This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/ko8WrvZomBgcI3Hqp37PqXOWiSI.roa File: ko8WrvZomBgcI3Hqp37PqXOWiSI.roa (raw, json) Hash identifier: 8LPZPPU2MH1K+TEuOxL4YKzpLJKTkh0MI1eoRloRcik= Subject key identifier: 92:8F:16:AE:F6:68:98:18:1C:23:71:EA:A7:7E:CF:A9:73:96:89:22 Certificate issuer: /CN=cb335dc6feb385f6a23344056a13c2c595028e91 Certificate serial: 019B7DC92B982B00D98954A411491CC531F0 Authority key identifier: CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/ko8WrvZomBgcI3Hqp37PqXOWiSI.roa Signing time: Fri 02 Jan 2026 08:18:14 +0000 ROA not before: Fri 02 Jan 2026 08:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206059 IP address blocks: 2a0e:3780:8150::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:2b:98:2b:00:d9:89:54:a4:11:49:1c:c5:31:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb335dc6feb385f6a23344056a13c2c595028e91 Validity Not Before: Jan 2 08:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=928f16aef66898181c2371eaa77ecfa973968922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6e:74:50:fb:47:6f:b8:54:8a:87:d5:b5:b5: 40:80:f7:ff:21:74:19:a8:b3:a6:2b:5c:a0:e1:e6: f8:9a:e8:9c:d1:85:d2:5b:62:40:73:ad:f6:c8:9a: a2:82:44:6f:2b:be:5f:dd:9c:57:9a:cc:c9:f1:58: 6d:cd:a0:8a:5d:c5:06:1b:e1:43:5e:79:e0:96:90: 49:f8:63:92:1e:29:ec:77:ad:ee:5b:73:f5:78:87: a1:ff:8a:ea:e2:d9:92:34:8e:2f:b4:2e:be:2c:ff: c5:95:85:97:10:b3:50:cd:4a:dd:d4:ba:15:4f:96: 6a:4d:c5:48:fc:d2:20:66:8a:11:32:57:55:5a:d6: 4b:bb:42:92:8b:19:21:e5:5f:2e:60:73:9d:d0:25: 25:7c:5f:c9:08:99:20:15:c5:5f:8b:31:99:84:c3: 39:83:31:b2:59:ba:6f:46:bf:5c:95:4e:67:b5:30: ee:9b:4e:dd:7d:74:fa:d4:21:ff:56:b0:ad:56:df: 50:e1:46:24:e1:98:da:58:eb:e1:c6:59:c0:ed:b4: d1:ec:43:a4:23:b2:2f:27:0b:7d:18:e7:c5:99:43: 2b:3a:9c:3d:50:49:a8:9d:5d:49:fe:66:62:80:33: 17:ba:64:e0:8d:1b:a3:c6:e2:33:dd:95:93:c3:57: 0c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8F:16:AE:F6:68:98:18:1C:23:71:EA:A7:7E:CF:A9:73:96:89:22 X509v3 Authority Key Identifier: keyid:CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/ko8WrvZomBgcI3Hqp37PqXOWiSI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:3780:8150::/48 Signature Algorithm: sha256WithRSAEncryption 77:e2:62:15:eb:27:ab:5c:2b:6b:15:8a:6b:59:58:92:4c:dd: ac:20:e5:95:c1:d2:72:10:79:c6:0d:b0:76:05:ff:3f:8e:2c: 48:f6:06:85:87:52:4b:f3:a2:5f:c7:6e:26:7d:80:d3:f3:0a: d1:d6:5e:1e:07:c8:a9:5a:b2:b6:ba:64:38:74:51:03:a4:8e: 63:67:a9:4d:70:9c:dd:9e:2c:ef:1e:4f:56:87:c2:d6:60:36: 81:e7:50:4a:60:d4:99:e7:45:28:1f:b6:c5:54:fd:61:04:7b: cf:6b:1a:93:a7:7a:9e:9a:1d:3c:27:e7:33:ad:54:7c:f7:00: 7d:74:bb:7d:0b:9a:35:03:d3:b3:f7:5c:20:df:bd:57:22:09: e5:ce:a1:2c:3e:1b:12:e9:56:22:0a:e8:d6:f7:8b:0f:08:a9: 99:8e:24:54:84:0e:a2:3f:82:4d:40:61:c1:dc:12:1d:c5:b1: 58:52:a0:b0:06:ac:b0:84:77:18:1a:45:fd:7e:04:1e:1d:f0: 12:9d:e4:2f:4c:48:03:22:f6:e8:fc:a6:63:12:52:90:9c:53: 9e:ca:c1:0f:64:99:f2:0c:c4:01:86:7e:01:20:d3:82:4c:57: cb:c4:59:9b:f6:b6:84:a1:ca:0c:cb:e3:21:95:af:49:a2:99: b1:19:ac:72 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9ySuYKwDZiVSkEUkcxTHwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMzM1ZGM2ZmViMzg1ZjZhMjMzNDQwNTZhMTNjMmM1OTUw MjhlOTEwHhcNMjYwMTAyMDgxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjhmMTZhZWY2Njg5ODE4MWMyMzcxZWFhNzdlY2ZhOTczOTY4OTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW50UPtHb7hUiofVtbVAgPf/IXQZ qLOmK1yg4eb4muic0YXSW2JAc632yJqigkRvK75f3ZxXmszJ8VhtzaCKXcUGG+FD XnnglpBJ+GOSHinsd63uW3P1eIeh/4rq4tmSNI4vtC6+LP/FlYWXELNQzUrd1LoV T5ZqTcVI/NIgZooRMldVWtZLu0KSixkh5V8uYHOd0CUlfF/JCJkgFcVfizGZhMM5 gzGyWbpvRr9clU5ntTDum07dfXT61CH/VrCtVt9Q4UYk4ZjaWOvhxlnA7bTR7EOk I7IvJwt9GOfFmUMrOpw9UEmonV1J/mZigDMXumTgjRujxuIz3ZWTw1cMgQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJKPFq72aJgYHCNx6qd+z6lzlokiMB8GA1UdIwQY MBaAFMszXcb+s4X2ojNEBWoTwsWVAo6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mYTM0MmUtYjNiYy00MzczLThjNmIt ODg1NGM4MmI1NDVkLzEva284V3J2Wm9tQmdjSTNIcXAzN1BxWE9XaVNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9mYTM0MmUtYjNiYy00MzczLThjNmItODg1NGM4MmI1NDVk LzEveXpOZHh2NnpoZmFpTTBRRmFoUEN4WlVDanBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg43gIFQ MA0GCSqGSIb3DQEBCwUAA4IBAQB34mIV6yerXCtrFYprWViSTN2sIOWVwdJyEHnG DbB2Bf8/jixI9gaFh1JL86Jfx24mfYDT8wrR1l4eB8ipWrK2umQ4dFEDpI5jZ6lN cJzdnizvHk9Wh8LWYDaB51BKYNSZ50UoH7bFVP1hBHvPaxqTp3qemh08J+czrVR8 9wB9dLt9C5o1A9Oz91wg371XIgnlzqEsPhsS6VYiCujW94sPCKmZjiRUhA6iP4JN QGHB3BIdxbFYUqCwBqywhHcYGkX9fgQeHfASneQvTEgDIvbo/KZjElKQnFOeysEP ZJnyDMQBhn4BINOCTFfLxFmb9raEocoMy+Mhla9JopmxGaxy -----END CERTIFICATE-----Generated at Mon Jan 26 09:25:14 2026 by rpki-client