This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/Eo8KA9T6HD9p4ZSTDc0r_PeW2ik.roa File: Eo8KA9T6HD9p4ZSTDc0r_PeW2ik.roa (raw, json) Hash identifier: 6EGWa/823S4j3qzNZzVNi7+aLxh9oMMF178PdW3UF1g= Subject key identifier: 12:8F:0A:03:D4:FA:1C:3F:69:E1:94:93:0D:CD:2B:FC:F7:96:DA:29 Certificate issuer: /CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3 Certificate serial: 019B797EF79D4B7D5AE3976126C7F32170DA Authority key identifier: 8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/Eo8KA9T6HD9p4ZSTDc0r_PeW2ik.roa Signing time: Thu 01 Jan 2026 12:18:42 +0000 ROA not before: Thu 01 Jan 2026 12:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51801 IP address blocks: 2a13:4880::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f7:9d:4b:7d:5a:e3:97:61:26:c7:f3:21:70:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3 Validity Not Before: Jan 1 12:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=128f0a03d4fa1c3f69e194930dcd2bfcf796da29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:98:4b:fc:2b:df:c5:d1:11:dd:8c:1b:80:f6: 88:57:e9:29:7b:f4:73:03:84:66:88:aa:76:0c:88: ae:b2:66:16:8c:d1:33:39:fb:4a:43:f2:15:11:04: 3d:fe:3d:7f:32:f5:90:cd:54:60:91:f9:bb:0a:73: 51:9e:e7:84:b5:c8:de:6d:41:d9:89:f8:57:03:1e: e1:21:be:89:ba:74:13:db:49:59:52:4a:60:e3:b3: 11:4c:20:51:de:ed:83:86:fe:a7:54:c7:b5:22:ae: 02:6f:d2:b5:e8:43:92:48:31:7d:c4:74:d8:bf:bc: ad:42:41:be:c5:9b:20:9a:79:9d:69:7c:03:07:c2: 1b:3a:58:ee:1f:2b:9b:ac:be:dd:5d:11:80:67:68: 61:c6:3b:44:9c:8d:e2:32:c6:94:02:cc:28:2e:b7: 61:fd:09:e8:ae:9a:dd:26:b1:83:0d:8b:16:2f:c9: dd:d6:36:e7:8e:15:60:b5:4f:26:45:f0:ab:d3:96: b3:8f:7d:32:0e:a7:a1:c6:98:79:03:38:f7:5a:80: 85:7f:0e:72:6c:11:97:85:88:65:22:39:9a:b4:ed: dd:25:97:e0:ea:b9:af:76:3c:03:fc:70:23:c6:4b: 4a:65:1c:62:b5:97:ed:1b:7a:25:dc:cc:a7:0d:25: 1a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8F:0A:03:D4:FA:1C:3F:69:E1:94:93:0D:CD:2B:FC:F7:96:DA:29 X509v3 Authority Key Identifier: keyid:8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/Eo8KA9T6HD9p4ZSTDc0r_PeW2ik.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:4880::/29 Signature Algorithm: sha256WithRSAEncryption ae:44:80:90:b4:fe:4c:dc:c6:cd:d5:0e:e6:14:49:62:96:2b: 8a:94:06:ff:16:3e:b7:58:76:e4:33:4d:7f:63:85:a6:38:80: 0e:b9:c1:75:c1:3d:39:8a:aa:fb:ee:90:8a:4c:e2:ab:00:9d: 14:a1:95:4f:84:9c:b1:ea:ca:fb:50:30:ea:4d:66:17:cc:1b: 7f:ec:80:da:ed:00:cd:83:b4:37:ee:a0:9b:6a:9c:83:d9:e3: 2a:29:37:fe:87:77:2e:d9:c8:6d:99:b8:b0:37:e9:4f:e0:f1: cd:04:a6:42:84:9f:3c:5d:53:40:5e:60:67:62:ad:59:82:3b: a1:ff:8f:a8:f5:e8:8c:ee:3b:bf:f7:f2:67:16:8d:e4:4a:73: d8:c9:8b:a3:f3:98:64:c7:c1:39:95:ea:43:80:7c:85:df:40: b3:ca:e0:36:42:56:e0:b0:b2:85:93:06:cf:27:45:d2:a1:e3: 0b:85:ec:32:46:81:17:48:89:0a:a9:75:35:d2:94:60:d4:be: 81:ca:3b:04:a3:ad:34:5b:e5:e2:91:9d:55:47:3e:7e:78:4a: 5c:4c:82:aa:2d:ec:f0:30:41:5f:e1:34:e6:dc:a1:a6:36:ee: cf:3b:9a:d4:50:14:a0:c0:aa:f7:99:6c:26:cb:f4:59:c7:07: 00:d9:8a:4e -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5fvedS31a45dhJsfzIXDaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiOGQ4NTk4MDY0ZGI1YThlZGIzYTYwODQwNjRjZDJhMWFk OGM2ZTMwHhcNMjYwMTAxMTIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjhmMGEwM2Q0ZmExYzNmNjllMTk0OTMwZGNkMmJmY2Y3OTZkYTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZhL/CvfxdER3YwbgPaIV+kpe/Rz A4RmiKp2DIiusmYWjNEzOftKQ/IVEQQ9/j1/MvWQzVRgkfm7CnNRnueEtcjebUHZ ifhXAx7hIb6JunQT20lZUkpg47MRTCBR3u2Dhv6nVMe1Iq4Cb9K16EOSSDF9xHTY v7ytQkG+xZsgmnmdaXwDB8IbOljuHyubrL7dXRGAZ2hhxjtEnI3iMsaUAswoLrdh /QnorprdJrGDDYsWL8nd1jbnjhVgtU8mRfCr05azj30yDqehxph5Azj3WoCFfw5y bBGXhYhlIjmatO3dJZfg6rmvdjwD/HAjxktKZRxitZftG3ol3MynDSUaRQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFBKPCgPU+hw/aeGUkw3NK/z3ltopMB8GA1UdIwQY MBaAFIuNhZgGTbWo7bOmCEBkzSoa2MbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTQyRm1BWk50YWp0czZZSVFHVE5LaHJZeHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MjNlOWMtNDQyNS00OTZlLWIyMzct NmIwZWY5MTA4Njg4LzEvRW84S0E5VDZIRDlwNFpTVERjMHJfUGVXMmlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MjNlOWMtNDQyNS00OTZlLWIyMzctNmIwZWY5MTA4Njg4 LzEvaTQyRm1BWk50YWp0czZZSVFHVE5LaHJZeHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhNIgDAN BgkqhkiG9w0BAQsFAAOCAQEArkSAkLT+TNzGzdUO5hRJYpYripQG/xY+t1h25DNN f2OFpjiADrnBdcE9OYqq++6QikziqwCdFKGVT4ScserK+1Aw6k1mF8wbf+yA2u0A zYO0N+6gm2qcg9njKik3/od3LtnIbZm4sDfpT+DxzQSmQoSfPF1TQF5gZ2KtWYI7 of+PqPXojO47v/fyZxaN5Epz2MmLo/OYZMfBOZXqQ4B8hd9As8rgNkJW4LCyhZMG zydF0qHjC4XsMkaBF0iJCql1NdKUYNS+gco7BKOtNFvl4pGdVUc+fnhKXEyCqi3s 8DBBX+E05tyhpjbuzzua1FAUoMCq95lsJsv0WccHANmKTg== -----END CERTIFICATE-----Generated at Sun Jan 25 18:07:38 2026 by rpki-client