This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/8kxxIcyQaGdLxrnZAq1wbZqjoOM.roa File: 8kxxIcyQaGdLxrnZAq1wbZqjoOM.roa (raw, json) Hash identifier: Q9iaQOzRN0ewedxwnNqabHnJRO4rZZJAagXIQIPYPes= Subject key identifier: F2:4C:71:21:CC:90:68:67:4B:C6:B9:D9:02:AD:70:6D:9A:A3:A0:E3 Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019BBCD5FDC24F07A297EDAC61C7E98AC585 Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/8kxxIcyQaGdLxrnZAq1wbZqjoOM.roa Signing time: Wed 14 Jan 2026 14:08:19 +0000 ROA not before: Wed 14 Jan 2026 14:08:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 2a05:9a40::/29 maxlen: 29 2a0b:ac00::/29 maxlen: 29 2a0f:9b40::/29 maxlen: 29 2a10:3f80::/29 maxlen: 29 2a10:77c0::/29 maxlen: 29 2a13:b4c1::/32 maxlen: 32 2a13:b9c0::/29 maxlen: 29 2a13:bb40::/29 maxlen: 29 2a13:c240::/29 maxlen: 29 2a13:c340::/29 maxlen: 29 2a13:c441::/32 maxlen: 32 2a14:1100::/32 maxlen: 32 2a14:1101::/32 maxlen: 32 2a14:1102::/32 maxlen: 32 2a14:1103::/32 maxlen: 32 2a14:1104::/32 maxlen: 32 2a14:1105::/32 maxlen: 32 2a14:1106::/32 maxlen: 32 2a14:1107::/32 maxlen: 32 2a14:62c0::/29 maxlen: 29 2a14:6a40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bc:d5:fd:c2:4f:07:a2:97:ed:ac:61:c7:e9:8a:c5:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Jan 14 14:08:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f24c7121cc9068674bc6b9d902ad706d9aa3a0e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:43:08:d7:2b:a3:0d:ec:cb:0c:fb:80:24:e1: 05:36:36:02:a1:8f:d7:cd:2d:12:81:13:f6:59:3c: 15:61:d2:a1:45:f0:bf:9e:6d:2d:aa:fd:93:24:44: 93:93:72:c7:1c:cb:39:b0:47:8e:fd:57:52:c5:66: 58:e0:08:db:59:df:50:8b:75:89:35:5a:31:fc:c6: 52:60:7d:43:db:ad:4c:f7:16:65:9b:ca:f4:bf:e3: 74:bb:37:3b:4e:9b:ca:c4:92:bc:84:99:bc:cb:e3: c3:c5:70:c5:c9:ba:25:ab:7b:c2:64:20:ba:e3:86: cf:a9:e3:59:a7:84:c8:0a:2a:10:7e:d6:dd:28:f0: a3:1f:6c:f5:96:4d:f4:e5:d9:f1:12:a7:53:42:a7: 5d:df:80:c3:e7:67:cc:f2:0f:02:50:64:a9:f0:7d: 49:6f:b7:53:0f:1e:54:dd:bf:a4:40:36:e9:5b:6b: 79:8f:73:b3:67:28:0c:a6:3c:91:db:26:db:09:16: 75:e0:f6:be:86:48:b7:2d:ee:40:8a:ef:b2:45:e0: 00:0d:86:9d:ee:a6:27:cd:e7:c5:46:fc:59:9b:42: 2d:87:ac:1d:c7:37:e2:e1:a5:a4:48:b2:77:07:1d: 83:46:bc:3a:cb:bb:87:a7:dd:2e:fd:80:2c:2b:7d: 65:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:4C:71:21:CC:90:68:67:4B:C6:B9:D9:02:AD:70:6D:9A:A3:A0:E3 X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/8kxxIcyQaGdLxrnZAq1wbZqjoOM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:9a40::/29 