This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/8X1225-qrYaCRSnh7mmRzgHfQF8.roa File: 8X1225-qrYaCRSnh7mmRzgHfQF8.roa (raw, json) Hash identifier: INaosQfuVcg12zG5pp0XJSH17V0rkeHtVSpqdJnqrZ0= Subject key identifier: F1:7D:76:DB:9F:AA:AD:86:82:45:29:E1:EE:69:91:CE:01:DF:40:5F Certificate issuer: /CN=70fee176f51ce8fd81424ff73a5417341279c0f1 Certificate serial: 019B78A2921602FA65866D179081F93FB388 Authority key identifier: 70:FE:E1:76:F5:1C:E8:FD:81:42:4F:F7:3A:54:17:34:12:79:C0:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/8X1225-qrYaCRSnh7mmRzgHfQF8.roa Signing time: Thu 01 Jan 2026 08:17:58 +0000 ROA not before: Thu 01 Jan 2026 08:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41354 IP address blocks: 2a05:b100::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.crl rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.mft rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:92:16:02:fa:65:86:6d:17:90:81:f9:3f:b3:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70fee176f51ce8fd81424ff73a5417341279c0f1 Validity Not Before: Jan 1 08:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f17d76db9faaad86824529e1ee6991ce01df405f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:41:d5:2f:db:00:56:7d:68:5a:76:15:d0:c5: 43:1a:d5:67:0a:83:29:5d:5d:bb:5c:58:61:80:ce: b9:7c:ab:33:e7:d4:5f:31:2e:0d:4f:fe:f3:02:3b: fd:88:b4:d9:46:92:c5:2c:73:ad:a4:f6:9a:2f:24: ce:41:ec:31:2f:57:6a:34:3a:f7:3a:de:ec:a9:36: 1a:d4:30:0c:b1:f9:fd:5f:80:9e:6e:2f:d0:6f:e2: 26:ce:b2:cd:9b:e7:e3:63:56:2f:dc:38:d1:18:be: 1b:36:49:dc:f0:a1:4b:c7:06:6c:cf:c7:c2:3a:14: 55:3a:c4:da:8e:ec:32:a6:09:2a:05:4e:9a:62:34: 16:f9:0f:23:14:49:06:fa:d4:11:22:80:2d:c7:a9: a7:57:2a:67:4c:95:df:c2:6a:fd:ec:2e:87:82:14: ef:41:8b:0d:6d:7c:7c:55:c7:5b:f0:60:0a:b8:38: d6:5d:95:ec:d4:40:23:39:df:40:46:e4:1d:20:ac: 41:a7:ba:18:16:2d:97:02:b7:e6:59:15:b1:6a:b5: 6f:b5:63:4a:8c:2d:6a:7a:e3:fd:51:90:92:78:aa: 7d:9b:aa:24:82:d3:2f:97:22:61:b7:4d:e8:7a:60: f1:1a:40:4e:2e:0f:4e:2a:09:68:6e:88:62:87:9a: e9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:7D:76:DB:9F:AA:AD:86:82:45:29:E1:EE:69:91:CE:01:DF:40:5F X509v3 Authority Key Identifier: keyid:70:FE:E1:76:F5:1C:E8:FD:81:42:4F:F7:3A:54:17:34:12:79:C0:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/8X1225-qrYaCRSnh7mmRzgHfQF8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:b100::/36 Signature Algorithm: sha256WithRSAEncryption 40:f6:d6:ac:73:37:dc:91:df:2e:9d:13:bc:51:c6:f0:a1:26: 