This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/n8CSKoRLuT4x4jI0qfGa0BhbHd8.roa File: n8CSKoRLuT4x4jI0qfGa0BhbHd8.roa (raw, json) Hash identifier: n2uonuz5ZghRs61kAlvv99Bmctae2IN7sgoaLTAtaIw= Subject key identifier: 9F:C0:92:2A:84:4B:B9:3E:31:E2:32:34:A9:F1:9A:D0:18:5B:1D:DF Certificate issuer: /CN=4d3c5f0aa141011ce2dbf18ccceaac8d23a80253 Certificate serial: 019B7CED60C171BC2727D56BDAD51244D108 Authority key identifier: 4D:3C:5F:0A:A1:41:01:1C:E2:DB:F1:8C:CC:EA:AC:8D:23:A8:02:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/n8CSKoRLuT4x4jI0qfGa0BhbHd8.roa Signing time: Fri 02 Jan 2026 04:18:10 +0000 ROA not before: Fri 02 Jan 2026 04:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12337 IP address blocks: 2a03:62a0:4901::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:60:c1:71:bc:27:27:d5:6b:da:d5:12:44:d1:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d3c5f0aa141011ce2dbf18ccceaac8d23a80253 Validity Not Before: Jan 2 04:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fc0922a844bb93e31e23234a9f19ad0185b1ddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6e:bc:1f:17:29:0a:60:10:50:6b:ed:b2:aa: 8e:17:c8:d9:c6:91:d3:ce:45:08:ba:14:2d:5a:06: 9a:e8:87:29:f7:23:d4:a6:77:c3:09:7c:89:e8:26: 43:c9:09:41:11:94:66:b4:c2:f1:c3:c7:d2:93:b8: 2a:fc:e8:6e:b2:e1:a7:c2:39:c8:87:83:52:d6:79: 04:80:80:34:e6:0a:f2:93:d3:9b:81:29:c9:a0:ac: cf:11:87:ab:4f:45:6d:03:c8:d9:fd:56:02:b5:53: aa:bd:b0:ca:e8:78:a6:2c:c0:10:65:67:b1:e7:b6: bc:de:ef:9c:9a:f5:82:7e:4a:af:d8:98:ad:b2:6a: 55:69:36:12:8e:5a:53:f3:24:bf:30:97:53:93:06: 47:1b:64:97:3f:40:7d:a6:38:75:6f:f1:1d:41:8f: cb:4c:e3:6b:ec:38:d6:d6:1a:6d:53:87:d4:07:01: 47:ed:34:6e:ce:77:0e:cb:9e:52:49:9a:35:85:9c: 6c:35:15:4a:f3:50:96:1d:4f:fc:bf:3f:2a:59:0f: 1b:1d:2e:70:aa:f2:43:bb:74:a3:31:74:86:51:5a: cd:40:bf:8b:b8:9b:d0:5a:e4:cc:14:e1:bd:bc:d4: d5:c2:57:fb:e7:67:ec:37:7d:40:8b:31:6a:fe:83: ce:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C0:92:2A:84:4B:B9:3E:31:E2:32:34:A9:F1:9A:D0:18:5B:1D:DF X509v3 Authority Key Identifier: keyid:4D:3C:5F:0A:A1:41:01:1C:E2:DB:F1:8C:CC:EA:AC:8D:23:A8:02:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/n8CSKoRLuT4x4jI0qfGa0BhbHd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:62a0:4901::/48 Signature Algorithm: sha256WithRSAEncryption 76:c6:12:5f:0a:6c:c9:be:b8:6d:c5:2d:78:15:bc:89:f6:51: ff:c3:1a:48:22:6f:f0:94:51:49:9c:d9:b9:15:e5:f1:e8:7a: 