This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/JcIgVRfB8cbXUGJV5jVgHdlKA-I.roa File: JcIgVRfB8cbXUGJV5jVgHdlKA-I.roa (raw, json) Hash identifier: H3hUh7Lj3XT5Z/feO9iXQdqL5i8JEzQ7efNMXFvag+M= Subject key identifier: 25:C2:20:55:17:C1:F1:C6:D7:50:62:55:E6:35:60:1D:D9:4A:03:E2 Certificate issuer: /CN=0b934c36b773008865b9c9fb0fd48669395ac730 Certificate serial: 019B78353FF40EBBC6E2C25A622E972C9033 Authority key identifier: 0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/JcIgVRfB8cbXUGJV5jVgHdlKA-I.roa Signing time: Thu 01 Jan 2026 06:18:34 +0000 ROA not before: Thu 01 Jan 2026 06:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40027 IP address blocks: 2a00:86c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 09:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:3f:f4:0e:bb:c6:e2:c2:5a:62:2e:97:2c:90:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b934c36b773008865b9c9fb0fd48669395ac730 Validity Not Before: Jan 1 06:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25c2205517c1f1c6d7506255e635601dd94a03e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:74:f0:6d:ad:65:eb:18:6c:c3:09:74:39:fb: f2:74:cb:70:47:9e:01:87:96:f6:48:2a:cc:1d:2f: 87:7a:51:e9:58:05:c0:6d:de:ec:89:f8:cc:cd:4f: 01:29:eb:f3:ba:87:2d:ce:a0:49:1b:cb:6b:3d:06: 56:a8:22:2f:9e:2a:bd:97:89:90:20:f2:7f:3a:ff: 92:c3:c6:0e:5d:55:14:ed:94:e2:24:2d:a2:7d:c2: fa:db:31:9a:ad:a7:2b:de:1d:26:b3:10:f2:8e:ed: 41:37:19:92:8d:cf:bb:17:a6:b8:fb:9a:81:e0:ad: a1:88:ca:4a:03:8a:8f:db:49:01:bd:3f:a2:b7:e9: 78:86:e7:34:70:18:d6:8c:a5:8c:d1:cb:95:f4:64: f7:ac:e6:41:27:cd:f6:ec:99:50:25:c6:f8:17:a4: 57:c8:97:0d:47:0e:15:f6:bf:aa:ef:26:a6:1a:a7: 12:44:89:eb:de:c3:32:fd:8d:3b:1d:a2:8b:c0:7a: 4f:98:03:1c:f1:4f:f5:57:51:21:58:68:2c:df:fb: c1:8d:43:97:92:56:ae:63:cc:63:28:ed:1d:b3:f3: df:13:69:32:8d:38:9c:ca:db:f5:33:2f:a2:f4:23: 41:15:12:39:14:53:31:b8:7e:a5:d2:b3:fc:e8:64: 78:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C2:20:55:17:C1:F1:C6:D7:50:62:55:E6:35:60:1D:D9:4A:03:E2 X509v3 Authority Key Identifier: keyid:0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/JcIgVRfB8cbXUGJV5jVgHdlKA-I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:86c0::/32 Signature Algorithm: sha256WithRSAEncryption 00:34:03:59:ba:31:f0:2f:ba:04:82:5f:c9:53:bb:1f:df:cc: 8a:3a:8c:4e:51:ca:03:6a:19:06:d6:93:9e:33:be:dc:42:36: 