This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/8U6UHcMxwJO_mqgWVU_ftKeB3KQ.roa File: 8U6UHcMxwJO_mqgWVU_ftKeB3KQ.roa (raw, json) Hash identifier: zVpYlaVZ3TnxEB6yTOHe4OyX36m0nQoZV0ZZApuXM34= Subject key identifier: F1:4E:94:1D:C3:31:C0:93:BF:9A:A8:16:55:4F:DF:B4:A7:81:DC:A4 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82B45014EA47B0F285166932C7E90C Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/8U6UHcMxwJO_mqgWVU_ftKeB3KQ.roa Signing time: Fri 02 Jan 2026 16:20:30 +0000 ROA not before: Fri 02 Jan 2026 16:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15490 IP address blocks: 2.56.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:b4:50:14:ea:47:b0:f2:85:16:69:32:c7:e9:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f14e941dc331c093bf9aa816554fdfb4a781dca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:36:8b:2e:c8:e8:61:8c:10:4a:f2:e2:0a:09: 3d:a4:bb:92:a9:b6:38:44:cf:21:df:e3:f5:21:7e: be:d2:bf:a9:58:3e:7c:fd:5f:32:7e:4b:99:41:03: 6e:e6:39:16:de:77:2c:70:bf:ce:26:49:da:72:1e: 00:90:ff:0a:f6:42:d8:94:ca:05:53:d3:04:00:ba: c7:8e:19:74:e1:ba:13:5d:08:d3:b6:be:b6:bc:e7: 15:56:5f:b2:cd:9a:86:13:4b:58:4f:cf:d8:ac:7c: a8:19:2a:73:0a:ea:9c:46:35:b8:c7:a9:fa:39:6e: 15:01:44:0b:40:73:a8:29:1a:38:54:16:fb:91:f6: 9d:28:06:81:31:e6:fa:e7:83:17:77:0a:33:26:9d: b0:f7:32:66:47:6c:b0:b1:48:49:0e:50:3b:88:7f: d5:78:df:3c:30:d8:65:b7:83:65:30:f4:33:38:ec: 44:de:63:9d:6b:b5:1c:02:ec:f1:1e:6a:ef:30:04: 7a:56:dd:ef:53:5a:56:55:57:26:da:0e:fc:6e:a8: 69:ff:cf:6a:eb:c7:21:02:84:d5:3f:40:cd:3e:c7: cf:1e:8a:ce:f3:0c:db:34:ff:d2:74:0f:d6:48:e5: f2:6a:ff:7b:7f:16:0c:ee:e4:9d:68:fb:9d:d7:ed: 99:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:4E:94:1D:C3:31:C0:93:BF:9A:A8:16:55:4F:DF:B4:A7:81:DC:A4 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/8U6UHcMxwJO_mqgWVU_ftKeB3KQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.166.0/24 Signature Algorithm: sha256WithRSAEncryption db:e2:e8:ac:b5:dc:69:22:e4:7a:bb:ae:cc:c4:a2:34:43:43: bf:82:1c:79:ef:4b:de:5c:11:46:8f:1a:45:b7:59:5f:ef:bb: 6a:5d:02:85:a0:55:3e:51:00:bd:d7:c3:3b:0d:13:a1:90:40: 13:58:b5:c4:d6:00:e4:65:88:84:71:01:0a:66:3e:6f:da:fe: b3:55:f0:0f:69:ab:37:f7:f7:d3:c0:16:d3:e3:a4:ae:c7:13: ca:8a:23:f2:55:00:4c:54:8c:9e:64:11:4d:bf:7e:af:9e:4e: 29:27:64:68:d8:6e:70:e6:ec:63:fd:f7:72:98:8f:ad:55:49: 2c:e6:05:bd:22:3a:a7:a9:0b:ac:6f:a6:49:85:77:a0:73:39: 41:a7:ad:54:ca:c5:27:f9:f2:b4:83:f5:9f:f9:3a:55:34:25: c4:5a:06:81:48:47:97:8c:28:85:00:9b:9c:48:f0:c4:e4:30: 21:d9:b5:77:12:4d:dd:d1:43:a0:09:df:82:d7:f9:df:25:e7: 65:88:4a:e6:91:a4:71:75:e3:18:34:5d:29:95:80:38:ef:9f: cf:26:d3:65:5e:d5:0e:50:44:48:92:ef:a1:dd:8e:b7:a9:9b: 70:0a:b9:1b:ab:bb:e9:7a:c5:90:6a:5e:29:63:10:10:a3:04: 7e:cb:b6:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/grRQFOpHsPKFFmkyx+kMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTRlOTQxZGMzMzFjMDkzYmY5YWE4MTY1NTRmZGZiNGE3ODFkY2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zaLLsjoYYwQSvLiCgk9pLuSqbY4 RM8h3+P1IX6+0r+pWD58/V8yfkuZQQNu5jkW3ncscL/OJknach4AkP8K9kLYlMoF U9MEALrHjhl04boTXQjTtr62vOcVVl+yzZqGE0tYT8/YrHyoGSpzCuqcRjW4x6n6 OW4VAUQLQHOoKRo4VBb7kfadKAaBMeb654MXdwozJp2w9zJmR2ywsUhJDlA7iH/V eN88MNhlt4NlMPQzOOxE3mOda7UcAuzxHmrvMAR6Vt3vU1pWVVcm2g78bqhp/89q 68chAoTVP0DNPsfPHorO8wzbNP/SdA/WSOXyav97fxYM7uSdaPud1+2Z9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPFOlB3DMcCTv5qoFlVP37SngdykMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvOFU2VUhjTXh3Sk9fbXFnV1ZVX2Z0S2VCM0tRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjimMA0G CSqGSIb3DQEBCwUAA4IBAQDb4uistdxpIuR6u67MxKI0Q0O/ghx570veXBFGjxpF t1lf77tqXQKFoFU+UQC918M7DROhkEATWLXE1gDkZYiEcQEKZj5v2v6zVfAPaas3 9/fTwBbT46SuxxPKiiPyVQBMVIyeZBFNv36vnk4pJ2Ro2G5w5uxj/fdymI+tVUks 5gW9IjqnqQusb6ZJhXegczlBp61UysUn+fK0g/Wf+TpVNCXEWgaBSEeXjCiFAJuc SPDE5DAh2bV3Ek3d0UOgCd+C1/nfJedliErmkaRxdeMYNF0plYA475/PJtNlXtUO UERIku+h3Y63qZtwCrkbq7vpesWQal4pYxAQowR+y7bb -----END CERTIFICATE-----Generated at Tue Jan 20 15:19:42 2026 by rpki-client