This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/0R8Nyml_jNijyqA_Jia2Nz1Ew_0.roa File: 0R8Nyml_jNijyqA_Jia2Nz1Ew_0.roa (raw, json) Hash identifier: j8m8dgU0c2ttdrUH0oHPxb+CqlN+qsjDTMJ+LPXhKnk= Subject key identifier: D1:1F:0D:CA:69:7F:8C:D8:A3:CA:A0:3F:26:26:B6:37:3D:44:C3:FD Certificate issuer: /CN=668da92f99b5407f28a2f36613e849447a93f6b9 Certificate serial: 019B79ED4C6FDE5EF59B4D3132084B3C0F03 Authority key identifier: 66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/0R8Nyml_jNijyqA_Jia2Nz1Ew_0.roa Signing time: Thu 01 Jan 2026 14:19:13 +0000 ROA not before: Thu 01 Jan 2026 14:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1103 IP address blocks: 131.174.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:4c:6f:de:5e:f5:9b:4d:31:32:08:4b:3c:0f:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=668da92f99b5407f28a2f36613e849447a93f6b9 Validity Not Before: Jan 1 14:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d11f0dca697f8cd8a3caa03f2626b6373d44c3fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f1:66:8f:83:d2:0e:02:f9:6d:e4:25:99:05: 29:a7:c6:46:df:ed:ff:8b:41:b3:c1:b5:0b:37:fb: b3:e4:cd:5e:c2:d9:f1:9e:f7:2a:b4:8e:a7:f3:6b: 55:e8:b2:6a:58:be:fe:68:83:63:b3:01:d5:34:c8: 1d:1f:54:18:94:b2:92:61:5f:87:e4:9f:bd:5a:4e: f3:c7:d8:c0:0f:0b:4f:f3:58:8e:b9:d1:77:f7:38: 56:f9:6e:ed:b1:3d:79:3f:9e:dd:4a:d7:2c:0c:1d: a7:a6:da:69:de:e7:15:88:8f:86:48:25:89:d7:0b: c2:d4:ee:13:09:aa:8e:ae:82:a2:ad:46:fa:b5:6f: 36:a0:02:1a:0e:60:7d:b3:48:8d:d2:1c:51:fc:14: 6a:f4:f6:d6:9d:80:d4:78:a6:66:70:9c:d1:38:e3: 50:a1:a0:a1:8e:5c:97:0c:59:7c:66:5e:a4:c7:3a: 88:64:aa:43:4a:e1:c0:44:a9:8c:51:38:3d:46:bf: af:a9:e9:06:0d:8d:f2:bf:2c:2e:7e:bc:65:8c:8a: ed:99:39:fc:fc:02:84:60:7c:9d:a0:63:0f:cc:61: 88:dc:3c:b1:19:48:33:72:a0:b0:e8:ea:a1:e1:7d: 4f:4a:a4:00:ee:db:31:1c:58:f3:c6:30:c4:be:06: 05:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1F:0D:CA:69:7F:8C:D8:A3:CA:A0:3F:26:26:B6:37:3D:44:C3:FD X509v3 Authority Key Identifier: keyid:66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/0R8Nyml_jNijyqA_Jia2Nz1Ew_0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.174.0.0/16 Signature Algorithm: sha256WithRSAEncryption 85:33:c4:ba:51:c1:ac:c0:b9:e4:21:25:8d:59:a3:a8:6d:6c: 43:33:c6:6e:a4:da:0f:ed:83:3c:b9:11:13:87:5f:9e:18:7a: bd:a7:4d:85:e3:8f:28:62:9e:1e:b5:d8:36:d7:60:f1:ed:4b: db:fe:36:0c:3f:33:c5:af:63:5e:fb:8d:ff:7d:12:f2:4b:02: b2:cc:7c:68:6f:37:e6:23:a9:f3:17:53:72:c7:01:85:d1:dc: a5:00:17:2d:4c:b6:70:8e:dd:64:e5:fd:ad:16:ff:75:42:22: 90:02:1e:87:65:88:8f:2e:c2:5c:fb:9d:45:a1:28:81:a7:2c: 84:22:a4:4d:d1:0e:90:ee:7e:04:a3:93:08:de:3f:2b:c1:fd: 9f:f7:d6:9f:35:fc:3a:d7:ae:ae:68:ec:9c:6a:9d:8b:d0:c7: fe:79:d6:e2:06:5f:48:ef:4c:f2:e3:b9:b8:49:34:e5:fd:42: 33:81:cf:e2:ac:d2:6f:8a:fd:ce:9b:aa:de:41:34:03:04:38: dd:28:84:bf:c1:48:6e:d7:67:44:7d:aa:dd:a1:36:47:8b:f9: ac:17:99:41:b6:eb:bc:e6:43:0f:dc:cf:0b:25:e3:a9:8b:2f: 42:6a:b0:07:bb:38:0b:0a:48:a0:10:f8:c6:e4:3e:0f:e3:25: 3b:19:ec:a7 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt57Uxv3l71m00xMghLPA8DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2OGRhOTJmOTliNTQwN2YyOGEyZjM2NjEzZTg0OTQ0N2E5 M2Y2YjkwHhcNMjYwMTAxMTQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTFmMGRjYTY5N2Y4Y2Q4YTNjYWEwM2YyNjI2YjYzNzNkNDRjM2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPFmj4PSDgL5beQlmQUpp8ZG3+3/ i0GzwbULN/uz5M1ewtnxnvcqtI6n82tV6LJqWL7+aINjswHVNMgdH1QYlLKSYV+H 5J+9Wk7zx9jADwtP81iOudF39zhW+W7tsT15P57dStcsDB2nptpp3ucViI+GSCWJ 1wvC1O4TCaqOroKirUb6tW82oAIaDmB9s0iN0hxR/BRq9PbWnYDUeKZmcJzROONQ oaChjlyXDFl8Zl6kxzqIZKpDSuHARKmMUTg9Rr+vqekGDY3yvywufrxljIrtmTn8 /AKEYHydoGMPzGGI3DyxGUgzcqCw6Oqh4X1PSqQA7tsxHFjzxjDEvgYFbwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFNEfDcppf4zYo8qgPyYmtjc9RMP9MB8GA1UdIwQY MBaAFGaNqS+ZtUB/KKLzZhPoSUR6k/a5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm8ycEw1bTFRSDhvb3ZObUUtaEpSSHFUOXJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9jNmUwMGUtODFjZC00YzAwLWFmZjEt ZGM4ZTgzZTYyOWYyLzEvMFI4TnltbF9qTmlqeXFBX0ppYTJOejFFd18wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9jNmUwMGUtODFjZC00YzAwLWFmZjEtZGM4ZTgzZTYyOWYy LzEvWm8ycEw1bTFRSDhvb3ZObUUtaEpSSHFUOXJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAg64wDQYJ KoZIhvcNAQELBQADggEBAIUzxLpRwazAueQhJY1Zo6htbEMzxm6k2g/tgzy5EROH X54Yer2nTYXjjyhinh612DbXYPHtS9v+Ngw/M8WvY177jf99EvJLArLMfGhvN+Yj qfMXU3LHAYXR3KUAFy1MtnCO3WTl/a0W/3VCIpACHodliI8uwlz7nUWhKIGnLIQi pE3RDpDufgSjkwjePyvB/Z/31p81/DrXrq5o7JxqnYvQx/551uIGX0jvTPLjubhJ NOX9QjOBz+Ks0m+K/c6bqt5BNAMEON0ohL/BSG7XZ0R9qt2hNkeL+awXmUG267zm Qw/czwsl46mLL0JqsAe7OAsKSKAQ+MbkPg/jJTsZ7Kc= -----END CERTIFICATE-----Generated at Sun Jan 25 21:06:41 2026 by rpki-client