This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/r8QQa0KeKI1GL64nr5wN_b7RP5c.roa File: r8QQa0KeKI1GL64nr5wN_b7RP5c.roa (raw, json) Hash identifier: VPjTppJbG0cInafRi0EuzWNFWUjNr+CGPb1+lvJ/FIU= Subject key identifier: AF:C4:10:6B:42:9E:28:8D:46:2F:AE:27:AF:9C:0D:FD:BE:D1:3F:97 Certificate issuer: /CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07 Certificate serial: 019B78A269517E21CBB587928F0DA28D75B8 Authority key identifier: 70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/r8QQa0KeKI1GL64nr5wN_b7RP5c.roa Signing time: Thu 01 Jan 2026 08:17:48 +0000 ROA not before: Thu 01 Jan 2026 08:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211432 IP address blocks: 2a0f:6740::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:69:51:7e:21:cb:b5:87:92:8f:0d:a2:8d:75:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07 Validity Not Before: Jan 1 08:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afc4106b429e288d462fae27af9c0dfdbed13f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:52:05:6d:86:ec:3b:40:97:9f:c4:43:89:95: 75:2e:ee:c8:70:88:73:9a:b2:0a:f2:ab:61:aa:04: c3:fc:25:f6:61:18:a9:80:75:ef:ed:bd:bb:bb:94: df:32:e7:f8:da:62:c4:52:be:54:2c:6e:17:9e:38: 1b:ed:fc:17:fb:a2:c8:9d:70:77:b9:a1:07:92:29: e2:09:21:12:4f:c7:98:b8:4f:39:37:a1:40:80:a0: a5:70:8c:5b:51:a4:8c:26:71:45:74:c3:7d:77:1a: 47:27:7d:c1:34:ce:32:16:e1:e1:29:4f:ef:f5:ef: 61:21:5f:d4:ea:fe:3a:fb:a2:8e:b7:6d:26:17:eb: a9:bf:43:2f:8c:80:46:8b:ac:54:84:1f:34:02:65: 2f:43:1b:1c:d1:d3:59:ce:22:5c:d4:04:18:e5:07: e8:3d:af:a6:89:bd:35:5b:8d:e1:59:0e:2a:e0:ce: ea:26:5c:64:e2:bb:aa:c9:6d:d5:bd:c6:64:b9:76: ff:6e:f4:bb:01:ed:17:a4:ee:02:60:65:63:ab:5e: 53:27:84:83:dc:5d:fd:48:a5:9b:87:50:5c:33:5f: 3e:15:11:4f:80:b8:88:a8:af:b7:ca:1c:24:4e:7e: 9e:cf:5d:71:42:6e:c8:5a:9b:91:50:d7:e3:c0:a5: 74:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C4:10:6B:42:9E:28:8D:46:2F:AE:27:AF:9C:0D:FD:BE:D1:3F:97 X509v3 Authority Key Identifier: keyid:70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/r8QQa0KeKI1GL64nr5wN_b7RP5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6740::/29 Signature Algorithm: sha256WithRSAEncryption 4a:c7:b8:dc:49:67:37:4a:35:a4:b0:cb:f0:96:57:b7:ae:3f: 94:f7:17:80:74:6f:9c:12:40:cf:c5:0b:98:1b:64:08:14:25: 74:fb:68:95:32:79:40:c3:c8:b8:d7:28:9f:a2:5f:a5:76:95: e4:86:e8:1a:3f:cd:dd:06:1f:2b:0c:4a:6a:0a:14:88:18:c9: 5b:96:07:72:3d:c4:d5:6b:0b:45:95:6f:9e:1a:bb:99:05:62: 9f:dc:83:d5:48:7b:a2:08:d2:16:98:93:6f:ee:a7:0f:1f:56: 7d:b2:d0:4c:7e:f9:d7:49:c0:7f:75:08:08:04:5c:e4:0f:ce: 8f:21:3d:f1:10:bf:af:6c:b8:14:59:1f:e7:c6:53:23:c8:dc: fc:e9:43:e4:0a:bf:8c:1e:71:50:77:2d:e5:00:f4:02:e2:a8: b7:84:4b:e8:83:d5:b0:9c:d1:7f:9e:ac:4a:38:68:3a:a3:79: e1:b8:59:51:13:f3:8a:ee:51:21:47:3f:d3:da:15:6c:e7:09: 26:93:90:44:cb:9d:9f:9f:0f:d1:87:1f:a2:47:45:cd:04:59: 35:89:fa:59:d0:0a:f6:0b:7b:05:bc:f9:f6:db:b6:10:c6:57: fa:46:ff:55:22:95:d1:25:7f:04:5a:e8:ab:e0:61:c2:46:7a: 8d:7e:59:7b -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4omlRfiHLtYeSjw2ijXW4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMDFlNDIyMjI3ZmE0NGNjNWNiOTVkMmE5ZGNjZTBmYTVi ODljMDcwHhcNMjYwMTAxMDgxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmM0MTA2YjQyOWUyODhkNDYyZmFlMjdhZjljMGRmZGJlZDEzZjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA91IFbYbsO0CXn8RDiZV1Lu7IcIhz mrIK8qthqgTD/CX2YRipgHXv7b27u5TfMuf42mLEUr5ULG4Xnjgb7fwX+6LInXB3 uaEHkiniCSEST8eYuE85N6FAgKClcIxbUaSMJnFFdMN9dxpHJ33BNM4yFuHhKU/v 9e9hIV/U6v46+6KOt20mF+upv0MvjIBGi6xUhB80AmUvQxsc0dNZziJc1AQY5Qfo Pa+mib01W43hWQ4q4M7qJlxk4ruqyW3VvcZkuXb/bvS7Ae0XpO4CYGVjq15TJ4SD 3F39SKWbh1BcM18+FRFPgLiIqK+3yhwkTn6ez11xQm7IWpuRUNfjwKV02wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFK/EEGtCniiNRi+uJ6+cDf2+0T+XMB8GA1UdIwQY MBaAFHAB5CIif6RMxcuV0qnczg+luJwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0FIa0lpSl9wRXpGeTVYU3Fkek9ENlc0bkFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85OTJkMDMtODgzYi00MDRkLTg4N2Ut ZjI0MzVkNWNmMzdiLzEvcjhRUWEwS2VLSTFHTDY0bnI1d05fYjdSUDVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My85OTJkMDMtODgzYi00MDRkLTg4N2UtZjI0MzVkNWNmMzdi LzEvY0FIa0lpSl9wRXpGeTVYU3Fkek9ENlc0bkFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg9nQDAN BgkqhkiG9w0BAQsFAAOCAQEASse43ElnN0o1pLDL8JZXt64/lPcXgHRvnBJAz8UL mBtkCBQldPtolTJ5QMPIuNcon6JfpXaV5IboGj/N3QYfKwxKagoUiBjJW5YHcj3E 1WsLRZVvnhq7mQVin9yD1Uh7ogjSFpiTb+6nDx9WfbLQTH7510nAf3UICARc5A/O jyE98RC/r2y4FFkf58ZTI8jc/OlD5Aq/jB5xUHct5QD0AuKot4RL6IPVsJzRf56s SjhoOqN54bhZURPziu5RIUc/09oVbOcJJpOQRMudn58P0YcfokdFzQRZNYn6WdAK 9gt7Bbz59tu2EMZX+kb/VSKV0SV/BFroq+BhwkZ6jX5Zew== -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:12 2026 by rpki-client