This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/8dsL3d0zKteGNgXAMQBV42lOios.roa File: 8dsL3d0zKteGNgXAMQBV42lOios.roa (raw, json) Hash identifier: Pev55fmq4J10EVCjxW4G+QGn2d3P5hztkv0FQEW8Zn0= Subject key identifier: F1:DB:0B:DD:DD:33:2A:D7:86:36:05:C0:31:00:55:E3:69:4E:8A:8B Certificate issuer: /CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25 Certificate serial: 019B7F14C482F15F625E5A8323277EED908F Authority key identifier: C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/8dsL3d0zKteGNgXAMQBV42lOios.roa Signing time: Fri 02 Jan 2026 14:20:26 +0000 ROA not before: Fri 02 Jan 2026 14:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60149 IP address blocks: 2001:678:928::/48 maxlen: 48 2001:67c:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:c4:82:f1:5f:62:5e:5a:83:23:27:7e:ed:90:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25 Validity Not Before: Jan 2 14:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1db0bdddd332ad7863605c0310055e3694e8a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e3:e5:ad:f6:36:86:85:82:44:cf:98:08:fa: 72:02:b9:ae:90:23:75:39:d6:d8:16:36:c9:4b:27: cd:cc:aa:45:cd:9b:81:d0:93:18:ca:8b:66:80:ce: e6:46:0d:7c:88:2c:af:65:0d:2e:9e:f5:41:14:51: ed:fd:a9:95:fa:9e:2c:a1:71:20:2b:53:98:0c:ae: 57:2d:90:6f:0d:bd:67:79:89:ad:da:0f:73:54:c1: 15:1f:8f:e6:c4:67:f5:03:56:9f:50:24:65:c3:e3: 8e:f6:5c:34:55:3b:44:7e:22:82:89:bc:3c:15:f4: 8c:dc:20:b6:e0:0a:9a:4d:6f:59:a5:e2:cd:a9:dd: 53:45:43:8d:b2:70:11:be:e2:5d:e5:6c:4d:12:d2: ef:cb:31:20:26:67:d6:52:e1:16:85:cd:de:26:86: 21:15:c0:42:ed:bb:98:67:8c:f4:ac:3e:2b:f0:60: 7a:f7:f6:27:b7:e0:e6:76:ca:f3:67:4f:0a:86:f4: 1e:34:9b:8d:38:4a:87:10:5f:a3:d2:f7:5e:3b:c9: 22:1c:b0:fc:b7:54:ab:80:54:cd:81:2a:08:0f:c4: ed:21:ca:25:ac:45:a9:f6:aa:79:2f:d6:0d:dd:ca: c9:71:44:2c:0e:40:52:f2:80:67:aa:79:e1:50:2c: 9d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DB:0B:DD:DD:33:2A:D7:86:36:05:C0:31:00:55:E3:69:4E:8A:8B X509v3 Authority Key Identifier: keyid:C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/8dsL3d0zKteGNgXAMQBV42lOios.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:928::/48 2001:67c:10::/48 Signature Algorithm: sha256WithRSAEncryption 0b:24:7e:62:41:58:69:a8:3a:be:6a:88:d9:89:0a:9f:63:44: 23:8a:66:7c:5d:81:4a:1a:97:31:49:08:fc:3e:67:a3:9c:a6: 51:26:25:35:c1:ed:e9:6b:1f:37:8d:cd:07:6d:cb:06:cf:74: 99:44:06:8d:a8:d1:ce:d8:da:53:fb:8a:54:18:95:07:96:58: da:56:58:ef:d2:de:56:aa:a9:87:18:d1:be:55:b9:05:2a:db: 5b:db:99:63:d5:8b:a3:b4:6b:9d:3c:00:1f:d2:df:a8:df:58: 55:5d:dc:7f:bf:56:db:86:f1:6d:b1:ed:9a:19:36:5d:fd:39: 7e:d7:fe:44:73:95:47:81:29:05:ca:3d:11:dc:3b:27:d8:ff: 69:91:93:cb:ee:68:5f:92:73:52:cf:81:ec:91:02:3d:97:34: 0a:17:03:5e:af:35:de:5d:7d:34:94:ab:f0:38:c6:55:be:cc: 70:51:69:e8:b5:20:fd:5a:ad:52:09:62:b0:91:ac:b9:ae:b1: 17:98:96:62:3b:17:9c:00:6c:e0:eb:25:e5:ed:3c:31:73:5d: 9e:11:ef:ba:61:8f:73:f2:f6:15:7d:53:fa:60:4c:b0:67:11: 7a:fb:02:eb:25:75:80:5b:25:ca:0e:ae:86:7a:18:27:3b:6b: 75:04:ab:40 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FMSC8V9iXlqDIyd+7ZCPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MDkxNDkyZDJjZThhODBjMDg3Yjg3NmY5MWQ2YTNjMjli ZTdhMjUwHhcNMjYwMTAyMTQyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWRiMGJkZGRkMzMyYWQ3ODYzNjA1YzAzMTAwNTVlMzY5NGU4YThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uPlrfY2hoWCRM+YCPpyArmukCN1 OdbYFjbJSyfNzKpFzZuB0JMYyotmgM7mRg18iCyvZQ0unvVBFFHt/amV+p4soXEg K1OYDK5XLZBvDb1neYmt2g9zVMEVH4/mxGf1A1afUCRlw+OO9lw0VTtEfiKCibw8 FfSM3CC24AqaTW9ZpeLNqd1TRUONsnARvuJd5WxNEtLvyzEgJmfWUuEWhc3eJoYh FcBC7buYZ4z0rD4r8GB69/Ynt+DmdsrzZ08KhvQeNJuNOEqHEF+j0vdeO8kiHLD8 t1SrgFTNgSoID8TtIcolrEWp9qp5L9YN3crJcUQsDkBS8oBnqnnhUCydYQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPHbC93dMyrXhjYFwDEAVeNpToqLMB8GA1UdIwQY MBaAFMgJFJLSzoqAwIe4dvkdajwpvnolMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUFrVWt0TE9pb0RBaDdoMi1SMXFQQ20tZWlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jMzVhOTktZjg3YS00MjExLWFmN2Et ODFlMjEwNmE1ODU3LzEvOGRzTDNkMHpLdGVHTmdYQU1RQlY0MmxPaW9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9jMzVhOTktZjg3YS00MjExLWFmN2EtODFlMjEwNmE1ODU3 LzEveUFrVWt0TE9pb0RBaDdoMi1SMXFQQ20tZWlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGeAko AwcAIAEGfAAQMA0GCSqGSIb3DQEBCwUAA4IBAQALJH5iQVhpqDq+aojZiQqfY0Qj imZ8XYFKGpcxSQj8PmejnKZRJiU1we3pax83jc0HbcsGz3SZRAaNqNHO2NpT+4pU GJUHlljaVljv0t5WqqmHGNG+VbkFKttb25lj1YujtGudPAAf0t+o31hVXdx/v1bb hvFtse2aGTZd/Tl+1/5Ec5VHgSkFyj0R3Dsn2P9pkZPL7mhfknNSz4HskQI9lzQK FwNerzXeXX00lKvwOMZVvsxwUWnotSD9Wq1SCWKwkay5rrEXmJZiOxecAGzg6yXl 7Twxc12eEe+6YY9z8vYVfVP6YEywZxF6+wLrJXWAWyXKDq6GehgnO2t1BKtA -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:58 2026 by rpki-client