This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/8BRkastJX7wU0bPIsin3zeWNSuA.roa File: 8BRkastJX7wU0bPIsin3zeWNSuA.roa (raw, json) Hash identifier: 60PaOzCg7fH+6KJwHOstj/lUrw5vKE8AsGhSw9z1YKg= Subject key identifier: F0:14:64:6A:CB:49:5F:BC:14:D1:B3:C8:B2:29:F7:CD:E5:8D:4A:E0 Certificate issuer: /CN=c0747fbe26c9cdd7628adfedb57b78be8de75e29 Certificate serial: 019B79ED07819986A8E3F4F83D11C7F71E27 Authority key identifier: C0:74:7F:BE:26:C9:CD:D7:62:8A:DF:ED:B5:7B:78:BE:8D:E7:5E:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/8BRkastJX7wU0bPIsin3zeWNSuA.roa Signing time: Thu 01 Jan 2026 14:18:55 +0000 ROA not before: Thu 01 Jan 2026 14:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36383 IP address blocks: 2a00:79e0:3fc::/48 maxlen: 48 2a00:79e0:3fd::/48 maxlen: 48 2a00:79e0:2000::/35 maxlen: 35 2a00:79e0:2000::/38 maxlen: 38 2a00:79e0:2200::/39 maxlen: 39 2a00:79e0:2400::/39 maxlen: 39 2a00:79e0:2600::/39 maxlen: 39 2a00:79e0:2800::/38 maxlen: 38 2a00:79e0:2a00::/39 maxlen: 39 2a00:79e0:2c00::/39 maxlen: 39 2a00:79e0:2e00::/39 maxlen: 39 2a00:79e0:3000::/38 maxlen: 38 2a00:79e0:3200::/39 maxlen: 39 2a00:79e0:3400::/39 maxlen: 39 2a00:79e0:3600::/39 maxlen: 39 2a00:79e0:3800::/38 maxlen: 38 2a00:79e0:3a00::/39 maxlen: 39 2a00:79e0:3c00::/39 maxlen: 39 2a00:79e0:3e00::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:07:81:99:86:a8:e3:f4:f8:3d:11:c7:f7:1e:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0747fbe26c9cdd7628adfedb57b78be8de75e29 Validity Not Before: Jan 1 14:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f014646acb495fbc14d1b3c8b229f7cde58d4ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1b:85:07:13:12:24:d9:d1:a9:d3:e4:13:49: 73:01:58:6d:c8:58:c2:80:d2:17:21:ff:4c:e9:05: 25:e8:81:c6:28:7d:9b:16:85:2e:b0:4b:b9:71:71: 46:51:cb:fb:60:13:87:24:a3:75:8c:00:da:f0:61: 23:a0:83:eb:93:8d:e6:ba:97:2f:94:3a:80:51:40: 6e:6b:79:ca:aa:9f:15:4f:c1:52:76:87:7a:b1:40: e8:96:a7:8e:f0:52:ed:48:ef:c6:d0:92:18:b6:2e: f1:18:e3:f4:94:b9:8d:1d:8e:fd:44:5c:d6:88:c0: 27:e7:63:69:e2:1d:d1:db:2f:6f:54:67:25:34:91: da:ab:49:fe:88:63:48:e7:d0:d9:87:f3:d4:88:0b: 9a:d3:6c:af:54:fe:5b:e2:d2:24:eb:c3:c1:bb:1c: 6f:f5:40:b4:e4:33:2f:3d:86:cd:ab:00:bb:a2:b8: 12:9f:bf:38:51:a2:ab:50:2f:91:e2:1f:36:29:af: ca:94:fa:39:f7:ee:76:dc:a3:d7:20:b9:4c:c8:02: 76:a6:2a:03:a5:3a:32:5f:e8:e9:77:b5:c2:ed:a6: 1e:e7:ea:97:50:fa:ca:bb:0a:86:eb:2b:f8:cd:c2: bf:9c:f6:db:c2:a6:ff:bd:88:36:e8:91:d8:b8:fe: 30:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:14:64:6A:CB:49:5F:BC:14:D1:B3:C8:B2:29:F7:CD:E5:8D:4A:E0 X509v3 Authority Key Identifier: keyid:C0:74:7F:BE:26:C9:CD:D7:62:8A:DF:ED:B5:7B:78:BE:8D:E7:5E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/8BRkastJX7wU0bPIsin3zeWNSuA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:79e0:3fc::/47 2a00:79e0:2000::/35 Signature Algorithm: sha256WithRSAEncryption 66:a5:95:37:48:a6:39:fc:fd:5e:97:f9:f1:6a:f9:08:61:76: c5:43:61:ae:cb:ea:d7:51:aa:38:26:95:a7:9e:94:9b:22:72: 90:e8:ea:27:58:6c:c1:04:e8:16:0b:f2:e0:ce:2e:23:2f:18: a0:d8:26:cc:23:73:b8:74:8d:ea:95:51:23:25:72:2e:32:db: ef:35:76:e4:84:ce:86:63:04:3e:1c:44:51:a4:41:54:e2:47: bc:49:6a:c2:b2:0e:89:52:7c:69:eb:e8:75:96:ea:5c:39:5d: b7:a5:86:54:38:d0:70:92:40:bd:78:21:db:33:bf:63:18:96: 04:de:1c:d9:48:2a:84:a6:fe:fb:13:f5:20:f5:04:3d:f4:a0: 9a:ee:4b:42:bc:44:a6:a4:f1:e9:0c:98:89:19:c8:c9:b5:49: e0:31:67:73:65:91:4f:db:0e:06:e6:ef:1d:26:da:0d:75:8b: 2e:ef:a2:81:d3:e7:65:5d:f4:21:78:07:8a:96:52:e7:42:49: a9:44:b9:65:9b:c0:d2:3d:78:2e:d6:9e:76:0c:f1:07:03:88: 15:f1:46:d2:c0:e9:d2:45:fd:d3:23:45:74:76:fe:5f:a3:7e: c5:48:04:a3:e9:79:8e:18:30:68:54:2c:35:4d:bb:17:1b:1d: 19:38:ca:1e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt57QeBmYao4/T4PRHH9x4nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNzQ3ZmJlMjZjOWNkZDc2MjhhZGZlZGI1N2I3OGJlOGRl NzVlMjkwHhcNMjYwMTAxMTQxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDE0NjQ2YWNiNDk1ZmJjMTRkMWIzYzhiMjI5ZjdjZGU1OGQ0YWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1huFBxMSJNnRqdPkE0lzAVhtyFjC gNIXIf9M6QUl6IHGKH2bFoUusEu5cXFGUcv7YBOHJKN1jADa8GEjoIPrk43mupcv lDqAUUBua3nKqp8VT8FSdod6sUDolqeO8FLtSO/G0JIYti7xGOP0lLmNHY79RFzW iMAn52Np4h3R2y9vVGclNJHaq0n+iGNI59DZh/PUiAua02yvVP5b4tIk68PBuxxv 9UC05DMvPYbNqwC7orgSn784UaKrUC+R4h82Ka/KlPo59+523KPXILlMyAJ2pioD pToyX+jpd7XC7aYe5+qXUPrKuwqG6yv4zcK/nPbbwqb/vYg26JHYuP4wjwIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFPAUZGrLSV+8FNGzyLIp983ljUrgMB8GA1UdIwQY MBaAFMB0f74myc3XYorf7bV7eL6N514pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0hSX3ZpYkp6ZGRpaXRfdHRYdDR2bzNuWGlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8yNDA2YWItM2JjYi00MWJjLWE5NDIt MzY4NjA4Mzg1ODgzLzEvOEJSa2FzdEpYN3dVMGJQSXNpbjN6ZVdOU3VBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8yNDA2YWItM2JjYi00MWJjLWE5NDItMzY4NjA4Mzg1ODgz LzEvd0hSX3ZpYkp6ZGRpaXRfdHRYdDR2bzNuWGlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcBKgB54AP8 AwYFKgB54CAwDQYJKoZIhvcNAQELBQADggEBAGallTdIpjn8/V6X+fFq+QhhdsVD Ya7L6tdRqjgmlaeelJsicpDo6idYbMEE6BYL8uDOLiMvGKDYJswjc7h0jeqVUSMl ci4y2+81duSEzoZjBD4cRFGkQVTiR7xJasKyDolSfGnr6HWW6lw5XbelhlQ40HCS QL14Idszv2MYlgTeHNlIKoSm/vsT9SD1BD30oJruS0K8RKak8ekMmIkZyMm1SeAx Z3NlkU/bDgbm7x0m2g11iy7vooHT52Vd9CF4B4qWUudCSalEuWWbwNI9eC7WnnYM 8QcDiBXxRtLA6dJF/dMjRXR2/l+jfsVIBKPpeY4YMGhULDVNuxcbHRk4yh4= -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:54 2026 by rpki-client