This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/8GBhK3bVlRQOFAtixnhblw9dtz0.roa File: 8GBhK3bVlRQOFAtixnhblw9dtz0.roa (raw, json) Hash identifier: Elx4FHBwVZYgkm1JIeK2z2bzVgpOiK+svowb8d+03qs= Subject key identifier: F0:60:61:2B:76:D5:95:14:0E:14:0B:62:C6:78:5B:97:0F:5D:B7:3D Certificate issuer: /CN=3aca50858a1856ffa02e91356f14236e7c38b85a Certificate serial: 019B7E38B84820B270F9A77531556B827083 Authority key identifier: 3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/8GBhK3bVlRQOFAtixnhblw9dtz0.roa Signing time: Fri 02 Jan 2026 10:20:04 +0000 ROA not before: Fri 02 Jan 2026 10:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57045 IP address blocks: 2a0e:1106:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b8:48:20:b2:70:f9:a7:75:31:55:6b:82:70:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aca50858a1856ffa02e91356f14236e7c38b85a Validity Not Before: Jan 2 10:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f060612b76d595140e140b62c6785b970f5db73d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:19:3c:c6:81:3c:b1:e9:9b:0d:40:df:e9:94: c6:a4:4f:1a:d9:be:95:64:0b:34:2f:52:84:4a:ce: 7b:e7:e9:d9:4f:53:5d:6a:b3:5f:a4:47:56:14:39: f4:a0:00:7b:0f:6f:29:f0:db:a7:19:98:83:ac:48: f4:eb:52:e9:ed:40:d5:06:8b:c3:71:7e:dc:b3:e3: bf:45:a4:19:4d:10:07:8e:ec:7b:0c:8a:0f:0b:32: 85:6b:b3:3e:1d:c7:9d:44:f9:3f:eb:15:33:c0:56: 85:59:74:68:84:91:6d:4f:3b:54:a7:88:63:51:c3: f0:50:ed:28:0c:35:04:e6:98:c1:22:47:b6:5d:70: 46:4c:d0:aa:93:6b:3f:b2:37:7b:4f:b8:e7:4d:65: c2:be:8b:e1:e4:2a:48:40:98:dd:15:17:0a:01:2e: 05:0f:da:d5:20:09:0a:8a:f5:d7:c1:dd:10:0e:9b: 47:fe:ad:e2:c9:55:bb:69:03:8b:09:3f:a6:a9:ed: 31:d1:38:db:bb:93:6b:6f:ba:d1:8d:7d:51:7a:10: 81:7a:c5:93:bc:88:aa:c1:97:12:d3:dc:7b:69:27: 81:62:46:a4:df:7a:6a:43:07:c3:50:30:61:a9:07: 3c:fe:4e:dd:58:a0:27:9a:52:86:b0:0c:f1:66:6d: 14:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:60:61:2B:76:D5:95:14:0E:14:0B:62:C6:78:5B:97:0F:5D:B7:3D X509v3 Authority Key Identifier: keyid:3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/8GBhK3bVlRQOFAtixnhblw9dtz0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:1106:1000::/40 Signature Algorithm: sha256WithRSAEncryption 05:9d:c8:2a:2f:6a:11:c0:2e:a2:0c:0f:a9:64:d6:10:f4:20: 93:4f:97:1d:cc:c3:63:6b:3b:5a:5f:cc:2d:2a:24:70:ea:46: b6:f7:7f:f8:c1:e5:b7:91:63:91:79:ba:8a:02:32:aa:57:9d: 50:31:8c:05:43:c9:3a:e8:2f:f0:02:4a:8d:d4:48:83:d0:b4: 00:c5:30:8d:9a:82:6b:70:bc:7b:ea:8a:0e:eb:32:96:0b:16: 74:6d:d7:4b:c2:66:bb:6f:7f:fe:94:f2:f6:90:54:c2:39:a1: ae:43:1d:e2:58:80:7a:92:57:da:6b:54:ad:49:ff:e5:04:57: f2:89:2f:42:0f:3c:17:b3:0c:45:5e:4b:2a:fb:bf:c7:dd:e6: 9b:6e:56:90:44:a2:1c:c3:06:92:9a:2f:25:a2:69:6e:09:28: 65:76:06:c3:d8:c5:7a:d5:d9:ab:fa:5a:c9:e3:54:bd:b5:a2: 36:2f:65:c7:32:16:1a:0b:a7:8b:d6:f3:78:44:72:c7:d9:b3: 06:e7:1e:e0:3a:c7:30:bf:ed:53:9a:32:59:d7:91:20:cb:58: fb:01:f7:42:82:2c:1f:ef:e7:0a:96:63:9e:b5:02:50:70:78: f3:63:7c:2f:af:64:41:07:98:71:d2:a9:d0:e3:36:27:e3:5b: 75:e2:9a:f8 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+OLhIILJw+ad1MVVrgnCDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhY2E1MDg1OGExODU2ZmZhMDJlOTEzNTZmMTQyMzZlN2Mz OGI4NWEwHhcNMjYwMTAyMTAyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDYwNjEyYjc2ZDU5NTE0MGUxNDBiNjJjNjc4NWI5NzBmNWRiNzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRk8xoE8sembDUDf6ZTGpE8a2b6V ZAs0L1KESs575+nZT1NdarNfpEdWFDn0oAB7D28p8NunGZiDrEj061Lp7UDVBovD cX7cs+O/RaQZTRAHjux7DIoPCzKFa7M+HcedRPk/6xUzwFaFWXRohJFtTztUp4hj UcPwUO0oDDUE5pjBIke2XXBGTNCqk2s/sjd7T7jnTWXCvovh5CpIQJjdFRcKAS4F D9rVIAkKivXXwd0QDptH/q3iyVW7aQOLCT+mqe0x0Tjbu5Nrb7rRjX1RehCBesWT vIiqwZcS09x7aSeBYkak33pqQwfDUDBhqQc8/k7dWKAnmlKGsAzxZm0UmwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFPBgYSt21ZUUDhQLYsZ4W5cPXbc9MB8GA1UdIwQY MBaAFDrKUIWKGFb/oC6RNW8UI258OLhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3NwUWhZb1lWdi1nTHBFMWJ4UWpibnc0dUZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xMmI5MzctODkwZC00N2I1LWEwNDEt MzMxZDdmYzc3YmQ0LzEvOEdCaEszYlZsUlFPRkF0aXhuaGJsdzlkdHowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8xMmI5MzctODkwZC00N2I1LWEwNDEtMzMxZDdmYzc3YmQ0 LzEvT3NwUWhZb1lWdi1nTHBFMWJ4UWpibnc0dUZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg4RBhAw DQYJKoZIhvcNAQELBQADggEBAAWdyCovahHALqIMD6lk1hD0IJNPlx3Mw2NrO1pf zC0qJHDqRrb3f/jB5beRY5F5uooCMqpXnVAxjAVDyTroL/ACSo3USIPQtADFMI2a gmtwvHvqig7rMpYLFnRt10vCZrtvf/6U8vaQVMI5oa5DHeJYgHqSV9prVK1J/+UE V/KJL0IPPBezDEVeSyr7v8fd5ptuVpBEohzDBpKaLyWiaW4JKGV2BsPYxXrV2av6 WsnjVL21ojYvZccyFhoLp4vW83hEcsfZswbnHuA6xzC/7VOaMlnXkSDLWPsB90KC LB/v5wqWY561AlBwePNjfC+vZEEHmHHSqdDjNifjW3Ximvg= -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:51 2026 by rpki-client