This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/jgYJ-Ic6G5lRmnuwLRqrvftwyxQ.roa File: jgYJ-Ic6G5lRmnuwLRqrvftwyxQ.roa (raw, json) Hash identifier: YK3pnpembYJVK3tFHfQ8eIavXzWvYt02q/rGuHr8gGU= Subject key identifier: 8E:06:09:F8:87:3A:1B:99:51:9A:7B:B0:2D:1A:AB:BD:FB:70:CB:14 Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd Certificate serial: 019B7910ABD4307C0DB8A492667DCC9D7E7A Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/jgYJ-Ic6G5lRmnuwLRqrvftwyxQ.roa Signing time: Thu 01 Jan 2026 10:18:14 +0000 ROA not before: Thu 01 Jan 2026 10:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212465 IP address blocks: 2a0c:93c0:8000::/48 maxlen: 48 2a0c:93c0:8002::/48 maxlen: 48 2a0c:93c0:c000::/48 maxlen: 48 2a0c:93c0:c002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ab:d4:30:7c:0d:b8:a4:92:66:7d:cc:9d:7e:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd Validity Not Before: Jan 1 10:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e0609f8873a1b99519a7bb02d1aabbdfb70cb14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2c:4b:a9:69:40:41:0c:a7:2c:1b:f1:6d:a3: ad:f6:1d:9d:a2:84:33:50:49:96:59:31:d5:d7:28: 94:83:f8:59:f4:dd:64:47:83:ed:df:c9:35:69:d3: 98:22:36:ed:2f:c3:f1:5a:c5:e7:f9:65:48:78:d7: 21:db:99:12:52:e0:37:b7:c4:02:7f:16:fd:35:73: b2:ab:47:44:22:f3:51:39:cc:41:f2:9c:8a:a8:24: 95:e9:af:e4:6b:77:fe:f8:ec:94:dc:99:0f:9f:f7: 1c:d4:1a:58:76:50:af:07:da:fe:51:5e:c6:89:6d: a5:e8:ff:5f:8c:ac:b3:0a:de:b5:6a:f8:e5:e0:47: 9d:77:2a:27:6e:da:c0:09:71:b2:48:aa:4c:28:84: 34:2d:c2:87:4f:89:82:b6:dd:9f:36:21:d8:9d:5d: 94:59:2a:aa:a2:7b:f2:69:91:f1:c6:1e:1e:80:50: 17:d7:69:bf:fd:22:8e:59:47:e0:54:9a:e0:64:83: 29:84:4d:ed:35:25:85:3a:7f:29:9c:83:6a:b5:73: 5e:31:0f:d3:29:4d:dc:38:25:c9:3b:a0:ee:89:1a: 4c:7a:d3:e0:29:75:f1:f8:55:76:0a:9b:5f:58:2e: 39:f6:8f:12:58:35:c4:8b:5f:34:6a:6a:58:03:26: ce:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:06:09:F8:87:3A:1B:99:51:9A:7B:B0:2D:1A:AB:BD:FB:70:CB:14 X509v3 Authority Key Identifier: keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/jgYJ-Ic6G5lRmnuwLRqrvftwyxQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:93c0:8000::/48 2a0c:93c0:8002::/48 2a0c:93c0:c000::/48 2a0c:93c0:c002::/48 Signature Algorithm: sha256WithRSAEncryption 15:be:46:57:9d:ba:ae:4e:aa:38:bc:e3:cd:65:8a:37:2a:26: