This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/8r1K1OM5qngui5thmoePxmjOGcI.roa File: 8r1K1OM5qngui5thmoePxmjOGcI.roa (raw, json) Hash identifier: Lc08lhuuRKkKxvYSfc9k1w2HHAp3Uz/xuk8BCj5oIrU= Subject key identifier: F2:BD:4A:D4:E3:39:AA:78:2E:8B:9B:61:9A:87:8F:C6:68:CE:19:C2 Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601 Certificate serial: 019B797EA89BFC54B088A2CB005BAC89072C Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/8r1K1OM5qngui5thmoePxmjOGcI.roa Signing time: Thu 01 Jan 2026 12:18:22 +0000 ROA not before: Thu 01 Jan 2026 12:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51144 IP address blocks: 2a13:1c47:ffe0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a8:9b:fc:54:b0:88:a2:cb:00:5b:ac:89:07:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601 Validity Not Before: Jan 1 12:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2bd4ad4e339aa782e8b9b619a878fc668ce19c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:10:25:87:72:67:20:10:72:86:f3:c9:2a:17: 4f:ab:14:8e:8d:d7:2c:c9:5b:02:15:f9:ef:c6:df: 13:ec:ee:9a:45:09:60:0e:6d:66:a4:d2:a8:1a:4b: 8a:8c:14:a6:9f:55:0d:e5:8e:38:42:a9:35:60:67: 4c:ee:68:59:47:9d:7d:c4:6a:bf:72:0a:d0:94:61: 66:d5:57:3e:e9:a7:0a:61:a7:a7:7e:04:65:3f:82: 76:be:c6:8c:3b:fe:35:e2:b7:dc:e5:96:86:2c:8a: 49:a4:7f:34:ed:ca:9c:f5:61:99:ef:40:8c:80:69: 8a:dd:a9:d6:1a:29:e3:93:4b:16:83:98:1a:ce:a5: 7d:a0:e0:f8:da:d4:cc:16:f5:7b:ad:78:59:79:9a: d6:a0:52:dc:8d:91:59:61:6d:f0:b3:fa:16:0e:30: bf:c5:93:f6:41:cf:78:d5:49:0c:de:8e:83:45:96: 41:09:c3:06:89:1d:1e:5a:30:7e:d0:57:86:b2:ef: ee:25:53:e9:f9:1d:0d:fe:92:90:c4:9d:da:5c:aa: 15:83:9c:58:cf:6b:2a:88:ba:16:77:36:9d:f0:42: b9:e6:6d:26:04:a5:c0:6d:5a:d8:46:5f:4b:e1:90: a2:de:7c:32:35:68:35:39:19:a7:9e:97:d1:f5:fd: c6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:BD:4A:D4:E3:39:AA:78:2E:8B:9B:61:9A:87:8F:C6:68:CE:19:C2 X509v3 Authority Key Identifier: keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/8r1K1OM5qngui5thmoePxmjOGcI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:1c47:ffe0::/44 Signature Algorithm: sha256WithRSAEncryption b3:2c:aa:1b:41:db:ad:49:64:60:8a:c2:3d:83:9f:ac:f0:80: 57:7e:86:ea:61:d8:a8:00:f7:56:3e:25:c7:81:20:f6:80:d8: 72:9e:65:ef:6d:86:c4:9d:cf:d5:f8:6a:9b:7a:16:17:34:b0: 48:74:26:ed:27:d8:df:33:50:dd:1e:5f:d3:a8:04:d3:40:8c: 1f:81:75:fc:4d:85:a0:f4:ac:8f:6d:4a:57:84:a7:f1:ac:fa: 6a:47:37:23:67:c1:01:39:56:08:ee:8b:55:60:66:f2:d7:f3: 2c:62:8d:dd:49:b3:44:0e:42:ee:59:75:33:37:9b:42:f2:0d: 97:86:4f:66:78:a7:ed:c0:85:4a:cc:ec:0f:a8:52:27:0a:6c: 2d:79:f4:12:a5:2a:cf:98:e1:28:57:3b:62:b7:17:d9:7f:32: 48:a8:15:6b:85:41:e6:6d:2c:de:24:ec:dd:24:65:86:c9:86: bf:27:4a:1c:f3:6e:9f:70:93:35:75:58:20:6d:90:42:ed:f3: 9f:4c:a8:ea:db:6f:c5:1c:71:e6:52:31:07:f3:74:00:aa:a8: 71:c4:0e:a6:03:e9:8f:ea:64:24:fc:c5:cc:2c:c8:93:95:47: 3b:34:60:bc:59:18:f9:a4:c6:a3:cf:82:a5:2c:4f:1c:56:e0: 95:27:8d:19 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fqib/FSwiKLLAFusiQcsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3Y2UxNzljYmUxM2RkYjE0MDEyOTg1YTA2NzEwMGVmOThh NTU2MDEwHhcNMjYwMTAxMTIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmJkNGFkNGUzMzlhYTc4MmU4YjliNjE5YTg3OGZjNjY4Y2UxOWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BAlh3JnIBByhvPJKhdPqxSOjdcs yVsCFfnvxt8T7O6aRQlgDm1mpNKoGkuKjBSmn1UN5Y44Qqk1YGdM7mhZR519xGq/ cgrQlGFm1Vc+6acKYaenfgRlP4J2vsaMO/414rfc5ZaGLIpJpH807cqc9WGZ70CM gGmK3anWGinjk0sWg5gazqV9oOD42tTMFvV7rXhZeZrWoFLcjZFZYW3ws/oWDjC/ xZP2Qc941UkM3o6DRZZBCcMGiR0eWjB+0FeGsu/uJVPp+R0N/pKQxJ3aXKoVg5xY z2sqiLoWdzad8EK55m0mBKXAbVrYRl9L4ZCi3nwyNWg1ORmnnpfR9f3GqwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPK9StTjOap4LoubYZqHj8ZozhnCMB8GA1UdIwQY MBaAFGfOF5y+E92xQBKYWgZxAO+YpVYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEt NjJjMDFkYzY5Y2NhLzEvOHIxSzFPTTVxbmd1aTV0aG1vZVB4bWpPR2NJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEtNjJjMDFkYzY5Y2Nh LzEvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhMcR//g MA0GCSqGSIb3DQEBCwUAA4IBAQCzLKobQdutSWRgisI9g5+s8IBXfobqYdioAPdW PiXHgSD2gNhynmXvbYbEnc/V+GqbehYXNLBIdCbtJ9jfM1DdHl/TqATTQIwfgXX8 TYWg9KyPbUpXhKfxrPpqRzcjZ8EBOVYI7otVYGby1/MsYo3dSbNEDkLuWXUzN5tC 8g2Xhk9meKftwIVKzOwPqFInCmwtefQSpSrPmOEoVztitxfZfzJIqBVrhUHmbSze JOzdJGWGyYa/J0oc826fcJM1dVggbZBC7fOfTKjq22/FHHHmUjEH83QAqqhxxA6m A+mP6mQk/MXMLMiTlUc7NGC8WRj5pMajz4KlLE8cVuCVJ40Z -----END CERTIFICATE-----Generated at Mon Jan 26 01:41:34 2026 by rpki-client