This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/9r8hihkCY6P-WgE0G7g7sQCAq1c.roa File: 9r8hihkCY6P-WgE0G7g7sQCAq1c.roa (raw, json) Hash identifier: u7x99CP8SiAZnm1Q+EhDsJ8Hk+kyHLRusYFaCGr6e8k= Subject key identifier: F6:BF:21:8A:19:02:63:A3:FE:5A:01:34:1B:B8:3B:B1:00:80:AB:57 Certificate issuer: /CN=08315aad59b4a161a63f925bd714f56c7dec6a8e Certificate serial: 019B7AC7CC7A60F5CFC71DA6DE0628DB897B Authority key identifier: 08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/9r8hihkCY6P-WgE0G7g7sQCAq1c.roa Signing time: Thu 01 Jan 2026 18:17:52 +0000 ROA not before: Thu 01 Jan 2026 18:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199591 IP address blocks: 2001:67c:bf4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:cc:7a:60:f5:cf:c7:1d:a6:de:06:28:db:89:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08315aad59b4a161a63f925bd714f56c7dec6a8e Validity Not Before: Jan 1 18:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6bf218a190263a3fe5a01341bb83bb10080ab57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fc:4b:5a:26:8e:61:d5:cc:a3:c0:0b:91:f2: 0d:16:ae:1a:e6:05:e3:78:90:72:b4:66:d1:28:cf: a9:81:f6:b2:59:f9:ac:9a:7a:f0:ae:ac:d8:08:5f: 9a:5f:8a:2a:3a:90:d4:c4:72:89:52:82:b8:9d:e6: 58:5f:54:39:4c:28:7d:59:82:c0:a8:d7:e6:3a:e4: 3f:4c:f3:92:25:15:25:32:bc:4b:91:ac:c7:e8:a8: 85:b8:38:d9:40:96:06:fb:f3:8c:e2:0a:b2:09:7a: f9:53:31:bb:e8:0d:f3:e9:31:21:d3:17:21:bf:81: 75:e1:3e:f2:9d:d0:a6:4c:85:dd:21:a7:77:67:06: 68:6f:3f:dd:15:00:19:5c:ca:c5:8e:53:73:51:54: 26:bc:fe:e0:b5:9a:2b:fc:d5:3b:15:3b:3f:9e:50: 03:35:a9:4d:c0:9a:b9:85:76:7f:35:1a:64:ca:2d: 26:b7:17:22:59:2d:cb:8e:f8:d4:96:d9:10:38:96: 4e:66:98:bc:1e:b9:02:a1:c1:b3:bb:53:28:05:6e: e5:a6:61:1f:d1:37:53:bb:26:2b:71:15:79:eb:6d: 89:48:ee:52:2b:1a:b2:6a:81:44:9a:58:8f:0b:b6: 1e:e3:09:b9:49:8e:20:5e:65:b8:3f:7d:89:4a:87: 74:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BF:21:8A:19:02:63:A3:FE:5A:01:34:1B:B8:3B:B1:00:80:AB:57 X509v3 Authority Key Identifier: keyid:08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/9r8hihkCY6P-WgE0G7g7sQCAq1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:bf4::/48 Signature Algorithm: sha256WithRSAEncryption 3b:b9:2c:0f:bd:3c:f8:e7:8c:aa:26:4c:b7:1e:f0:09:14:25: ae:7f:87:18:03:76:08:b9:96:4f:9c:d3:70:50:26:19:ee:de: 03:6e:c1:fe:1f:c4:f2:da:fc:77:38:28:b6:e0:8d:73:d7:84: 