This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/jt1CHtkkHeklCU_gcNRHpx-LQYA.roa File: jt1CHtkkHeklCU_gcNRHpx-LQYA.roa (raw, json) Hash identifier: YjHb+0Je+Ymm6RXHk7681XtaIUj0MYF5Nt34ogBOg2A= Subject key identifier: 8E:DD:42:1E:D9:24:1D:E9:25:09:4F:E0:70:D4:47:A7:1F:8B:41:80 Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019B7C807BA3EC418B501182825720337AE9 Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/jt1CHtkkHeklCU_gcNRHpx-LQYA.roa Signing time: Fri 02 Jan 2026 02:19:13 +0000 ROA not before: Fri 02 Jan 2026 02:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35196 IP address blocks: 2a0c:f647::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:7b:a3:ec:41:8b:50:11:82:82:57:20:33:7a:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Jan 2 02:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8edd421ed9241de925094fe070d447a71f8b4180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:32:59:21:86:76:70:77:f9:44:b3:e2:b0:75: 23:06:23:84:64:d3:80:ea:41:14:5c:62:b7:cd:c4: 07:06:6a:f3:e7:e7:9b:e1:fd:88:98:1f:71:1e:3d: d8:79:8c:9f:c0:42:20:e8:d3:51:0e:e6:b8:80:75: 31:e2:af:e7:1a:f2:b8:cf:bd:ed:37:bd:e9:cd:49: fc:3c:2d:ca:68:9d:73:43:ac:6f:fa:6f:42:36:e9: 2c:a6:f3:65:81:3f:b4:33:fc:68:9e:31:7e:93:be: 13:88:47:87:b1:09:6e:b1:21:ce:4f:0b:88:98:16: 5f:32:3c:ea:53:56:64:bc:e2:b0:a8:ba:9c:2a:1e: 62:ae:6a:7d:c2:52:40:a8:88:86:91:af:cb:b4:92: 45:e5:17:ba:36:2e:91:66:ea:0a:98:6b:37:24:8b: ae:18:0c:fe:da:ff:14:df:8e:b5:d9:33:eb:1e:a6: 5c:a0:73:a3:45:c3:40:92:f6:cc:e1:e3:82:c7:47: 63:62:0e:61:ae:86:bf:69:1b:64:9d:e0:01:31:ff: d7:73:4b:26:30:7f:0e:f7:bf:49:c5:16:e4:6c:16: 45:33:35:01:9b:c9:84:e3:ac:6d:e2:40:04:17:aa: de:4d:cb:48:85:8a:99:51:cc:bf:ae:c2:6e:65:a7: 63:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:DD:42:1E:D9:24:1D:E9:25:09:4F:E0:70:D4:47:A7:1F:8B:41:80 X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/jt1CHtkkHeklCU_gcNRHpx-LQYA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:f647::/32 Signature Algorithm: sha256WithRSAEncryption 3a:4f:de:08:4c:39:e6:03:04:d5:a6:54:88:51:d7:40:6a:02: 97:90:a9:c5:c3:0c:fd:fa:e5:5d:56:e7:58:5d:c6:34:fa:a7: 51:ca:49:2d:67:b8:b8:bb:6e:6d:74:16:6e:1d:21:cd:0a:b9: 09:a2:68:87:25:6f:74:c5:71:c2:59:29:e8:00:23:ec:34:12: a8:31:c3:26:98:e1:c0:17:bd:39:e8:3b:79:26:1f:44:7b:2e: 8c:33:90:4b:1a:68:62:0f:41:b3:36:af:85:64:62:44:36:39: fc:16:d6:a6:3b:02:f6:47:53:de:91:63:5a:7c:4c:36:c2:4c: fb:17:10:92:f2:b2:0e:74:8c:8d:f6:de:ff:1a:a6:0b:ad:5a: 0c:35:6d:d0:5d:9e:23:09:f5:4e:1c:4d:a3:5d:6a:dd:57:70: 83:00:5c:05:5a:b5:fd:ae:11:e6:8a:b0:a3:f9:67:bf:d5:ad: e5:50:7b:59:8a:d5:7e:e3:01:76:d8:79:ec:89:fa:50:1b:6d: 1a:48:85:4c:5a:e6:a3:41:c1:68:f2:a2:e0:4c:80:d6:4c:56: c7:fa:3b:69:7b:85:3c:40:71:2a:1c:63:5e:c7:2b:ae:5a:f0: 68:10:5e:da:3c:1a:e3:d0:3b:5e:64:85:de:dc:bc:04:a0:f8: 52:51:da:af -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8gHuj7EGLUBGCglcgM3rpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjYwMTAyMDIxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWRkNDIxZWQ5MjQxZGU5MjUwOTRmZTA3MGQ0NDdhNzFmOGI0MTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzJZIYZ2cHf5RLPisHUjBiOEZNOA 6kEUXGK3zcQHBmrz5+eb4f2ImB9xHj3YeYyfwEIg6NNRDua4gHUx4q/nGvK4z73t N73pzUn8PC3KaJ1zQ6xv+m9CNukspvNlgT+0M/xonjF+k74TiEeHsQlusSHOTwuI mBZfMjzqU1ZkvOKwqLqcKh5irmp9wlJAqIiGka/LtJJF5Re6Ni6RZuoKmGs3JIuu GAz+2v8U34612TPrHqZcoHOjRcNAkvbM4eOCx0djYg5hroa/aRtkneABMf/Xc0sm MH8O979JxRbkbBZFMzUBm8mE46xt4kAEF6reTctIhYqZUcy/rsJuZadjjwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFI7dQh7ZJB3pJQlP4HDUR6cfi0GAMB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvanQxQ0h0a2tIZWtsQ1VfZ2NOUkhweC1MUVlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgz2RzAN BgkqhkiG9w0BAQsFAAOCAQEAOk/eCEw55gME1aZUiFHXQGoCl5CpxcMM/frlXVbn WF3GNPqnUcpJLWe4uLtubXQWbh0hzQq5CaJohyVvdMVxwlkp6AAj7DQSqDHDJpjh wBe9Oeg7eSYfRHsujDOQSxpoYg9BszavhWRiRDY5/BbWpjsC9kdT3pFjWnxMNsJM +xcQkvKyDnSMjfbe/xqmC61aDDVt0F2eIwn1ThxNo11q3VdwgwBcBVq1/a4R5oqw o/lnv9Wt5VB7WYrVfuMBdth57In6UBttGkiFTFrmo0HBaPKi4EyA1kxWx/o7aXuF PEBxKhxjXscrrlrwaBBe2jwa49A7XmSF3ty8BKD4UlHarw== -----END CERTIFICATE-----Generated at Wed Jan 21 08:06:59 2026 by rpki-client