This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/E8RgfAnRQ_MkPzEQzExnrRGS9bk.roa File: E8RgfAnRQ_MkPzEQzExnrRGS9bk.roa (raw, json) Hash identifier: Uscjfda3vNy/cunwHUUok4ph0ZEvFOV3pV/NuXcyZJ4= Subject key identifier: 13:C4:60:7C:09:D1:43:F3:24:3F:31:10:CC:4C:67:AD:11:92:F5:B9 Certificate issuer: /CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78 Certificate serial: 019B797E42B3A9903B334366BD761599C30F Authority key identifier: C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/E8RgfAnRQ_MkPzEQzExnrRGS9bk.roa Signing time: Thu 01 Jan 2026 12:17:56 +0000 ROA not before: Thu 01 Jan 2026 12:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20118 IP address blocks: 2a03:ba1::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:42:b3:a9:90:3b:33:43:66:bd:76:15:99:c3:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78 Validity Not Before: Jan 1 12:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13c4607c09d143f3243f3110cc4c67ad1192f5b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a9:9b:3e:65:96:75:52:b6:32:2a:73:d3:99: 52:99:80:4f:a2:29:e5:7d:dd:c2:9a:06:dd:56:f0: 5b:a3:5b:2e:e5:c1:4e:a9:f1:c2:39:36:16:b4:c9: d5:65:40:0e:c9:54:e1:32:de:dd:c6:44:a1:d9:c8: 76:2e:d2:c4:a3:20:bb:fc:da:df:6e:1b:4b:f8:29: 4e:69:3c:8f:56:d8:8c:4e:50:70:a8:d8:ea:eb:37: c1:3a:67:ad:d2:05:a4:d5:6e:68:3a:d8:ea:52:82: c7:94:52:cb:3f:c1:f0:6d:88:12:23:66:b1:7f:f3: 48:73:f3:d9:70:fd:27:90:5d:9d:90:78:bc:46:0f: de:9e:24:d5:36:e4:da:66:bf:b4:c9:ab:97:ec:3d: 54:dc:31:41:93:7d:4e:6c:d4:51:46:4a:3a:ad:0d: 9d:77:5c:a8:6d:47:3c:3b:17:12:65:fd:8b:70:9a: 61:a8:36:2f:06:2c:f2:26:c0:01:d4:ba:46:93:18: 95:ac:40:76:63:35:05:81:42:e9:f6:b7:a9:06:09: d8:9a:e7:21:f0:2e:7b:83:c7:1e:cd:6c:cb:f7:fe: e2:8f:fa:8c:36:ad:8c:06:69:cd:ce:ef:1f:88:04: 28:86:53:ce:00:03:15:2b:9e:76:ab:17:6b:9a:9f: 05:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C4:60:7C:09:D1:43:F3:24:3F:31:10:CC:4C:67:AD:11:92:F5:B9 X509v3 Authority Key Identifier: keyid:C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/E8RgfAnRQ_MkPzEQzExnrRGS9bk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:ba1::/64 Signature Algorithm: sha256WithRSAEncryption 68:13:bc:09:34:cb:a2:3f:8b:bc:25:da:0b:86:f7:47:cf:63: e6:f7:a0:5b:38:28:64:20:07:c8:a8:35:d5:00:0e:0e:54:65: 7b:3a:e4:40:66:72:e7:af:b9:88:31:ac:19:e6:d7:17:ae:ea: 6e:75:96:44:b9:d9:43:77:f0:28:7f:22:e1:9d:a4:eb:1c:97: a1:3e:16:ed:56:d1:8e:7e:03:2e:e6:c0:2d:22:a6:48:04:36: 10:88:75:4e:c4:4c:71:87:06:5c:bc:be:99:6c:ea:b5:f3:cf: b7:1e:5f:b6:47:08:14:f8:3d:05:5c:79:1e:95:0a:30:e6:ab: 4e:8a:ab:91:84:be:79:d3:d1:0e:3f:58:f5:ea:38:d8:a3:c8: d3:51:ff:87:e7:94:92:a5:e7:90:86:43:46:83:67:28:d7:e5: 24:99:bc:36:25:eb:81:1d:a0:60:4e:40:93:ba:70:eb:f0:a2: 46:d5:b2:f0:75:26:74:3c:0b:b6:3d:88:47:d1:97:48:63:85: 1d:29:14:c4:58:d0:bb:d5:2c:46:1b:93:71:a2:fc:8a:9c:8b: e8:7d:2e:f9:4d:be:03:7d:ee:9b:82:10:aa:8b:1b:50:e8:4d: e6:5e:0b:da:97:04:cc:82:c9:15:1b:44:fd:3c:d6:4c:a2:83: 33:33:57:83 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt5fkKzqZA7M0NmvXYVmcMPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YmZiZWYyNzliZjlkZWQ2ZTM2NTFlMDYyOGQzOWJhNzky OTRmNzgwHhcNMjYwMTAxMTIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2M0NjA3YzA5ZDE0M2YzMjQzZjMxMTBjYzRjNjdhZDExOTJmNWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqmbPmWWdVK2Mipz05lSmYBPoinl fd3CmgbdVvBbo1su5cFOqfHCOTYWtMnVZUAOyVThMt7dxkSh2ch2LtLEoyC7/Nrf bhtL+ClOaTyPVtiMTlBwqNjq6zfBOmet0gWk1W5oOtjqUoLHlFLLP8HwbYgSI2ax f/NIc/PZcP0nkF2dkHi8Rg/eniTVNuTaZr+0yauX7D1U3DFBk31ObNRRRko6rQ2d d1yobUc8OxcSZf2LcJphqDYvBizyJsAB1LpGkxiVrEB2YzUFgULp9repBgnYmuch 8C57g8cezWzL9/7ij/qMNq2MBmnNzu8fiAQohlPOAAMVK552qxdrmp8FDwIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFBPEYHwJ0UPzJD8xEMxMZ60RkvW5MB8GA1UdIwQY MBaAFMa/vvJ5v53tbjZR4GKNObp5KU94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHItLThubV9uZTF1TmxIZ1lvMDV1bmtwVDNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8yODQ2MmMtMmMyMy00Zjk1LThlOGQt YWRlNTMwZDdjNDFiLzEvRThSZ2ZBblJRX01rUHpFUXpFeG5yUkdTOWJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8yODQ2MmMtMmMyMy00Zjk1LThlOGQtYWRlNTMwZDdjNDFi LzEveHItLThubV9uZTF1TmxIZ1lvMDV1bmtwVDNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAKgMLoQAA AAAwDQYJKoZIhvcNAQELBQADggEBAGgTvAk0y6I/i7wl2guG90fPY+b3oFs4KGQg B8ioNdUADg5UZXs65EBmcuevuYgxrBnm1xeu6m51lkS52UN38Ch/IuGdpOscl6E+ Fu1W0Y5+Ay7mwC0ipkgENhCIdU7ETHGHBly8vpls6rXzz7ceX7ZHCBT4PQVceR6V CjDmq06Kq5GEvnnT0Q4/WPXqONijyNNR/4fnlJKl55CGQ0aDZyjX5SSZvDYl64Ed oGBOQJO6cOvwokbVsvB1JnQ8C7Y9iEfRl0hjhR0pFMRY0LvVLEYbk3Gi/Iqci+h9 LvlNvgN97puCEKqLG1DoTeZeC9qXBMyCyRUbRP081kyigzMzV4M= -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:18 2026 by rpki-client