This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/8cTdoFpyK1uxlvGe4E4cJOYy2DU.roa File: 8cTdoFpyK1uxlvGe4E4cJOYy2DU.roa (raw, json) Hash identifier: 8z1/2tfGmavVOd/S2OQwFJV+uwtGMYHfbjubllDpPe4= Subject key identifier: F1:C4:DD:A0:5A:72:2B:5B:B1:96:F1:9E:E0:4E:1C:24:E6:32:D8:35 Certificate issuer: /CN=7bab6c11d41162db0306858f83e5e65121132a6b Certificate serial: 019B791134AA112C1C1D967ADE00B10E688F Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/8cTdoFpyK1uxlvGe4E4cJOYy2DU.roa Signing time: Thu 01 Jan 2026 10:18:49 +0000 ROA not before: Thu 01 Jan 2026 10:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213189 IP address blocks: 2a07:22c0:c000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:34:aa:11:2c:1c:1d:96:7a:de:00:b1:0e:68:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b Validity Not Before: Jan 1 10:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1c4dda05a722b5bb196f19ee04e1c24e632d835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:90:d9:94:32:b3:22:6b:79:e7:54:72:b1:eb: 66:a0:39:31:97:ec:39:15:13:a8:be:51:a7:ec:c8: 06:1c:df:c3:e2:5b:19:43:97:a4:a8:22:7e:17:20: f3:7f:c9:91:97:ff:d6:84:2a:07:75:62:09:fd:29: 95:0a:81:90:e9:86:80:31:d5:a7:11:b1:55:05:0f: b5:6d:f0:b4:33:06:e1:95:1e:75:bf:57:ca:ac:24: f4:dd:62:e3:e5:5a:56:d1:de:cc:ae:3d:04:63:51: e9:39:8a:1f:19:e2:07:a0:7b:8f:10:37:02:1e:d8: 4f:49:fe:4e:b9:8a:3d:1a:41:78:b1:e6:49:f6:b1: 59:31:37:4a:2b:bf:f9:a1:46:81:06:98:b8:8a:85: 00:ee:37:4d:23:e8:2b:f9:12:c1:6d:ed:b8:f1:b4: 43:48:6c:18:c1:5b:c7:eb:55:83:32:e3:87:c6:83: 72:4d:2b:91:1b:db:f6:db:46:4c:3e:72:06:c6:b2: 77:07:3b:85:be:90:3c:69:3d:1b:40:47:4a:fd:92: 50:b9:5a:4b:c2:97:e9:a1:1f:38:f2:6c:1b:dc:e9: 04:a3:ab:cf:48:f0:ff:fc:86:dc:59:54:e2:3e:7b: ad:32:62:f7:72:55:29:08:2e:b0:8c:17:56:45:2d: f7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C4:DD:A0:5A:72:2B:5B:B1:96:F1:9E:E0:4E:1C:24:E6:32:D8:35 X509v3 Authority Key Identifier: keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/8cTdoFpyK1uxlvGe4E4cJOYy2DU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:22c0:c000::/40 Signature Algorithm: sha256WithRSAEncryption a7:87:90:ff:f4:b3:3c:03:35:f4:9c:ab:ae:ea:93:cc:8b:be: f6:1c:1e:c4:e5:1b:9d:cb:1b:10:46:b4:76:f8:94:c5:a0:09: de:36:3a:f7:10:89:4f:4e:71:a7:77:ae:14:ee:e5:e8:76:e4: 14:d4:1b:d9:54:a5:71:c8:d1:78:12:47:f6:b6:9b:33:b2:98: a5:8e:96:11:47:02:83:d8:fc:87:3d:ec:53:ca:cf:b4:e3:5b: 4d:96:5a:2a:e0:a2:f7:a9:1f:d4:8c:a7:9d:8d:20:c0:62:78: 58:af:8a:18:82:52:f1:a9:18:34:05:64:e9:26:7b:0f:a9:1e: 2a:c8:88:6a:c6:da:86:cf:1b:30:e5:88:7a:f8:0d:fe:f1:58: b7:c9:ed:a2:e5:ea:f4:04:c3:0d:82:8a:d1:0b:cd:0a:3b:79: cd:9a:d0:5c:3e:79:d0:60:e8:dd:c4:d1:04:b5:e9:69:8a:d3: 7b:b8:cb:74:b4:a3:ff:00:15:c9:87:f6:9d:64:bf:f0:dc:fe: 29:c3:1e:f3:d6:1a:91:97:44:4d:d6:a3:e1:0e:b7:ce:93:79: fb:23:73:3c:38:6c:9d:1e:04:eb:34:63:40:f4:d4:f7:f8:21: dd:8b:cd:eb:88:ab:fd:ac:01:e6:ab:76:91:70:9e:19:33:a3: 96:95:2e:6f -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt5ETSqESwcHZZ63gCxDmiPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYWI2YzExZDQxMTYyZGIwMzA2ODU4ZjgzZTVlNjUxMjEx MzJhNmIwHhcNMjYwMTAxMTAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWM0ZGRhMDVhNzIyYjViYjE5NmYxOWVlMDRlMWMyNGU2MzJkODM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZDZlDKzImt551RysetmoDkxl+w5 FROovlGn7MgGHN/D4lsZQ5ekqCJ+FyDzf8mRl//WhCoHdWIJ/SmVCoGQ6YaAMdWn EbFVBQ+1bfC0MwbhlR51v1fKrCT03WLj5VpW0d7Mrj0EY1HpOYofGeIHoHuPEDcC HthPSf5OuYo9GkF4seZJ9rFZMTdKK7/5oUaBBpi4ioUA7jdNI+gr+RLBbe248bRD SGwYwVvH61WDMuOHxoNyTSuRG9v220ZMPnIGxrJ3BzuFvpA8aT0bQEdK/ZJQuVpL wpfpoR848mwb3OkEo6vPSPD//IbcWVTiPnutMmL3clUpCC6wjBdWRS33oQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFPHE3aBacitbsZbxnuBOHCTmMtg1MB8GA1UdIwQY MBaAFHurbBHUEWLbAwaFj4Pl5lEhEyprMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTZ0c0VkUVJZdHNEQm9XUGctWG1VU0VUS21zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kMzM0YWQtNTI0MC00ZGFhLWEwNTAt OWY1YmY3MzY3MjBlLzEvOGNUZG9GcHlLMXV4bHZHZTRFNGNKT1l5MkRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9kMzM0YWQtNTI0MC00ZGFhLWEwNTAtOWY1YmY3MzY3MjBl LzEvZTZ0c0VkUVJZdHNEQm9XUGctWG1VU0VUS21zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgciwMAw DQYJKoZIhvcNAQELBQADggEBAKeHkP/0szwDNfScq67qk8yLvvYcHsTlG53LGxBG tHb4lMWgCd42OvcQiU9Ocad3rhTu5eh25BTUG9lUpXHI0XgSR/a2mzOymKWOlhFH AoPY/Ic97FPKz7TjW02WWirgovepH9SMp52NIMBieFivihiCUvGpGDQFZOkmew+p HirIiGrG2obPGzDliHr4Df7xWLfJ7aLl6vQEww2CitELzQo7ec2a0Fw+edBg6N3E 0QS16WmK03u4y3S0o/8AFcmH9p1kv/Dc/inDHvPWGpGXRE3Wo+EOt86Tefsjczw4 bJ0eBOs0Y0D01Pf4Id2LzeuIq/2sAeardpFwnhkzo5aVLm8= -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:13 2026 by rpki-client