5b:e9:00:1d:ec:70:52:58:0d:6c:92:1d:ba:82:37:b6:d0:8e: 23:ee:16:c3:cb:b0:4e:22:4b:ac:71:e9:17:3b:f3:46:61:80: 7f:19:56:e8:26:05:76:37:39:37:3a:2c:30:d0:54:31:fc:1f: 73:df:af:ac:2b:3f:0a:78:6e:96:3f:a9:78:85:81:dc:07:d2: be:dd:22:e2:85:ae:83:55:b7:54:ee:aa:59:b2:09:64:b3:b8: 76:54:2a:c8:b5:4f:64:12:2a:07:bf:a1:73:bd:f9:95:75:ad: 53:85:a9:12:2c:0c:63:2d:b2:72:b7:a5:ee:56:94:1c:af:ad: 99:8c:57:13:6f:e8:e4:c0:2d:f0:90:fb:84:d9:12:c3:17:f0: f0:c5:d6:cd:53:63:4b:4f:49:27:14:47:e8:7e:be:09:41:9f: d7:54:4a:3d:04:54:c4:e8:7f:ab:fa:1d:f5:24:6d:66:62:6b: 3f:05:08:ea:bf:82:4b:22:88:41:d6:24:98:62:f1:ec:38:5b: 20:71:82:10:0f:92:34:c6:44:a1:18:02:1f:31:b7:06:f1:41: 97:8a:15:6c:fb:99:76:dc:a6:6b:ae:73:fa:c6:5a:2c:27:0f: 06:87:2b:d9 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt4opIWAvplhm0XkIH5P7OIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZmVlMTc2ZjUxY2U4ZmQ4MTQyNGZmNzNhNTQxNzM0MTI3 OWMwZjEwHhcNMjYwMTAxMDgxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTdkNzZkYjlmYWFhZDg2ODI0NTI5ZTFlZTY5OTFjZTAxZGY0MDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykHVL9sAVn1oWnYV0MVDGtVnCoMp XV27XFhhgM65fKsz59RfMS4NT/7zAjv9iLTZRpLFLHOtpPaaLyTOQewxL1dqNDr3 Ot7sqTYa1DAMsfn9X4Cebi/Qb+ImzrLNm+fjY1Yv3DjRGL4bNknc8KFLxwZsz8fC OhRVOsTajuwypgkqBU6aYjQW+Q8jFEkG+tQRIoAtx6mnVypnTJXfwmr97C6HghTv QYsNbXx8Vcdb8GAKuDjWXZXs1EAjOd9ARuQdIKxBp7oYFi2XArfmWRWxarVvtWNK jC1qeuP9UZCSeKp9m6okgtMvlyJht03oemDxGkBOLg9OKglobohih5rp8QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFPF9dtufqq2GgkUp4e5pkc4B30BfMB8GA1UdIwQY MBaAFHD+4Xb1HOj9gUJP9zpUFzQSecDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1A3aGR2VWM2UDJCUWtfM09sUVhOQko1d1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS80YmUyMjItNjQ4Mi00ZGI5LTlhNWYt NzUyZTliOGIwNzU2LzEvOFgxMjI1LXFyWWFDUlNuaDdtbVJ6Z0hmUUY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS80YmUyMjItNjQ4Mi00ZGI5LTlhNWYtNzUyZTliOGIwNzU2 LzEvY1A3aGR2VWM2UDJCUWtfM09sUVhOQko1d1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgWxAAAw DQYJKoZIhvcNAQELBQADggEBAED21qxzN9yR3y6dE7xRxvChJlvpAB3scFJYDWyS HbqCN7bQjiPuFsPLsE4iS6xx6Rc780ZhgH8ZVugmBXY3OTc6LDDQVDH8H3Pfr6wr Pwp4bpY/qXiFgdwH0r7dIuKFroNVt1TuqlmyCWSzuHZUKsi1T2QSKge/oXO9+ZV1 rVOFqRIsDGMtsnK3pe5WlByvrZmMVxNv6OTALfCQ+4TZEsMX8PDF1s1TY0tPSScU R+h+vglBn9dUSj0EVMTof6v6HfUkbWZiaz8FCOq/gksiiEHWJJhi8ew4WyBxghAP kjTGRKEYAh8xtwbxQZeKFWz7mXbcpmuuc/rGWiwnDwaHK9k= -----END CERTIFICATE-----Generated at Mon Jan 26 10:54:25 2026 by rpki-client