This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/JaJgHNZlSAbtuKvLA3-BudJJTlo.roa File: JaJgHNZlSAbtuKvLA3-BudJJTlo.roa (raw, json) Hash identifier: uT77HGoSLR7ak2tNmSlHYY46dhCnEltA+vTWyDTCj6Q= Subject key identifier: 25:A2:60:1C:D6:65:48:06:ED:B8:AB:CB:03:7F:81:B9:D2:49:4E:5A Certificate issuer: /CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f Certificate serial: 019B7EA72AFED06CA87DB2DC1875D6BBF2B4 Authority key identifier: B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/JaJgHNZlSAbtuKvLA3-BudJJTlo.roa Signing time: Fri 02 Jan 2026 12:20:43 +0000 ROA not before: Fri 02 Jan 2026 12:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215295 IP address blocks: 2001:67c:f90::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.mft rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:2a:fe:d0:6c:a8:7d:b2:dc:18:75:d6:bb:f2:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c288e963e0e9f82d1c6a7fd84ec5aa340aba8f Validity Not Before: Jan 2 12:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25a2601cd6654806edb8abcb037f81b9d2494e5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:51:46:55:14:c1:dd:ee:5c:a4:04:f3:de:24: 30:03:fb:ad:ac:1d:f4:d2:d0:61:cf:e4:08:f0:e9: e7:f0:8b:32:8c:a6:b3:80:84:6d:36:d5:2a:7e:2e: a6:67:77:fc:2d:95:75:72:52:85:d9:06:93:81:36: 3b:a0:81:e7:cd:bc:b8:df:9a:12:a3:3c:53:3e:c5: 78:28:5a:7c:b4:6f:b7:80:6f:c4:ab:be:57:42:af: fc:2b:ab:cb:1a:75:2e:0b:21:52:9c:f6:3d:f0:33: 8b:26:0e:b3:49:84:2f:a5:b1:62:72:df:84:08:e1: 0f:b0:8d:f5:50:6e:22:d5:8e:d5:e6:1f:76:ea:fc: 91:ee:22:21:ed:2b:13:9b:06:aa:cc:0e:00:9c:31: 29:18:98:8f:a2:e8:c3:97:ed:08:00:07:95:5d:7e: a8:11:b6:75:34:dd:e3:49:b7:9b:f3:89:c5:5c:f2: 24:75:b7:aa:8e:30:43:93:af:b5:11:0b:b4:0e:ec: a5:04:7e:8a:c0:23:ea:62:d4:04:66:85:54:d8:97: ca:7b:7b:7f:71:65:46:47:52:6c:92:98:34:f1:68: 79:d7:fa:e6:3d:66:4c:24:96:fa:de:b1:39:e5:79: 7d:c7:60:7f:b9:a0:fa:e2:a9:ee:3a:aa:39:1e:56: 96:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A2:60:1C:D6:65:48:06:ED:B8:AB:CB:03:7F:81:B9:D2:49:4E:5A X509v3 Authority Key Identifier: keyid:B5:C2:88:E9:63:E0:E9:F8:2D:1C:6A:7F:D8:4E:C5:AA:34:0A:BA:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcKI6WPg6fgtHGp_2E7FqjQKuo8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/JaJgHNZlSAbtuKvLA3-BudJJTlo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc3491-c699-42b5-90a7-cc7e9ab09fb8/1/tcKI6WPg6fgtHGp_2E7FqjQKuo8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:f90::/48 Signature Algorithm: sha256WithRSAEncryption 