This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/1-8RpzQOO8MH_8tY_8CiuesNU5kw.roa File: 1-8RpzQOO8MH_8tY_8CiuesNU5kw.roa (raw, json) Hash identifier: NwZ58UxGQif1qZHSYOqbsi4+8X/Tbr0yxp1KYuyKjAA= Subject key identifier: FB:C4:69:CD:03:8E:F0:C1:FF:F2:D6:3F:F0:28:AE:7A:C3:54:E6:4C Certificate issuer: /CN=a82207fd50c45e96f2825ec772cf6b8dea3dfcb0 Certificate serial: 019B7A5AF285372D2316EFD485EFBC1349E3 Authority key identifier: A8:22:07:FD:50:C4:5E:96:F2:82:5E:C7:72:CF:6B:8D:EA:3D:FC:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCIH_VDEXpbygl7Hcs9rjeo9_LA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/1-8RpzQOO8MH_8tY_8CiuesNU5kw.roa Signing time: Thu 01 Jan 2026 16:18:59 +0000 ROA not before: Thu 01 Jan 2026 16:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207886 IP address blocks: 2001:678:b70::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft rsync://rpki.ripe.net/repository/DEFAULT/qCIH_VDEXpbygl7Hcs9rjeo9_LA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:f2:85:37:2d:23:16:ef:d4:85:ef:bc:13:49:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a82207fd50c45e96f2825ec772cf6b8dea3dfcb0 Validity Not Before: Jan 1 16:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbc469cd038ef0c1fff2d63ff028ae7ac354e64c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ae:2b:2e:84:21:cb:c2:73:de:f8:f7:41:f9: d8:ce:e0:90:6c:a8:5c:fa:1b:1d:64:94:9a:77:7b: 35:8e:42:0d:9c:e1:37:98:26:49:21:ca:78:f8:41: 5a:4e:30:c2:6e:2f:83:66:96:b0:09:06:4d:d4:d0: 9e:8d:8a:8b:e3:fe:14:2b:89:94:a2:5d:67:0c:63: f8:30:2a:dc:ec:94:02:62:1f:5f:10:fb:23:63:93: 45:d9:df:ef:06:d8:5e:9b:5f:df:71:96:30:85:c2: db:75:e6:d3:d5:c8:2f:1b:fc:d7:25:2f:bb:4a:76: 64:2e:76:9c:51:5f:3f:02:2c:66:a9:30:0e:80:83: ef:3b:c2:7d:a2:5a:77:bb:71:ab:80:ed:f2:0b:a7: da:db:e1:1b:b9:39:4a:4f:8c:65:55:da:1d:df:2a: 6f:88:5c:f0:a6:b9:97:cc:20:49:14:04:a8:b4:8a: 03:04:e3:3c:0c:f3:a1:0c:1e:ce:51:86:86:f6:b4: e8:39:35:35:a1:f1:48:02:d6:a3:aa:8a:d4:e6:58: 0c:bd:c6:4f:27:7f:0f:f5:c4:ee:97:c1:0c:a7:62: 0f:e0:71:24:6b:3c:ed:e1:0d:5d:39:1e:df:c0:2e: 33:55:a2:a7:cb:ea:dd:ca:84:c3:78:11:2b:87:c2: b4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C4:69:CD:03:8E:F0:C1:FF:F2:D6:3F:F0:28:AE:7A:C3:54:E6:4C X509v3 Authority Key Identifier: keyid:A8:22:07:FD:50:C4:5E:96:F2:82:5E:C7:72:CF:6B:8D:EA:3D:FC:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCIH_VDEXpbygl7Hcs9rjeo9_LA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/1-8RpzQOO8MH_8tY_8CiuesNU5kw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:b70::/48 Signature