This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/8gJt_vKgY7RalSb-2BGe533Itg8.roa File: 8gJt_vKgY7RalSb-2BGe533Itg8.roa (raw, json) Hash identifier: SlU8QzhG9LmIVc3LENP/NU0v6qpC64nU8O2T4x7X/MA= Subject key identifier: F2:02:6D:FE:F2:A0:63:B4:5A:95:26:FE:D8:11:9E:E7:7D:C8:B6:0F Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506 Certificate serial: 019B77C7139B19CA3B9D2C651E96C3B8FF57 Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/8gJt_vKgY7RalSb-2BGe533Itg8.roa Signing time: Thu 01 Jan 2026 04:18:13 +0000 ROA not before: Thu 01 Jan 2026 04:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44753 IP address blocks: 2a01:190:15ef::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:13:9b:19:ca:3b:9d:2c:65:1e:96:c3:b8:ff:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506 Validity Not Before: Jan 1 04:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2026dfef2a063b45a9526fed8119ee77dc8b60f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d9:86:e1:66:83:dc:64:bd:61:ef:29:54:1a: 9c:8a:71:81:37:36:33:f1:69:a0:10:67:de:bb:ee: 07:4e:6e:1f:09:ce:bd:3f:cb:2f:2b:3c:41:d6:d4: 69:96:34:23:95:db:ad:2e:bc:e4:7a:fc:14:b9:a8: 4b:85:20:41:ed:1a:be:b0:3c:b3:d9:73:5f:c9:ce: e9:53:f9:6c:51:f5:60:d2:40:0f:9e:f4:f6:1f:3a: 26:77:5a:33:fd:7c:a7:bf:e6:ad:4b:c0:c2:55:72: 48:f9:bd:b2:80:98:d8:d7:18:4d:00:b7:10:4e:12: 35:28:74:75:9a:c4:ac:a3:49:48:9f:08:e2:32:7d: 8d:23:b7:a5:29:43:77:52:62:10:23:98:40:67:05: ce:52:d8:a0:69:c5:6b:0a:65:d5:dc:4a:0c:2b:f4: 68:50:5e:ce:3f:19:50:8c:77:ba:b2:0b:62:6c:77: 52:94:a3:06:db:27:fa:c1:c4:89:7c:77:d9:ba:35: 2b:90:87:fb:cb:ba:89:eb:cc:98:db:73:5a:e8:6c: 1c:dc:1c:0c:77:1a:7c:db:06:2f:65:44:81:7a:01: f7:2a:5a:93:be:98:be:88:82:f8:6c:bb:d3:97:0e: 21:c5:33:b6:b9:ca:57:f6:56:18:45:49:16:ab:16: 57:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:02:6D:FE:F2:A0:63:B4:5A:95:26:FE:D8:11:9E:E7:7D:C8:B6:0F X509v3 Authority Key Identifier: keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/8gJt_vKgY7RalSb-2BGe533Itg8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:190:15ef::/48 Signature Algorithm: sha256WithRSAEncryption 7c:d0:d6:0f:e3:ab:ce:51:19:da:b8:8d:d8:fb:13:97:bb:84: e2:ef:10:a9:c9:3e:a2:74:26:8d:bb:ee:4d:b4:d7:5e:33:35: be:7b:18:39:f5:33:c5:e4:bd:cf:2c:dd:ca:43:37:a6:00:03: d4:df:fb:b2:d5:82:b1:3e:b2:25:f5:39:f6:63:d1:7f:96:31: 71:6d:b5:01:1f:4d:bd:a2:3b:6b:9a:5b:75:71:6f:98:28:ff: 5f:b8:3e:b8:d5:01:df:73:99:aa:95:0b:ff:90:d0:de:fe:6a: f0:48:bf:7a:86:a2:0a:db:50:a2:2f:58:2f:e6:29:2a:e0:58: 68:69:43:14:ba:f7:7b:db:a4:7a:a9:22:f9:95:72:b5:bb:4f: 30:ea:7f:97:14:aa:88:e4:e5:58:2a:6a:20:93:95:4d:88:95: f0:99:b0:b9:d3:ed:0e:9c:78:30:d4:30:90:d6:4b:74:3a:64: f5:70:1c:30:a5:0a:68:94:e3:39:7f:0e:cc:f9:92:be:2a:3a: ab:0e:34:b1:2a:16:eb:76:85:04:63:70:9e:ea:c7:f1:a5:28: 8f:f4:19:8b:23:be:81:9a:93:cc:73:1a:2d:7d:56:3c:61:c8: 68:ef:74:44:05:03:7a:4f:15:82:eb:b4:96:65:75:c1:3d:6b: 2b:99:22:09 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3xxObGco7nSxlHpbDuP9XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NzNkODQ5YjdkNTA0NzM3NmQ1N2U2Zjc5NmYwMDE4Yjcw YjQ1MDYwHhcNMjYwMTAxMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjAyNmRmZWYyYTA2M2I0NWE5NTI2ZmVkODExOWVlNzdkYzhiNjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtmG4WaD3GS9Ye8pVBqcinGBNzYz 8WmgEGfeu+4HTm4fCc69P8svKzxB1tRpljQjldutLrzkevwUuahLhSBB7Rq+sDyz 2XNfyc7pU/lsUfVg0kAPnvT2Hzomd1oz/Xynv+atS8DCVXJI+b2ygJjY1xhNALcQ ThI1KHR1msSso0lInwjiMn2NI7elKUN3UmIQI5hAZwXOUtigacVrCmXV3EoMK/Ro UF7OPxlQjHe6sgtibHdSlKMG2yf6wcSJfHfZujUrkIf7y7qJ68yY23Na6Gwc3BwM dxp82wYvZUSBegH3KlqTvpi+iIL4bLvTlw4hxTO2ucpX9lYYRUkWqxZXHwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPICbf7yoGO0WpUm/tgRnud9yLYPMB8GA1UdIwQY MBaAFNZz2Em31QRzdtV+b3lvABi3C0UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgt OGVlYjc1N2NmNTQ1LzEvOGdKdF92S2dZN1JhbFNiLTJCR2U1MzNJdGc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgtOGVlYjc1N2NmNTQ1 LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgEBkBXv MA0GCSqGSIb3DQEBCwUAA4IBAQB80NYP46vOURnauI3Y+xOXu4Ti7xCpyT6idCaN u+5NtNdeMzW+exg59TPF5L3PLN3KQzemAAPU3/uy1YKxPrIl9Tn2Y9F/ljFxbbUB H029ojtrmlt1cW+YKP9fuD641QHfc5mqlQv/kNDe/mrwSL96hqIK21CiL1gv5ikq 4FhoaUMUuvd726R6qSL5lXK1u08w6n+XFKqI5OVYKmogk5VNiJXwmbC50+0OnHgw 1DCQ1kt0OmT1cBwwpQpolOM5fw7M+ZK+KjqrDjSxKhbrdoUEY3Ce6sfxpSiP9BmL I76BmpPMcxotfVY8Ycho73REBQN6TxWC67SWZXXBPWsrmSIJ -----END CERTIFICATE-----Generated at Mon Jan 26 02:44:03 2026 by rpki-client