This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/j6vNoMCJY2rJNTcFiFrK6BxceW0.roa File: j6vNoMCJY2rJNTcFiFrK6BxceW0.roa (raw, json) Hash identifier: Qbby+Zxos/Xwy+CO76y4SUXqNg4YubZrm7ece+VByCQ= Subject key identifier: 8F:AB:CD:A0:C0:89:63:6A:C9:35:37:05:88:5A:CA:E8:1C:5C:79:6D Certificate issuer: /CN=ee377ed9fa11ec19955559762de047a5a6eb14a8 Certificate serial: 019B783537F24795EF106A6C3A6BEA60BCEB Authority key identifier: EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/j6vNoMCJY2rJNTcFiFrK6BxceW0.roa Signing time: Thu 01 Jan 2026 06:18:32 +0000 ROA not before: Thu 01 Jan 2026 06:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12750 IP address blocks: 212.80.96.0/19 maxlen: 19 2a01:7480::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.crl rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:37:f2:47:95:ef:10:6a:6c:3a:6b:ea:60:bc:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee377ed9fa11ec19955559762de047a5a6eb14a8 Validity Not Before: Jan 1 06:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8fabcda0c089636ac9353705885acae81c5c796d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0a:8d:f9:7f:bb:67:09:12:77:5f:01:9c:f1: 64:bc:ed:f4:b9:d9:e8:26:11:5a:c8:cb:e6:ea:79: cf:4e:1f:94:a2:0a:0d:4c:4b:65:f6:6f:51:e2:a3: db:c1:c6:f4:73:57:65:1c:89:19:5f:46:e0:a8:f7: a6:3b:5f:80:44:ea:4b:38:f2:69:ad:6c:3c:43:65: c8:a9:43:23:e0:ec:3c:2d:98:1e:08:4a:a0:94:0e: 98:9a:ca:3b:39:c1:76:00:76:8c:a3:a1:c7:de:df: 76:25:90:bc:00:46:9a:31:42:19:bf:92:a2:74:21: 07:64:b3:5e:79:b4:ae:98:30:ac:ca:98:3f:d1:29: 65:7d:1e:f1:4a:66:6d:6f:bd:22:cb:ec:3a:d7:fd: a5:32:e4:e4:a2:98:13:4f:4c:32:eb:9f:3c:1e:4a: 53:7a:bc:d9:48:5e:20:11:5b:00:7a:7a:95:64:2f: c8:0e:df:77:0d:df:75:03:e6:a8:00:02:d3:93:c0: ae:4f:5b:f6:55:4d:d2:b3:7b:63:d8:7a:a0:a5:f8: 9c:58:54:41:6c:8a:81:99:b6:36:51:da:a4:34:ba: ca:1b:ea:bf:28:cc:02:22:63:ee:2d:c9:87:01:c0: 01:df:b6:75:30:cc:03:7d:5a:70:d7:38:0b:98:c8: d4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AB:CD:A0:C0:89:63:6A:C9:35:37:05:88:5A:CA:E8:1C:5C:79:6D X509v3 Authority Key Identifier: keyid:EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/j6vNoMCJY2rJNTcFiFrK6BxceW0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.80.96.0/19 IPv6: 2a01:7480::/32 Signature Algorithm: sha256WithRSAEncryption 8b:c3:a8:9d:10:44:fc:c9:e2:48:a2:39:80:8f:e6:c3:41:ab: 1d:7e:38:38:e2:36:ab:c4:ad:46:c1:66:e7:49:cb:33:c7:56: be:7c:5d:a9:55:6f:be:89:2a:de:83:cd:5e:4e:eb:2f:de:e8: 2b:7b:61:e6:75:8c:9a:4a:db:53:25:d3:f8:3e:79:f5:b0:22: 7b:59:3b:8a:7f:6d:53:e3:0e:ef:b5:9d:41:d9:06:11:28:c9: 3e:6c:07:25:b9:ef:13:0e:d1:f8:ac:98:66:77:2c:ed:bc:c7: 5b:9a:97:d6:1e:f7:16:09:ff:da:5f:94:0e:7b:cc:75:58:8a: 0e:f1:5a:14:39:61:de:86:19:99:b5:89:08:37:8b:31:0d:7e: 1e:50:ad:92:38:d1:e3:c1:bb:ec:72:68:b0:05:88:9a:dc:53: a1:67:e5:dc:65:d0:90:e7:db:38:0b:b0:60:47:f4:96:b5:92: 7c:44:af:82:01:41:fc:c8:6c:71:c1:4b:e0:62:c6:eb:1b:2d: e2:97:23:13:47:b4:dd:af:f4:84:af:41:d5:98:02:20:e5:96: e7:b6:fd:86:cc:84:77:21:b5:92:96:d6:43:7a:8e:ef:06:c8: 77:91:66:c0:20:9e:d9:63:87:77:6e:7c:90:8f:cb:95:73:d4: 63:c2:2b:99 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NTfyR5XvEGpsOmvqYLzrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzc3ZWQ5ZmExMWVjMTk5NTU1NTk3NjJkZTA0N2E1YTZl YjE0YTgwHhcNMjYwMTAxMDYxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmFiY2RhMGMwODk2MzZhYzkzNTM3MDU4ODVhY2FlODFjNWM3OTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwqN+X+7ZwkSd18BnPFkvO30udno JhFayMvm6nnPTh+UogoNTEtl9m9R4qPbwcb0c1dlHIkZX0bgqPemO1+AROpLOPJp rWw8Q2XIqUMj4Ow8LZgeCEqglA6Ymso7OcF2AHaMo6HH3t92JZC8AEaaMUIZv5Ki dCEHZLNeebSumDCsypg/0SllfR7xSmZtb70iy+w61/2lMuTkopgTT0wy6588HkpT erzZSF4gEVsAenqVZC/IDt93Dd91A+aoAALTk8CuT1v2VU3Ss3tj2HqgpficWFRB bIqBmbY2UdqkNLrKG+q/KMwCImPuLcmHAcAB37Z1MMwDfVpw1zgLmMjU5QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFI+rzaDAiWNqyTU3BYhayugcXHltMB8GA1UdIwQY MBaAFO43ftn6EewZlVVZdi3gR6Wm6xSoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2pkLTJmb1I3Qm1WVlZsMkxlQkhwYWJyRktnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wMjY4OTYtZDczNC00YjlhLTljMzMt OWU3MWNiZDQyMTdiLzEvajZ2Tm9NQ0pZMnJKTlRjRmlGcks2QnhjZVcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8wMjY4OTYtZDczNC00YjlhLTljMzMtOWU3MWNiZDQyMTdi LzEvN2pkLTJmb1I3Qm1WVlZsMkxlQkhwYWJyRktnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQF1FBgMA0E AgACMAcDBQAqAXSAMA0GCSqGSIb3DQEBCwUAA4IBAQCLw6idEET8yeJIojmAj+bD Qasdfjg44jarxK1GwWbnScszx1a+fF2pVW++iSreg81eTusv3ugre2HmdYyaSttT JdP4Pnn1sCJ7WTuKf21T4w7vtZ1B2QYRKMk+bAclue8TDtH4rJhmdyztvMdbmpfW HvcWCf/aX5QOe8x1WIoO8VoUOWHehhmZtYkIN4sxDX4eUK2SONHjwbvscmiwBYia 3FOhZ+XcZdCQ59s4C7BgR/SWtZJ8RK+CAUH8yGxxwUvgYsbrGy3ilyMTR7Tdr/SE r0HVmAIg5Zbntv2GzIR3IbWSltZDeo7vBsh3kWbAIJ7ZY4d3bnyQj8uVc9RjwiuZ -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:43 2026 by rpki-client