18:29:c8:cd:30:18:04:ce:e3:ea:98:0e:ca:7a:64:91:2b:29: 1c:7f:0f:ca:31:99:31:34:fe:46:d3:b3:bd:32:03:18:eb:eb: ed:fc:4c:04:a7:09:99:cc:ed:3e:fb:0d:c8:e3:93:c7:58:bc: d3:c7:81:8a:2d:40:67:c7:89:c5:b1:61:c1:75:de:b3:5b:74: 03:c8:f0:1b:2e:d0:72:35:13:4f:b0:f3:ce:32:f5:e9:c8:c2: a2:e5:76:50:c7:45:9b:e6:25:c8:70:e6:43:dd:f9:5b:af:c1: a8:6a:a1:55:29:eb:fd:0a:4a:60:ea:e1:5d:66:7b:16:a9:b2: b2:d2:dd:af:03:8c:c0:76:a8:b7:c7:0a:6e:c2:f4:7b:bd:20: 76:fc:0c:16:7d:0d:88:aa:09:05:68:89:de:49:41:15:5f:ab: 40:27:12:b7:5c:4f:46:c9:4f:1d:58:c6:cf:19:fd:94:e6:ad: ce:ce:26:11:ed:86:28:8a:2f:d0:b9:dc:3a:b0:aa:52:0e:22: d9:c9:9f:c0:e9:e2:89:20:e9:e0:e5:b9:2b:95:b5:dc:69:53: 3b:3b:61:d8 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4NT/0DrvG4sJaYi6XLJAzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiOTM0YzM2Yjc3MzAwODg2NWI5YzlmYjBmZDQ4NjY5Mzk1 YWM3MzAwHhcNMjYwMTAxMDYxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWMyMjA1NTE3YzFmMWM2ZDc1MDYyNTVlNjM1NjAxZGQ5NGEwM2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HTwba1l6xhswwl0OfvydMtwR54B h5b2SCrMHS+HelHpWAXAbd7sifjMzU8BKevzuoctzqBJG8trPQZWqCIvniq9l4mQ IPJ/Ov+Sw8YOXVUU7ZTiJC2ifcL62zGaracr3h0msxDyju1BNxmSjc+7F6a4+5qB 4K2hiMpKA4qP20kBvT+it+l4huc0cBjWjKWM0cuV9GT3rOZBJ8327JlQJcb4F6RX yJcNRw4V9r+q7yamGqcSRInr3sMy/Y07HaKLwHpPmAMc8U/1V1EhWGgs3/vBjUOX klauY8xjKO0ds/PfE2kyjTicytv1My+i9CNBFRI5FFMxuH6l0rP86GR4SQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFCXCIFUXwfHG11BiVeY1YB3ZSgPiMB8GA1UdIwQY MBaAFAuTTDa3cwCIZbnJ+w/Uhmk5WscwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzVOTU5yZHpBSWhsdWNuN0Q5U0dhVGxheHpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9kZWNiN2QtMDM4OC00ZTNjLThkYjQt YTMwMmY1MWQzODJjLzEvSmNJZ1ZSZkI4Y2JYVUdKVjVqVmdIZGxLQS1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9kZWNiN2QtMDM4OC00ZTNjLThkYjQtYTMwMmY1MWQzODJj LzEvQzVOTU5yZHpBSWhsdWNuN0Q5U0dhVGxheHpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgCGwDAN BgkqhkiG9w0BAQsFAAOCAQEAADQDWbox8C+6BIJfyVO7H9/MijqMTlHKA2oZBtaT njO+3EI2GCnIzTAYBM7j6pgOynpkkSspHH8PyjGZMTT+RtOzvTIDGOvr7fxMBKcJ mcztPvsNyOOTx1i808eBii1AZ8eJxbFhwXXes1t0A8jwGy7QcjUTT7DzzjL16cjC ouV2UMdFm+YlyHDmQ935W6/BqGqhVSnr/QpKYOrhXWZ7FqmystLdrwOMwHaot8cK bsL0e70gdvwMFn0NiKoJBWiJ3klBFV+rQCcSt1xPRslPHVjGzxn9lOatzs4mEe2G KIov0LncOrCqUg4i2cmfwOniiSDp4OW5K5W13GlTOzth2A== -----END CERTIFICATE-----Generated at Fri Jan 2 16:22:44 2026 by rpki-client