This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/_InFEIoYoBff0XPi6Qu-BDtEOeA.roa File: _InFEIoYoBff0XPi6Qu-BDtEOeA.roa (raw, json) Hash identifier: 1FQgWq9bmnmW/hqAWc6TQBl0/lSLnU+yUMWdU6LEwbc= Subject key identifier: FC:89:C5:10:8A:18:A0:17:DF:D1:73:E2:E9:0B:BE:04:3B:44:39:E0 Certificate issuer: /CN=c65613d5999f3632985ed89a02efaabd1890ba09 Certificate serial: 019B79ECD23F594E7D83DDBF162C9F3DB786 Authority key identifier: C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/_InFEIoYoBff0XPi6Qu-BDtEOeA.roa Signing time: Thu 01 Jan 2026 14:18:42 +0000 ROA not before: Thu 01 Jan 2026 14:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215980 IP address blocks: 2a14:8100:f300::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d2:3f:59:4e:7d:83:dd:bf:16:2c:9f:3d:b7:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c65613d5999f3632985ed89a02efaabd1890ba09 Validity Not Before: Jan 1 14:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc89c5108a18a017dfd173e2e90bbe043b4439e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e0:67:f1:ed:c3:b0:32:9e:44:08:65:01:63: 22:a3:b1:ce:7c:2a:a7:24:8a:ea:4f:c5:39:44:ea: c0:c4:b1:f8:be:e2:4f:8c:92:ff:76:6f:3d:81:9b: 23:2f:90:32:60:79:1f:33:c6:5f:45:26:4b:fc:42: a7:3f:f8:b4:b2:01:d3:68:a9:c6:f0:42:f5:fb:9d: 09:f0:0f:82:73:18:f5:89:7a:e5:64:3b:07:a7:91: 9d:2e:b5:20:88:1d:6b:b1:d2:3d:25:23:74:9f:b5: 24:2c:56:d7:5d:60:2a:ae:be:42:8a:bb:94:98:82: e6:a9:d2:d1:4a:f0:bb:49:7b:27:9c:5b:71:c0:ff: 49:e2:23:1e:5b:4b:69:84:37:9f:34:75:d6:24:da: 3b:c6:73:dc:be:c2:c4:a2:8e:75:09:2b:b8:88:23: f1:24:ec:a2:ce:10:e6:da:b5:22:0a:cc:d4:66:f8: 52:09:7f:d3:3b:0d:87:ae:53:50:af:df:1c:b6:cc: 7d:8f:f4:8f:77:54:07:a6:9b:43:77:da:3a:b7:85: 9e:e9:31:7d:ab:e2:30:0f:2b:c4:9a:53:39:a8:8b: 13:20:d4:87:2e:7f:84:bc:77:3c:88:a9:93:42:67: a0:68:a0:80:c1:d9:74:ad:57:13:5c:25:d3:62:57: 8f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:89:C5:10:8A:18:A0:17:DF:D1:73:E2:E9:0B:BE:04:3B:44:39:E0 X509v3 Authority Key Identifier: keyid:C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/_InFEIoYoBff0XPi6Qu-BDtEOeA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:8100:f300::/44 Signature Algorithm: sha256WithRSAEncryption 8a:52:56:c5:19:5e:94:d5:6e:63:4f:75:89:12:d0:11:4d:49: a6:80:af:f2:58:ae:c4:7f:e4:fd:24:35:eb:98:77:78:44:7a: 6a:66:b0:a4:8a:64:c0:e7:18:1b:34:88:ce:b9:3a:2f:d6:79: 5e:e4:05:52:c0:e2:79:46:76:b7:70:59:e6:2a:d8:4f:4d:d6: a8:48:fc:6e:41:fc:94:20:38:30:86:c3:26:4f:c5:e4:15:12: 5c:cf:95:82:e5:d7:da:b4:b2:60:fc:2b:32:13:12:b4:33:ce: 25:b4:e7:79:77:b9:ea:8f:06:dd:28:7c:57:78:f0:be:89:88: 6f:7c:36:06:a2:52:9d:9c:21:e1:36:59:5e:ed:96:08:3e:24: 2d:58:45:97:03:6a:00:3b:f4:29:d5:b5:92:8b:e3:0b:51:39: 97:48:2a:cb:fb:4d:85:0f:29:cf:bc:e4:80:b4:e2:f7:48:24: fd:bf:a0:bd:70:15:47:68:da:5b:66:a9:59:47:42:51:a6:d9: 2a:74:dc:dd:74:b6:68:fc:df:4d:ed:bc:41:7e:6b:02:84:69: 1a:32:2f:2a:d6:dd:7b:ee:6f:7c:d0:25:40:2a:2e:f2:f3:1a: fd:ef:97:09:2d:d7:b8:e7:46:9e:43:a2:50:c9:a3:78:79:ef: 2b:41:ef:81 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57NI/WU59g92/FiyfPbeGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NTYxM2Q1OTk5ZjM2MzI5ODVlZDg5YTAyZWZhYWJkMTg5 MGJhMDkwHhcNMjYwMTAxMTQxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzg5YzUxMDhhMThhMDE3ZGZkMTczZTJlOTBiYmUwNDNiNDQzOWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+Bn8e3DsDKeRAhlAWMio7HOfCqn JIrqT8U5ROrAxLH4vuJPjJL/dm89gZsjL5AyYHkfM8ZfRSZL/EKnP/i0sgHTaKnG 8EL1+50J8A+Ccxj1iXrlZDsHp5GdLrUgiB1rsdI9JSN0n7UkLFbXXWAqrr5CiruU mILmqdLRSvC7SXsnnFtxwP9J4iMeW0tphDefNHXWJNo7xnPcvsLEoo51CSu4iCPx JOyizhDm2rUiCszUZvhSCX/TOw2HrlNQr98ctsx9j/SPd1QHpptDd9o6t4We6TF9 q+IwDyvEmlM5qIsTINSHLn+EvHc8iKmTQmegaKCAwdl0rVcTXCXTYlePbQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPyJxRCKGKAX39Fz4ukLvgQ7RDngMB8GA1UdIwQY MBaAFMZWE9WZnzYymF7YmgLvqr0YkLoJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGxZVDFabWZOaktZWHRpYUF1LXF2UmlRdWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8zZDhhYWMtZDM5OC00M2FiLTljM2Ut NjUwOTkyZjJhMTc0LzEvX0luRkVJb1lvQmZmMFhQaTZRdS1CRHRFT2VBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8zZDhhYWMtZDM5OC00M2FiLTljM2UtNjUwOTkyZjJhMTc0 LzEveGxZVDFabWZOaktZWHRpYUF1LXF2UmlRdWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhSBAPMA MA0GCSqGSIb3DQEBCwUAA4IBAQCKUlbFGV6U1W5jT3WJEtARTUmmgK/yWK7Ef+T9 JDXrmHd4RHpqZrCkimTA5xgbNIjOuTov1nle5AVSwOJ5Rna3cFnmKthPTdaoSPxu QfyUIDgwhsMmT8XkFRJcz5WC5dfatLJg/CsyExK0M84ltOd5d7nqjwbdKHxXePC+ iYhvfDYGolKdnCHhNlle7ZYIPiQtWEWXA2oAO/Qp1bWSi+MLUTmXSCrL+02FDynP vOSAtOL3SCT9v6C9cBVHaNpbZqlZR0JRptkqdNzddLZo/N9N7bxBfmsChGkaMi8q 1t177m980CVAKi7y8xr975cJLde450aeQ6JQyaN4ee8rQe+B -----END CERTIFICATE-----Generated at Sun Jan 25 16:10:02 2026 by rpki-client