This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/o8g4Vc3joaDg_8_6wn-aLmOqudg.roa File: o8g4Vc3joaDg_8_6wn-aLmOqudg.roa (raw, json) Hash identifier: Ge8kAzJMYUTouk87sT4qfOz3SH/UdiNLCCUaPjk18yQ= Subject key identifier: A3:C8:38:55:CD:E3:A1:A0:E0:FF:CF:FA:C2:7F:9A:2E:63:AA:B9:D8 Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Certificate serial: 019B783451F8A009B77AB4C4C63ECAF87ED8 Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/o8g4Vc3joaDg_8_6wn-aLmOqudg.roa Signing time: Thu 01 Jan 2026 06:17:33 +0000 ROA not before: Thu 01 Jan 2026 06:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57969 IP address blocks: 2a09:7:2002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:51:f8:a0:09:b7:7a:b4:c4:c6:3e:ca:f8:7e:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Validity Not Before: Jan 1 06:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3c83855cde3a1a0e0ffcffac27f9a2e63aab9d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:38:22:26:8d:86:b6:c2:fe:04:af:76:eb:75: d2:62:b6:4a:50:4f:db:ec:47:4e:87:f9:a6:9e:e0: 49:d1:9c:91:8d:6b:9a:48:f7:99:a3:33:8a:71:31: 81:9b:0b:83:d3:b5:b3:10:ce:53:2a:31:db:9f:fb: e5:b8:b0:93:0f:40:7b:3a:86:5b:62:81:a3:80:15: 25:b7:36:b3:40:e3:aa:d0:dc:f9:78:ee:37:ee:79: b2:d6:0c:f9:8e:9d:d0:82:28:ef:74:79:d5:98:06: a5:21:b6:2a:7e:db:7b:51:07:17:90:bb:6d:19:bc: bd:c5:a3:d4:1f:cc:03:60:37:87:d9:80:33:20:ed: 45:a4:52:50:f7:9a:54:a9:52:54:7f:b0:ca:06:77: 67:14:7c:c2:7a:67:0b:14:da:c8:c2:9e:05:3f:a9: 38:47:52:b9:41:b9:a7:58:91:f3:32:b5:9d:18:f1: 6b:06:71:27:ac:f8:48:53:5c:7f:2e:69:97:ca:1b: fc:11:f0:5f:0f:59:2d:3a:57:66:27:75:15:0e:66: 58:e5:ae:7c:10:d0:ef:2d:b6:96:de:cb:33:93:05: e9:af:af:60:14:e8:ec:6d:e9:c4:76:cc:04:ce:92: 29:05:91:6f:01:6a:67:29:b6:db:53:e9:bd:26:e4: cb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C8:38:55:CD:E3:A1:A0:E0:FF:CF:FA:C2:7F:9A:2E:63:AA:B9:D8 X509v3 Authority Key Identifier: keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/o8g4Vc3joaDg_8_6wn-aLmOqudg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:7:2002::/48 Signature Algorithm: sha256WithRSAEncryption 42:ef:36:65:5c:da:79:ac:ef:4b:f9:22:64:2c:3f:c0:52:47: 8e:94:01:29:aa:05:ea:50:36:08:b1:a7:10:da:c2:eb:44:d9: c2:94:a3:b9:f4:4e:7b:41:82:da:45:0f:c3:a1:11:41:4d:ee: 79:9f:e0:9a:56:51:03:22:38:98:04:6b:78:24:2f:cd:d5:d5: 08:2e:8d:15:b4:c1:e7:1d:76:a9:a1:f1:a0:f8:fa:85:7c:58: 81:a0:97:92:05:10:75:96:88:ec:a0:5e:8c:8c:94:da:65:ae: a2:c7:a4:8f:a8:3f:d2:c2:1f:69:46:32:7b:e2:31:34:50:c4: 72:bd:08:bb:89:2b:12:e5:fa:b0:32:ba:5d:a8:c2:91:d9:1e: 6e:de:11:b1:91:7d:93:78:24:4c:ed:c2:c7:b4:e5:1a:95:ca: 2f:ff:f5:26:24:c8:70:91:cd:e1:79:a1:40:7f:53:cb:84:3b: b7:84:51:ce:1f:cc:46:4e:f0:27:2d:13:9d:cc:27:7b:d3:29: 0a:25:55:b6:1b:f1:91:3f:8e:2b:4a:d6:44:79:65:18:1c:92: ca:0a:d1:b3:1a:58:c5:5b:9e:ec:af:83:41:e7:76:ff:3a:90: a5:e1:2d:36:7a:ea:e1:b1:21:b1:b6:68:b5:6e:56:78:fb:c1: 59:de:67:27 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4NFH4oAm3erTExj7K+H7YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi YmFhZTIwHhcNMjYwMTAxMDYxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2M4Mzg1NWNkZTNhMWEwZTBmZmNmZmFjMjdmOWEyZTYzYWFiOWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TgiJo2GtsL+BK9263XSYrZKUE/b 7EdOh/mmnuBJ0ZyRjWuaSPeZozOKcTGBmwuD07WzEM5TKjHbn/vluLCTD0B7OoZb YoGjgBUltzazQOOq0Nz5eO437nmy1gz5jp3QgijvdHnVmAalIbYqftt7UQcXkLtt Gby9xaPUH8wDYDeH2YAzIO1FpFJQ95pUqVJUf7DKBndnFHzCemcLFNrIwp4FP6k4 R1K5QbmnWJHzMrWdGPFrBnEnrPhIU1x/LmmXyhv8EfBfD1ktOldmJ3UVDmZY5a58 ENDvLbaW3sszkwXpr69gFOjsbenEdswEzpIpBZFvAWpnKbbbU+m9JuTL4wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKPIOFXN46Gg4P/P+sJ/mi5jqrnYMB8GA1UdIwQY MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt MjU0YWNkOTJiNGUxLzEvbzhnNFZjM2pvYURnXzhfNnduLWFMbU9xdWRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgkAByAC MA0GCSqGSIb3DQEBCwUAA4IBAQBC7zZlXNp5rO9L+SJkLD/AUkeOlAEpqgXqUDYI sacQ2sLrRNnClKO59E57QYLaRQ/DoRFBTe55n+CaVlEDIjiYBGt4JC/N1dUILo0V tMHnHXapofGg+PqFfFiBoJeSBRB1lojsoF6MjJTaZa6ix6SPqD/Swh9pRjJ74jE0 UMRyvQi7iSsS5fqwMrpdqMKR2R5u3hGxkX2TeCRM7cLHtOUalcov//UmJMhwkc3h eaFAf1PLhDu3hFHOH8xGTvAnLROdzCd70ykKJVW2G/GRP44rStZEeWUYHJLKCtGz GljFW57sr4NB53b/OpCl4S02eurhsSGxtmi1blZ4+8FZ3mcn -----END CERTIFICATE-----Generated at Sun Jan 25 18:08:25 2026 by rpki-client