This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/F8tjvemyGqePKpla8BDkDj9NGcw.roa File: F8tjvemyGqePKpla8BDkDj9NGcw.roa (raw, json) Hash identifier: ZZmcbgkosKPgbV+bs9tt4YBeMOpFT0hvuYzrn9vKtCs= Subject key identifier: 17:CB:63:BD:E9:B2:1A:A7:8F:2A:99:5A:F0:10:E4:0E:3F:4D:19:CC Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c Certificate serial: 019B93A27F493DD4204E4A03FBBB7E99DB6A Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/F8tjvemyGqePKpla8BDkDj9NGcw.roa Signing time: Tue 06 Jan 2026 14:07:38 +0000 ROA not before: Tue 06 Jan 2026 14:07:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215110 IP address blocks: 2a10:fa82:f300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:93:a2:7f:49:3d:d4:20:4e:4a:03:fb:bb:7e:99:db:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c Validity Not Before: Jan 6 14:07:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17cb63bde9b21aa78f2a995af010e40e3f4d19cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:81:f9:3f:be:17:1f:d4:33:1d:28:a7:8f:08: 7b:f7:60:70:22:02:a1:82:8f:39:bd:ea:e5:cb:46: 2c:c0:22:39:23:e0:25:79:11:be:86:9b:a2:5d:d1: c0:d7:33:02:e5:7b:93:63:ec:09:e3:4e:cb:28:dd: 80:52:be:f1:f9:ac:31:98:20:79:87:ed:20:c7:42: cc:fe:15:49:cc:42:f1:9b:e2:49:3f:8c:66:05:99: df:08:d5:aa:1b:ac:94:b5:0e:5f:49:90:9f:4b:67: 84:c0:bd:e5:13:ca:c7:c7:39:1c:d5:21:41:10:3f: e2:72:3d:e2:dd:49:3c:0d:af:05:09:95:fa:70:3f: 9b:34:6c:36:55:e0:e0:5c:6b:01:73:95:4b:bb:51: 9a:9b:fc:9d:11:dd:e8:f9:ee:a4:59:74:44:de:9f: 68:52:ba:3b:89:a9:8f:08:62:a7:fd:c9:08:ee:d8: 50:86:6b:13:a0:7b:11:be:f3:81:d8:c4:7c:cd:cf: 95:35:ee:4a:2b:c1:15:d4:68:92:d4:0d:cd:e7:29: 84:af:83:2b:cc:be:98:38:fc:3c:22:01:75:15:c8: 0e:2b:96:f1:52:da:b0:54:30:21:e8:d8:4f:43:27: 84:f3:7e:81:75:49:40:ef:c4:7e:a9:79:87:4a:d3: dd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:CB:63:BD:E9:B2:1A:A7:8F:2A:99:5A:F0:10:E4:0E:3F:4D:19:CC X509v3 Authority Key Identifier: keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/F8tjvemyGqePKpla8BDkDj9NGcw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:fa82:f300::/40 Signature Algorithm: sha256WithRSAEncryption 2f:d9:b8:a4:aa:6a:b0:df:32:4b:ca:54:40:9d:8c:23:07:48: eb:52:f8:78:48:d1:33:e4:32:25:46:fe:6b:88:1d:9d:3c:81: 39:c6:5c:8a:8f:8c:47:78:5d:a7:89:b8:c5:3a:6d:8b:9c:76: 03:de:29:c0:9d:64:44:e1:d0:ac:3f:91:31:1b:d1:da:e7:0f: d0:57:59:40:d1:a8:41:59:8c:71:bf:45:92:f6:4b:ff:24:c7: 8d:24:37:f0:12:dd:76:9b:71:66:c1:9e:b4:27:98:4c:b9:53: ba:2f:36:6f:0b:4c:6a:46:38:b6:aa:a8:b6:22:7e:88:c8:37: a9:5e:c2:9f:30:6e:ab:95:a1:ba:c5:93:ee:1a:9d:d1:b9:f3: fd:80:43:e0:2c:1f:a3:f4:25:0e:fe:32:0e:f3:e7:b2:6b:36: c6:43:d8:08:72:8d:5c:d6:a7:ac:ae:8f:8f:e7:14:ff:3e:08: 11:34:9b:32:7c:06:13:51:0a:59:ac:69:44:f4:ce:81:03:70: 45:d8:d9:ef:dd:e1:a8:86:d2:c8:ad:ad:d8:c8:5f:61:fb:ef: 02:d2:61:13:2f:6e:58:42:98:16:b0:13:ff:aa:97:48:21:7d: 88:93:2d:a8:f9:0c:b7:4a:d2:e7:62:bb:ff:4e:3b:a9:d9:bb: b4:cb:a2:96 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZuTon9JPdQgTkoD+7t+mdtqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NTliMGJhODQwN2JlMTFjZmM5MTFiZDMxZWQxNDBjZDFj NjA0NmMwHhcNMjYwMTA2MTQwNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2NiNjNiZGU5YjIxYWE3OGYyYTk5NWFmMDEwZTQwZTNmNGQxOWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIH5P74XH9QzHSinjwh792BwIgKh go85verly0YswCI5I+AleRG+hpuiXdHA1zMC5XuTY+wJ407LKN2AUr7x+awxmCB5 h+0gx0LM/hVJzELxm+JJP4xmBZnfCNWqG6yUtQ5fSZCfS2eEwL3lE8rHxzkc1SFB ED/icj3i3Uk8Da8FCZX6cD+bNGw2VeDgXGsBc5VLu1Gam/ydEd3o+e6kWXRE3p9o Uro7iamPCGKn/ckI7thQhmsToHsRvvOB2MR8zc+VNe5KK8EV1GiS1A3N5ymEr4Mr zL6YOPw8IgF1FcgOK5bxUtqwVDAh6NhPQyeE836BdUlA78R+qXmHStPdmQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFBfLY73pshqnjyqZWvAQ5A4/TRnMMB8GA1UdIwQY MBaAFFZZsLqEB74Rz8kRvTHtFAzRxgRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEt MjM5NGM2NjAwMDIyLzEvRjh0anZlbXlHcWVQS3BsYThCRGtEajlOR2N3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEtMjM5NGM2NjAwMDIy LzEvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhD6gvMw DQYJKoZIhvcNAQELBQADggEBAC/ZuKSqarDfMkvKVECdjCMHSOtS+HhI0TPkMiVG /muIHZ08gTnGXIqPjEd4XaeJuMU6bYucdgPeKcCdZETh0Kw/kTEb0drnD9BXWUDR qEFZjHG/RZL2S/8kx40kN/AS3XabcWbBnrQnmEy5U7ovNm8LTGpGOLaqqLYifojI N6lewp8wbquVobrFk+4andG58/2AQ+AsH6P0JQ7+Mg7z57JrNsZD2AhyjVzWp6yu j4/nFP8+CBE0mzJ8BhNRClmsaUT0zoEDcEXY2e/d4aiG0sitrdjIX2H77wLSYRMv blhCmBawE/+ql0ghfYiTLaj5DLdK0udiu/9OO6nZu7TLopY= -----END CERTIFICATE-----Generated at Sun Jan 25 13:08:36 2026 by rpki-client