b5:77:3a:de:30:70:29:f6:96:83:b3:55:e6:7d:97:04:36:f7: d5:4b:37:45:9c:ea:1f:83:1e:9e:dc:34:9f:a2:d4:75:13:cb: 26:e3:60:c5:7e:37:3a:b7:da:36:f8:68:d0:1b:50:97:01:f7: 26:de:bc:03:b8:2c:ef:82:c8:19:49:5e:ca:f8:e0:bf:9d:2c: 9f:fa:07:d7:5e:b4:8f:c4:74:3c:ce:7c:23:ec:8d:f7:93:60: b8:1f:7d:ce:c3:4b:1f:71:50:76:ac:6a:d4:ea:ea:08:9b:64: 5d:42:76:26:bb:91:ad:c9:ea:76:c8:c0:5e:93:db:02:ea:04: 4b:6e:ee:44:68:61:0f:af:15:48:be:7f:06:f2:84:ab:55:95: bc:2d:31:68:53:ea:de:e9:98:34:9d:fb:78:14:a1:07:d3:2c: f5:79:d8:7f:a9:88:d1:2e:11:e4:c9:cc:f8:ca:7f:c7:36:42: 2d:6f:67:17:e9:5d:88:92:e1:79:9c:78:07:58:83:71:62:04: da:7e:ff:7c:50:4b:51:41:2f:91:84:bd:7c:8d:ac:72:e7:13: 88:a9:d5:8d:55:f7:14:cf:65:b7:08:b0:c1:26:ce:16:69:1c: d1:fc:18:15 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt5EKvUMHwNuKSSZn3MnX56MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ODkyOTliYzQ5NTg0YTY0NTk0MGMxZGQ4N2RmMGFmYzhh YWEwZmQwHhcNMjYwMTAxMTAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTA2MDlmODg3M2ExYjk5NTE5YTdiYjAyZDFhYWJiZGZiNzBjYjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSxLqWlAQQynLBvxbaOt9h2dooQz UEmWWTHV1yiUg/hZ9N1kR4Pt38k1adOYIjbtL8PxWsXn+WVIeNch25kSUuA3t8QC fxb9NXOyq0dEIvNROcxB8pyKqCSV6a/ka3f++OyU3JkPn/cc1BpYdlCvB9r+UV7G iW2l6P9fjKyzCt61avjl4EeddyonbtrACXGySKpMKIQ0LcKHT4mCtt2fNiHYnV2U WSqqonvyaZHxxh4egFAX12m//SKOWUfgVJrgZIMphE3tNSWFOn8pnINqtXNeMQ/T KU3cOCXJO6DuiRpMetPgKXXx+FV2CptfWC459o8SWDXEi180ampYAybO5wIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFI4GCfiHOhuZUZp7sC0aq737cMsUMB8GA1UdIwQY MBaAFLaJKZvElYSmRZQMHdh98K/IqqD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83Y2E2MWEtY2UzZC00YmFjLTkxMTAt YzBmM2JhZDk5YTQwLzEvamdZSi1JYzZHNWxSbW51d0xScXJ2ZnR3eXhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy83Y2E2MWEtY2UzZC00YmFjLTkxMTAtYzBmM2JhZDk5YTQw LzEvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcAKgyTwIAA AwcAKgyTwIACAwcAKgyTwMAAAwcAKgyTwMACMA0GCSqGSIb3DQEBCwUAA4IBAQAV vkZXnbquTqo4vOPNZYo3Kia1dzreMHAp9paDs1XmfZcENvfVSzdFnOofgx6e3DSf otR1E8sm42DFfjc6t9o2+GjQG1CXAfcm3rwDuCzvgsgZSV7K+OC/nSyf+gfXXrSP xHQ8znwj7I33k2C4H33Ow0sfcVB2rGrU6uoIm2RdQnYmu5Gtyep2yMBek9sC6gRL bu5EaGEPrxVIvn8G8oSrVZW8LTFoU+re6Zg0nft4FKEH0yz1edh/qYjRLhHkycz4 yn/HNkItb2cX6V2IkuF5nHgHWINxYgTafv98UEtRQS+RhL18jaxy5xOIqdWNVfcU z2W3CLDBJs4WaRzR/BgV -----END CERTIFICATE-----Generated at Sun Jan 11 10:38:22 2026 by rpki-client