This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/8TOQQxBqXcp6fW3Hblb4iR3kNJk.roa File: 8TOQQxBqXcp6fW3Hblb4iR3kNJk.roa (raw, json) Hash identifier: AkbjUVe9rqlWL80z0FPBMQHWUds+wn6xHXbSbheZ2uo= Subject key identifier: F1:33:90:43:10:6A:5D:CA:7A:7D:6D:C7:6E:56:F8:89:1D:E4:34:99 Certificate issuer: /CN=97ea541c123faa9c0edc729f829e959fd292e37d Certificate serial: 019B7BA33326EE00A22D1E4322ACFEC96663 Authority key identifier: 97:EA:54:1C:12:3F:AA:9C:0E:DC:72:9F:82:9E:95:9F:D2:92:E3:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/8TOQQxBqXcp6fW3Hblb4iR3kNJk.roa Signing time: Thu 01 Jan 2026 22:17:31 +0000 ROA not before: Thu 01 Jan 2026 22:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43519 IP address blocks: 2a0d:9b80::/48 maxlen: 48 2a0d:9b80:1::/48 maxlen: 48 2a0d:9b80:fe::/48 maxlen: 48 2a0d:9b80:ff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.mft rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:33:26:ee:00:a2:2d:1e:43:22:ac:fe:c9:66:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ea541c123faa9c0edc729f829e959fd292e37d Validity Not Before: Jan 1 22:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1339043106a5dca7a7d6dc76e56f8891de43499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cc:86:48:33:26:d3:d1:b4:ae:2e:e8:fd:e6: 65:50:20:a3:f2:6f:73:d2:aa:f2:4b:97:68:70:0e: 90:91:bf:8b:9a:64:a0:35:f6:fe:d1:49:75:ef:4b: ad:50:74:6b:b0:70:8d:02:a1:af:0a:be:5f:21:68: 4a:fe:32:3f:b8:55:9b:4e:a4:0d:9e:67:eb:5f:a3: 68:04:ba:8f:ee:28:15:66:52:3e:78:fa:5f:b5:f1: 52:61:c8:36:48:f3:08:92:c6:e5:b8:e6:7b:76:bf: bb:ae:7e:bd:ea:61:9e:14:9c:ff:ad:7f:ae:c8:00: c5:d9:c5:bb:99:5d:4e:99:d3:02:6b:81:82:d0:62: 47:9e:d2:5b:5b:18:50:e1:77:b7:86:24:50:3f:04: ed:56:7b:34:b7:16:9a:1f:ad:19:92:a1:2d:77:10: 6a:17:9e:d9:87:a9:d6:54:41:e7:42:85:33:b5:15: 70:e2:34:17:ac:e2:83:7f:03:72:bd:22:15:01:2d: 0d:ed:82:7a:d7:ba:1e:2b:82:73:af:e9:5b:21:0a: 5a:e0:4c:c6:b0:dc:22:e3:ab:35:ef:04:d6:32:f8: 88:9a:69:c8:dc:de:11:df:d9:5e:65:f3:f8:04:03: 1c:49:dc:bd:f8:c5:50:28:13:23:f3:aa:a1:89:2b: 81:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:33:90:43:10:6A:5D:CA:7A:7D:6D:C7:6E:56:F8:89:1D:E4:34:99 X509v3 Authority Key Identifier: keyid:97:EA:54:1C:12:3F:AA:9C:0E:DC:72:9F:82:9E:95:9F:D2:92:E3:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-pUHBI_qpwO3HKfgp6Vn9KS430.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/8TOQQxBqXcp6fW3Hblb4iR3kNJk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12155c-cd13-4aa7-8949-638dcfa13003/1/l-pUHBI_qpwO3HKfgp6Vn9KS430.