This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/mL8lAxWE1vx2gACaArt4Elb3jj8.roa File: mL8lAxWE1vx2gACaArt4Elb3jj8.roa (raw, json) Hash identifier: Amb3PyWffn1XjgNEsm8nCzUlUMBMyYKDewByQ77WAgo= Subject key identifier: 98:BF:25:03:15:84:D6:FC:76:80:00:9A:02:BB:78:12:56:F7:8E:3F Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Certificate serial: 019B7F84C8EFA5D244B184A6EBB3E8DEB8F9 Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/mL8lAxWE1vx2gACaArt4Elb3jj8.roa Signing time: Fri 02 Jan 2026 16:22:47 +0000 ROA not before: Fri 02 Jan 2026 16:22:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41033 IP address blocks: 2a14:f40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:c8:ef:a5:d2:44:b1:84:a6:eb:b3:e8:de:b8:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Validity Not Before: Jan 2 16:22:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98bf25031584d6fc7680009a02bb781256f78e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5f:25:f5:98:86:c0:ca:46:a4:bc:8e:8e:0e: 27:73:e6:3c:06:47:fe:2f:82:97:f0:0c:80:f1:57: c1:cb:7a:b7:f8:de:87:dd:ff:d9:51:13:8e:cf:39: 3a:60:91:3e:0d:60:1b:79:9c:a8:ba:62:f9:d9:2f: 0a:94:af:64:c5:a4:73:b2:82:ce:45:75:6d:ca:fa: f3:32:2d:e8:93:53:b4:3c:b0:ec:0a:4f:7c:d4:a6: 1a:ad:e0:c3:51:61:33:e8:90:5e:f7:4a:80:1b:c8: e3:2d:42:2c:6a:be:94:4c:e8:3b:34:b0:67:66:f9: df:9d:e2:82:53:ca:09:c9:f1:e5:e2:5b:29:a5:f0: 4a:cf:8f:e2:f6:ef:54:0c:cd:e5:52:8d:22:9a:59: c5:14:94:14:b3:3c:63:45:2e:0b:43:12:92:25:05: 80:a3:17:02:eb:d7:15:ec:fe:56:34:81:6a:b7:ff: ca:1f:a7:1a:46:65:87:48:87:90:4c:7a:67:5a:d0: 36:4a:5e:4d:bb:b1:10:b6:b6:1c:0a:ba:50:78:18: 80:c3:21:a1:a0:6b:9d:4a:96:1f:93:cc:31:f8:38: f5:2e:75:93:a6:4c:06:69:1d:00:d7:eb:76:2a:b2: a8:33:9d:64:bc:fb:4a:b0:1e:ce:a8:ea:ec:39:45: d8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BF:25:03:15:84:D6:FC:76:80:00:9A:02:BB:78:12:56:F7:8E:3F X509v3 Authority Key Identifier: keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/mL8lAxWE1vx2gACaArt4Elb3jj8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:f40::/29 Signature Algorithm: sha256WithRSAEncryption 21:b8:31:07:b1:84:98:15:81:37:80:f5:4c:84:d9:e3:84:f8: 50:5c:12:f0:b3:89:91:09:0f:8f:43:1d:c8:8e:75:30:04:15: 39:3e:39:d7:82:1d:07:bb:1b:37:4d:3d:14:0c:2a:e0:71:84: 70:86:e5:db:f0:fe:56:41:89:e5:47:6a:d2:84:5a:f0:bc:55: f8:5e:39:f2:ea:78:53:20:0c:c9:92:e3:e5:7a:40:11:46:02: 9a:a1:87:04:ca:b9:17:2b:41:36:1f:1f:56:3f:4f:67:60:3e: 14:28:6d:21:39:8c:e2:db:df:b2:02:4b:08:71:52:ff:c0:3a: d4:c4:6c:01:24:13:1c:15:00:65:bf:17:37:76:75:4e:b9:0b: ab:a9:e4:36:ae:29:66:28:b6:57:e9:31:96:ca:09:77:cd:8f: 19:79:25:51:26:39:31:6c:10:3e:1e:8c:da:8e:17:8e:77:0d: 60:aa:a7:91:8a:88:57:4a:28:c1:85:b6:5d:8e:89:5a:e6:56: c9:51:d8:9a:1e:85:11:45:1c:83:97:44:cc:9a:2b:21:e3:1f: 99:3b:e5:26:9b:c4:97:2a:44:f3:b8:34:b2:df:04:b0:21:da: cb:77:cf:96:69:f1:e5:1a:ce:47:2f:ab:46:a7:18:38:77:43: b5:c1:29:3b -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/hMjvpdJEsYSm67Po3rj5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz Mjc2ZTMwHhcNMjYwMTAyMTYyMjQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGJmMjUwMzE1ODRkNmZjNzY4MDAwOWEwMmJiNzgxMjU2Zjc4ZTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjV8l9ZiGwMpGpLyOjg4nc+Y8Bkf+ L4KX8AyA8VfBy3q3+N6H3f/ZUROOzzk6YJE+DWAbeZyoumL52S8KlK9kxaRzsoLO RXVtyvrzMi3ok1O0PLDsCk981KYareDDUWEz6JBe90qAG8jjLUIsar6UTOg7NLBn ZvnfneKCU8oJyfHl4lsppfBKz4/i9u9UDM3lUo0imlnFFJQUszxjRS4LQxKSJQWA oxcC69cV7P5WNIFqt//KH6caRmWHSIeQTHpnWtA2Sl5Nu7EQtrYcCrpQeBiAwyGh oGudSpYfk8wx+Dj1LnWTpkwGaR0A1+t2KrKoM51kvPtKsB7OqOrsOUXYrwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFJi/JQMVhNb8doAAmgK7eBJW944/MB8GA1UdIwQY MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt YTJhNGM2YTYyMWNkLzEvbUw4bEF4V0UxdngyZ0FDYUFydDRFbGIzamo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhQPQDAN BgkqhkiG9w0BAQsFAAOCAQEAIbgxB7GEmBWBN4D1TITZ44T4UFwS8LOJkQkPj0Md yI51MAQVOT4514IdB7sbN009FAwq4HGEcIbl2/D+VkGJ5Udq0oRa8LxV+F458up4 UyAMyZLj5XpAEUYCmqGHBMq5FytBNh8fVj9PZ2A+FChtITmM4tvfsgJLCHFS/8A6 1MRsASQTHBUAZb8XN3Z1TrkLq6nkNq4pZii2V+kxlsoJd82PGXklUSY5MWwQPh6M 2o4XjncNYKqnkYqIV0oowYW2XY6JWuZWyVHYmh6FEUUcg5dEzJorIeMfmTvlJpvE lypE87g0st8EsCHay3fPlmnx5RrORy+rRqcYOHdDtcEpOw== -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:53 2026 by rpki-client