This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/8svsIgn5tq4TwLZ8CqIwk9q5WfI.roa File: 8svsIgn5tq4TwLZ8CqIwk9q5WfI.roa (raw, json) Hash identifier: R7ukUl73bf88vyaN/XaccoEI8iCFq1NpX9UxV6nC/GE= Subject key identifier: F2:CB:EC:22:09:F9:B6:AE:13:C0:B6:7C:0A:A2:30:93:DA:B9:59:F2 Certificate issuer: /CN=0e69a67d4b215a3f31fc462f0ea534ef83f8ef57 Certificate serial: 019B7C1203D0AC760CD8E493EC2615E5A068 Authority key identifier: 0E:69:A6:7D:4B:21:5A:3F:31:FC:46:2F:0E:A5:34:EF:83:F8:EF:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmmmfUshWj8x_EYvDqU074P471c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/8svsIgn5tq4TwLZ8CqIwk9q5WfI.roa Signing time: Fri 02 Jan 2026 00:18:34 +0000 ROA not before: Fri 02 Jan 2026 00:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8893 IP address blocks: 2001:67c:2064::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft rsync://rpki.ripe.net/repository/DEFAULT/DmmmfUshWj8x_EYvDqU074P471c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:03:d0:ac:76:0c:d8:e4:93:ec:26:15:e5:a0:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e69a67d4b215a3f31fc462f0ea534ef83f8ef57 Validity Not Before: Jan 2 00:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2cbec2209f9b6ae13c0b67c0aa23093dab959f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c1:26:a7:02:41:dd:a4:6e:15:6a:b7:89:37: 51:48:77:d3:e9:4c:9b:ba:91:98:51:3e:52:bf:bd: 18:0d:78:75:15:b2:26:ac:41:9c:8f:ed:96:ab:3f: ed:94:8b:e7:77:32:b3:75:a8:61:29:f3:5f:1e:5d: b3:8d:a2:ab:bd:6f:8e:ee:1d:08:6d:fc:b7:ad:0d: 1c:8b:14:bc:b7:4e:17:ee:92:05:87:c5:9c:da:4a: 8c:27:5f:f5:85:67:fb:78:f4:23:40:d6:d7:c5:06: 22:d0:26:6c:44:83:1f:f2:63:36:e0:21:94:8e:19: c0:2e:cf:62:51:f9:2f:ca:d0:cb:28:5d:4b:97:73: 65:b3:d7:6b:e6:50:81:b9:94:33:8d:d9:18:a5:86: 18:db:68:33:a2:75:99:46:3f:2e:09:12:5e:ba:ba: 9a:70:d6:58:af:59:cf:4a:35:60:bb:2b:0f:78:08: a2:a5:14:55:c5:48:1d:c2:6c:20:0d:f5:65:e8:2c: ff:ac:ae:f8:2e:d7:0a:ec:12:0a:29:40:d5:39:e4: 97:f4:ea:63:84:20:c5:88:8b:66:64:c9:a7:74:20: 5d:f5:4e:22:a1:f5:3d:cf:a4:63:33:6b:c7:7d:88: 77:80:2d:f5:91:f1:58:b9:60:da:59:49:2d:4b:45: aa:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CB:EC:22:09:F9:B6:AE:13:C0:B6:7C:0A:A2:30:93:DA:B9:59:F2 X509v3 Authority Key Identifier: keyid:0E:69:A6:7D:4B:21:5A:3F:31:FC:46:2F:0E:A5:34:EF:83:F8:EF:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmmmfUshWj8x_EYvDqU074P471c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/8svsIgn5tq4TwLZ8CqIwk9q5WfI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2064::/48 