This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/8rt3dNF1Y-UD8pslNNECjOgnA8M.roa
File: 8rt3dNF1Y-UD8pslNNECjOgnA8M.roa (raw, json)
Hash identifier: HTf1rOzS+Uk4sV5A/XyKRNzC8UFpKCauz1q4F0X0Hbs=
Subject key identifier: F2:BB:77:74:D1:75:63:E5:03:F2:9B:25:34:D1:02:8C:E8:27:03:C3
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 019B7CEDE9F4F7AA8F7B5BF8DA59277701C0
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/8rt3dNF1Y-UD8pslNNECjOgnA8M.roa
Signing time: Fri 02 Jan 2026 04:18:45 +0000
ROA not before: Fri 02 Jan 2026 04:18:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44437
IP address blocks: 2a05:1080::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:e9:f4:f7:aa:8f:7b:5b:f8:da:59:27:77:01:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 2 04:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2bb7774d17563e503f29b2534d1028ce82703c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ba:48:f8:0e:06:fa:36:f8:28:cc:7d:68:87:
9f:c3:ed:0e:aa:12:50:25:22:55:2a:fd:74:60:45:
ce:fa:19:c0:44:24:fe:00:87:d3:5e:4c:76:7b:8f:
0b:16:b0:15:3a:da:80:63:3f:38:84:d7:25:38:b6:
16:3a:cb:5c:89:cf:7b:1b:6c:16:ff:b8:fa:94:c9:
19:bc:05:2a:98:3d:ff:b5:c9:1e:25:6d:b3:a0:56:
9f:42:ba:46:96:e7:a9:0c:3b:be:13:68:8e:dc:9c:
9c:62:60:c4:a0:73:be:6f:1d:1c:dc:f8:43:83:c7:
86:6f:d2:d8:79:f6:a4:fd:8c:f4:4d:8b:95:55:5b:
9a:aa:04:cd:ef:53:ba:50:96:a1:fa:35:fd:cb:d3:
c2:72:d1:00:ee:de:dc:5a:7c:42:f5:72:20:23:ee:
e7:2e:c5:fc:13:55:50:31:0d:43:0f:7b:28:a1:48:
5f:22:a6:da:c2:9d:31:53:b2:4e:08:67:f6:7e:2b:
64:48:0e:c1:b1:d0:1c:1c:9a:6f:40:96:1a:9d:cf:
d1:73:93:35:87:85:f3:34:83:ca:da:7c:39:a3:3f:
75:9e:94:53:0a:34:f7:81:eb:18:7e:70:c7:f4:1b:
23:94:ab:e6:08:f5:99:0b:6c:40:d0:c9:fa:3b:88:
62:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BB:77:74:D1:75:63:E5:03:F2:9B:25:34:D1:02:8C:E8:27:03:C3
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/8rt3dNF1Y-UD8pslNNECjOgnA8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1080::/32
Signature Algorithm: sha256WithRSAEncryption
33:d5:49:5e:bb:c5:23:2c:2c:b7:09:f8:9b:73:01:1a:5f:3e:
31:08:02:d2:3c:30:3b:44:3a:1a:74:8c:46:6b:f3:9d:1f:44:
10:bc:91:3f:5e:07:f7:e1:8b:e1:f7:c1:4e:a0:f9:db:1b:62:
f9:f9:38:e2:29:96:40:6a:df:2b:26:05:0c:39:e5:78:b7:e4:
d2:fa:96:6d:49:25:0e:9b:56:34:00:cc:b8:d8:af:18:3b:92:
23:3c:87:cb:f7:36:e2:ff:be:47:d1:2d:10:98:51:ec:d7:15:
65:df:7a:de:30:93:18:12:dc:b3:4b:d7:46:f0:34:c2:b5:8c:
6f:be:39:2c:85:52:1f:5e:49:41:3d:11:0b:20:dd:cb:9b:95:
b1:4f:87:4c:c4:67:d2:83:64:a3:fe:3d:c2:1c:03:fe:7e:c7:
d5:86:fe:b3:30:8f:8e:73:58:fd:40:e1:9e:24:09:3b:b8:f4:
b8:82:c6:7c:fc:3c:93:ed:32:66:30:31:2b:14:40:d0:14:98:
95:79:83:c5:ee:b6:78:47:d8:01:97:3d:43:5b:03:d6:ee:a4:
48:81:e5:9c:61:a3:48:f3:0c:ff:e5:d1:3b:fb:e8:fa:c2:11:
e0:cb:e8:11:8e:74:ff:bb:b8:38:a3:0f:55:a4:72:d7:e4:64:
29:52:87:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:17:49 2026 by rpki-client