This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/P8plIkyK6-WuYhWZxeWDqVB7a_c.roa File: P8plIkyK6-WuYhWZxeWDqVB7a_c.roa (raw, json) Hash identifier: gqqEmeyJKHVYzAhKUFpmuQoKv1vSqMH75dr97tljCyo= Subject key identifier: 3F:CA:65:22:4C:8A:EB:E5:AE:62:15:99:C5:E5:83:A9:50:7B:6B:F7 Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514 Certificate serial: 019B7A5B009F744DF34CEB8EBC6C56104AD7 Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/P8plIkyK6-WuYhWZxeWDqVB7a_c.roa Signing time: Thu 01 Jan 2026 16:19:02 +0000 ROA not before: Thu 01 Jan 2026 16:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34762 IP address blocks: 2a01:8107:fff0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:00:9f:74:4d:f3:4c:eb:8e:bc:6c:56:10:4a:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514 Validity Not Before: Jan 1 16:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3fca65224c8aebe5ae621599c5e583a9507b6bf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:43:50:db:a6:b6:7e:d9:a9:6c:6b:a2:ae:32: df:b4:f8:80:26:ee:e4:58:79:d1:8c:3a:df:5b:f8: ec:06:1b:71:53:bf:17:f0:15:10:fc:3f:3e:82:7f: 1b:f9:1a:f2:af:32:aa:f0:cc:ad:a1:26:b3:97:9b: 0b:20:59:5d:5e:5c:93:68:fb:76:87:9f:47:a0:42: 01:82:75:93:3c:23:13:a9:59:b0:59:66:93:c4:d4: 0f:e8:fb:95:2d:1c:07:7d:0d:aa:dd:8d:ce:f1:0c: 9c:52:3e:f7:20:41:36:f1:ab:70:22:35:8b:d4:0a: ad:f1:22:1d:af:fc:20:4e:71:a5:bb:28:a0:a8:cc: 33:cd:76:f9:73:13:e3:83:c0:c3:b5:4c:d4:8a:e3: d9:b9:86:40:e2:1e:cb:f0:e2:20:38:79:ac:75:8c: cb:90:dc:eb:18:7b:00:38:1e:d2:4d:e1:13:f0:49: 9a:7b:13:d8:d9:e8:17:74:95:b8:2c:be:e9:cd:24: b8:2a:85:72:71:a1:1a:59:b3:73:72:b9:e1:de:d2: c7:1b:da:e9:02:64:33:a1:3c:c7:99:4e:25:5a:3b: 2e:69:01:bb:f9:c5:7d:69:6a:2b:f7:23:5f:ca:01: d6:ab:1e:f1:cf:f2:44:3b:e4:21:3d:eb:51:4e:dc: a3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CA:65:22:4C:8A:EB:E5:AE:62:15:99:C5:E5:83:A9:50:7B:6B:F7 X509v3 Authority Key Identifier: keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/P8plIkyK6-WuYhWZxeWDqVB7a_c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:8107:fff0::/44 Signature Algorithm: sha256WithRSAEncryption 2f:cd:22:d1:51:7e:f2:ea:49:43:b6:5a:ae:04:f7:05:89:d9: 06:68:fb:14:63:0c:9e:b0:12:01:bf:b3:84:bc:a7:af:6e:bf: 6f:7b:73:30:72:3f:19:ef:0f:f7:ca:56:b0:d6:8b:be:6e:84: b5:be:ff:cc:2f:81:09:3d:92:a2:e4:e6:de:6d:8d:50:28:85: 61:82:31:18:dc:a7:1d:3a:23:aa:53:97:ed:b5:cf:c4:ee:e6: 5a:31:31:90:b0:5c:f5:3a:18:7d:6b:c2:9e:14:3f:38:67:64: 07:fa:d2:1f:68:37:c4:21:5c:ae:39:79:5f:b4:d2:b8:de:17: 8b:22:83:28:31:b3:4d:37:d0:13:88:88:c5:78:5c:9a:46:67: ad:d6:df:5e:0c:a3:2e:53:ba:52:25:e9:ac:92:93:1e:46:38: 1f:f4:24:8f:da:6b:c1:6d:16:a6:5a:18:65:b5:51:c2:0d:f5: 5b:b1:9e:91:2e:e5:a1:8f:91:14:16:aa:3c:01:78:31:98:be: 5d:41:48:ba:e4:02:57:3e:d9:97:73:15:80:f3:5b:89:02:fb: 49:0d:30:f3:fd:b9:75:85:a9:7f:28:00:28:a4:ca:1b:ba:80: 53:68:6b:3f:b3:35:36:b3:5b:5a:4c:3d:3a:aa:ff:0a:59:c1: 3a:82:73:e5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6WwCfdE3zTOuOvGxWEErXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNWM1NDQzYWUyMDNmNjQ3ZWUzMDZiOWVmNzJkYWM1MGI1 ZGY1MTQwHhcNMjYwMTAxMTYxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmNhNjUyMjRjOGFlYmU1YWU2MjE1OTljNWU1ODNhOTUwN2I2YmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtENQ26a2ftmpbGuirjLftPiAJu7k WHnRjDrfW/jsBhtxU78X8BUQ/D8+gn8b+RryrzKq8MytoSazl5sLIFldXlyTaPt2 h59HoEIBgnWTPCMTqVmwWWaTxNQP6PuVLRwHfQ2q3Y3O8QycUj73IEE28atwIjWL 1Aqt8SIdr/wgTnGluyigqMwzzXb5cxPjg8DDtUzUiuPZuYZA4h7L8OIgOHmsdYzL kNzrGHsAOB7STeET8EmaexPY2egXdJW4LL7pzSS4KoVycaEaWbNzcrnh3tLHG9rp AmQzoTzHmU4lWjsuaQG7+cV9aWor9yNfygHWqx7xz/JEO+QhPetRTtyjkQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFD/KZSJMiuvlrmIVmcXlg6lQe2v3MB8GA1UdIwQY MBaAFKNcVEOuID9kfuMGue9y2sULXfUUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mNjUxYzEtMDJkNi00NDhhLWFjYWQt MTRjNTkwZmVjN2UzLzEvUDhwbElreUs2LVd1WWhXWnhlV0RxVkI3YV9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9mNjUxYzEtMDJkNi00NDhhLWFjYWQtMTRjNTkwZmVjN2Uz LzEvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgGBB//w MA0GCSqGSIb3DQEBCwUAA4IBAQAvzSLRUX7y6klDtlquBPcFidkGaPsUYwyesBIB v7OEvKevbr9ve3Mwcj8Z7w/3ylaw1ou+boS1vv/ML4EJPZKi5ObebY1QKIVhgjEY 3KcdOiOqU5fttc/E7uZaMTGQsFz1Ohh9a8KeFD84Z2QH+tIfaDfEIVyuOXlftNK4 3heLIoMoMbNNN9ATiIjFeFyaRmet1t9eDKMuU7pSJemskpMeRjgf9CSP2mvBbRam WhhltVHCDfVbsZ6RLuWhj5EUFqo8AXgxmL5dQUi65AJXPtmXcxWA81uJAvtJDTDz /bl1hal/KAAopMobuoBTaGs/szU2s1taTD06qv8KWcE6gnPl -----END CERTIFICATE-----Generated at Mon Jan 26 03:06:02 2026 by rpki-client