This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/JSRjHuE9Dlxbd6kNUCmCyuTjzi8.roa File: JSRjHuE9Dlxbd6kNUCmCyuTjzi8.roa (raw, json) Hash identifier: zf3sZG8UyEv9zaK8C2m/Vb5bOTa/zuVQAu3HlY+cXHI= Subject key identifier: 25:24:63:1E:E1:3D:0E:5C:5B:77:A9:0D:50:29:82:CA:E4:E3:CE:2F Certificate issuer: /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2 Certificate serial: 019B7F82018F97089136DB808E05AE891D7A Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/JSRjHuE9Dlxbd6kNUCmCyuTjzi8.roa Signing time: Fri 02 Jan 2026 16:19:45 +0000 ROA not before: Fri 02 Jan 2026 16:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35277 IP address blocks: 2a04:bc40:1dc3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 16:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:01:8f:97:08:91:36:db:80:8e:05:ae:89:1d:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2 Validity Not Before: Jan 2 16:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2524631ee13d0e5c5b77a90d502982cae4e3ce2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ad:f5:b5:07:c3:4f:85:8a:c3:c0:c4:3d:be: 52:6b:86:b8:1d:85:b7:43:4e:46:06:2d:2f:9b:34: 5e:e0:a7:f1:16:ed:1c:a5:10:22:f9:e2:e9:46:9d: 9f:64:15:8e:f1:4d:d1:8b:6c:ca:58:45:2b:53:9f: 6b:a1:d3:d3:2c:42:63:46:99:34:de:ae:5e:50:66: 92:7a:8f:7f:f5:92:0e:c2:70:a9:30:94:53:ed:1b: 73:bb:9a:ed:b8:da:af:f6:96:c3:70:0f:34:10:9c: 62:72:26:56:0c:a2:4c:04:bd:5f:52:dc:5b:b2:20: 8e:8f:68:0c:b6:0f:a1:b6:4d:1a:c6:8c:ee:0d:4e: 4d:6c:54:37:49:d9:45:6e:63:40:39:bf:5d:01:e0: a3:8a:11:90:a5:79:17:f2:26:fe:85:4c:47:32:c9: a3:6d:71:99:d5:81:87:5c:e2:5c:d8:68:ee:f0:8c: 37:54:e9:6c:82:a0:5d:5b:44:da:3b:5e:c5:e3:03: 5e:09:13:2d:51:ef:97:cc:b4:a6:22:d2:15:da:bb: 47:ea:38:74:df:8c:10:e1:65:00:61:3d:ac:bb:56: de:31:47:46:e7:e9:46:5d:c2:60:54:f5:af:ee:c5: 87:79:a5:ad:6a:d0:27:48:6a:c2:2f:05:09:b7:bb: 38:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:24:63:1E:E1:3D:0E:5C:5B:77:A9:0D:50:29:82:CA:E4:E3:CE:2F X509v3 Authority Key Identifier: keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/JSRjHuE9Dlxbd6kNUCmCyuTjzi8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:bc40:1dc3::/48 Signature Algorithm: sha256WithRSAEncryption 8b:7e:8d:8e:9a:cc:52:0b:47:09:95:d4:c9:4d:a0:6a:cc:a6: 3b:4c:0d:c0:6e:e3:43:8f:b7:86:24:52:61:3b:80:dc:1a:86: 65:a7:e8:51:e6:78:ea:77:5e:85:d5:cf:81:09:a8:29:95:da: c8:dc:3e:44:b4:56:1c:0e:ea:fc:85:49:3f:be:21:0e:a9:bd: dc:ad:8f:aa:bc:fc:4a:e4:1c:33:0b:3a:29:39:7c:4f:a4:6e: 8a:2d:77:d6:ae:1b:3f:10:01:98:2b:22:f8:09:56:7e:fd:30: c9:56:31:c9:db:c5:68:3c:84:84:1f:af:69:d3:9d:77:7a:17: 9d:2d:f8:f8:34:85:0c:e9:95:a4:6a:16:a9:ee:d4:76:cc:24: a9:0c:e5:5b:5f:7e:8c:c1:c3:86:03:0c:be:82:c5:51:d9:70: 6b:39:6a:4c:c0:43:70:a3:ad:20:3f:58:86:dc:57:7e:ed:d8: ac:7b:8f:62:48:fa:36:77:6b:33:41:53:a4:29:b9:a4:ee:97: 42:fe:5a:49:de:3a:d7:13:62:cb:e2:f4:9b:18:a9:ff:48:e9: 82:16:cf:a4:55:05:ae:b5:b4:79:9e:7b:35:ea:b5:ed:4a:69: e7:b6:7a:95:f7:68:a5:26:d2:57:29:df:d0:5b:b3:be:3f:0a: d4:30:02:61 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/ggGPlwiRNtuAjgWuiR16MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MmU3YjgwNjhjNGFlOWFlNGNhNGMzYTZiMjA5NjE5OWE3 NDFmZjIwHhcNMjYwMTAyMTYxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTI0NjMxZWUxM2QwZTVjNWI3N2E5MGQ1MDI5ODJjYWU0ZTNjZTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq31tQfDT4WKw8DEPb5Sa4a4HYW3 Q05GBi0vmzRe4KfxFu0cpRAi+eLpRp2fZBWO8U3Ri2zKWEUrU59rodPTLEJjRpk0 3q5eUGaSeo9/9ZIOwnCpMJRT7Rtzu5rtuNqv9pbDcA80EJxiciZWDKJMBL1fUtxb siCOj2gMtg+htk0axozuDU5NbFQ3SdlFbmNAOb9dAeCjihGQpXkX8ib+hUxHMsmj bXGZ1YGHXOJc2Gju8Iw3VOlsgqBdW0TaO17F4wNeCRMtUe+XzLSmItIV2rtH6jh0 34wQ4WUAYT2su1beMUdG5+lGXcJgVPWv7sWHeaWtatAnSGrCLwUJt7s4SwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCUkYx7hPQ5cW3epDVApgsrk484vMB8GA1UdIwQY MBaAFLgue4BoxK6a5MpMOmsglhmadB/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUM1N2dHakVycHJreWt3NmF5Q1dHWnAwSF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yOWM5MTUtMmNiYy00NzY4LTg0MGMt YWFkZmE5YzA2NzQyLzEvSlNSakh1RTlEbHhiZDZrTlVDbUN5dVRqemk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8yOWM5MTUtMmNiYy00NzY4LTg0MGMtYWFkZmE5YzA2NzQy LzEvdUM1N2dHakVycHJreWt3NmF5Q1dHWnAwSF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgS8QB3D MA0GCSqGSIb3DQEBCwUAA4IBAQCLfo2OmsxSC0cJldTJTaBqzKY7TA3AbuNDj7eG JFJhO4DcGoZlp+hR5njqd16F1c+BCagpldrI3D5EtFYcDur8hUk/viEOqb3crY+q vPxK5BwzCzopOXxPpG6KLXfWrhs/EAGYKyL4CVZ+/TDJVjHJ28VoPISEH69p0513 ehedLfj4NIUM6ZWkahap7tR2zCSpDOVbX36MwcOGAwy+gsVR2XBrOWpMwENwo60g P1iG3Fd+7dise49iSPo2d2szQVOkKbmk7pdC/lpJ3jrXE2LL4vSbGKn/SOmCFs+k VQWutbR5nns16rXtSmnntnqV92ilJtJXKd/QW7O+PwrUMAJh -----END CERTIFICATE-----Generated at Mon Jan 12 01:10:14 2026 by rpki-client