This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/rA6VNsR6jroVmSktiBRw1rIhqrU.roa File: rA6VNsR6jroVmSktiBRw1rIhqrU.roa (raw, json) Hash identifier: wXe4q97uD3eOmJG7Qhu7qR3Oh0Q+VQy4RtGB+wIv/0E= Subject key identifier: AC:0E:95:36:C4:7A:8E:BA:15:99:29:2D:88:14:70:D6:B2:21:AA:B5 Certificate issuer: /CN=8e8e977abefa2a1f995e89c947fefd4636b7961c Certificate serial: 019B78A256A2006E5488FDBCDFB17144E257 Authority key identifier: 8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/rA6VNsR6jroVmSktiBRw1rIhqrU.roa Signing time: Thu 01 Jan 2026 08:17:43 +0000 ROA not before: Thu 01 Jan 2026 08:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48185 IP address blocks: 2a02:2b8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:56:a2:00:6e:54:88:fd:bc:df:b1:71:44:e2:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e8e977abefa2a1f995e89c947fefd4636b7961c Validity Not Before: Jan 1 08:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac0e9536c47a8eba1599292d881470d6b221aab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7d:56:63:1d:b8:ea:05:b9:f7:de:b7:12:88: b1:72:5b:50:76:ec:7b:2f:6f:65:38:75:76:2b:2e: a5:95:29:3e:56:66:d4:25:9e:46:80:77:4b:f9:10: cc:e0:e1:1f:59:88:df:59:c0:87:b2:b7:08:58:2f: 44:14:92:f4:ad:88:e9:ee:90:59:32:50:fd:78:fe: 93:21:6b:c1:d5:b1:27:90:9d:b1:6e:c1:17:74:45: c9:a0:a5:c0:12:78:4a:7d:62:30:e8:b8:8c:cf:35: 3f:18:8c:01:53:db:82:53:21:c8:58:f4:73:b4:e0: 8e:2b:77:42:28:7f:0a:9c:7c:06:88:ba:59:df:dc: fa:98:0b:7f:44:a3:69:ef:8e:a3:8c:77:78:02:84: 39:4b:22:a6:b5:48:95:92:a4:f2:71:e3:0e:94:ba: d6:23:f5:90:f6:19:ce:f1:ff:a5:ee:50:04:73:aa: 6a:82:c4:6f:f5:ea:60:44:93:3c:8c:3b:5e:92:8b: 0a:79:0b:91:9e:4f:a9:a4:99:68:1d:00:7b:a9:fb: 95:68:16:4a:8d:c3:f5:3b:dc:0e:e9:48:21:c7:dd: 5f:51:6e:e1:a8:69:ed:01:64:1d:fb:2a:6c:be:7e: ed:c3:65:68:cd:26:b7:75:6b:4a:58:29:5e:d2:f0: 13:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:0E:95:36:C4:7A:8E:BA:15:99:29:2D:88:14:70:D6:B2:21:AA:B5 X509v3 Authority Key Identifier: keyid:8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/rA6VNsR6jroVmSktiBRw1rIhqrU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:2b8::/32 Signature Algorithm: sha256WithRSAEncryption 88:7c:a5:13:ea:5b:4d:7b:ed:ca:b0:4d:05:9b:f6:01:05:f8: 76:07:ec:d9:ce:25:99:2a:66:6c:4c:51:0a:de:6a:9d:0c:26: 7e:49:9e:bd:80:ab:f4:fb:13:68:68:9d:b5:f2:6d:1a:cc:b7: a6:3f:cc:0d:7b:57:2c:52:23:60:13:83:5d:0e:f3:0b:92:f1: 49:6c:b5:6d:bc:6e:bd:17:13:a8:3e:07:93:1c:e1:54:2f:5d: 07:32:ce:e0:95:52:b0:1c:ce:86:b5:70:00:c5:83:42:59:d8: 9a:5e:d7:67:b6:63:5a:70:90:ae:a3:33:ad:c6:1f:ee:ec:1d: d0:df:ea:3f:d1:fc:6f:a8:0d:b1:bb:40:9e:37:de:82:a7:ce: 0a:3f:5c:22:28:e1:2c:da:2a:62:9f:52:66:e2:44:6d:92:58: d0:46:80:80:c2:20:68:b7:af:87:76:df:75:43:07:29:4e:0e: 86:62:ae:c8:17:99:0e:05:fd:9a:b1:4b:3e:2e:68:f4:36:a1: 99:ad:ea:9d:b2:f0:41:1f:59:1d:3b:96:68:00:68:a7:a4:62: 25:cc:e7:67:ec:30:72:f6:09:ca:5b:e7:b7:7d:9c:ab:1d:8b: ba:f7:35:a8:63:61:d6:39:93:f9:69:52:db:06:87:24:c5:e8: 09:35:31:d1 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4olaiAG5UiP2837FxROJXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlOGU5NzdhYmVmYTJhMWY5OTVlODljOTQ3ZmVmZDQ2MzZi Nzk2MWMwHhcNMjYwMTAxMDgxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzBlOTUzNmM0N2E4ZWJhMTU5OTI5MmQ4ODE0NzBkNmIyMjFhYWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1X1WYx246gW59963EoixcltQdux7 L29lOHV2Ky6llSk+VmbUJZ5GgHdL+RDM4OEfWYjfWcCHsrcIWC9EFJL0rYjp7pBZ MlD9eP6TIWvB1bEnkJ2xbsEXdEXJoKXAEnhKfWIw6LiMzzU/GIwBU9uCUyHIWPRz tOCOK3dCKH8KnHwGiLpZ39z6mAt/RKNp746jjHd4AoQ5SyKmtUiVkqTyceMOlLrW I/WQ9hnO8f+l7lAEc6pqgsRv9epgRJM8jDtekosKeQuRnk+ppJloHQB7qfuVaBZK jcP1O9wO6Ughx91fUW7hqGntAWQd+ypsvn7tw2VozSa3dWtKWCle0vAT6wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFKwOlTbEeo66FZkpLYgUcNayIaq1MB8GA1UdIwQY MBaAFI6Ol3q++iofmV6JyUf+/UY2t5YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam82WGVyNzZLaC1aWG9uSlJfNzlSamEzbGh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9mM2Q1NzItM2RjNy00YjQ2LTkyNjkt M2MzMGEwYWQxM2Y2LzEvckE2Vk5zUjZqcm9WbVNrdGlCUncxcklocXJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9mM2Q1NzItM2RjNy00YjQ2LTkyNjktM2MzMGEwYWQxM2Y2 LzEvam82WGVyNzZLaC1aWG9uSlJfNzlSamEzbGh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgICuDAN BgkqhkiG9w0BAQsFAAOCAQEAiHylE+pbTXvtyrBNBZv2AQX4dgfs2c4lmSpmbExR Ct5qnQwmfkmevYCr9PsTaGidtfJtGsy3pj/MDXtXLFIjYBODXQ7zC5LxSWy1bbxu vRcTqD4HkxzhVC9dBzLO4JVSsBzOhrVwAMWDQlnYml7XZ7ZjWnCQrqMzrcYf7uwd 0N/qP9H8b6gNsbtAnjfegqfOCj9cIijhLNoqYp9SZuJEbZJY0EaAgMIgaLevh3bf dUMHKU4OhmKuyBeZDgX9mrFLPi5o9Dahma3qnbLwQR9ZHTuWaABop6RiJcznZ+ww cvYJylvnt32cqx2Luvc1qGNh1jmT+WlS2waHJMXoCTUx0Q== -----END CERTIFICATE-----Generated at Mon Jan 26 09:25:47 2026 by rpki-client