2c:87:37:98:3b:84:1a:fe:33:a2:bf:77:95:f9:ab:09:fb:c1: bb:74:e3:ec:bb:90:3f:ec:56:84:bc:a2:28:4b:2d:8a:43:71: ce:67:e7:81:f8:4a:9d:99:6f:aa:c6:2c:04:ef:df:e8:e0:17: c0:5b:b3:e0:9d:61:7b:5d:5c:a9:49:b7:46:5f:ca:d7:6e:c0: ef:1a:08:69:35:09:10:18:87:fa:c9:e6:72:e3:e6:e6:52:4c: 6f:aa:c3:51:da:3a:dc:c9:80:b3:2b:a9:34:67:6d:77:11:b5: 24:26:56:63:e9:ce:59:77:67:fa:8e:29:6d:5c:5e:96:24:4c: d8:71:e5:6d:56:73:9d:fb:a0:79:09:f4:35:b3:a0:f3:83:d6: 8c:d6:9a:47:b0:f0:44:d5:bf:a7:e0:8f:a1:6c:cd:15:71:00: 00:e3:e7:e4:f3:51:82:47:51:a3:1f:be:42:46:b2:dd:e0:71: 35:b1:de:f0:6e:e1:f7:5c:f2:e8:1f:7d:65:c2:f6:b6:74:dd: 63:1e:e7:8b:10:ce:36:9f:32:f3:1b:31:ad:3f:da:11:bd:b2: 9e:ff:13:4f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87WDBcbwnJ9Vr2tUSRNEIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkM2M1ZjBhYTE0MTAxMWNlMmRiZjE4Y2NjZWFhYzhkMjNh ODAyNTMwHhcNMjYwMTAyMDQxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmMwOTIyYTg0NGJiOTNlMzFlMjMyMzRhOWYxOWFkMDE4NWIxZGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW68HxcpCmAQUGvtsqqOF8jZxpHT zkUIuhQtWgaa6Icp9yPUpnfDCXyJ6CZDyQlBEZRmtMLxw8fSk7gq/OhusuGnwjnI h4NS1nkEgIA05gryk9ObgSnJoKzPEYerT0VtA8jZ/VYCtVOqvbDK6HimLMAQZWex 57a83u+cmvWCfkqv2JitsmpVaTYSjlpT8yS/MJdTkwZHG2SXP0B9pjh1b/EdQY/L TONr7DjW1hptU4fUBwFH7TRuzncOy55SSZo1hZxsNRVK81CWHU/8vz8qWQ8bHS5w qvJDu3SjMXSGUVrNQL+LuJvQWuTMFOG9vNTVwlf752fsN31AizFq/oPOPQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJ/AkiqES7k+MeIyNKnxmtAYWx3fMB8GA1UdIwQY MBaAFE08XwqhQQEc4tvxjMzqrI0jqAJTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFR4ZkNxRkJBUnppMl9HTXpPcXNqU09vQWxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8yZDA2N2MtZGY3Mi00MDQwLWJjNDMt MTkzOTdmYzc2ZmVjLzEvbjhDU0tvUkx1VDR4NGpJMHFmR2EwQmhiSGQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8yZDA2N2MtZGY3Mi00MDQwLWJjNDMtMTkzOTdmYzc2ZmVj LzEvVFR4ZkNxRkJBUnppMl9HTXpPcXNqU09vQWxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgNioEkB MA0GCSqGSIb3DQEBCwUAA4IBAQB2xhJfCmzJvrhtxS14FbyJ9lH/wxpIIm/wlFFJ nNm5FeXx6HoshzeYO4Qa/jOiv3eV+asJ+8G7dOPsu5A/7FaEvKIoSy2KQ3HOZ+eB +EqdmW+qxiwE79/o4BfAW7PgnWF7XVypSbdGX8rXbsDvGghpNQkQGIf6yeZy4+bm UkxvqsNR2jrcyYCzK6k0Z213EbUkJlZj6c5Zd2f6jiltXF6WJEzYceVtVnOd+6B5 CfQ1s6Dzg9aM1ppHsPBE1b+n4I+hbM0VcQAA4+fk81GCR1GjH75CRrLd4HE1sd7w buH3XPLoH31lwva2dN1jHueLEM42nzLzGzGtP9oRvbKe/xNP -----END CERTIFICATE-----Generated at Mon Jan 26 04:39:00 2026 by rpki-client