This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/fW8Rb2ydTpsUsTrGa2SivBYDQlA.roa File: fW8Rb2ydTpsUsTrGa2SivBYDQlA.roa (raw, json) Hash identifier: R0r5msaJunREx2IGezURTBwCC6OaeIbwcDABeHEl6S4= Subject key identifier: 7D:6F:11:6F:6C:9D:4E:9B:14:B1:3A:C6:6B:64:A2:BC:16:03:42:50 Certificate issuer: /CN=0d8d3ced32e360fcd46c163556de28aa2824b19b Certificate serial: 019B7D5BFB5DD9CEDD912AC0C8C81C2A1EB5 Authority key identifier: 0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/fW8Rb2ydTpsUsTrGa2SivBYDQlA.roa Signing time: Fri 02 Jan 2026 06:18:58 +0000 ROA not before: Fri 02 Jan 2026 06:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209179 IP address blocks: 2a03:bb80::/48 maxlen: 48 2a03:bb80:1::/48 maxlen: 48 2a03:bb80:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:fb:5d:d9:ce:dd:91:2a:c0:c8:c8:1c:2a:1e:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d8d3ced32e360fcd46c163556de28aa2824b19b Validity Not Before: Jan 2 06:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d6f116f6c9d4e9b14b13ac66b64a2bc16034250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:03:5f:60:7d:46:58:25:d6:54:6c:be:66:a8: 0d:33:9b:1a:ef:7d:30:ee:a1:80:0a:67:34:ad:aa: 9e:d3:84:51:8a:a6:ec:0a:73:23:4b:a3:92:0b:96: 44:c3:85:f2:6b:0f:d6:03:d2:15:17:ed:a6:dc:a4: 5a:9c:1f:92:6e:4d:d2:47:95:74:0b:a4:33:96:6b: 44:dc:28:93:0d:16:99:f8:5b:0e:3c:0a:d2:15:7b: fb:1a:1d:7d:ec:05:28:0f:b8:b8:33:b5:cb:3e:78: 75:e8:31:a8:ec:28:d8:f5:29:10:01:4c:72:9c:06: c6:1b:2d:27:96:fb:7c:82:d5:71:9a:53:c9:97:7a: f4:41:20:03:f5:13:10:f3:10:9b:03:c8:4a:13:4f: 63:6d:81:51:af:25:3d:a0:e4:f4:59:80:4d:28:27: ec:da:f5:69:3c:d4:60:bb:5f:67:53:62:54:10:db: 42:18:80:99:04:fd:61:d6:93:71:60:4e:05:0f:8f: b8:19:bc:04:1c:82:6f:2b:50:f0:cf:b4:62:6f:4d: 0d:fa:0c:b2:bf:44:82:20:8f:e2:3e:b4:e2:2f:dd: c5:25:75:0a:24:a2:9e:11:9d:17:e0:ea:94:e8:03: 1e:3e:9d:e4:26:63:a4:d3:0b:2d:8b:1c:35:d8:95: 77:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:6F:11:6F:6C:9D:4E:9B:14:B1:3A:C6:6B:64:A2:BC:16:03:42:50 X509v3 Authority Key Identifier: keyid:0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/fW8Rb2ydTpsUsTrGa2SivBYDQlA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:bb80::-2a03:bb80:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 47:a9:18:85:72:01:6d:49:2e:71:65:14:01:7e:25:ca:ce:9e: 02:67:73:3b:59:4f:79:f8:5d:09:c9:aa:61:a6:0d:e6:00:61: 