This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/8xS8wIBC8RDo3ysXTYKOmdWQk_o.roa File: 8xS8wIBC8RDo3ysXTYKOmdWQk_o.roa (raw, json) Hash identifier: hpf4ss4do87A7/7nOI7m/mjjzBJfHZBM2isDbZdkzW8= Subject key identifier: F3:14:BC:C0:80:42:F1:10:E8:DF:2B:17:4D:82:8E:99:D5:90:93:FA Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B1DEE885AF7F94F89AA00CC04301CC608 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/8xS8wIBC8RDo3ysXTYKOmdWQk_o.roa Signing time: Sun 14 Dec 2025 17:35:30 +0000 ROA not before: Sun 14 Dec 2025 17:35:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214906 IP address blocks: 2a0c:9a40:8e10::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 11:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:ee:88:5a:f7:f9:4f:89:aa:00:cc:04:30:1c:c6:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Dec 14 17:35:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f314bcc08042f110e8df2b174d828e99d59093fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:dd:c3:f2:58:b0:bb:06:ae:ab:48:fe:67:83: 54:14:8b:24:52:a5:4c:a9:a7:81:2b:09:83:41:a4: b3:07:5e:77:a7:69:5c:c6:75:58:00:a9:6b:af:60: 01:2d:98:73:13:74:b1:fd:ce:5d:a6:8f:91:e1:9e: d3:66:70:e8:58:5b:79:4a:92:61:fd:9c:b6:7d:89: 53:e6:5f:b5:8a:a1:ec:d7:62:11:10:d0:63:95:11: 72:79:4d:72:6c:0f:90:22:8f:b2:bf:ed:f9:c6:3d: 13:d4:ab:68:e8:94:c7:6b:a6:c7:e9:1f:78:c0:28: d2:52:e5:fa:20:ff:27:43:c2:6b:67:33:7e:7c:41: 9f:7c:45:c9:5e:dd:7c:36:ad:c6:16:c4:42:a4:b3: 53:82:e3:75:e2:c4:15:3f:5a:33:26:5b:e4:77:97: 42:f7:97:29:47:67:23:f2:64:05:66:34:d1:d2:59: 14:55:22:7a:e8:c4:8e:d9:c8:d2:3e:77:ec:cc:93: 50:2a:b2:86:6d:27:ae:60:4e:de:32:71:e3:c0:0a: d3:d9:a8:d0:52:da:19:3f:0b:9a:21:90:12:f7:6c: 5f:8b:c7:89:e3:7c:6b:df:66:0c:32:f6:c5:f6:d2: 6a:c0:c0:9f:52:b1:f4:0a:3d:c1:94:89:44:8a:08: 3f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:14:BC:C0:80:42:F1:10:E8:DF:2B:17:4D:82:8E:99:D5:90:93:FA X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/8xS8wIBC8RDo3ysXTYKOmdWQk_o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8e10::/44 Signature Algorithm: sha256WithRSAEncryption 64:ba:f5:73:f8:1c:61:4b:ad:a8:df:7e:e3:68:c4:45:c4:b1: 76:2f:ea:49:2a:6f:09:03:e0:39:0e:40:50:3e:08:5b:25:29: d1:a4:bc:94:04:0f:1f:70:cb:03:54:da:45:f2:30:5f:27:1f: c9:24:0f:d2:15:98:4e:37:89:8c:40:8f:0d:6a:f4:ae:72:91: 44:db:b7:3e:50:0c:0e:75:a7:a8:54:57:c0:4b:80:92:66:7f: b0:d4:6e:38:15:75:2e:f8:e3:40:2e:8d:d0:40:0c:57:43:05: 18:15:cf:2c:8e:e6:71:f7:22:35:cb:1c:4c:28:06:bd:91:e4: 20:c4:7b:49:60:40:29:7a:4f:e5:1e:8e:11:91:83:89:67:c0: 46:6a:8a:ad:5c:c5:35:cf:f8:fb:41:69:7d:d4:2b:fb:e4:25: 5f:39:5e:dc:ec:db:80:9b:8c:86:2a:30:32:75:46:8a:7f:42: bf:cc:5d:e0:a3:16:df:6f:f7:4a:b2:9b:b6:26:8f:42:73:51: a4:28:0c:aa:b4:69:e6:15:64:14:7d:e3:10:5b:26:d7:8f:73: 95:e2:ce:4f:91:04:0a:6e:1f:de:ff:31:48:31:ca:1c:98:20: 97:4a:b5:cb:b3:d1:7b:ea:b6:32:80:77:69:89:22:ce:85:8e: 3d:37:44:88 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZsd7oha9/lPiaoAzAQwHMYIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjUxMjE0MTczNTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzE0YmNjMDgwNDJmMTEwZThkZjJiMTc0ZDgyOGU5OWQ1OTA5M2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt3D8liwuwauq0j+Z4NUFIskUqVM qaeBKwmDQaSzB153p2lcxnVYAKlrr2ABLZhzE3Sx/c5dpo+R4Z7TZnDoWFt5SpJh /Zy2fYlT5l+1iqHs12IRENBjlRFyeU1ybA+QIo+yv+35xj0T1Kto6JTHa6bH6R94 wCjSUuX6IP8nQ8JrZzN+fEGffEXJXt18Nq3GFsRCpLNTguN14sQVP1ozJlvkd5dC 95cpR2cj8mQFZjTR0lkUVSJ66MSO2cjSPnfszJNQKrKGbSeuYE7eMnHjwArT2ajQ UtoZPwuaIZAS92xfi8eJ43xr32YMMvbF9tJqwMCfUrH0Cj3BlIlEigg/FwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPMUvMCAQvEQ6N8rF02CjpnVkJP6MB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvOHhTOHdJQkM4UkRvM3lzWFRZS09tZFdRa19vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQI4Q MA0GCSqGSIb3DQEBCwUAA4IBAQBkuvVz+BxhS62o337jaMRFxLF2L+pJKm8JA+A5 DkBQPghbJSnRpLyUBA8fcMsDVNpF8jBfJx/JJA/SFZhON4mMQI8NavSucpFE27c+ UAwOdaeoVFfAS4CSZn+w1G44FXUu+ONALo3QQAxXQwUYFc8sjuZx9yI1yxxMKAa9 keQgxHtJYEApek/lHo4RkYOJZ8BGaoqtXMU1z/j7QWl91Cv75CVfOV7c7NuAm4yG KjAydUaKf0K/zF3goxbfb/dKspu2Jo9Cc1GkKAyqtGnmFWQUfeMQWybXj3OV4s5P kQQKbh/e/zFIMcocmCCXSrXLs9F76rYygHdpiSLOhY49N0SI -----END CERTIFICATE-----Generated at Mon Dec 15 17:09:41 2025 by rpki-client