92:ec:68:f1:35:c5:ea:d8:e6:f5:4c:c9:b5:0e:e3:3d:aa:36: 7a:f8:52:a0:ef:d3:b4:59:05:93:37:9f:03:32:9f:dd:61:c5: e3:40:1b:4d:dc:6f:86:e3:14:fb:55:08:ed:30:23:85:a1:5b: 17:80:a7:e4:61:4a:3f:06:9e:50:ea:1d:09:fc:5f:89:fb:49: fd:e2:54:7f:a4:6b:c2:e6:d2:8e:11:c9:29:a0:0e:d5:cc:b7: e5:3b:7b:4c:11:97:99:b0:e1:a6:1e:95:27:a2:3e:f0:6f:80: 1b:94:1f:91:a5:9e:8c:cd:64:f0:bf:f3:e6:99:8a:56:30:45: c4:db:d1:8a:e6:46:56:b5:83:ad:91:bb:b3:3d:a0:32:f2:52: 2d:43:a0:34:f6:7d:ec:d8:06:1a:6f:de:7f:00:d8:f8:b5:88: e0:87:77:84:b6:72:40:e0:1b:07:7b:a5:7a:a4:71:e5:88:15: a1:32:2d:ca:f1:ec:a6:40:88:22:e8:9a:71:b9:41:0f:e9:30: d9:ca:97:75 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6x8x6YPXPxx2m3gYo24l7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MzE1YWFkNTliNGExNjFhNjNmOTI1YmQ3MTRmNTZjN2Rl YzZhOGUwHhcNMjYwMTAxMTgxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmJmMjE4YTE5MDI2M2EzZmU1YTAxMzQxYmI4M2JiMTAwODBhYjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/xLWiaOYdXMo8ALkfINFq4a5gXj eJBytGbRKM+pgfayWfmsmnrwrqzYCF+aX4oqOpDUxHKJUoK4neZYX1Q5TCh9WYLA qNfmOuQ/TPOSJRUlMrxLkazH6KiFuDjZQJYG+/OM4gqyCXr5UzG76A3z6TEh0xch v4F14T7yndCmTIXdIad3ZwZobz/dFQAZXMrFjlNzUVQmvP7gtZor/NU7FTs/nlAD NalNwJq5hXZ/NRpkyi0mtxciWS3LjvjUltkQOJZOZpi8HrkCocGzu1MoBW7lpmEf 0TdTuyYrcRV5622JSO5SKxqyaoFEmliPC7Ye4wm5SY4gXmW4P32JSod0WQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPa/IYoZAmOj/loBNBu4O7EAgKtXMB8GA1UdIwQY MBaAFAgxWq1ZtKFhpj+SW9cU9Wx97GqOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0RGYXJWbTBvV0dtUDVKYjF4VDFiSDNzYW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81ZjExM2MtZmZjYi00OThjLWIwNGUt OTFkZTlmMWRlYzJkLzEvOXI4aGloa0NZNlAtV2dFMEc3ZzdzUUNBcTFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS81ZjExM2MtZmZjYi00OThjLWIwNGUtOTFkZTlmMWRlYzJk LzEvQ0RGYXJWbTBvV0dtUDVKYjF4VDFiSDNzYW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAv0 MA0GCSqGSIb3DQEBCwUAA4IBAQA7uSwPvTz454yqJky3HvAJFCWuf4cYA3YIuZZP nNNwUCYZ7t4DbsH+H8Ty2vx3OCi24I1z14SS7GjxNcXq2Ob1TMm1DuM9qjZ6+FKg 79O0WQWTN58DMp/dYcXjQBtN3G+G4xT7VQjtMCOFoVsXgKfkYUo/Bp5Q6h0J/F+J +0n94lR/pGvC5tKOEckpoA7VzLflO3tMEZeZsOGmHpUnoj7wb4AblB+RpZ6MzWTw v/PmmYpWMEXE29GK5kZWtYOtkbuzPaAy8lItQ6A09n3s2AYab95/ANj4tYjgh3eE tnJA4BsHe6V6pHHliBWhMi3K8eymQIgi6JpxuUEP6TDZypd1 -----END CERTIFICATE-----Generated at Mon Feb 9 23:54:40 2026 by rpki-client