This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/8UgGPRjkNP2twoQEGeBFfsQ8b7U.roa File: 8UgGPRjkNP2twoQEGeBFfsQ8b7U.roa (raw, json) Hash identifier: nwNyQ/U0qeEN54sY8h57MP/vc19V4ZZPQJybv3Z+p4g= Subject key identifier: F1:48:06:3D:18:E4:34:FD:AD:C2:84:04:19:E0:45:7E:C4:3C:6F:B5 Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Certificate serial: 019B7BA523ED37C15128C846B4BE34689088 Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/8UgGPRjkNP2twoQEGeBFfsQ8b7U.roa Signing time: Thu 01 Jan 2026 22:19:38 +0000 ROA not before: Thu 01 Jan 2026 22:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212391 IP address blocks: 2a04:2b00:14ee::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:23:ed:37:c1:51:28:c8:46:b4:be:34:68:90:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Validity Not Before: Jan 1 22:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f148063d18e434fdadc2840419e0457ec43c6fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8f:53:3c:4f:4d:8a:0c:69:c2:f0:85:b0:b1: 8e:be:30:61:f6:29:42:26:78:41:b5:f5:66:8b:e1: 32:31:ed:5a:0c:21:b9:79:12:31:68:b6:74:8c:c4: bc:c8:ec:84:05:7e:e1:ab:6f:34:05:4c:91:b2:50: 7a:b8:dc:91:12:5a:15:cc:a1:9a:45:ef:c1:eb:6f: 9f:52:b9:5c:8a:dc:76:43:66:00:4b:21:ba:70:f5: 8a:c1:5a:39:97:c4:05:9b:48:6c:2e:c6:db:41:8f: 3f:01:87:a7:ba:94:fe:dd:c2:0a:c3:7d:82:ab:2f: d2:af:8d:31:e0:c5:e2:d0:70:4c:2b:c7:e4:14:bf: ef:ac:a7:b0:6d:45:b5:38:cc:28:24:b3:9b:ff:5b: e9:06:46:31:c8:6f:96:fd:7c:0b:00:b8:98:b7:2a: e1:1a:d0:c9:ef:7c:5a:9a:96:50:d9:74:e4:cd:00: 63:6a:a4:36:b6:ff:67:a0:79:7c:07:db:cb:6a:21: 50:ce:c5:12:ad:16:7d:6e:2c:24:2a:cb:50:43:a6: c3:58:bb:76:51:e5:b0:8e:f9:b8:bf:7d:b6:ef:71: e7:0a:23:43:79:ec:9c:b4:04:87:67:d9:ca:7d:c8: 80:14:a6:c3:4e:b5:1f:20:98:a4:97:fe:32:50:49: b0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:48:06:3D:18:E4:34:FD:AD:C2:84:04:19:E0:45:7E:C4:3C:6F:B5 X509v3 Authority Key Identifier: keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/8UgGPRjkNP2twoQEGeBFfsQ8b7U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:2b00:14ee::/48 Signature Algorithm: sha256WithRSAEncryption 8a:84:aa:58:4d:ba:d3:c4:de:03:a9:d1:10:ee:3d:4f:0b:a8: 19:d7:af:d9:af:16:8c:d1:ae:79:c8:23:a9:88:6a:da:dc:ce: 34:81:46:e0:5d:3c:a5:49:3e:97:0a:b0:b4:9a:73:2b:5d:7c: a0:37:d8:1c:93:61:c4:81:7a:14:69:a0:a7:e0:7c:b5:45:ea: 03:71:67:54:de:1c:ec:8a:2d:1d:8f:19:10:15:b7:0d:ee:0d: d6:c6:ed:5c:ea:6e:d2:44:41:24:67:c8:e5:84:3f:6c:11:a4: ee:5d:2c:07:71:d6:87:21:02:04:b5:2b:8c:68:36:7e:6f:0f: 72:01:1f:8d:53:62:43:5c:b3:b0:09:c0:7b:bf:0d:f3:8f:35: 77:08:b5:39:c2:d2:9a:10:38:a1:fe:20:74:a7:33:bb:c6:d3: 99:d8:d8:bc:16:8f:30:e9:34:46:13:1b:00:c4:3b:f0:b9:37: b4:1e:99:ea:bd:d3:63:68:19:01:da:64:3b:c3:90:b7:6f:bd: 5c:f9:36:45:8b:30:f1:42:f4:e7:1a:e0:b5:19:a1:68:67:a0: 67:e9:12:8d:22:ad:74:31:fe:4c:76:25:55:da:56:97:6c:83: 2b:3b:84:ac:c2:46:e3:40:73:78:c8:68:b9:7e:1c:af:76:5b: 32:4b:f2:15 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7pSPtN8FRKMhGtL40aJCIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzZhZmI3NGZhZDViYWYwYTYxODBiNDk1MTBkOGI4NDk3 ZGY4ZDMwHhcNMjYwMTAxMjIxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTQ4MDYzZDE4ZTQzNGZkYWRjMjg0MDQxOWUwNDU3ZWM0M2M2ZmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY9TPE9NigxpwvCFsLGOvjBh9ilC JnhBtfVmi+EyMe1aDCG5eRIxaLZ0jMS8yOyEBX7hq280BUyRslB6uNyREloVzKGa Re/B62+fUrlcitx2Q2YASyG6cPWKwVo5l8QFm0hsLsbbQY8/AYenupT+3cIKw32C qy/Sr40x4MXi0HBMK8fkFL/vrKewbUW1OMwoJLOb/1vpBkYxyG+W/XwLALiYtyrh GtDJ73xampZQ2XTkzQBjaqQ2tv9noHl8B9vLaiFQzsUSrRZ9biwkKstQQ6bDWLt2 UeWwjvm4v32273HnCiNDeeyctASHZ9nKfciAFKbDTrUfIJikl/4yUEmwRwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPFIBj0Y5DT9rcKEBBngRX7EPG+1MB8GA1UdIwQY MBaAFEd2r7dPrVuvCmGAtJUQ2LhJffjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEt MDUzOGU5NWYzZjEyLzEvOFVnR1BSamtOUDJ0d29RRUdlQkZmc1E4YjdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEtMDUzOGU5NWYzZjEy LzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgQrABTu MA0GCSqGSIb3DQEBCwUAA4IBAQCKhKpYTbrTxN4DqdEQ7j1PC6gZ16/ZrxaM0a55 yCOpiGra3M40gUbgXTylST6XCrC0mnMrXXygN9gck2HEgXoUaaCn4Hy1ReoDcWdU 3hzsii0djxkQFbcN7g3Wxu1c6m7SREEkZ8jlhD9sEaTuXSwHcdaHIQIEtSuMaDZ+ bw9yAR+NU2JDXLOwCcB7vw3zjzV3CLU5wtKaEDih/iB0pzO7xtOZ2Ni8Fo8w6TRG ExsAxDvwuTe0HpnqvdNjaBkB2mQ7w5C3b71c+TZFizDxQvTnGuC1GaFoZ6Bn6RKN Iq10Mf5MdiVV2laXbIMrO4SswkbjQHN4yGi5fhyvdlsyS/IV -----END CERTIFICATE-----Generated at Mon Jan 26 21:17:02 2026 by rpki-client