This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/j08EFOK752NdNFSst6YNuuXIs94.roa File: j08EFOK752NdNFSst6YNuuXIs94.roa (raw, json) Hash identifier: 0wWKhhQHCzxymtCQpY/jgYYzRMgggbOAbZE2X/jvESk= Subject key identifier: 8F:4F:04:14:E2:BB:E7:63:5D:34:54:AC:B7:A6:0D:BA:E5:C8:B3:DE Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 019B7F83989C605F3BB9B3C6826784DD8D56 Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/j08EFOK752NdNFSst6YNuuXIs94.roa Signing time: Fri 02 Jan 2026 16:21:29 +0000 ROA not before: Fri 02 Jan 2026 16:21:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209083 IP address blocks: 2a0e:800:ff00::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:98:9c:60:5f:3b:b9:b3:c6:82:67:84:dd:8d:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Jan 2 16:21:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f4f0414e2bbe7635d3454acb7a60dbae5c8b3de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:56:62:df:53:0e:17:de:81:47:c1:0a:71:61: cb:b6:78:13:60:60:58:d7:29:2b:c1:b9:b4:71:b2: 2f:d1:3e:98:57:55:58:96:c8:83:23:80:39:05:a4: 4e:64:1a:01:7e:96:63:41:04:39:cd:08:70:ff:2c: 5d:08:47:13:53:8c:15:58:e2:c9:a5:c0:fc:b8:55: bd:d0:d3:95:01:c0:3d:a0:65:a3:e3:06:c5:84:a2: a5:8b:3c:30:33:70:5f:ad:ad:7d:31:dc:6e:14:3c: c0:17:24:44:21:15:2a:e1:42:cb:1d:b6:6b:7e:95: 00:59:f0:4f:29:28:49:60:ef:6b:2b:91:2b:33:52: 01:8a:1e:d7:81:4f:3f:1b:b1:d4:6c:e8:f2:3a:84: 4e:d0:dc:a5:6c:1a:bd:c2:ce:e1:79:f5:1b:a7:c5: a9:d8:a6:47:70:d6:a4:9b:75:60:17:9c:8d:3a:e5: 98:0f:78:42:1a:c3:5e:b7:bb:5c:0b:e2:0c:14:c3: 8b:24:1d:5a:26:2f:1e:e0:9d:4a:f8:e4:36:3c:e5: 61:7a:89:7b:7e:65:22:e8:c9:55:18:fa:50:58:40: 58:2b:75:0a:70:a3:05:13:aa:0c:dd:dd:e5:1e:c2: 40:f4:ae:49:f0:99:90:e0:38:0f:cf:b5:5e:cb:1e: 92:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:4F:04:14:E2:BB:E7:63:5D:34:54:AC:B7:A6:0D:BA:E5:C8:B3:DE X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/j08EFOK752NdNFSst6YNuuXIs94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:800:ff00::/44 Signature Algorithm: sha256WithRSAEncryption 28:fa:ac:80:8d:3f:a0:ce:8a:ee:b0:bf:67:de:8a:ee:8a:46: ae:4c:f2:51:2e:d7:c6:3a:65:21:bc:59:72:d3:23:57:e7:77: fc:30:ee:54:e1:bb:4c:79:5f:58:40:d0:5a:f3:2d:5a:16:1d: 2c:67:ef:f9:ac:75:05:43:87:e8:f0:60:af:dd:05:0e:dd:3c: dd:54:cb:f8:ff:d5:8f:79:1e:8c:ee:68:2c:3b:1f:9f:f6:1d: 8e:03:b0:d9:13:d5:0c:e2:ed:b6:45:a1:8f:50:c9:c7:09:3d: 31:c3:af:81:e4:aa:d9:bb:eb:8f:03:84:dc:19:f6:7e:d0:6e: 66:6e:66:ea:6c:d6:16:ae:c7:b8:0d:34:b2:4e:b9:d5:c3:57: be:c3:45:82:a3:e4:c5:a5:40:c1:34:97:52:f9:98:2a:13:53: 9b:0e:b8:06:8d:75:15:9d:28:1c:d8:e0:ca:d1:2b:15:3c:2f: b8:c8:66:70:2c:3b:3c:e5:10:9b:d3:9f:19:b9:d0:99:0d:e9: ab:17:cc:e7:b0:04:22:62:0f:cb:0c:3c:13:9a:30:ca:da:72: ba:6d:3d:2a:41:ea:11:c2:22:53:1a:d7:3e:98:27:69:98:62: 0a:a5:b1:4e:09:bc:5e:f8:4a:5c:8a:48:ad:3c:40:f8:de:db: 93:9b:26:33 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/g5icYF87ubPGgmeE3Y1WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjYwMTAyMTYyMTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjRmMDQxNGUyYmJlNzYzNWQzNDU0YWNiN2E2MGRiYWU1YzhiM2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1Zi31MOF96BR8EKcWHLtngTYGBY 1ykrwbm0cbIv0T6YV1VYlsiDI4A5BaROZBoBfpZjQQQ5zQhw/yxdCEcTU4wVWOLJ pcD8uFW90NOVAcA9oGWj4wbFhKKlizwwM3Bfra19MdxuFDzAFyREIRUq4ULLHbZr fpUAWfBPKShJYO9rK5ErM1IBih7XgU8/G7HUbOjyOoRO0NylbBq9ws7hefUbp8Wp 2KZHcNakm3VgF5yNOuWYD3hCGsNet7tcC+IMFMOLJB1aJi8e4J1K+OQ2POVheol7 fmUi6MlVGPpQWEBYK3UKcKMFE6oM3d3lHsJA9K5J8JmQ4DgPz7Veyx6S8wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFI9PBBTiu+djXTRUrLemDbrlyLPeMB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvajA4RUZPSzc1Mk5kTkZTc3Q2WU51dVhJczk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg4IAP8A MA0GCSqGSIb3DQEBCwUAA4IBAQAo+qyAjT+gzorusL9n3oruikauTPJRLtfGOmUh vFly0yNX53f8MO5U4btMeV9YQNBa8y1aFh0sZ+/5rHUFQ4fo8GCv3QUO3TzdVMv4 /9WPeR6M7mgsOx+f9h2OA7DZE9UM4u22RaGPUMnHCT0xw6+B5KrZu+uPA4TcGfZ+ 0G5mbmbqbNYWrse4DTSyTrnVw1e+w0WCo+TFpUDBNJdS+ZgqE1ObDrgGjXUVnSgc 2ODK0SsVPC+4yGZwLDs85RCb058ZudCZDemrF8znsAQiYg/LDDwTmjDK2nK6bT0q QeoRwiJTGtc+mCdpmGIKpbFOCbxe+EpcikitPED43tuTmyYz -----END CERTIFICATE-----Generated at Sun Jan 25 13:31:08 2026 by rpki-client