Algorithm: sha256WithRSAEncryption ab:13:6d:54:1f:1c:71:1f:5b:b2:29:7a:1c:d8:25:f2:66:77: 2d:0c:88:cb:db:f3:41:2f:98:c1:3f:e6:8d:bb:fb:e0:04:32: e4:98:80:a7:ad:ca:a9:96:06:a8:1f:e2:38:25:dd:02:e7:83: a6:e2:68:56:51:cb:d2:b6:2b:38:3a:40:63:de:00:00:06:c9: 48:d2:02:f1:16:cf:dd:71:38:d5:50:cd:a3:9a:40:1d:ff:f6: 69:86:18:d3:73:d7:19:7a:bf:ec:91:a6:80:f7:7b:53:e7:c6: f1:b2:e4:33:34:a5:ce:9c:9b:1c:c4:45:88:16:9f:a9:1e:45: e1:31:a0:6d:65:de:2d:f3:7a:13:78:39:40:3b:26:d6:da:1d: f7:f2:09:03:d4:6d:d1:6c:c9:e8:ec:05:f0:de:70:bf:6f:38: a6:59:12:fb:0f:b3:e3:55:4d:12:90:9c:ba:bf:82:fb:18:86: 70:5b:70:e3:37:e2:fa:9c:19:1a:c9:17:42:c9:35:de:92:2d: 94:bc:1a:a3:15:a2:8e:84:be:f8:39:4a:f9:ac:f9:ea:22:03: 3e:b1:53:be:fa:22:cb:ef:91:9a:bd:0e:e6:05:1c:6b:b9:c6: 08:20:ba:3e:37:92:86:d2:5b:7a:e3:23:e8:ef:cf:50:ec:c2: c3:e7:9d:5c -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt6WvKFNy0jFu/Uhe+8E0njMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MjIwN2ZkNTBjNDVlOTZmMjgyNWVjNzcyY2Y2YjhkZWEz ZGZjYjAwHhcNMjYwMTAxMTYxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmM0NjljZDAzOGVmMGMxZmZmMmQ2M2ZmMDI4YWU3YWMzNTRlNjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA764rLoQhy8Jz3vj3QfnYzuCQbKhc +hsdZJSad3s1jkINnOE3mCZJIcp4+EFaTjDCbi+DZpawCQZN1NCejYqL4/4UK4mU ol1nDGP4MCrc7JQCYh9fEPsjY5NF2d/vBthem1/fcZYwhcLbdebT1cgvG/zXJS+7 SnZkLnacUV8/AixmqTAOgIPvO8J9olp3u3GrgO3yC6fa2+EbuTlKT4xlVdod3ypv iFzwprmXzCBJFASotIoDBOM8DPOhDB7OUYaG9rToOTU1ofFIAtajqorU5lgMvcZP J38P9cTul8EMp2IP4HEkazzt4Q1dOR7fwC4zVaKny+rdyoTDeBErh8K0EwIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFPvEac0DjvDB//LWP/AornrDVOZMMB8GA1UdIwQY MBaAFKgiB/1QxF6W8oJex3LPa43qPfywMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUNJSF9WREVYcGJ5Z2w3SGNzOXJqZW85X0xBLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYThlNDMtNmRmMC00N2VmLWFkYzUt MzBiZGQyZmUwNWIxLzEvMS04UnB6UU9POE1IXzh0WV84Q2l1ZXNOVTVrdy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZTMvYWE4ZTQzLTZkZjAtNDdlZi1hZGM1LTMwYmRkMmZlMDVi MS8xL3FDSUhfVkRFWHBieWdsN0hjczlyamVvOV9MQS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBngL cDANBgkqhkiG9w0BAQsFAAOCAQEAqxNtVB8ccR9bsil6HNgl8mZ3LQyIy9vzQS+Y wT/mjbv74AQy5JiAp63KqZYGqB/iOCXdAueDpuJoVlHL0rYrODpAY94AAAbJSNIC 8RbP3XE41VDNo5pAHf/2aYYY03PXGXq/7JGmgPd7U+fG8bLkMzSlzpybHMRFiBaf qR5F4TGgbWXeLfN6E3g5QDsm1tod9/IJA9Rt0WzJ6OwF8N5wv284plkS+w+z41VN EpCcur+C+xiGcFtw4zfi+pwZGskXQsk13pItlLwaoxWijoS++DlK+az56iIDPrFT vvoiy++Rmr0O5gUca7nGCCC6PjeShtJbeuMj6O/PUOzCw+edXA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:06:02 2026 by rpki-client