This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/8suHpidG1fhuELuUk5b3-OweTPg.roa File: 8suHpidG1fhuELuUk5b3-OweTPg.roa (raw, json) Hash identifier: 1eHJkoJhddFda4qCfEu1aQasvyxw+vlSo8SFBBVgpqU= Subject key identifier: F2:CB:87:A6:27:46:D5:F8:6E:10:BB:94:93:96:F7:F8:EC:1E:4C:F8 Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46 Certificate serial: 019B77C6E196EA0E4698E24F4E6084F7BF3A Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/8suHpidG1fhuELuUk5b3-OweTPg.roa Signing time: Thu 01 Jan 2026 04:18:01 +0000 ROA not before: Thu 01 Jan 2026 04:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53667 IP address blocks: 2a11:2304::/37 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e1:96:ea:0e:46:98:e2:4f:4e:60:84:f7:bf:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46 Validity Not Before: Jan 1 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2cb87a62746d5f86e10bb949396f7f8ec1e4cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b7:d5:91:cd:7c:f9:a6:d2:e3:97:bf:a2:97: c2:e1:1f:9b:cc:f3:06:1b:0f:77:75:fd:da:a2:62: 4d:c1:0c:cf:34:a6:1b:eb:75:73:98:8f:7f:65:68: d1:79:c6:d4:0a:75:06:be:77:41:6a:0e:db:0b:d0: f1:91:ef:07:b8:13:97:3c:19:e8:ba:7b:ec:cd:48: 20:0a:d1:c0:59:4f:1d:a5:13:92:6e:61:23:e8:6c: 6e:21:dc:08:e9:33:5c:62:0c:02:63:80:f0:d7:e0: f9:44:6d:7d:79:ce:e2:85:1d:6c:3c:d1:89:0f:11: 47:47:c7:48:59:7b:40:2c:4a:e9:9f:16:94:12:f5: e2:8d:c0:37:ca:9c:07:2d:74:18:7c:24:f3:3c:90: 8d:b4:99:a5:30:99:e6:79:47:ac:ef:88:47:ee:bc: 50:ec:fc:ec:aa:67:1e:d6:93:e9:7b:90:f7:d2:80: ab:c0:fa:dc:50:02:2b:a7:e6:56:79:4f:98:88:a4: 39:f7:af:af:a1:6f:57:85:11:8f:c3:04:65:4e:0c: c0:8f:b0:24:ff:36:84:19:28:54:09:ca:13:a5:5d: fd:56:7d:7b:41:2e:bb:9b:2a:59:cc:e9:fd:d8:28: 48:6e:9e:fc:84:5d:e0:ca:da:62:ea:71:e5:15:7c: b0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CB:87:A6:27:46:D5:F8:6E:10:BB:94:93:96:F7:F8:EC:1E:4C:F8 X509v3 Authority Key Identifier: keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/8suHpidG1fhuELuUk5b3-OweTPg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:2304::/37 Signature Algorithm: sha256WithRSAEncryption 35:70:09:f4:84:e6:c0:8d:4d:27:79:27:a6:ce:13:11:34:19: ac:49:3b:10:e3:54:47:bb:5d:af:93:b5:b7:d7:07:69:11:ac: 8a:e7:c1:14:e8:56:f6:03:68:3a:66:51:db:8a:32:83:99:d7: e5:1b:d4:f2:8e:b5:7d:81:21:02:94:c8:b0:6d:e9:aa:c5:00: 35:b2:47:41:5b:1d:05:fd:90:c8:b1:1e:0a:4e:50:86:3d:27: 79:e2:fb:38:20:11:dc:7d:ae:a8:34:6f:d9:8c:e0:e5:e7:ca: a6:34:db:b1:ed:6a:87:c3:76:73:1e:63:09:31:15:1d:cd:ec: 57:84:e5:d9:2a:0a:09:64:7d:27:19:ae:ee:53:51:75:be:2d: b0:d1:70:ca:9f:0b:8e:5a:c5:51:2b:ad:a0:75:4a:de:b4:42: d3:c1:92:e1:87:70:b7:a2:4c:b2:4f:52:35:a1:1a:ed:b5:65: 99:fa:4b:f4:2c:07:3d:1e:8a:6a:1e:8d:23:94:34:23:fd:eb: 46:de:37:6e:e0:9c:31:72:79:c7:17:9a:da:0d:ab:90:8c:55: 2b:e8:ad:31:ec:28:21:91:63:87:cf:39:e9:ae:5e:a3:51:5f: 6a:db:cc:47:b3:a5:b3:47:10:6b:80:ec:9d:62:dc:3c:7c:d1: 0d:bf:8e:56 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3xuGW6g5GmOJPTmCE9786MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYzJjMWFmZDRiZGVjOTgwNTA2ZmEwN2RmN2M4NjYyZDU1 NGZhNDYwHhcNMjYwMTAxMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmNiODdhNjI3NDZkNWY4NmUxMGJiOTQ5Mzk2ZjdmOGVjMWU0Y2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7fVkc18+abS45e/opfC4R+bzPMG Gw93df3aomJNwQzPNKYb63VzmI9/ZWjRecbUCnUGvndBag7bC9Dxke8HuBOXPBno unvszUggCtHAWU8dpROSbmEj6GxuIdwI6TNcYgwCY4Dw1+D5RG19ec7ihR1sPNGJ DxFHR8dIWXtALErpnxaUEvXijcA3ypwHLXQYfCTzPJCNtJmlMJnmeUes74hH7rxQ 7Pzsqmce1pPpe5D30oCrwPrcUAIrp+ZWeU+YiKQ596+voW9XhRGPwwRlTgzAj7Ak /zaEGShUCcoTpV39Vn17QS67mypZzOn92ChIbp78hF3gytpi6nHlFXywNwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFPLLh6YnRtX4bhC7lJOW9/jsHkz4MB8GA1UdIwQY MBaAFOrCwa/UveyYBQb6B998hmLVVPpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMt YzBjZWIwMzdhZDQyLzEvOHN1SHBpZEcxZmh1RUx1VWs1YjMtT3dlVFBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMtYzBjZWIwMzdhZDQy LzEvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDKhEjBAAw DQYJKoZIhvcNAQELBQADggEBADVwCfSE5sCNTSd5J6bOExE0GaxJOxDjVEe7Xa+T tbfXB2kRrIrnwRToVvYDaDpmUduKMoOZ1+Ub1PKOtX2BIQKUyLBt6arFADWyR0Fb HQX9kMixHgpOUIY9J3ni+zggEdx9rqg0b9mM4OXnyqY027HtaofDdnMeYwkxFR3N 7FeE5dkqCglkfScZru5TUXW+LbDRcMqfC45axVErraB1St60QtPBkuGHcLeiTLJP UjWhGu21ZZn6S/QsBz0eimoejSOUNCP960beN27gnDFyeccXmtoNq5CMVSvorTHs KCGRY4fPOemuXqNRX2rbzEezpbNHEGuA7J1i3Dx80Q2/jlY= -----END CERTIFICATE-----Generated at Sun Jan 25 17:39:20 2026 by rpki-client