Signature Algorithm: sha256WithRSAEncryption 45:18:16:9d:1e:89:eb:00:93:e2:49:00:7a:6c:5e:ce:3c:b5: bb:5f:48:9b:69:72:7f:6c:37:f7:12:fa:a7:d1:34:14:ad:3d: 40:3e:46:d2:d9:04:3c:95:6c:86:73:59:68:0f:c8:74:76:ee: 48:44:5f:62:bd:4e:80:f3:59:ae:35:10:60:03:88:03:e4:14: 0b:9c:15:81:7b:33:57:3e:52:b0:49:d3:42:c5:80:a1:40:f9: 60:52:42:cf:fe:e7:73:b7:2c:d3:3b:9e:09:4a:77:cf:7f:2c: 90:92:00:8b:b1:bd:70:66:da:c7:17:0d:7a:ca:60:cb:e5:14: 16:fa:e7:0b:3b:e5:cf:83:ff:97:54:5a:72:7c:e6:2b:31:3a: cc:3e:40:16:3b:db:72:2b:ae:74:df:5a:7c:de:fc:2e:0a:f7: a3:22:fc:91:39:40:60:48:6f:6e:29:07:88:42:91:42:e8:2e: 0b:76:51:a8:c9:59:77:c6:14:1d:c1:14:aa:00:3b:64:e1:ae: 5d:e0:46:fd:9a:d6:8f:16:51:ff:c5:5f:ae:02:4e:78:33:1b: 19:bd:4d:f7:3c:4a:64:e2:d6:1a:0c:59:26:c9:6e:a3:14:4e: ca:43:db:22:25:5f:b6:36:1f:51:2d:4a:19:b0:d1:48:ee:ef: 5f:ad:9d:e2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8EgPQrHYM2OST7CYV5aBoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNjlhNjdkNGIyMTVhM2YzMWZjNDYyZjBlYTUzNGVmODNm OGVmNTcwHhcNMjYwMTAyMDAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmNiZWMyMjA5ZjliNmFlMTNjMGI2N2MwYWEyMzA5M2RhYjk1OWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8EmpwJB3aRuFWq3iTdRSHfT6Uyb upGYUT5Sv70YDXh1FbImrEGcj+2Wqz/tlIvndzKzdahhKfNfHl2zjaKrvW+O7h0I bfy3rQ0cixS8t04X7pIFh8Wc2kqMJ1/1hWf7ePQjQNbXxQYi0CZsRIMf8mM24CGU jhnALs9iUfkvytDLKF1Ll3Nls9dr5lCBuZQzjdkYpYYY22gzonWZRj8uCRJeurqa cNZYr1nPSjVguysPeAiipRRVxUgdwmwgDfVl6Cz/rK74LtcK7BIKKUDVOeSX9Opj hCDFiItmZMmndCBd9U4iofU9z6RjM2vHfYh3gC31kfFYuWDaWUktS0WqRQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPLL7CIJ+bauE8C2fAqiMJPauVnyMB8GA1UdIwQY MBaAFA5ppn1LIVo/MfxGLw6lNO+D+O9XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG1tbWZVc2hXajh4X0VZdkRxVTA3NFA0NzFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81MGJkZDQtZTJhOS00NmM5LTgzNmUt NjhjMWI3ZGZiMTkwLzEvOHN2c0lnbjV0cTRUd0xaOENxSXdrOXE1V2ZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy81MGJkZDQtZTJhOS00NmM5LTgzNmUtNjhjMWI3ZGZiMTkw LzEvRG1tbWZVc2hXajh4X0VZdkRxVTA3NFA0NzFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCBk MA0GCSqGSIb3DQEBCwUAA4IBAQBFGBadHonrAJPiSQB6bF7OPLW7X0ibaXJ/bDf3 Evqn0TQUrT1APkbS2QQ8lWyGc1loD8h0du5IRF9ivU6A81muNRBgA4gD5BQLnBWB ezNXPlKwSdNCxYChQPlgUkLP/udztyzTO54JSnfPfyyQkgCLsb1wZtrHFw16ymDL 5RQW+ucLO+XPg/+XVFpyfOYrMTrMPkAWO9tyK65031p83vwuCvejIvyROUBgSG9u KQeIQpFC6C4LdlGoyVl3xhQdwRSqADtk4a5d4Eb9mtaPFlH/xV+uAk54MxsZvU33 PEpk4tYaDFkmyW6jFE7KQ9siJV+2Nh9RLUoZsNFI7u9frZ3i -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:04 2026 by rpki-client