95:c3:bd:d9:a2:fe:4a:17:ea:93:ea:84:6a:99:cb:e4:0a:f3: 0b:df:6e:bd:b8:e1:ed:5d:13:03:26:8f:84:27:bd:b0:4d:6f: 14:6f:20:07:9f:ea:ef:ca:fa:a5:1d:1d:5c:e8:de:12:01:2c: 12:ad:51:d7:39:43:a8:75:fb:ef:54:00:cb:9e:43:29:d0:79: d7:59:b8:3e:05:6c:66:3a:51:5a:46:79:50:c2:4b:9e:4b:9f: 37:ac:29:76:5b:7c:65:2b:59:f3:3d:56:42:34:5e:57:2a:fd: 28:18:bc:e3:05:83:07:65:49:87:89:d8:3d:90:96:0f:a9:27: c6:89:aa:d5:b8:d4:df:8b:df:29:df:a3:59:47:ef:f9:a8:ef: 01:b2:2b:71:0f:73:c9:d6:da:63:83:86:11:3e:eb:f5:c6:e4: 96:60:be:6d:69:1c:ab:4f:d4:c8:e6:97:70:d4:17:71:6a:bb: fe:58:fb:77:c9:de:65:1b:1e:88:06:48:84:58:a9:f5:de:02: f8:3f:23:1c:78:b3:1d:98:32:bc:9e:3e:3a:c7:de:7c:d4:6e: 61:89:5e:7c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9W/td2c7dkSrAyMgcKh61MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkOGQzY2VkMzJlMzYwZmNkNDZjMTYzNTU2ZGUyOGFhMjgy NGIxOWIwHhcNMjYwMTAyMDYxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDZmMTE2ZjZjOWQ0ZTliMTRiMTNhYzY2YjY0YTJiYzE2MDM0MjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkANfYH1GWCXWVGy+ZqgNM5sa730w 7qGACmc0raqe04RRiqbsCnMjS6OSC5ZEw4Xyaw/WA9IVF+2m3KRanB+Sbk3SR5V0 C6QzlmtE3CiTDRaZ+FsOPArSFXv7Gh197AUoD7i4M7XLPnh16DGo7CjY9SkQAUxy nAbGGy0nlvt8gtVxmlPJl3r0QSAD9RMQ8xCbA8hKE09jbYFRryU9oOT0WYBNKCfs 2vVpPNRgu19nU2JUENtCGICZBP1h1pNxYE4FD4+4GbwEHIJvK1Dwz7Rib00N+gyy v0SCII/iPrTiL93FJXUKJKKeEZ0X4OqU6AMePp3kJmOk0wstixw12JV3OwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFH1vEW9snU6bFLE6xmtkorwWA0JQMB8GA1UdIwQY MBaAFA2NPO0y42D81GwWNVbeKKooJLGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFkwODdUTGpZUHpVYkJZMVZ0NG9xaWdrc1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jYjZmN2UtZTNiOC00ZDBjLTgyOTMt YTQ5N2I4Y2JmMTc3LzEvZlc4UmIyeWRUcHNVc1RyR2EyU2l2QllEUWxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9jYjZmN2UtZTNiOC00ZDBjLTgyOTMtYTQ5N2I4Y2JmMTc3 LzEvRFkwODdUTGpZUHpVYkJZMVZ0NG9xaWdrc1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASMBADBQcqA7uA AwcAKgO7gAACMA0GCSqGSIb3DQEBCwUAA4IBAQBHqRiFcgFtSS5xZRQBfiXKzp4C Z3M7WU95+F0Jyaphpg3mAGGVw73Zov5KF+qT6oRqmcvkCvML3269uOHtXRMDJo+E J72wTW8UbyAHn+rvyvqlHR1c6N4SASwSrVHXOUOodfvvVADLnkMp0HnXWbg+BWxm OlFaRnlQwkueS583rCl2W3xlK1nzPVZCNF5XKv0oGLzjBYMHZUmHidg9kJYPqSfG iarVuNTfi98p36NZR+/5qO8BsitxD3PJ1tpjg4YRPuv1xuSWYL5taRyrT9TI5pdw 1Bdxarv+WPt3yd5lGx6IBkiEWKn13gL4PyMceLMdmDK8nj46x9581G5hiV58 -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:30 2026 by rpki-client