This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/jcioSr8uc1EqPGJu1-opitD2Cqw.roa File: jcioSr8uc1EqPGJu1-opitD2Cqw.roa (raw, json) Hash identifier: u9fn5nRJ3GF9jJX65hVvatrZaUQH2KIJnVy9UrgUSrk= Subject key identifier: 8D:C8:A8:4A:BF:2E:73:51:2A:3C:62:6E:D7:EA:29:8A:D0:F6:0A:AC Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C802B0D341B532293E2B9CE291814FF Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/jcioSr8uc1EqPGJu1-opitD2Cqw.roa Signing time: Fri 02 Jan 2026 02:18:52 +0000 ROA not before: Fri 02 Jan 2026 02:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214610 IP address blocks: 2a0f:7803:f5d0::/44 maxlen: 48 2a0f:7803:f5e0::/44 maxlen: 48 2a0f:7803:f5f0::/44 maxlen: 48 2a0f:7803:f680::/44 maxlen: 48 2a0f:7803:f690::/44 maxlen: 48 2a0f:7803:f6a0::/44 maxlen: 48 2a0f:7803:f7c0::/44 maxlen: 48 2a0f:7803:f7d0::/44 maxlen: 48 2a0f:7803:f7e0::/44 maxlen: 48 2a0f:7803:f7f0::/44 maxlen: 48 2a0f:7803:f800::/44 maxlen: 48 2a0f:7803:f810::/44 maxlen: 48 2a0f:7803:f840::/44 maxlen: 48 2a0f:7803:f860::/44 maxlen: 48 2a0f:7803:f8b0::/44 maxlen: 48 2a0f:7803:f970::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 02:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:2b:0d:34:1b:53:22:93:e2:b9:ce:29:18:14:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8dc8a84abf2e73512a3c626ed7ea298ad0f60aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cf:ab:d6:75:ab:ce:70:77:4d:9f:8d:ff:3a: c7:57:6c:f6:7a:20:3e:48:c2:30:b0:f3:b5:c9:29: 82:b6:ee:7b:9d:3c:33:ce:dc:21:69:ac:c8:42:ee: b0:82:d5:b5:cd:27:55:4f:bf:e2:c8:b8:2e:eb:5b: 5c:90:01:69:a1:fe:ef:e2:6b:26:02:fe:d5:ae:50: cf:30:d9:06:3b:9a:3a:c5:4b:bb:28:60:fc:4d:35: 18:40:31:f1:38:72:47:a6:4c:8e:0e:cb:98:b0:7f: 73:95:ac:0e:c2:71:c9:4c:58:ca:e9:32:e5:1f:b8: e2:64:12:0c:5a:30:41:fa:cb:f0:b9:74:d1:43:e7: 05:14:94:34:cd:8b:aa:72:b0:03:51:23:f9:d5:64: 2a:1e:7a:44:16:1b:48:52:76:15:5f:2f:97:2a:45: 56:c9:05:91:b1:13:b4:c2:83:ec:36:a6:44:86:94: a9:9b:52:bc:d6:5e:64:83:2b:6d:bf:e9:36:62:7b: c1:a1:0a:9c:c7:6a:9d:67:dc:dd:df:66:a8:c9:18: 0f:14:bb:d3:1b:e3:f0:ef:32:6e:c1:dd:70:20:28: 4e:95:0a:97:d2:1c:4a:9d:18:5f:a6:a2:e6:ca:27: 0c:e5:3f:d3:cb:5c:d5:94:18:18:e6:d9:89:64:2f: 4e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C8:A8:4A:BF:2E:73:51:2A:3C:62:6E:D7:EA:29:8A:D0:F6:0A:AC X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/jcioSr8uc1EqPGJu1-opitD2Cqw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:f5d0::-2a0f:7803:f5ff:ffff:ffff:ffff:ffff:ffff 