw9dxB4+szxLYwED9s9n0cMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvSnRBbzBuRDEzRUhqNnpQRXRqQVFQMnoyZlJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg94A/rg MA0GCSqGSIb3DQEBCwUAA4IBAQBfKz7F0ofoNQyVBQND0fmYXvPOAMHnwMpFTfOO DiIzkxd35NezXKfl9WzbmDN6SyFTDqzEODC69A6EGuY1ihFRZQvGewOPEwcqn3b1 zAEchBadzFO1EPwYVX4hEhDlSwnbZgCUE0wxPmzO9F+2Y6u1viAd8sYgS+YkYCdJ qMeABBSqauGzfpEMIdasynON8Gd7rbYctK+RB1jsiJ2ZrsAI0odA4Ik5gHUIvvTk AeYEiALrbb+4beS1HrTcSVWHqnhBA4HgI95ba6hDE6FBPEcPi37j2O6M+qw5jSM1 k08hZDHkuM13yUgFheFMSEMt6uFTuClga6CmVdmHaomtTDlX -----END CERTIFICATE-----Generated at Wed Jan 21 17:00:56 2026 by rpki-client