This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/RA_P8M2CbE3vpnTaUf4TR1pQq4c.roa File: RA_P8M2CbE3vpnTaUf4TR1pQq4c.roa (raw, json) Hash identifier: sqZi/SBA/dg8k8Qf9vK6EYY7YFO+mp6oMfC87nRDLEY= Subject key identifier: 44:0F:CF:F0:CD:82:6C:4D:EF:A6:74:DA:51:FE:13:47:5A:50:AB:87 Certificate issuer: /CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24 Certificate serial: 019B77596D87D3A22EE428FF2431FA178647 Authority key identifier: C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/RA_P8M2CbE3vpnTaUf4TR1pQq4c.roa Signing time: Thu 01 Jan 2026 02:18:28 +0000 ROA not before: Thu 01 Jan 2026 02:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41046 IP address blocks: 2001:67c:2d90::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:6d:87:d3:a2:2e:e4:28:ff:24:31:fa:17:86:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24 Validity Not Before: Jan 1 02:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=440fcff0cd826c4defa674da51fe13475a50ab87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8d:5d:09:27:0f:e3:49:e8:aa:73:b1:90:c8: e4:61:68:28:40:cc:a7:dc:b4:85:1b:1a:b3:d0:15: 90:99:52:1e:25:ab:b4:2f:f4:d5:e9:1f:65:77:1d: e7:1d:aa:4a:7f:10:dc:46:4d:28:b2:bc:0d:16:12: 69:80:73:30:93:4f:24:18:98:c2:48:19:4a:f9:de: d7:66:24:12:31:8d:86:c3:f7:4f:8b:5a:5f:f0:a6: b3:6d:97:b0:44:40:88:65:bd:c0:3a:64:66:78:80: b2:3d:09:d0:dd:f0:71:eb:50:95:aa:9a:6f:c5:bf: cf:67:12:d5:5c:f0:49:ed:de:58:50:ee:bf:dd:e4: 03:75:e4:60:32:6c:6b:23:cd:2e:7d:91:45:21:dd: 1d:09:c2:36:2c:2f:1e:ef:58:c1:e6:30:32:c4:8c: a0:94:1e:08:b7:a7:a0:81:d1:12:b7:4b:9f:fc:f3: fc:29:4f:75:e0:54:e7:b6:77:e9:24:2b:08:bf:61: bd:04:59:09:f2:5f:23:ec:41:81:40:b4:df:21:89: b1:91:23:e8:be:65:1e:2c:7e:6a:50:55:2d:59:ee: 82:91:cb:1d:01:13:59:22:10:8a:85:3c:74:59:41: c3:f2:f1:aa:fe:ba:ca:f2:8f:7a:f2:e0:0b:61:e4: e3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:0F:CF:F0:CD:82:6C:4D:EF:A6:74:DA:51:FE:13:47:5A:50:AB:87 X509v3 Authority Key Identifier: keyid:C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/RA_P8M2CbE3vpnTaUf4TR1pQq4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2d90::/48 Signature Algorithm: sha256WithRSAEncryption 75:13:d5:f0:16:72:60:2b:ea:a3:c4:d4:23:bf:b2:d5:94:a7: 11:a8:de:d6:59:4f:42:f0:37:0f:0a:50:94:8b:d5:a1:ab:0a: d8:68:16:c5:53:3a:40:aa:e2:64:00:9a:13:ce:af:70:e8:17: c5:29:b2:c3:fc:98:c5:77:35:c1:3f:07:35:0a:a7:cb:ef:cd: 7e:36:40:c7:7d:df:22:07:fe:2d:7a:66:8c:f8:1c:dd:3c:3c: 28:70:87:bd:63:26:d6:b8:88:8b:18:16:99:3f:cd:25:5c:9a: d9:f3:01:e8:b3:94:29:f0:82:26:7d:2d:89:07:3d:5e:ef:58: 95:82:82:49:25:d9:9a:c1:9f:8a:4e:ca:68:04:e5:c1:db:0c: 46:0d:d9:02:d4:75:2a:a3:a9:db:4a:18:fc:0f:d6:66:4f:ba: 86:cd:e2:f5:da:65:c0:17:27:f3:6d:f0:7a:73:0c:34:6e:e6: bd:3a:2f:de:38:cd:5a:4a:30:a9:a7:d7:ae:fe:b0:57:63:20: 05:ff:97:1a:69:b9:2d:4e:3b:51:d8:1f:c8:5c:34:b8:87:ec: 22:54:5f:a9:6a:27:d7:92:5c:ab:7f:19:2e:0f:f9:e3:81:d3: 60:68:f6:b6:4d:e8:7a:16:be:b5:08:b1:2b:6c:50:e7:fa:48: 93:ab:44:e9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WW2H06Iu5Cj/JDH6F4ZHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3MTljYWQ5OTIyMTE1YmNmYTc0NTJiYTBhNmU0M2E2YWY0 ZTRjMjQwHhcNMjYwMTAxMDIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDBmY2ZmMGNkODI2YzRkZWZhNjc0ZGE1MWZlMTM0NzVhNTBhYjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI1dCScP40noqnOxkMjkYWgoQMyn 3LSFGxqz0BWQmVIeJau0L/TV6R9ldx3nHapKfxDcRk0osrwNFhJpgHMwk08kGJjC SBlK+d7XZiQSMY2Gw/dPi1pf8KazbZewRECIZb3AOmRmeICyPQnQ3fBx61CVqppv xb/PZxLVXPBJ7d5YUO6/3eQDdeRgMmxrI80ufZFFId0dCcI2LC8e71jB5jAyxIyg lB4It6eggdESt0uf/PP8KU914FTntnfpJCsIv2G9BFkJ8l8j7EGBQLTfIYmxkSPo vmUeLH5qUFUtWe6CkcsdARNZIhCKhTx0WUHD8vGq/rrK8o968uALYeTjuQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEQPz/DNgmxN76Z02lH+E0daUKuHMB8GA1UdIwQY MBaAFMcZytmSIRW8+nRSugpuQ6avTkwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHhuSzJaSWhGYno2ZEZLNkNtNURwcTlPVENRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xNDkzMzItNjk2OS00YzRiLWI1OTEt N2MyYzA4YjVlZTQ5LzEvUkFfUDhNMkNiRTN2cG5UYVVmNFRSMXBRcTRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8xNDkzMzItNjk2OS00YzRiLWI1OTEtN2MyYzA4YjVlZTQ5 LzEveHhuSzJaSWhGYno2ZEZLNkNtNURwcTlPVENRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC2Q MA0GCSqGSIb3DQEBCwUAA4IBAQB1E9XwFnJgK+qjxNQjv7LVlKcRqN7WWU9C8DcP ClCUi9WhqwrYaBbFUzpAquJkAJoTzq9w6BfFKbLD/JjFdzXBPwc1CqfL781+NkDH fd8iB/4temaM+BzdPDwocIe9YybWuIiLGBaZP80lXJrZ8wHos5Qp8IImfS2JBz1e 71iVgoJJJdmawZ+KTspoBOXB2wxGDdkC1HUqo6nbShj8D9ZmT7qGzeL12mXAFyfz bfB6cww0bua9Oi/eOM1aSjCpp9eu/rBXYyAF/5caabktTjtR2B/IXDS4h+wiVF+p aifXklyrfxkuD/njgdNgaPa2Teh6Fr61CLErbFDn+kiTq0Tp -----END CERTIFICATE-----Generated at Mon Jan 26 01:25:11 2026 by rpki-client