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:9b80::/47 2a0d:9b80:fe::/47 Signature Algorithm: sha256WithRSAEncryption 22:f3:b8:bb:d1:97:a0:6b:d0:97:09:a1:b2:a0:ca:4f:06:8d: e3:6e:6b:8f:26:65:a0:87:16:99:6f:5b:41:36:b9:81:d6:a9: fb:7c:71:09:7e:23:a0:94:e3:1d:93:2c:2c:01:89:62:59:1d: df:54:db:f7:b8:bd:30:6b:af:61:83:3c:6b:ce:c0:74:ec:86: 8f:03:b9:2b:9b:b1:18:ff:04:aa:ba:a6:3a:47:b1:34:42:e9: 5e:ec:e4:1e:7d:aa:24:29:6c:b0:a4:08:64:37:0c:64:95:fb: 2f:fc:4d:6a:8b:0a:2b:90:52:00:a2:3e:3b:ba:f1:34:24:19: 03:26:80:84:4d:c6:b5:2d:42:1e:e6:6b:08:52:9b:e9:3e:6a: 36:ca:46:a7:82:f8:8d:a4:9e:fd:2a:9e:b5:bd:9e:6e:ef:a4: 9f:4a:a9:f7:41:a3:b8:6d:9d:ed:c7:74:41:e4:fe:5e:a9:c0: 10:63:41:7c:af:28:2b:48:8e:f4:ef:2c:f1:31:b9:4a:1d:91: 37:78:d5:4f:e7:93:90:8c:ec:65:59:a0:f2:23:7a:aa:ac:8b: bd:c7:8b:2c:59:f4:75:05:aa:fb:7e:b9:0a:52:c4:0a:22:45: 2e:36:f5:7f:e5:bc:bc:b0:8d:77:55:8e:df:94:31:2f:90:ef: 42:4d:88:8b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7ozMm7gCiLR5DIqz+yWZjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ZWE1NDFjMTIzZmFhOWMwZWRjNzI5ZjgyOWU5NTlmZDI5 MmUzN2QwHhcNMjYwMTAxMjIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTMzOTA0MzEwNmE1ZGNhN2E3ZDZkYzc2ZTU2Zjg4OTFkZTQzNDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMyGSDMm09G0ri7o/eZlUCCj8m9z 0qryS5docA6Qkb+LmmSgNfb+0Ul170utUHRrsHCNAqGvCr5fIWhK/jI/uFWbTqQN nmfrX6NoBLqP7igVZlI+ePpftfFSYcg2SPMIksbluOZ7dr+7rn696mGeFJz/rX+u yADF2cW7mV1OmdMCa4GC0GJHntJbWxhQ4Xe3hiRQPwTtVns0txaaH60ZkqEtdxBq F57Zh6nWVEHnQoUztRVw4jQXrOKDfwNyvSIVAS0N7YJ617oeK4Jzr+lbIQpa4EzG sNwi46s17wTWMviImmnI3N4R39leZfP4BAMcSdy9+MVQKBMj86qhiSuB1wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPEzkEMQal3Ken1tx25W+Ikd5DSZMB8GA1UdIwQY MBaAFJfqVBwSP6qcDtxyn4KelZ/SkuN9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbC1wVUhCSV9xcHdPM0hLZmdwNlZuOUtTNDMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xMjE1NWMtY2QxMy00YWE3LTg5NDkt NjM4ZGNmYTEzMDAzLzEvOFRPUVF4QnFYY3A2ZlczSGJsYjRpUjNrTkprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xMjE1NWMtY2QxMy00YWE3LTg5NDktNjM4ZGNmYTEzMDAz LzEvbC1wVUhCSV9xcHdPM0hLZmdwNlZuOUtTNDMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcBKg2bgAAA AwcBKg2bgAD+MA0GCSqGSIb3DQEBCwUAA4IBAQAi87i70Zega9CXCaGyoMpPBo3j bmuPJmWghxaZb1tBNrmB1qn7fHEJfiOglOMdkywsAYliWR3fVNv3uL0wa69hgzxr zsB07IaPA7krm7EY/wSquqY6R7E0Qule7OQefaokKWywpAhkNwxklfsv/E1qiwor kFIAoj47uvE0JBkDJoCETca1LUIe5msIUpvpPmo2ykangviNpJ79Kp61vZ5u76Sf Sqn3QaO4bZ3tx3RB5P5eqcAQY0F8rygrSI707yzxMblKHZE3eNVP55OQjOxlWaDy I3qqrIu9x4ssWfR1Bar7frkKUsQKIkUuNvV/5by8sI13VY7flDEvkO9CTYiL -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:25 2026 by rpki-client