This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/jkaZ5iICQupFcFDl9xhsN7XCfVU.roa File: jkaZ5iICQupFcFDl9xhsN7XCfVU.roa (raw, json) Hash identifier: 2aIOXrEvsS/h5Y1uTl8DSbIvLrqkEcleOvMyI5MMETE= Subject key identifier: 8E:46:99:E6:22:02:42:EA:45:70:50:E5:F7:18:6C:37:B5:C2:7D:55 Certificate issuer: /CN=bbe1bd6b0d589e1a0f90badf735020714f0ecf7a Certificate serial: 019BF9CD7736EFBBF7A9D37E950927BB715B Authority key identifier: BB:E1:BD:6B:0D:58:9E:1A:0F:90:BA:DF:73:50:20:71:4F:0E:CF:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/jkaZ5iICQupFcFDl9xhsN7XCfVU.roa Signing time: Mon 26 Jan 2026 10:15:50 +0000 ROA not before: Mon 26 Jan 2026 10:15:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3209 IP address blocks: 2001:67c:d14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft rsync://rpki.ripe.net/repository/DEFAULT/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:cd:77:36:ef:bb:f7:a9:d3:7e:95:09:27:bb:71:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbe1bd6b0d589e1a0f90badf735020714f0ecf7a Validity Not Before: Jan 26 10:15:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e4699e6220242ea457050e5f7186c37b5c27d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d3:be:33:7e:c1:a7:8f:f4:f4:31:7e:b7:0c: 3b:86:ad:c3:07:d3:fc:c6:17:b1:95:7b:5d:d1:5c: 7f:2b:7a:07:8d:f9:68:e2:23:db:cc:89:44:2c:ed: 78:a9:26:96:39:6e:c4:0d:5d:19:ff:16:94:b7:0f: 41:87:96:db:4c:49:1f:d2:77:87:fb:a3:5b:bd:c5: 9c:39:a6:dd:1e:3a:a0:49:52:37:22:35:c2:3c:d9: d7:3d:29:da:8b:87:e7:1a:33:09:18:a3:df:b7:bc: 57:2f:2a:66:39:02:dc:23:9b:9a:4f:eb:c4:ac:b2: 45:4f:a2:06:f0:c3:36:e0:0f:37:81:ef:77:b6:e8: 69:9b:a2:52:dc:5a:6e:01:47:09:8b:54:d9:92:4a: 7f:cb:71:00:77:4b:8f:a6:75:63:af:5b:46:d8:dc: 68:a8:59:e9:08:49:50:1c:0d:ac:29:c3:ff:de:73: 77:78:a7:a0:cf:9e:72:21:69:a2:be:6b:2a:1d:b5: 5d:95:7c:96:15:fb:1d:75:08:15:31:cf:52:09:82: 5b:79:61:08:12:90:2b:e4:c5:15:fd:69:21:f7:59: 5c:96:a4:85:94:67:eb:df:00:40:10:3f:55:a2:77: e7:5f:37:83:f8:2c:6d:0a:c3:d3:d8:63:c7:cb:37: 3e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:46:99:E6:22:02:42:EA:45:70:50:E5:F7:18:6C:37:B5:C2:7D:55 X509v3 Authority Key Identifier: keyid:BB:E1:BD:6B:0D:58:9E:1A:0F:90:BA:DF:73:50:20:71:4F:0E:CF:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/jkaZ5iICQupFcFDl9xhsN7XCfVU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:d14::/48 Signature Algorithm: sha256WithRSAEncryption 5e:34:3b:52:e6:6e:44:3d:39:2a:0f:47:3f:c7:d4:ab:84:cc: a9:30:d9:9d:8f:44:d7:c9:fb:1f:c3:f6:e8:33:8c:b3:72:1b: b0:9f:fc:76:32:f1:0d:76:37:0d:54:b9:a5:09:b2:87:25:33: bf:8a:d1:e7:37:ac:c6:68:bb:0a:b1:d8:e1:f3:32:20:e6:84: 6f:84:25:aa:e4:53:12:c3:5c:a0:f1:7a:58:79:bc:d6:ca:3f: a4:ff:63:5d:3f:3c:ed:d0:42:06:cc:ba:5f:8f:6e:71:92:b1: 67:7f:a6:a1:2d:5b:98:03:6d:63:21:4a:f4:e1:b2:3e:f6:fb: 60:e2:f5:48:15:e1:48:a2:e6:b6:95:44:07:3b:ca:a7:51:4a: dc:ca:5f:3d:fd:25:f9:ee:09:d4:c2:85:1e:12:15:f8:1c:0b: 1a:61:f7:a1:2a:a6:82:7e:ae:d1:23:14:e3:15:ee:07:d2:da: 28:0f:91:ed:6e:92:a3:18:db:a5:3c:da:a8:d9:ef:96:4a:3d: 25:07:fe:33:1d:3f:ff:66:c8:dc:b4:b9:36:6d:09:a3:35:e1: 55:02:2b:f9:6c:5d:36:81:e5:22:63:6f:f7:dc:05:5e:46:1f: 64:96:0d:13:07:10:77:da:de:27:51:2c:41:24:bb:7e:7d:8b: e5:1d:12:f0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZv5zXc277v3qdN+lQknu3FbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZTFiZDZiMGQ1ODllMWEwZjkwYmFkZjczNTAyMDcxNGYw ZWNmN2EwHhcNMjYwMTI2MTAxNTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTQ2OTllNjIyMDI0MmVhNDU3MDUwZTVmNzE4NmMzN2I1YzI3ZDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9O+M37Bp4/09DF+tww7hq3DB9P8 xhexlXtd0Vx/K3oHjflo4iPbzIlELO14qSaWOW7EDV0Z/xaUtw9Bh5bbTEkf0neH +6NbvcWcOabdHjqgSVI3IjXCPNnXPSnai4fnGjMJGKPft7xXLypmOQLcI5uaT+vE rLJFT6IG8MM24A83ge93tuhpm6JS3FpuAUcJi1TZkkp/y3EAd0uPpnVjr1tG2Nxo qFnpCElQHA2sKcP/3nN3eKegz55yIWmivmsqHbVdlXyWFfsddQgVMc9SCYJbeWEI EpAr5MUV/Wkh91lclqSFlGfr3wBAED9VonfnXzeD+CxtCsPT2GPHyzc+JQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFI5GmeYiAkLqRXBQ5fcYbDe1wn1VMB8GA1UdIwQY MBaAFLvhvWsNWJ4aD5C633NQIHFPDs96MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdS1HOWF3MVluaG9Qa0xyZmMxQWdjVThPejNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS84MTVlMDgtYTVjZi00ZjAxLTkwY2It NjE3ZDE3YmUzMDA0LzEvamthWjVpSUNRdXBGY0ZEbDl4aHNON1hDZlZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS84MTVlMDgtYTVjZi00ZjAxLTkwY2ItNjE3ZDE3YmUzMDA0 LzEvdS1HOWF3MVluaG9Qa0xyZmMxQWdjVThPejNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA0U MA0GCSqGSIb3DQEBCwUAA4IBAQBeNDtS5m5EPTkqD0c/x9SrhMypMNmdj0TXyfsf w/boM4yzchuwn/x2MvENdjcNVLmlCbKHJTO/itHnN6zGaLsKsdjh8zIg5oRvhCWq 5FMSw1yg8XpYebzWyj+k/2NdPzzt0EIGzLpfj25xkrFnf6ahLVuYA21jIUr04bI+ 9vtg4vVIFeFIoua2lUQHO8qnUUrcyl89/SX57gnUwoUeEhX4HAsaYfehKqaCfq7R IxTjFe4H0tooD5HtbpKjGNulPNqo2e+WSj0lB/4zHT//ZsjctLk2bQmjNeFVAiv5 bF02geUiY2/33AVeRh9klg0TBxB32t4nUSxBJLt+fYvlHRLw -----END CERTIFICATE-----Generated at Mon Jan 26 21:32:40 2026 by rpki-client