This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/8c8fo4MttyJv5SLRbDdRYu1xnic.roa File: 8c8fo4MttyJv5SLRbDdRYu1xnic.roa (raw, json) Hash identifier: 1vjbMqaT77+AxTSiKxSoxcqnrNY36Cpct9YPE7m/ttQ= Subject key identifier: F1:CF:1F:A3:83:2D:B7:22:6F:E5:22:D1:6C:37:51:62:ED:71:9E:27 Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Certificate serial: 019B7EA565F8448B5C3B4DCB8F656A029F83 Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/8c8fo4MttyJv5SLRbDdRYu1xnic.roa Signing time: Fri 02 Jan 2026 12:18:47 +0000 ROA not before: Fri 02 Jan 2026 12:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216117 IP address blocks: 2a10:4646:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:65:f8:44:8b:5c:3b:4d:cb:8f:65:6a:02:9f:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Validity Not Before: Jan 2 12:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1cf1fa3832db7226fe522d16c375162ed719e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:06:8b:56:b9:28:61:bd:cf:0c:2b:3a:d6:ea: 42:80:b3:b9:1b:cb:f9:9f:31:6c:78:c9:c0:6a:78: 8f:06:b2:7c:3f:52:7d:14:bc:86:11:5e:f6:77:5b: 1c:3c:14:28:13:bd:13:e2:d1:a4:59:ad:b8:ab:4a: a5:12:8d:aa:93:92:25:68:17:e8:34:03:d0:33:23: 01:47:82:1b:92:e9:22:f9:7c:e1:a6:ae:5f:8e:1c: ab:49:53:56:03:08:48:bf:7a:af:46:1f:b5:08:cf: 1e:86:e3:3c:99:8a:23:b5:df:a0:7b:4b:68:24:c6: d6:0e:2e:e0:0c:04:92:5f:03:03:d4:d9:63:cf:ad: 6b:4a:5c:34:ea:e0:ba:5b:1c:ef:c2:e3:a7:dc:98: 3e:a6:b7:66:64:09:d1:2d:17:c8:0f:55:e1:ad:53: ea:c4:e9:56:65:db:a2:a4:82:82:b9:8e:3a:9c:2d: c5:32:b7:34:e0:de:20:f4:9b:d4:ad:53:a7:4a:f2: 2c:0d:6c:b5:bd:63:73:06:52:fb:9d:7f:aa:51:a2: 0c:67:e3:6f:89:27:9f:d4:4c:3a:01:b5:37:6d:2d: f5:02:73:ba:a0:ad:a3:f6:f8:13:a5:0f:f0:74:a8: 08:f5:19:89:05:f0:6b:d1:6c:da:f1:fa:a3:a0:d8: 8d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:CF:1F:A3:83:2D:B7:22:6F:E5:22:D1:6C:37:51:62:ED:71:9E:27 X509v3 Authority Key Identifier: keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/8c8fo4MttyJv5SLRbDdRYu1xnic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:4646:122::/48 Signature Algorithm: sha256WithRSAEncryption 63:c6:97:84:df:9c:de:6f:d1:c3:62:3a:e2:d3:b9:9f:1e:06: 02:41:ba:b0:b1:7f:6e:ed:70:a1:85:ef:bb:38:e9:12:e2:f5: d1:11:84:15:b1:6a:1b:09:12:30:18:52:1b:ec:ca:35:98:67: d8:2f:ae:31:1e:bc:c6:5f:31:af:ec:82:5f:ed:6e:19:d2:6c: 59:49:9e:6b:09:2d:1d:79:3a:ea:24:25:c2:2e:c9:6e:d8:00: 8e:c0:f9:2e:6c:e5:77:d0:19:4e:2b:31:af:87:74:e1:3c:4e: 0e:87:c1:8a:1a:fa:f5:d2:ad:9e:da:b3:60:1d:ca:49:2f:17: 05:22:bd:8d:2c:75:a1:ae:19:bd:25:69:69:cd:8b:e5:ee:c1: ed:8d:d8:67:0b:37:3a:b0:8a:88:37:0c:38:fa:29:47:ae:a0: ed:30:60:36:7c:0e:41:4a:79:de:13:99:9c:cf:bc:71:a8:38: 62:4a:d3:de:95:f9:00:04:eb:bf:83:46:c6:fd:26:0b:22:c2: 04:e7:13:0c:0a:14:56:95:2c:e8:a4:9b:cc:64:d3:be:fa:6d: d7:09:68:f2:ea:6f:c3:fb:fb:5c:35:66:b7:33:65:c4:85:93: be:84:cc:3e:fc:47:81:ff:f9:33:e0:5e:46:fb:bd:1c:72:37: 63:53:48:18 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pWX4RItcO03Lj2VqAp+DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2 N2RmMDIwHhcNMjYwMTAyMTIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWNmMWZhMzgzMmRiNzIyNmZlNTIyZDE2YzM3NTE2MmVkNzE5ZTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AaLVrkoYb3PDCs61upCgLO5G8v5 nzFseMnAaniPBrJ8P1J9FLyGEV72d1scPBQoE70T4tGkWa24q0qlEo2qk5IlaBfo NAPQMyMBR4Ibkuki+Xzhpq5fjhyrSVNWAwhIv3qvRh+1CM8ehuM8mYojtd+ge0to JMbWDi7gDASSXwMD1Nljz61rSlw06uC6WxzvwuOn3Jg+prdmZAnRLRfID1XhrVPq xOlWZduipIKCuY46nC3FMrc04N4g9JvUrVOnSvIsDWy1vWNzBlL7nX+qUaIMZ+Nv iSef1Ew6AbU3bS31AnO6oK2j9vgTpQ/wdKgI9RmJBfBr0Wza8fqjoNiNLwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPHPH6ODLbcib+Ui0Ww3UWLtcZ4nMB8GA1UdIwQY MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt YWU5MjgzZTc5NjRlLzEvOGM4Zm80TXR0eUp2NVNMUmJEZFJZdTF4bmljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhBGRgEi MA0GCSqGSIb3DQEBCwUAA4IBAQBjxpeE35zeb9HDYjri07mfHgYCQbqwsX9u7XCh he+7OOkS4vXREYQVsWobCRIwGFIb7Mo1mGfYL64xHrzGXzGv7IJf7W4Z0mxZSZ5r CS0deTrqJCXCLslu2ACOwPkubOV30BlOKzGvh3ThPE4Oh8GKGvr10q2e2rNgHcpJ LxcFIr2NLHWhrhm9JWlpzYvl7sHtjdhnCzc6sIqINww4+ilHrqDtMGA2fA5BSnne E5mcz7xxqDhiStPelfkABOu/g0bG/SYLIsIE5xMMChRWlSzopJvMZNO++m3XCWjy 6m/D+/tcNWa3M2XEhZO+hMw+/EeB//kz4F5G+70ccjdjU0gY -----END CERTIFICATE-----Generated at Fri Jan 30 22:55:38 2026 by rpki-client