This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/Rp8M3_sBtWj-4HdES1f560Y8DPs.roa File: Rp8M3_sBtWj-4HdES1f560Y8DPs.roa (raw, json) Hash identifier: rFSCCyJpt9So4+e0Mp2UXJjY5UcE4mhKhZ9xQZADyiI= Subject key identifier: 46:9F:0C:DF:FB:01:B5:68:FE:E0:77:44:4B:57:F9:EB:46:3C:0C:FB Certificate issuer: /CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e Certificate serial: 019B7DCB636530E5B439A912616CA84217FF Authority key identifier: 61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/Rp8M3_sBtWj-4HdES1f560Y8DPs.roa Signing time: Fri 02 Jan 2026 08:20:39 +0000 ROA not before: Fri 02 Jan 2026 08:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60114 IP address blocks: 2a04:dd40::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:63:65:30:e5:b4:39:a9:12:61:6c:a8:42:17:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e Validity Not Before: Jan 2 08:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=469f0cdffb01b568fee077444b57f9eb463c0cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:96:7c:3d:97:b1:79:e5:b8:eb:e9:0f:75:5d: 90:03:06:9e:36:aa:d1:2b:21:73:05:c1:5a:20:23: 4f:0f:e5:4a:ef:22:13:e4:62:6f:18:6e:a0:12:01: 88:a5:f8:c8:6f:35:41:2d:f9:ec:58:c5:a3:ab:c2: b2:62:73:a6:0f:63:bc:1f:ce:61:22:32:1d:06:50: 6f:d7:c5:52:4a:f3:41:0e:3c:3f:74:00:bc:47:44: 13:53:31:a4:6c:4a:26:81:ba:1a:6a:e8:bf:a8:d8: c0:9d:30:bc:5c:1b:16:ea:bd:0b:59:10:ae:73:17: ea:1d:a5:9c:5e:1b:b2:2a:57:6e:f5:fa:55:aa:28: ca:53:95:ee:f1:0a:41:fe:93:b5:8e:cd:c5:b4:34: 62:82:a6:0d:1d:01:fe:ed:df:b1:63:db:1d:f6:22: 68:94:9a:5f:ea:b5:3a:37:2c:f3:ca:48:89:ab:89: d3:35:09:7f:78:10:44:2a:4c:ea:64:6c:ec:52:43: 29:7f:8f:5e:dc:9b:36:63:38:16:13:34:15:ab:c6: 68:db:cf:14:a2:c6:03:cf:e4:b9:f6:6a:16:29:0e: 2e:aa:23:42:a8:fa:b8:13:f9:3b:d4:9a:db:14:c6: aa:ba:54:61:c3:ff:9b:53:37:1d:55:bf:5a:84:bd: 02:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:9F:0C:DF:FB:01:B5:68:FE:E0:77:44:4B:57:F9:EB:46:3C:0C:FB X509v3 Authority Key Identifier: keyid:61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/Rp8M3_sBtWj-4HdES1f560Y8DPs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:dd40::/29 Signature Algorithm: sha256WithRSAEncryption 69:21:68:63:38:7f:55:78:94:02:12:34:fb:00:04:64:ed:56: 8a:7e:60:f1:c0:84:38:9f:74:4d:9a:71:16:ed:14:d5:bc:bd: 80:f3:ec:e8:c8:35:13:ff:9d:4a:ce:70:05:4c:57:87:97:e4: 36:6c:d5:b0:e5:11:ec:cc:e1:13:6a:47:dc:1e:8f:d0:e5:4d: 30:2c:e7:31:8b:c4:f1:8f:2c:3f:b1:00:8e:8f:2b:c6:c9:ed: b9:bc:2c:5e:b2:97:07:4e:20:10:79:bf:c2:84:c1:88:28:d4: 29:5f:e3:cf:3a:6d:b9:0f:15:a1:d1:6f:86:8e:a4:69:7f:35: 18:10:8f:4e:de:c8:66:72:c3:74:0c:84:5f:83:57:50:17:05: 94:5a:8f:d7:dd:dc:de:ef:8b:4a:72:3b:bd:a5:41:35:38:8c: eb:ad:4e:41:65:00:45:34:fc:19:98:4b:01:45:63:92:13:48: ee:49:0d:d6:ff:78:7a:47:76:3d:05:1e:f6:51:b4:b1:71:c6: 53:98:82:c6:80:62:5f:0c:3f:69:e6:1e:03:2a:5b:4f:c1:ca: f0:0c:4b:2a:d3:dd:2a:e4:32:0f:16:e2:10:9e:61:0a:8e:ca: a9:d6:51:2c:6b:ad:b6:57:d9:6b:20:04:ef:eb:eb:b6:0a:ed: a5:18:1d:d1 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9y2NlMOW0OakSYWyoQhf/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNGM5NTg1ODg5Zjk4ZTBjNzdmOWI2Y2Q4MDM2MWFhMDJi ZGQ2OGUwHhcNMjYwMTAyMDgyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjlmMGNkZmZiMDFiNTY4ZmVlMDc3NDQ0YjU3ZjllYjQ2M2MwY2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspZ8PZexeeW46+kPdV2QAwaeNqrR KyFzBcFaICNPD+VK7yIT5GJvGG6gEgGIpfjIbzVBLfnsWMWjq8KyYnOmD2O8H85h IjIdBlBv18VSSvNBDjw/dAC8R0QTUzGkbEomgboaaui/qNjAnTC8XBsW6r0LWRCu cxfqHaWcXhuyKldu9fpVqijKU5Xu8QpB/pO1js3FtDRigqYNHQH+7d+xY9sd9iJo lJpf6rU6NyzzykiJq4nTNQl/eBBEKkzqZGzsUkMpf49e3Js2YzgWEzQVq8Zo288U osYDz+S59moWKQ4uqiNCqPq4E/k71JrbFMaqulRhw/+bUzcdVb9ahL0C3wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFEafDN/7AbVo/uB3REtX+etGPAz7MB8GA1UdIwQY MBaAFGFMlYWIn5jgx3+bbNgDYaoCvdaOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVV5VmhZaWZtT0RIZjV0czJBTmhxZ0s5MW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9iYjZmMzgtMjM2OS00NDZmLTg4ZjIt MGI0NTc1YjY5YzU3LzEvUnA4TTNfc0J0V2otNEhkRVMxZjU2MFk4RFBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9iYjZmMzgtMjM2OS00NDZmLTg4ZjItMGI0NTc1YjY5YzU3 LzEvWVV5VmhZaWZtT0RIZjV0czJBTmhxZ0s5MW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgTdQDAN BgkqhkiG9w0BAQsFAAOCAQEAaSFoYzh/VXiUAhI0+wAEZO1Win5g8cCEOJ90TZpx Fu0U1by9gPPs6Mg1E/+dSs5wBUxXh5fkNmzVsOUR7MzhE2pH3B6P0OVNMCznMYvE 8Y8sP7EAjo8rxsntubwsXrKXB04gEHm/woTBiCjUKV/jzzptuQ8VodFvho6kaX81 GBCPTt7IZnLDdAyEX4NXUBcFlFqP193c3u+LSnI7vaVBNTiM661OQWUARTT8GZhL AUVjkhNI7kkN1v94ekd2PQUe9lG0sXHGU5iCxoBiXww/aeYeAypbT8HK8AxLKtPd KuQyDxbiEJ5hCo7KqdZRLGuttlfZayAE7+vrtgrtpRgd0Q== -----END CERTIFICATE-----Generated at Mon Jan 26 08:07:13 2026 by rpki-client