This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/sIrL6b_di1kxEMzg3ieNCdw3WJ4.roa File: sIrL6b_di1kxEMzg3ieNCdw3WJ4.roa (raw, json) Hash identifier: Wu+8arEyxXYyHRsQgH9EF3izIIcpQmHoeba8OxIgES4= Subject key identifier: B0:8A:CB:E9:BF:DD:8B:59:31:10:CC:E0:DE:27:8D:09:DC:37:58:9E Certificate issuer: /CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2 Certificate serial: 019B7BA38ED9C6F6F56B72BEE896563A1EA9 Authority key identifier: AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/sIrL6b_di1kxEMzg3ieNCdw3WJ4.roa Signing time: Thu 01 Jan 2026 22:17:55 +0000 ROA not before: Thu 01 Jan 2026 22:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215938 IP address blocks: 2a14:52c0:4042::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:8e:d9:c6:f6:f5:6b:72:be:e8:96:56:3a:1e:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2 Validity Not Before: Jan 1 22:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b08acbe9bfdd8b593110cce0de278d09dc37589e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:19:1c:5e:02:62:b3:37:2e:39:5f:b3:ea:72: 6b:7c:ba:4b:bf:8d:c8:0b:ef:c7:4b:84:66:c0:68: 3f:ff:c8:0a:25:27:12:c0:52:0d:41:ef:89:51:f4: 1b:a6:67:c2:5d:21:19:3a:5b:e3:d9:90:26:6e:45: f6:f9:bc:2c:46:cc:f5:e3:bd:a5:7d:26:96:24:8b: af:5a:47:45:38:eb:58:e6:27:b6:57:ce:3a:76:c6: 71:67:b0:8d:f8:fd:0a:d6:3d:d3:40:bb:35:e2:4f: f1:62:34:5f:16:91:d5:e1:84:53:14:4b:3a:26:58: 0d:50:d0:13:5d:c5:be:86:dc:4d:59:7b:4d:1a:c7: 29:c1:f9:88:d3:89:52:03:94:ac:aa:cf:91:8f:86: f7:4b:80:9e:a5:e7:c4:3a:f3:66:67:b5:70:e3:d4: b3:90:3d:41:81:ad:37:51:ad:e6:51:92:e1:f3:ea: 71:8d:be:a5:7c:bc:e2:ca:07:93:68:2e:04:1f:ea: 20:48:7e:de:ca:4c:bf:74:b1:64:94:b4:77:52:64: cd:c9:38:95:ae:b4:ad:23:b8:95:25:77:33:3f:f7: bf:36:90:d7:d5:09:7e:1f:99:7b:b8:18:45:d8:e8: 28:e4:72:26:99:de:47:ed:83:cc:25:b9:2c:de:3e: 57:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:8A:CB:E9:BF:DD:8B:59:31:10:CC:E0:DE:27:8D:09:DC:37:58:9E X509v3 Authority Key Identifier: keyid:AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/sIrL6b_di1kxEMzg3ieNCdw3WJ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:52c0:4042::/48 Signature Algorithm: sha256WithRSAEncryption 43:b9:3b:1d:0f:9f:df:02:cb:d9:a7:ff:79:41:ec:1d:d2:09: 7d:6f:68:d6:dc:d5:ba:15:8e:33:6e:c6:0c:26:1e:13:56:33: 16:ae:2d:e6:e1:29:d8:f1:21:ba:e6:1a:a6:68:0c:e8:0f:62: b2:1a:19:0e:40:47:cf:93:50:d0:97:e8:7f:61:ef:c4:e3:f7: da:15:38:76:c1:d3:cc:31:cf:85:30:00:40:07:56:f0:91:46: c7:a3:46:62:d6:ee:69:2f:5d:dc:48:cc:d0:f1:c2:83:b9:9b: 18:f2:4d:b3:c0:6e:60:62:57:f0:38:e8:20:96:4d:d5:ae:35: be:6b:0a:2e:c5:27:fa:88:66:5e:27:c3:41:89:8e:48:9e:81: 3e:9c:62:53:c1:96:1f:f8:f2:81:9a:ef:74:c0:ad:e8:63:74: 56:7b:f7:ce:5a:6a:e5:1c:c5:e9:8a:6d:97:03:97:31:5f:66: 45:c7:70:06:13:2a:88:74:d1:35:18:9b:6e:8b:cc:c3:ec:5c: 08:e5:c2:b2:0f:2b:2e:0c:ec:09:7f:db:52:8c:a6:75:93:34: ad:64:28:39:f5:6c:c7:17:05:f5:d9:14:4f:7c:c3:37:f6:00: 6a:55:ab:64:95:20:1a:83:13:e4:78:71:81:f0:2f:44:4d:14: 96:27:cf:2a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7o47Zxvb1a3K+6JZWOh6pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzE5MThjMWY0NWU2ZWMxN2RhY2E2N2E3YWQxOTNjYWYw NGI3YjIwHhcNMjYwMTAxMjIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDhhY2JlOWJmZGQ4YjU5MzExMGNjZTBkZTI3OGQwOWRjMzc1ODllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBkcXgJiszcuOV+z6nJrfLpLv43I C+/HS4RmwGg//8gKJScSwFINQe+JUfQbpmfCXSEZOlvj2ZAmbkX2+bwsRsz1472l fSaWJIuvWkdFOOtY5ie2V846dsZxZ7CN+P0K1j3TQLs14k/xYjRfFpHV4YRTFEs6 JlgNUNATXcW+htxNWXtNGscpwfmI04lSA5Ssqs+Rj4b3S4CepefEOvNmZ7Vw49Sz kD1Bga03Ua3mUZLh8+pxjb6lfLziygeTaC4EH+ogSH7eyky/dLFklLR3UmTNyTiV rrStI7iVJXczP/e/NpDX1Ql+H5l7uBhF2Ogo5HImmd5H7YPMJbks3j5XfwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLCKy+m/3YtZMRDM4N4njQncN1ieMB8GA1UdIwQY MBaAFKvBkYwfRebsF9rKZ6etGTyvBLeyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThHUmpCOUY1dXdYMnNwbnA2MFpQSzhFdDdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84Zjg4ZGUtZGFlZC00OGQyLWI3MDEt NmJiNWZlNjY1NzUwLzEvc0lyTDZiX2RpMWt4RU16ZzNpZU5DZHczV0o0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi84Zjg4ZGUtZGFlZC00OGQyLWI3MDEtNmJiNWZlNjY1NzUw LzEvcThHUmpCOUY1dXdYMnNwbnA2MFpQSzhFdDdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhRSwEBC MA0GCSqGSIb3DQEBCwUAA4IBAQBDuTsdD5/fAsvZp/95Qewd0gl9b2jW3NW6FY4z bsYMJh4TVjMWri3m4SnY8SG65hqmaAzoD2KyGhkOQEfPk1DQl+h/Ye/E4/faFTh2 wdPMMc+FMABAB1bwkUbHo0Zi1u5pL13cSMzQ8cKDuZsY8k2zwG5gYlfwOOgglk3V rjW+awouxSf6iGZeJ8NBiY5InoE+nGJTwZYf+PKBmu90wK3oY3RWe/fOWmrlHMXp im2XA5cxX2ZFx3AGEyqIdNE1GJtui8zD7FwI5cKyDysuDOwJf9tSjKZ1kzStZCg5 9WzHFwX12RRPfMM39gBqVatklSAagxPkeHGB8C9ETRSWJ88q -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:21 2026 by rpki-client