This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/8Fek8UnY2kk2vwuqEdVrJCWVcx4.roa File: 8Fek8UnY2kk2vwuqEdVrJCWVcx4.roa (raw, json) Hash identifier: C/S5t/jkRUzDDtp95YSqhtsTzX0n1C2J+S1YyO0ZmWw= Subject key identifier: F0:57:A4:F1:49:D8:DA:49:36:BF:0B:AA:11:D5:6B:24:25:95:73:1E Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6FDA4299EB51BF4D68ABD8D217CC1 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/8Fek8UnY2kk2vwuqEdVrJCWVcx4.roa Signing time: Fri 02 Jan 2026 12:20:31 +0000 ROA not before: Fri 02 Jan 2026 12:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212316 IP address blocks: 2a0c:9a40:8690::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:fd:a4:29:9e:b5:1b:f4:d6:8a:bd:8d:21:7c:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f057a4f149d8da4936bf0baa11d56b242595731e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4a:0c:7d:46:27:b0:27:c6:10:18:18:18:e0: 7f:0d:88:54:53:03:16:7d:93:32:d3:c2:a7:48:84: b3:86:ca:b6:36:71:7b:08:1a:6e:f5:8e:6b:3d:09: 42:ab:78:79:cf:98:69:d5:86:48:23:49:c5:81:d0: 74:0d:d6:89:ac:54:1c:b4:97:8c:b7:fa:8b:d6:c6: 09:d7:f6:a0:4b:d5:37:e1:ca:7d:95:32:07:f6:59: 03:e5:26:7c:ac:b0:a5:24:78:fc:73:82:72:d8:50: ca:60:ad:0f:1c:72:b2:d2:a8:82:53:f2:3b:a6:26: 7c:c6:4b:2f:8a:da:53:63:c3:ef:1f:96:20:60:3a: 1f:01:78:9a:8b:a8:b9:61:98:b8:a0:ad:3e:d0:5b: 0f:f9:26:90:ed:fd:1a:d7:87:25:22:6e:7c:ee:cd: 0f:50:8e:76:9d:5d:0c:21:f2:aa:a8:51:3e:64:0f: d6:de:ee:de:ae:b3:56:43:27:86:3d:6c:1f:4f:51: be:2d:44:fa:1a:84:3a:91:84:d6:70:7b:16:a5:b0: ca:ae:c1:4b:44:34:4c:e5:a8:b1:c7:bd:02:01:44: 45:3c:4c:0a:87:7f:68:a6:17:84:63:2f:b1:bd:3a: b5:ba:56:00:cf:15:da:f9:bf:95:c3:a0:e4:4e:c7: 3e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:57:A4:F1:49:D8:DA:49:36:BF:0B:AA:11:D5:6B:24:25:95:73:1E X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/8Fek8UnY2kk2vwuqEdVrJCWVcx4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8690::/48 Signature Algorithm: sha256WithRSAEncryption 3e:f3:8e:e6:70:51:b5:d1:ca:18:42:a3:49:c8:d7:05:0e:15: d5:7c:ca:80:1f:dc:d4:c7:d1:12:04:46:42:7e:46:66:b5:d0: c8:63:f9:0b:93:42:9f:34:1e:21:06:d3:50:c2:cd:cd:e6:3d: 67:d8:68:fd:59:ee:7e:97:08:f3:a6:92:b2:cc:b3:04:3c:42: c8:69:10:4d:f0:85:c2:4a:4a:8e:b8:da:cc:e7:12:e7:c3:67: c3:9f:f9:da:17:43:a4:c0:74:a3:9d:c0:c2:47:8c:89:9a:c3: 5a:74:9d:33:67:2f:6d:e1:d8:ad:cc:fe:56:cc:ac:c9:9e:07: 81:66:c8:d1:e2:02:2a:6d:d3:aa:4d:e1:8d:83:39:d0:4b:04: a0:68:7b:26:4c:6c:5c:50:b3:2b:af:01:fc:4e:64:36:64:bd: f1:b5:6b:29:8e:80:f6:ef:6d:d8:fe:de:9b:38:d4:a0:2e:d4: a1:f4:a6:85:40:ee:bf:fb:ca:52:70:13:c8:80:6d:d7:c4:78: 70:64:8a:69:58:7b:a3:11:c7:d7:c8:80:f1:c5:24:0b:5f:a9: 4e:96:63:01:0c:c0:d7:3a:33:9e:44:c1:49:d8:96:69:42:60: 61:b1:f3:e0:2f:34:e4:bf:a3:65:a8:79:70:79:36:f7:a0:a1: 25:27:cf:ab -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pv2kKZ61G/TWir2NIXzBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDU3YTRmMTQ5ZDhkYTQ5MzZiZjBiYWExMWQ1NmIyNDI1OTU3MzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UoMfUYnsCfGEBgYGOB/DYhUUwMW fZMy08KnSISzhsq2NnF7CBpu9Y5rPQlCq3h5z5hp1YZII0nFgdB0DdaJrFQctJeM t/qL1sYJ1/agS9U34cp9lTIH9lkD5SZ8rLClJHj8c4Jy2FDKYK0PHHKy0qiCU/I7 piZ8xksvitpTY8PvH5YgYDofAXiai6i5YZi4oK0+0FsP+SaQ7f0a14clIm587s0P UI52nV0MIfKqqFE+ZA/W3u7errNWQyeGPWwfT1G+LUT6GoQ6kYTWcHsWpbDKrsFL RDRM5aixx70CAURFPEwKh39opheEYy+xvTq1ulYAzxXa+b+Vw6DkTsc+qQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPBXpPFJ2NpJNr8LqhHVayQllXMeMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvOEZlazhVblkya2sydnd1cUVkVnJKQ1dWY3g0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIaQ MA0GCSqGSIb3DQEBCwUAA4IBAQA+847mcFG10coYQqNJyNcFDhXVfMqAH9zUx9ES BEZCfkZmtdDIY/kLk0KfNB4hBtNQws3N5j1n2Gj9We5+lwjzppKyzLMEPELIaRBN 8IXCSkqOuNrM5xLnw2fDn/naF0OkwHSjncDCR4yJmsNadJ0zZy9t4ditzP5WzKzJ ngeBZsjR4gIqbdOqTeGNgznQSwSgaHsmTGxcULMrrwH8TmQ2ZL3xtWspjoD2723Y /t6bONSgLtSh9KaFQO6/+8pScBPIgG3XxHhwZIppWHujEcfXyIDxxSQLX6lOlmMB DMDXOjOeRMFJ2JZpQmBhsfPgLzTkv6NlqHlweTb3oKElJ8+r -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:39 2026 by rpki-client