This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/8rGqH77YTfgMLRPyoN61N8RnEq0.roa File: 8rGqH77YTfgMLRPyoN61N8RnEq0.roa (raw, json) Hash identifier: ZNQ10Ukgjrp4rH/Ovez3kQihf1PS+l23PddvrRzZauI= Subject key identifier: F2:B1:AA:1F:BE:D8:4D:F8:0C:2D:13:F2:A0:DE:B5:37:C4:67:12:AD Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Certificate serial: 019B7E3919FFB4C2E691AF7E933E2352754A Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/8rGqH77YTfgMLRPyoN61N8RnEq0.roa Signing time: Fri 02 Jan 2026 10:20:29 +0000 ROA not before: Fri 02 Jan 2026 10:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12998 IP address blocks: 2a0a:2c0:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:19:ff:b4:c2:e6:91:af:7e:93:3e:23:52:75:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Validity Not Before: Jan 2 10:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2b1aa1fbed84df80c2d13f2a0deb537c46712ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9b:8d:29:ac:68:b4:e9:3f:e4:53:bd:39:04: 1a:03:b7:f5:b2:96:8d:75:a3:3c:a7:a4:b9:92:78: 0d:e2:f9:d7:51:88:8d:ab:7d:f3:36:72:dc:17:38: 6a:d9:9b:95:51:8d:fb:1e:03:2f:96:3d:f0:98:25: cc:0f:01:94:25:d8:a8:b8:29:34:66:ab:1f:90:cf: bd:c3:81:61:2f:23:91:7f:3c:9c:6d:88:15:b2:94: 44:ad:11:30:dd:51:d6:69:f3:02:2d:1b:8c:ff:9c: 07:69:56:c7:0a:48:1b:34:5c:03:56:3a:97:8b:c1: ee:ee:4e:db:22:ec:17:d7:b1:a7:d4:41:ab:d7:a2: ad:ca:39:a9:a1:7f:16:bc:88:f6:8f:7f:55:38:e8: 9d:04:10:c8:83:a3:41:82:5e:15:17:37:a0:3b:69: 96:ae:19:90:71:23:74:9d:25:58:a5:7e:e2:6b:cb: 76:dc:a2:f2:7f:c9:0a:f9:7f:13:81:14:ac:37:7f: 0d:92:71:c3:2a:c5:f7:8f:28:95:e1:4a:c0:21:3b: c5:97:9e:de:f5:e1:f1:dc:02:84:ae:97:0d:b0:d7: 09:1b:52:11:7b:78:08:40:60:68:ae:49:3a:ee:c3: 44:61:ea:9f:2c:21:1c:d1:ae:a8:52:08:2c:2c:a2: e1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B1:AA:1F:BE:D8:4D:F8:0C:2D:13:F2:A0:DE:B5:37:C4:67:12:AD X509v3 Authority Key Identifier: keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/8rGqH77YTfgMLRPyoN61N8RnEq0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:2c0:5::/48 Signature Algorithm: sha256WithRSAEncryption 52:dc:e8:8e:df:64:f2:15:97:a6:76:21:c5:ac:4e:f7:ee:07: 08:74:09:ec:d8:33:e3:a0:b4:78:b2:79:61:91:87:d5:9d:e2: d4:05:c9:7d:37:f4:9f:f5:a1:dd:31:25:d2:f3:de:ed:4a:61: 0f:f6:25:c0:bc:08:a5:ae:ad:0b:bb:4a:da:63:0b:f2:c4:4e: 02:3e:a1:1d:34:a0:e5:a5:39:bc:51:3e:fe:61:ec:d5:b5:d7: 48:b6:fa:d4:72:eb:43:92:5d:fb:80:15:c6:91:aa:d0:3b:d4: 62:70:d6:13:57:f9:4d:72:cb:33:5e:8a:a1:2e:a8:97:27:42: 34:44:a4:4a:94:11:ff:01:7b:d9:8e:4a:cb:d5:67:7d:0e:a6: 54:6f:16:af:45:d4:78:7b:0a:6a:c8:76:23:f7:52:f4:39:05: f9:41:d0:55:82:76:25:1b:8f:c0:2d:7e:54:d7:12:d0:01:5b: 4e:90:f1:3b:34:f4:24:d8:ef:ba:ad:27:00:1d:de:3d:96:b7: fb:1d:99:42:97:df:d1:b9:34:cb:e7:98:d5:e9:7c:df:10:ca: cf:65:dd:4d:f9:47:b2:05:2b:ed:2a:fc:d1:49:c9:ed:4d:8e: 3b:49:e8:e7:a0:3d:21:2f:ea:40:78:b7:f1:05:44:c7:a1:31: f2:81:2c:6f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+ORn/tMLmka9+kz4jUnVKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZTk3Y2Y0ZDhkMGJjMTdiM2FmMWQ2MmM0ZDcxNDg4NjYx YmQyMTIwHhcNMjYwMTAyMTAyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmIxYWExZmJlZDg0ZGY4MGMyZDEzZjJhMGRlYjUzN2M0NjcxMmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5uNKaxotOk/5FO9OQQaA7f1spaN daM8p6S5kngN4vnXUYiNq33zNnLcFzhq2ZuVUY37HgMvlj3wmCXMDwGUJdiouCk0 ZqsfkM+9w4FhLyORfzycbYgVspRErREw3VHWafMCLRuM/5wHaVbHCkgbNFwDVjqX i8Hu7k7bIuwX17Gn1EGr16KtyjmpoX8WvIj2j39VOOidBBDIg6NBgl4VFzegO2mW rhmQcSN0nSVYpX7ia8t23KLyf8kK+X8TgRSsN38NknHDKsX3jyiV4UrAITvFl57e 9eHx3AKErpcNsNcJG1IRe3gIQGBorkk67sNEYeqfLCEc0a6oUggsLKLhgQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPKxqh++2E34DC0T8qDetTfEZxKtMB8GA1UdIwQY MBaAFGzpfPTY0LwXs68dYsTXFIhmG9ISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMt Mzk5M2FhMzI0ZTFmLzEvOHJHcUg3N1lUZmdNTFJQeW9ONjFOOFJuRXEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMtMzk5M2FhMzI0ZTFm LzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgoCwAAF MA0GCSqGSIb3DQEBCwUAA4IBAQBS3OiO32TyFZemdiHFrE737gcIdAns2DPjoLR4 snlhkYfVneLUBcl9N/Sf9aHdMSXS897tSmEP9iXAvAilrq0Lu0raYwvyxE4CPqEd NKDlpTm8UT7+YezVtddItvrUcutDkl37gBXGkarQO9RicNYTV/lNcsszXoqhLqiX J0I0RKRKlBH/AXvZjkrL1Wd9DqZUbxavRdR4ewpqyHYj91L0OQX5QdBVgnYlG4/A LX5U1xLQAVtOkPE7NPQk2O+6rScAHd49lrf7HZlCl9/RuTTL55jV6XzfEMrPZd1N +UeyBSvtKvzRScntTY47SejnoD0hL+pAeLfxBUTHoTHygSxv -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:12 2026 by rpki-client