This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/8C5Qc1jGesnaDlr55Bdtrkak4Gs.roa File: 8C5Qc1jGesnaDlr55Bdtrkak4Gs.roa (raw, json) Hash identifier: sxxNThCm3nrgcbrGx+WnSdbs1hK8y85/anDbctnhLsk= Subject key identifier: F0:2E:50:73:58:C6:7A:C9:DA:0E:5A:F9:E4:17:6D:AE:46:A4:E0:6B Certificate issuer: /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa Certificate serial: 019B7834793D37F0BCEAA8078F6606065F86 Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/8C5Qc1jGesnaDlr55Bdtrkak4Gs.roa Signing time: Thu 01 Jan 2026 06:17:43 +0000 ROA not before: Thu 01 Jan 2026 06:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57712 IP address blocks: 2a00:f440:c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:79:3d:37:f0:bc:ea:a8:07:8f:66:06:06:5f:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa Validity Not Before: Jan 1 06:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f02e507358c67ac9da0e5af9e4176dae46a4e06b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:47:9c:a0:f1:26:1a:eb:76:4b:66:08:1e:f0: fc:d5:93:05:61:f8:12:1b:1f:f0:a0:64:6c:7e:98: a0:9b:47:dc:9d:d1:89:51:50:5f:15:dc:46:7a:42: 3d:f2:5b:a0:bf:e2:03:12:01:0a:50:89:5c:71:3b: 05:c5:b4:ff:d2:9c:5d:fe:09:ad:26:ae:b8:8f:38: ee:84:c6:7f:98:65:19:5f:04:5a:3d:38:06:b4:53: 50:19:16:52:c3:77:3d:43:cb:94:52:a2:9f:94:0b: ba:4b:fe:73:aa:70:7f:5f:d1:49:07:f2:f3:f6:e1: d3:2e:7b:21:3c:55:62:49:b5:a9:47:e9:fd:39:ad: 1b:b3:10:fe:0f:0c:09:aa:bc:7b:a9:08:80:1a:b9: cf:29:46:45:09:9c:87:63:0a:5b:7a:b8:4c:c8:92: 26:6a:72:58:d7:13:f9:ee:47:f5:2c:ac:9a:8c:20: f8:36:cf:29:92:29:ac:e3:ac:2a:7e:e8:19:83:27: 27:e8:08:11:46:d1:ad:d0:bd:e2:2c:8a:bb:a0:7f: 24:bd:8f:88:11:fd:da:43:27:92:26:bc:da:76:79: 4e:ff:a5:40:cb:5f:27:26:fc:8e:c1:43:38:5a:0b: 02:51:65:d5:bd:36:72:9f:c4:67:6f:65:d6:f7:d3: 87:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:2E:50:73:58:C6:7A:C9:DA:0E:5A:F9:E4:17:6D:AE:46:A4:E0:6B X509v3 Authority Key Identifier: keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/8C5Qc1jGesnaDlr55Bdtrkak4Gs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:f440:c::/48 Signature Algorithm: sha256WithRSAEncryption 69:b6:f7:8e:75:26:d2:8c:a2:34:53:74:bc:77:c6:51:3d:be: a9:95:b1:50:37:e4:2f:c3:30:d9:dc:97:9c:ba:1b:40:32:c1: 83:5c:35:65:20:ea:3d:4e:17:c3:bc:37:00:ae:91:cc:8d:44: 23:cd:09:05:70:00:e0:93:54:b8:73:84:35:4d:fc:7f:de:d5: de:1d:64:94:4c:eb:82:63:56:29:14:ac:81:66:38:c3:41:02: d7:9c:60:d3:2f:a8:70:e5:57:22:51:74:4b:e3:11:d0:71:d1: f3:0b:97:00:1b:36:ef:40:a2:77:d2:2b:3a:0f:e8:74:c1:8c: d6:9e:13:a2:35:d1:bc:bb:40:e3:99:86:0c:da:56:f9:69:42: ea:89:4b:9b:23:c7:36:6c:2d:6b:fc:d7:fe:1b:30:af:46:84: 9f:e4:76:fa:c5:81:d6:54:2e:8e:84:ca:8c:81:23:a0:be:91: ef:72:7f:cc:6b:dd:bb:48:1a:b4:10:58:eb:4f:cc:1b:60:63: 9d:80:d5:45:f5:f6:82:e5:46:e7:63:ca:7e:31:24:bc:fd:75: 77:c0:67:d5:82:bb:97:79:50:a9:08:5d:51:e8:e6:ff:52:90: f1:73:1d:8f:50:74:d3:b3:33:21:09:ef:53:79:93:da:2b:9b: 70:bf:24:f5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4NHk9N/C86qgHj2YGBl+GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4OTFjNDQ4ODY5OWU2ZDAyNGUzOWNjNGQ2MWVlZWFiZDM4 MDEwZmEwHhcNMjYwMTAxMDYxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDJlNTA3MzU4YzY3YWM5ZGEwZTVhZjllNDE3NmRhZTQ2YTRlMDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7EecoPEmGut2S2YIHvD81ZMFYfgS Gx/woGRsfpigm0fcndGJUVBfFdxGekI98lugv+IDEgEKUIlccTsFxbT/0pxd/gmt Jq64jzjuhMZ/mGUZXwRaPTgGtFNQGRZSw3c9Q8uUUqKflAu6S/5zqnB/X9FJB/Lz 9uHTLnshPFViSbWpR+n9Oa0bsxD+DwwJqrx7qQiAGrnPKUZFCZyHYwpberhMyJIm anJY1xP57kf1LKyajCD4Ns8pkims46wqfugZgycn6AgRRtGt0L3iLIq7oH8kvY+I Ef3aQyeSJrzadnlO/6VAy18nJvyOwUM4WgsCUWXVvTZyn8Rnb2XW99OHJQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPAuUHNYxnrJ2g5a+eQXba5GpOBrMB8GA1UdIwQY MBaAFJiRxEiGmebQJOOcxNYe7qvTgBD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUpIRVNJYVo1dEFrNDV6RTFoN3VxOU9BRVBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80N2RmMDAtODQ2OC00YzM5LWJlOTUt ZTEwYTYwNTk2YzI2LzEvOEM1UWMxakdlc25hRGxyNTVCZHRya2FrNEdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi80N2RmMDAtODQ2OC00YzM5LWJlOTUtZTEwYTYwNTk2YzI2 LzEvbUpIRVNJYVo1dEFrNDV6RTFoN3VxOU9BRVBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgD0QAAM MA0GCSqGSIb3DQEBCwUAA4IBAQBptveOdSbSjKI0U3S8d8ZRPb6plbFQN+QvwzDZ 3JecuhtAMsGDXDVlIOo9ThfDvDcArpHMjUQjzQkFcADgk1S4c4Q1Tfx/3tXeHWSU TOuCY1YpFKyBZjjDQQLXnGDTL6hw5VciUXRL4xHQcdHzC5cAGzbvQKJ30is6D+h0 wYzWnhOiNdG8u0DjmYYM2lb5aULqiUubI8c2bC1r/Nf+GzCvRoSf5Hb6xYHWVC6O hMqMgSOgvpHvcn/Ma927SBq0EFjrT8wbYGOdgNVF9faC5UbnY8p+MSS8/XV3wGfV gruXeVCpCF1R6Ob/UpDxcx2PUHTTszMhCe9TeZPaK5twvyT1 -----END CERTIFICATE-----Generated at Mon Jan 26 02:44:07 2026 by rpki-client