This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/Ro8LRBlcuDbCiK_y93exT9nN0Eo.roa File: Ro8LRBlcuDbCiK_y93exT9nN0Eo.roa (raw, json) Hash identifier: QtMlmeOF9Qrugbq+UIrG5kQoEulUbPI2vyELAcoz11Y= Subject key identifier: 46:8F:0B:44:19:5C:B8:36:C2:88:AF:F2:F7:77:B1:4F:D9:CD:D0:4A Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Certificate serial: 019B7EA660AA6F6EF8CC8A5C94D3F440609E Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/Ro8LRBlcuDbCiK_y93exT9nN0Eo.roa Signing time: Fri 02 Jan 2026 12:19:51 +0000 ROA not before: Fri 02 Jan 2026 12:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205745 IP address blocks: 2a01:64e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:60:aa:6f:6e:f8:cc:8a:5c:94:d3:f4:40:60:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Validity Not Before: Jan 2 12:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=468f0b44195cb836c288aff2f777b14fd9cdd04a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f9:23:19:0f:c6:c6:4c:80:3f:c1:f9:97:34: 20:77:74:19:a1:89:71:55:ac:55:ab:01:06:37:62: e7:8d:96:75:95:eb:1b:54:95:bd:86:0a:87:b3:ea: 2b:35:2c:8e:34:3d:19:89:28:ef:ce:27:cf:6b:56: 15:6c:92:83:f8:81:a3:65:8b:ad:80:ea:8f:d2:ac: 0c:1c:9c:94:43:99:bb:1d:ab:3a:03:82:e3:d9:6b: d3:4b:e0:f3:34:96:e0:85:b4:e8:bb:a5:da:b7:e8: 42:1c:3e:d9:d0:fa:6d:56:b5:29:80:b4:e0:bd:69: cc:7b:9c:be:b7:0e:0e:50:f9:d2:6a:7d:f4:48:d7: 80:ce:fe:75:ac:d4:cf:67:4c:39:50:ea:e5:3e:50: 44:b6:d5:c8:f1:bb:15:88:4f:f6:c0:26:ea:1f:53: 40:b7:65:b4:82:b3:c4:ff:3d:e9:30:3d:0d:a9:f9: 94:c2:e8:a6:92:89:49:9a:34:5d:33:fd:9a:1f:8e: 39:f4:c9:be:06:a7:68:05:fd:2b:65:f4:8d:55:93: 0d:95:89:9f:56:4c:0f:e1:16:50:29:d6:95:00:5c: 12:d2:ff:ad:4d:9e:c4:63:a2:56:af:1f:97:75:92: 8f:87:08:0f:d1:bd:cb:b4:dc:67:64:eb:c3:16:95: 83:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:8F:0B:44:19:5C:B8:36:C2:88:AF:F2:F7:77:B1:4F:D9:CD:D0:4A X509v3 Authority Key Identifier: keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/Ro8LRBlcuDbCiK_y93exT9nN0Eo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:64e0::/32 Signature Algorithm: sha256WithRSAEncryption 76:1e:40:14:77:8c:17:c5:ff:5e:36:54:67:0c:7f:61:a8:83: 69:63:7c:65:9d:91:e6:da:30:e2:37:ac:b6:fb:00:a8:87:23: 51:c5:27:c1:9e:fd:81:dd:f8:fb:7f:2f:8d:2c:6a:4e:b5:c4: ab:03:74:fb:85:27:4e:2f:a5:d7:d3:11:f0:13:a3:90:b4:a6: 7d:32:c9:1c:85:ce:a9:a5:e3:15:22:cf:96:df:ad:f4:e9:fa: e2:d9:f3:ee:b7:6d:b2:b7:18:36:e7:a8:59:19:50:e2:69:53: c1:ac:eb:2c:1c:3a:02:01:54:a9:2c:7a:c4:6a:d6:85:7c:18: d3:db:39:d6:a9:02:af:1c:8c:70:06:36:5e:c8:2d:8b:f9:56: b6:14:38:50:77:dc:bb:b3:ab:50:83:c3:74:90:ee:c3:bd:e4: 3c:63:48:11:d6:7e:64:a4:53:ee:cb:e0:e0:30:a2:b2:53:76: de:76:04:3a:80:64:63:51:43:53:a2:16:77:e0:fc:51:a9:5d: 97:2a:ab:6e:45:82:d5:7f:5e:8b:12:0b:d8:44:5f:93:87:68: 4c:d1:01:c2:87:de:9a:5b:9a:dd:f5:ee:1b:ed:9c:e5:c7:af: ac:28:d4:5f:b2:97:02:9d:62:77:10:f7:10:1f:c8:fa:a1:4e: d6:92:cd:bd -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+pmCqb274zIpclNP0QGCeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2 OWYyYTAwHhcNMjYwMTAyMTIxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjhmMGI0NDE5NWNiODM2YzI4OGFmZjJmNzc3YjE0ZmQ5Y2RkMDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/kjGQ/GxkyAP8H5lzQgd3QZoYlx VaxVqwEGN2LnjZZ1lesbVJW9hgqHs+orNSyOND0ZiSjvzifPa1YVbJKD+IGjZYut gOqP0qwMHJyUQ5m7Has6A4Lj2WvTS+DzNJbghbTou6Xat+hCHD7Z0PptVrUpgLTg vWnMe5y+tw4OUPnSan30SNeAzv51rNTPZ0w5UOrlPlBEttXI8bsViE/2wCbqH1NA t2W0grPE/z3pMD0NqfmUwuimkolJmjRdM/2aH4459Mm+BqdoBf0rZfSNVZMNlYmf VkwP4RZQKdaVAFwS0v+tTZ7EY6JWrx+XdZKPhwgP0b3LtNxnZOvDFpWDbwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFEaPC0QZXLg2woiv8vd3sU/ZzdBKMB8GA1UdIwQY MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt NDI4NTk5ODM5MmQzLzEvUm84TFJCbGN1RGJDaUtfeTkzZXhUOW5OMEVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgFk4DAN BgkqhkiG9w0BAQsFAAOCAQEAdh5AFHeMF8X/XjZUZwx/YaiDaWN8ZZ2R5tow4jes tvsAqIcjUcUnwZ79gd34+38vjSxqTrXEqwN0+4UnTi+l19MR8BOjkLSmfTLJHIXO qaXjFSLPlt+t9On64tnz7rdtsrcYNueoWRlQ4mlTwazrLBw6AgFUqSx6xGrWhXwY 09s51qkCrxyMcAY2Xsgti/lWthQ4UHfcu7OrUIPDdJDuw73kPGNIEdZ+ZKRT7svg 4DCislN23nYEOoBkY1FDU6IWd+D8UaldlyqrbkWC1X9eixIL2ERfk4doTNEBwofe mlua3fXuG+2c5cevrCjUX7KXAp1idxD3EB/I+qFO1pLNvQ== -----END CERTIFICATE-----Generated at Sun Jan 25 13:54:43 2026 by rpki-client