2a0b:ac00::/29 2a0f:9b40::/29 2a10:3f80::/29 2a10:77c0::/29 2a13:b4c1::/32 2a13:b9c0::/29 2a13:bb40::/29 2a13:c240::/29 2a13:c340::/29 2a13:c441::/32 2a14:1100::/29 2a14:62c0::/29 2a14:6a40::/32 Signature Algorithm: sha256WithRSAEncryption 5d:09:7c:3a:8b:4f:09:a3:ad:00:a8:67:03:2b:4d:82:4f:74: b8:df:2f:3f:13:98:60:e9:06:00:89:ba:ed:79:54:35:8e:34: c3:27:4f:23:90:d7:fa:20:19:36:ce:2b:dd:8a:6e:ae:d5:02: 73:da:19:f6:a4:ca:3e:a3:f8:b3:12:69:5f:9c:83:fc:f1:7e: d0:8e:8d:12:ad:52:49:dc:e2:44:f0:32:1c:1e:eb:d5:80:2c: e2:68:15:f1:07:ab:89:69:8d:16:ce:73:76:7d:51:65:5e:4b: bf:bf:32:47:b1:2e:cc:68:8d:4b:68:fc:28:15:98:50:e3:51: d8:8e:e1:7d:f4:da:b6:1e:57:29:ba:56:9f:7d:74:68:09:4f: dc:87:34:42:1f:65:7c:5d:7c:d6:c5:b2:6d:dc:f0:0b:48:47: 0d:58:9a:4d:cc:83:06:3c:e5:e3:02:67:0c:c0:74:d6:00:fd: c2:6f:dd:95:4f:88:b1:fb:25:64:69:fb:fe:a6:e1:2d:d1:86: fe:7e:b9:fc:b2:7b:45:48:6e:dd:9b:67:5f:90:c1:07:de:75: 12:48:ae:00:a2:f9:f1:38:9c:d1:e7:61:ee:a1:57:02:72:ea: 3c:00:c4:ff:bd:2e:d5:61:f0:81:79:e7:93:af:c8:94:61:26: 12:d1:9f:40 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgISAZu81f3CTweil+2sYcfpisWFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjYwMTE0MTQwODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjRjNzEyMWNjOTA2ODY3NGJjNmI5ZDkwMmFkNzA2ZDlhYTNhMGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEMI1yujDezLDPuAJOEFNjYCoY/X zS0SgRP2WTwVYdKhRfC/nm0tqv2TJESTk3LHHMs5sEeO/VdSxWZY4AjbWd9Qi3WJ NVox/MZSYH1D261M9xZlm8r0v+N0uzc7TpvKxJK8hJm8y+PDxXDFybolq3vCZCC6 44bPqeNZp4TICioQftbdKPCjH2z1lk305dnxEqdTQqdd34DD52fM8g8CUGSp8H1J b7dTDx5U3b+kQDbpW2t5j3OzZygMpjyR2ybbCRZ14Pa+hki3Le5Aiu+yReAADYad 7qYnzefFRvxZm0Ith6wdxzfi4aWkSLJ3Bx2DRrw6y7uHp90u/YAsK31l6wIDAQAB o4ICZTCCAmEwHQYDVR0OBBYEFPJMcSHMkGhnS8a52QKtcG2ao6DjMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvOGt4eEljeVFhR2RMeHJuWkFxMXdiWnFqb09NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajBoBAIAAjBiAwUDKgWaQAMF AyoLrAADBQMqD5tAAwUDKhA/gAMFAyoQd8ADBQAqE7TBAwUDKhO5wAMFAyoTu0AD BQMqE8JAAwUDKhPDQAMFACoTxEEDBQMqFBEAAwUDKhRiwAMFACoUakAwDQYJKoZI hvcNAQELBQADggEBAF0JfDqLTwmjrQCoZwMrTYJPdLjfLz8TmGDpBgCJuu15VDWO NMMnTyOQ1/ogGTbOK92Kbq7VAnPaGfakyj6j+LMSaV+cg/zxftCOjRKtUknc4kTw Mhwe69WALOJoFfEHq4lpjRbOc3Z9UWVeS7+/MkexLsxojUto/CgVmFDjUdiO4X30 2rYeVym6Vp99dGgJT9yHNEIfZXxdfNbFsm3c8AtIRw1Ymk3MgwY85eMCZwzAdNYA /cJv3ZVPiLH7JWRp+/6m4S3Rhv5+ufyye0VIbt2bZ1+QwQfedRJIrgCi+fE4nNHn Ye6hVwJy6jwAxP+9LtVh8IF555OvyJRhJhLRn0A= -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:32 2026 by rpki-client