This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/JPiq-g6K8B0OSRn18JfkdCUKEJs.roa File: JPiq-g6K8B0OSRn18JfkdCUKEJs.roa (raw, json) Hash identifier: 8w4ViUja/QWdaC1H/r05Ywmj8QgxRXg1K8XMH8+k+G4= Subject key identifier: 24:F8:AA:FA:0E:8A:F0:1D:0E:49:19:F5:F0:97:E4:74:25:0A:10:9B Certificate issuer: /CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87 Certificate serial: 019B7EA5485CFA3F51AFD4A9D1013EB8CCB2 Authority key identifier: 2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/JPiq-g6K8B0OSRn18JfkdCUKEJs.roa Signing time: Fri 02 Jan 2026 12:18:39 +0000 ROA not before: Fri 02 Jan 2026 12:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212027 IP address blocks: 2a14:1b40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:48:5c:fa:3f:51:af:d4:a9:d1:01:3e:b8:cc:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87 Validity Not Before: Jan 2 12:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24f8aafa0e8af01d0e4919f5f097e474250a109b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6a:0d:c3:b5:80:c0:20:cc:c3:12:b1:39:35: 31:de:f0:78:dc:be:8a:5b:b4:2a:81:1c:64:1c:c0: 22:c9:70:0a:e4:08:d4:5d:00:65:e1:2d:ae:1f:ba: 1d:39:17:56:36:78:6e:ce:09:b3:85:45:0d:dd:86: 91:d8:6e:71:25:ea:a5:6f:ec:ae:1c:f7:2c:10:3d: fd:1d:ac:9b:7c:ea:aa:c0:97:22:85:04:76:c3:22: 56:59:77:31:6b:39:ca:cd:b1:99:1d:ad:2c:25:16: 24:39:f3:fb:db:9f:ec:48:f7:30:3b:9c:99:2d:7e: dd:16:c5:c0:97:90:a0:48:d2:b7:6b:05:18:4b:1c: c3:75:bc:7a:c8:03:ca:dd:89:74:e4:96:fc:40:95: c4:4c:90:46:ad:53:a8:d3:45:cc:be:cf:6e:9c:df: ba:0a:4c:c3:13:86:30:e6:91:16:bc:5a:ed:91:9f: 08:28:2c:01:f0:00:03:72:fd:be:f0:67:96:79:e7: b5:39:d9:e7:37:86:31:0c:98:51:44:31:ce:2f:4a: e5:bd:de:96:b7:1b:04:ba:03:99:7d:ec:9f:6d:3f: e5:88:0f:0b:23:99:64:aa:7f:fb:95:53:75:f7:1c: 22:58:90:b6:4c:90:55:12:c5:b9:01:7e:cc:d2:e1: c4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F8:AA:FA:0E:8A:F0:1D:0E:49:19:F5:F0:97:E4:74:25:0A:10:9B X509v3 Authority Key Identifier: keyid:2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/JPiq-g6K8B0OSRn18JfkdCUKEJs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:1b40::/29 Signature Algorithm: sha256WithRSAEncryption aa:20:f9:dc:93:88:e1:fc:0c:11:db:4d:02:c5:d1:c9:a4:f8: b8:c9:26:b1:28:34:d0:b9:24:2a:57:d6:b3:f3:26:62:60:10: aa:d2:36:33:b8:9b:b4:39:9d:e9:6e:26:88:b1:1b:0c:fd:ff: 28:9f:e2:90:b8:9a:2c:fc:13:21:70:18:04:f2:cf:20:e4:fc: 6b:ca:19:f8:ab:da:cf:b1:0f:49:2e:78:4c:ca:ea:77:0b:d6: 87:52:47:84:4a:2a:04:d2:86:57:de:ed:1a:05:e9:fc:d7:1f: 00:91:da:5f:36:bd:60:f3:86:ce:d9:d3:c3:19:c1:a7:10:7e: b8:87:23:3b:a9:10:28:6a:37:9c:22:23:21:76:9d:4e:8b:10: e2:ca:b6:32:cd:9c:63:69:f7:a9:ae:0d:1f:c3:bb:f8:f2:26: 97:2f:61:60:a6:24:ad:7e:39:82:52:59:6a:08:da:9b:2d:72: 1f:89:84:e2:62:f8:ba:e4:3f:6a:1b:36:e3:95:2f:a1:e4:18: 48:ac:ed:4d:4d:39:a9:a5:68:9b:47:cc:b3:c1:5b:91:d0:99: 97:cd:6f:d8:25:0c:c3:37:15:37:fe:11:5e:2c:f5:2c:21:0f: 73:4e:44:0e:fa:84:0e:a4:95:c7:d8:c1:bb:65:4c:d6:a0:0d: aa:26:63:b2 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+pUhc+j9Rr9Sp0QE+uMyyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYjgyODBjNmNiN2RiM2UwNzM5NTBkNTM1ZDZkOGM3MDVk OTBiODcwHhcNMjYwMTAyMTIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGY4YWFmYTBlOGFmMDFkMGU0OTE5ZjVmMDk3ZTQ3NDI1MGExMDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2oNw7WAwCDMwxKxOTUx3vB43L6K W7QqgRxkHMAiyXAK5AjUXQBl4S2uH7odORdWNnhuzgmzhUUN3YaR2G5xJeqlb+yu HPcsED39HaybfOqqwJcihQR2wyJWWXcxaznKzbGZHa0sJRYkOfP725/sSPcwO5yZ LX7dFsXAl5CgSNK3awUYSxzDdbx6yAPK3Yl05Jb8QJXETJBGrVOo00XMvs9unN+6 CkzDE4Yw5pEWvFrtkZ8IKCwB8AADcv2+8GeWeee1OdnnN4YxDJhRRDHOL0rlvd6W txsEugOZfeyfbT/liA8LI5lkqn/7lVN19xwiWJC2TJBVEsW5AX7M0uHErwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFCT4qvoOivAdDkkZ9fCX5HQlChCbMB8GA1UdIwQY MBaAFC+4KAxst9s+BzlQ1TXW2McF2QuHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDdnb0RHeTMyejRIT1ZEVk5kYll4d1haQzRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hYTc2NGQtZjVhYy00YWNmLWIyYmQt OWZkYjVjNTVhZTUwLzEvSlBpcS1nNks4QjBPU1JuMThKZmtkQ1VLRUpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hYTc2NGQtZjVhYy00YWNmLWIyYmQtOWZkYjVjNTVhZTUw LzEvTDdnb0RHeTMyejRIT1ZEVk5kYll4d1haQzRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhQbQDAN BgkqhkiG9w0BAQsFAAOCAQEAqiD53JOI4fwMEdtNAsXRyaT4uMkmsSg00LkkKlfW s/MmYmAQqtI2M7ibtDmd6W4miLEbDP3/KJ/ikLiaLPwTIXAYBPLPIOT8a8oZ+Kva z7EPSS54TMrqdwvWh1JHhEoqBNKGV97tGgXp/NcfAJHaXza9YPOGztnTwxnBpxB+ uIcjO6kQKGo3nCIjIXadTosQ4sq2Ms2cY2n3qa4NH8O7+PImly9hYKYkrX45glJZ agjamy1yH4mE4mL4uuQ/ahs245UvoeQYSKztTU05qaVom0fMs8FbkdCZl81v2CUM wzcVN/4RXiz1LCEPc05EDvqEDqSVx9jBu2VM1qANqiZjsg== -----END CERTIFICATE-----Generated at Wed Jan 21 07:21:58 2026 by rpki-client