2a0f:7803:f680::-2a0f:7803:f6af:ffff:ffff:ffff:ffff:ffff 2a0f:7803:f7c0::-2a0f:7803:f81f:ffff:ffff:ffff:ffff:ffff 2a0f:7803:f840::/44 2a0f:7803:f860::/44 2a0f:7803:f8b0::/44 2a0f:7803:f970::/44 Signature Algorithm: sha256WithRSAEncryption 38:44:29:dd:ca:28:df:b7:1a:35:fd:11:b1:b9:48:27:8d:71: f3:d4:8e:4a:49:ec:65:de:ef:a5:e5:89:6f:a6:0c:1d:18:32: 24:97:ac:87:d0:73:70:eb:47:74:28:f7:c3:78:18:d1:1b:f0: 17:80:7d:8c:17:85:b6:8c:3e:b7:b3:e1:65:0d:08:bf:3f:19: 51:90:7d:b3:dc:de:8f:dc:7a:ce:61:bf:04:ad:bf:d8:c9:f1: de:be:ad:0f:b2:5e:b4:9c:c7:f7:bf:e3:3f:b5:f8:8d:ba:1e: 86:ce:d7:da:2f:41:1a:6c:3f:64:ca:20:f0:ba:5a:67:d3:bc: 9e:2a:43:7c:78:cd:a8:df:ec:d6:0a:76:97:20:64:5a:45:67: f5:16:ea:40:ae:79:a9:d1:d9:d9:95:92:64:c9:f3:e5:b9:c6: 0f:c4:7e:27:5e:8c:e9:4d:ac:25:32:55:77:b4:d5:02:70:d4: 11:8d:9f:d5:ca:ec:d6:47:41:b7:bb:11:19:24:d0:6e:e5:7d: ca:bc:1e:0b:0e:11:14:43:12:06:a7:1b:3b:fb:bb:42:e3:ac: 4b:72:9c:61:a8:91:74:b3:ef:95:c6:d2:96:d4:3b:50:81:c6: fa:c2:45:4c:df:f1:85:f2:6a:10:60:20:34:82:5c:cc:c7:35: 4e:04:53:1f -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgISAZt8gCsNNBtTIpPiuc4pGBT/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGM4YTg0YWJmMmU3MzUxMmEzYzYyNmVkN2VhMjk4YWQwZjYwYWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus+r1nWrznB3TZ+N/zrHV2z2eiA+ SMIwsPO1ySmCtu57nTwzztwhaazIQu6wgtW1zSdVT7/iyLgu61tckAFpof7v4msm Av7VrlDPMNkGO5o6xUu7KGD8TTUYQDHxOHJHpkyODsuYsH9zlawOwnHJTFjK6TLl H7jiZBIMWjBB+svwuXTRQ+cFFJQ0zYuqcrADUSP51WQqHnpEFhtIUnYVXy+XKkVW yQWRsRO0woPsNqZEhpSpm1K81l5kgyttv+k2YnvBoQqcx2qdZ9zd32aoyRgPFLvT G+Pw7zJuwd1wIChOlQqX0hxKnRhfpqLmyicM5T/Ty1zVlBgY5tmJZC9OPQIDAQAB o4ICYjCCAl4wHQYDVR0OBBYEFI3IqEq/LnNRKjxibtfqKYrQ9gqsMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvamNpb1NyOHVjMUVxUEdKdTEtb3BpdEQyQ3F3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHgGCCsGAQUFBwEHAQH/BGkwZzBlBAIAAjBfMBEDBwQqD3gD 9dADBgEqD3gD9DASAwcHKg94A/aAAwcEKg94A/agMBIDBwYqD3gD98ADBwUqD3gD +AADBwQqD3gD+EADBwQqD3gD+GADBwQqD3gD+LADBwQqD3gD+XAwDQYJKoZIhvcN AQELBQADggEBADhEKd3KKN+3GjX9EbG5SCeNcfPUjkpJ7GXe76XliW+mDB0YMiSX rIfQc3DrR3Qo98N4GNEb8BeAfYwXhbaMPrez4WUNCL8/GVGQfbPc3o/ces5hvwSt v9jJ8d6+rQ+yXrScx/e/4z+1+I26HobO19ovQRpsP2TKIPC6WmfTvJ4qQ3x4zajf 7NYKdpcgZFpFZ/UW6kCueanR2dmVkmTJ8+W5xg/EfidejOlNrCUyVXe01QJw1BGN n9XK7NZHQbe7ERkk0G7lfcq8HgsOERRDEganGzv7u0LjrEtynGGokXSz75XG0pbU O1CBxvrCRUzf8YXyahBgIDSCXMzHNU4EUx8= -----END CERTIFICATE-----Generated at Sun Jan 11 13:07:32 2026 by rpki-client