4c:8c:ad:ed:c0:8b:ff:28:fb:75:c7:ec:51:f1:4f:e2:96:4d: 89:65:17:b1:22:48:10:fe:09:21:16:8a:f6:6b:dc:1f:0a:73: 9d:85:83:3b:69:0a:72:cd:a1:1e:69:ec:ed:e5:7b:f5:66:2c: fe:67:7f:d3:33:e7:78:78:dd:76:f7:c2:dd:7d:4b:f4:21:43: 16:80:d1:dc:79:c5:48:b8:2b:c5:fd:a4:d5:b9:e9:e7:25:04: 0a:21:47:78:d3:b8:09:ae:61:11:16:3f:c3:ba:d2:fb:94:66: 5d:96:cd:20:6d:0e:c5:53:cf:29:05:48:8d:0b:a7:6a:96:57: 5e:7e:df:f0:91:32:56:60:61:e7:3d:f7:97:60:2c:44:22:0a: 45:86:2b:f8:85:22:55:52:c3:b1:c7:c7:94:3a:5e:d5:1b:64: 88:ce:56:34:e7:2e:2d:4e:33:14:8f:af:ce:12:6a:4b:4c:5b: 04:ea:32:18:27:04:77:3e:ed:72:b0:fd:bd:d5:0a:7a:e6:53: 76:e6:0b:69:7e:cf:92:f0:a2:4b:2f:a4:f0:b4:2d:4e:41:59: 99:93:5d:b6:4a:c7:d7:6c:e2:99:56:fb:2d:0d:b3:6b:79:1f: 73:c4:e8:3c:73:49:78:85:e5:de:52:56:5d:b0:59:7b:55:4f: c4:ff:e1:7c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pyr+0GyofbLcGHXWu/K0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YzI4OGU5NjNlMGU5ZjgyZDFjNmE3ZmQ4NGVjNWFhMzQw YWJhOGYwHhcNMjYwMTAyMTIyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWEyNjAxY2Q2NjU0ODA2ZWRiOGFiY2IwMzdmODFiOWQyNDk0ZTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFFGVRTB3e5cpATz3iQwA/utrB30 0tBhz+QI8Onn8IsyjKazgIRtNtUqfi6mZ3f8LZV1clKF2QaTgTY7oIHnzby435oS ozxTPsV4KFp8tG+3gG/Eq75XQq/8K6vLGnUuCyFSnPY98DOLJg6zSYQvpbFict+E COEPsI31UG4i1Y7V5h926vyR7iIh7SsTmwaqzA4AnDEpGJiPoujDl+0IAAeVXX6o EbZ1NN3jSbeb84nFXPIkdbeqjjBDk6+1EQu0DuylBH6KwCPqYtQEZoVU2JfKe3t/ cWVGR1Jskpg08Wh51/rmPWZMJJb63rE55Xl9x2B/uaD64qnuOqo5HlaWGwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCWiYBzWZUgG7birywN/gbnSSU5aMB8GA1UdIwQY MBaAFLXCiOlj4On4LRxqf9hOxao0CrqPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGNLSTZXUGc2Zmd0SEdwXzJFN0ZxalFLdW84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kYzM0OTEtYzY5OS00MmI1LTkwYTct Y2M3ZTlhYjA5ZmI4LzEvSmFKZ0hOWmxTQWJ0dUt2TEEzLUJ1ZEpKVGxvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9kYzM0OTEtYzY5OS00MmI1LTkwYTctY2M3ZTlhYjA5ZmI4 LzEvdGNLSTZXUGc2Zmd0SEdwXzJFN0ZxalFLdW84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA+Q MA0GCSqGSIb3DQEBCwUAA4IBAQBMjK3twIv/KPt1x+xR8U/ilk2JZRexIkgQ/gkh For2a9wfCnOdhYM7aQpyzaEeaezt5Xv1Ziz+Z3/TM+d4eN1298LdfUv0IUMWgNHc ecVIuCvF/aTVuennJQQKIUd407gJrmERFj/DutL7lGZdls0gbQ7FU88pBUiNC6dq lldeft/wkTJWYGHnPfeXYCxEIgpFhiv4hSJVUsOxx8eUOl7VG2SIzlY05y4tTjMU j6/OEmpLTFsE6jIYJwR3Pu1ysP291Qp65lN25gtpfs+S8KJLL6TwtC1OQVmZk122 SsfXbOKZVvstDbNreR9zxOg8c0l4heXeUlZdsFl7VU/E/+F8 -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:57 2026 by rpki-client