This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/8OH9wDk8mWeWdnnOh12JN1X88a0.roa File: 8OH9wDk8mWeWdnnOh12JN1X88a0.roa (raw, json) Hash identifier: MQBEG8q6vume+uW2kxY+CUtIbVSut73fmmbEaR5h9gU= Subject key identifier: F0:E1:FD:C0:39:3C:99:67:96:76:79:CE:87:5D:89:37:55:FC:F1:AD Certificate issuer: /CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e Certificate serial: 019BE2423CF92028A6194C35A0C4CB84BFA5 Authority key identifier: DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/8OH9wDk8mWeWdnnOh12JN1X88a0.roa Signing time: Wed 21 Jan 2026 20:32:30 +0000 ROA not before: Wed 21 Jan 2026 20:32:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206366 IP address blocks: 2a01:e5c0:9000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e2:42:3c:f9:20:28:a6:19:4c:35:a0:c4:cb:84:bf:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e Validity Not Before: Jan 21 20:32:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0e1fdc0393c9967967679ce875d893755fcf1ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:89:35:9d:f4:7c:4d:02:6d:c4:9f:bd:9b:33: 8a:07:82:a3:04:ff:21:0f:ab:88:b6:d3:f0:84:93: 15:d2:c6:ab:b1:88:c8:09:04:c0:b3:4b:4a:9d:7d: 39:46:58:fa:cd:63:b5:d7:8c:0e:16:03:e6:2a:9c: 45:dd:97:77:e7:66:e9:74:02:84:46:e9:0c:0f:6c: 81:10:2a:8c:24:7d:1c:03:d1:1c:11:4a:9d:76:63: bd:2d:e3:45:98:a9:c1:b6:3e:be:f6:93:ff:94:54: 3f:d8:fd:1a:0f:2a:d7:23:ae:86:20:f8:e3:fa:f5: 64:ce:a8:9e:c3:a5:2c:47:b3:90:cc:04:a1:c2:17: c3:71:92:b2:38:86:cf:e1:b7:69:0c:ab:94:33:a0: ce:11:4c:88:f5:b9:76:a2:fc:f4:3e:17:aa:65:3a: cf:ad:52:58:4b:ff:88:09:59:7e:cc:a3:8f:de:f9: 9e:16:8e:41:01:8c:e4:60:ed:79:e8:da:80:ef:fc: a8:c8:d2:ea:91:e6:9f:bd:5c:b1:3a:38:11:de:8b: 1e:24:12:7d:cb:b2:26:35:dd:39:b8:e0:86:bb:6c: 8e:18:fc:ab:1e:27:03:6d:f5:2a:01:c3:d8:6a:e3: fd:11:74:cd:44:88:0a:62:9d:ef:69:e3:f7:c2:91: 6e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E1:FD:C0:39:3C:99:67:96:76:79:CE:87:5D:89:37:55:FC:F1:AD X509v3 Authority Key Identifier: keyid:DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/8OH9wDk8mWeWdnnOh12JN1X88a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:e5c0:9000::/36 Signature Algorithm: sha256WithRSAEncryption 7d:01:c7:0c:ca:8f:14:f2:52:f1:23:14:99:77:1f:0a:71:bb: 5d:64:99:06:fb:d3:6d:1d:1d:4d:94:30:03:72:f8:80:e1:20: 49:10:b9:4d:5d:aa:44:bf:52:15:7e:28:27:bb:31:d9:e5:0c: 61:8e:ed:d6:0e:0e:7b:e6:43:f1:e5:ee:a6:0c:29:88:e8:92: 91:16:37:0b:cc:75:c9:1f:ab:f9:f2:2c:a4:a2:0c:5f:f5:0a: b4:9e:2d:08:14:21:af:37:b4:bb:33:02:b9:0f:62:0c:59:e8: 28:f6:3a:b4:48:88:e6:81:5d:41:8c:34:2a:b4:2a:d8:34:29: d9:6c:9b:d7:0b:b7:55:5d:ce:d6:39:5a:aa:5d:10:e6:12:56: d4:fb:73:56:1d:22:48:83:4e:56:fe:5d:ac:a7:92:be:bd:d3: 07:a4:af:87:da:6a:27:2d:ad:55:da:a2:4c:7b:de:e3:9f:6f: 3a:ef:59:cd:f6:cc:26:77:c6:17:1f:05:30:4c:63:68:89:f4: 83:b3:43:cf:7e:41:f5:65:ae:98:62:d2:fa:93:49:88:6e:b1: 06:30:a3:aa:1d:16:b4:b1:5c:bf:b1:cb:b0:48:2e:e7:e1:45: d1:ab:33:e7:18:88:35:53:d3:97:3d:92:21:ce:a7:04:35:c8: 74:23:e4:17 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZviQjz5ICimGUw1oMTLhL+lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhN2Q1ZmNhMWU0Njk5MjlkNGE4YjZmNTdhZjNjYmNkYzYz OWEzNWUwHhcNMjYwMTIxMjAzMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGUxZmRjMDM5M2M5OTY3OTY3Njc5Y2U4NzVkODkzNzU1ZmNmMWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4k1nfR8TQJtxJ+9mzOKB4KjBP8h D6uIttPwhJMV0sarsYjICQTAs0tKnX05Rlj6zWO114wOFgPmKpxF3Zd352bpdAKE RukMD2yBECqMJH0cA9EcEUqddmO9LeNFmKnBtj6+9pP/lFQ/2P0aDyrXI66GIPjj +vVkzqiew6UsR7OQzAShwhfDcZKyOIbP4bdpDKuUM6DOEUyI9bl2ovz0PheqZTrP rVJYS/+ICVl+zKOP3vmeFo5BAYzkYO156NqA7/yoyNLqkeafvVyxOjgR3oseJBJ9 y7ImNd05uOCGu2yOGPyrHicDbfUqAcPYauP9EXTNRIgKYp3vaeP3wpFuIQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFPDh/cA5PJlnlnZ5zoddiTdV/PGtMB8GA1UdIwQY MBaAFNp9X8oeRpkp1Ki29Xrzy83GOaNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm4xZnloNUdtU25VcUxiMWV2UEx6Y1k1bzE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8wNjBmMzItYTQ4Yi00NjU3LWE1OGIt NDFiNzMwMzI3Yzc4LzEvOE9IOXdEazhtV2VXZG5uT2gxMkpOMVg4OGEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8wNjBmMzItYTQ4Yi00NjU3LWE1OGItNDFiNzMwMzI3Yzc4 LzEvMm4xZnloNUdtU25VcUxiMWV2UEx6Y1k1bzE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgHlwJAw DQYJKoZIhvcNAQELBQADggEBAH0BxwzKjxTyUvEjFJl3Hwpxu11kmQb7020dHU2U MANy+IDhIEkQuU1dqkS/UhV+KCe7MdnlDGGO7dYODnvmQ/Hl7qYMKYjokpEWNwvM dckfq/nyLKSiDF/1CrSeLQgUIa83tLszArkPYgxZ6Cj2OrRIiOaBXUGMNCq0Ktg0 Kdlsm9cLt1VdztY5WqpdEOYSVtT7c1YdIkiDTlb+Xaynkr690wekr4faaictrVXa okx73uOfbzrvWc32zCZ3xhcfBTBMY2iJ9IOzQ89+QfVlrphi0vqTSYhusQYwo6od FrSxXL+xy7BILufhRdGrM+cYiDVT05c9kiHOpwQ1yHQj5Bc= -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:24 2026 by rpki-client