This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/8xyDaKXsDnV4pvSfD6Zi67leEh0.roa File: 8xyDaKXsDnV4pvSfD6Zi67leEh0.roa (raw, json) Hash identifier: 1qsVMvOFnBXVT6ErwFRrHBk8i2fu6F56aLWn7B6Thbo= Subject key identifier: F3:1C:83:68:A5:EC:0E:75:78:A6:F4:9F:0F:A6:62:EB:B9:5E:12:1D Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f Certificate serial: 019B7C12B584865701BA1276AC756472B69B Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/8xyDaKXsDnV4pvSfD6Zi67leEh0.roa Signing time: Fri 02 Jan 2026 00:19:19 +0000 ROA not before: Fri 02 Jan 2026 00:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200160 IP address blocks: 2a0a:280:1100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:b5:84:86:57:01:ba:12:76:ac:75:64:72:b6:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f Validity Not Before: Jan 2 00:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f31c8368a5ec0e7578a6f49f0fa662ebb95e121d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ef:94:8a:73:13:9b:10:4b:96:39:81:26:f6: a6:5e:b4:46:d8:e0:a5:88:99:d5:e2:2d:da:f7:72: c4:e2:4a:da:30:76:23:c4:41:f6:20:60:39:be:04: 18:fb:7e:ad:be:1f:12:b7:87:ad:44:b9:9f:14:6f: e8:4c:26:51:5c:c2:e8:78:ef:2f:a8:e8:ce:1b:36: bb:54:09:88:63:dc:8e:8b:b4:ec:ae:90:30:84:5b: b6:ec:46:4c:e5:76:ff:25:b3:f5:fe:97:66:36:4f: 08:b5:4c:f6:9b:cd:08:08:4e:02:d9:3b:66:51:e2: 7b:52:13:37:4d:0d:12:86:40:72:fb:d1:03:ab:36: c9:f2:74:a0:7e:ac:f9:ba:ce:4b:79:38:2d:9c:65: a2:07:45:0c:94:e1:60:86:23:25:e8:d1:2c:a2:37: 1f:b7:90:fc:0e:88:b6:3b:d2:b4:96:96:91:fc:31: 5f:9d:17:0d:5e:dc:a4:e9:e9:1c:8d:44:98:f4:90: 10:42:6c:7b:b6:ca:65:60:1c:87:c6:5d:ae:0e:7e: 5e:6a:06:bd:e1:7f:bf:f2:fc:2c:06:97:67:5b:d2: 2f:71:8b:a4:6f:b5:45:df:2f:65:2c:6d:97:3e:db: 8c:c5:09:4c:14:b1:6d:75:a4:9a:6a:f4:3b:0f:e7: 37:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1C:83:68:A5:EC:0E:75:78:A6:F4:9F:0F:A6:62:EB:B9:5E:12:1D X509v3 Authority Key Identifier: keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/8xyDaKXsDnV4pvSfD6Zi67leEh0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:280:1100::/40 Signature Algorithm: sha256WithRSAEncryption 26:0d:39:37:65:bf:11:e7:32:11:4d:7a:e2:bc:1f:6e:97:d4: 6d:8c:03:15:af:58:cd:1b:28:d3:57:20:bd:7e:a1:d9:87:93: 27:5b:e1:7a:05:d1:f0:c9:eb:c2:35:e4:ed:43:b9:d6:cb:d2: 91:8e:50:da:04:82:4e:66:75:bf:46:80:07:f8:6e:26:7b:72: 25:cb:4f:17:e7:91:9e:2d:34:6e:8e:3e:61:bd:c2:5b:d7:be: 04:6a:dd:a8:64:56:ee:3e:3f:2c:bf:9d:b3:e3:59:f2:e8:61: e2:90:f8:86:38:48:dd:b3:cf:3b:84:22:13:27:7b:87:e6:b7: b2:f2:b8:32:ab:b9:21:3b:46:8f:c0:4c:95:6e:cc:51:ce:5d: b4:44:d8:e8:4b:d1:58:eb:85:ae:03:45:31:9a:81:70:f1:69: 42:2a:77:84:b0:c7:a3:86:e9:3b:8e:86:a5:9f:52:0b:2d:5b: 76:6f:ca:36:95:fb:e2:1a:c7:18:71:88:47:42:2c:86:67:26: a2:fe:51:44:4b:66:a1:cb:71:05:de:4a:11:a9:b1:ca:3c:95: 91:c0:60:f2:21:c7:ff:0c:ef:10:cb:11:d5:17:64:52:34:64: 2d:05:4f:ba:7e:80:6a:08:a2:48:a4:2c:4a:2f:10:0e:7e:ed: 9d:df:9c:0d -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt8ErWEhlcBuhJ2rHVkcrabMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiOWYyMWJhMDRlNWUzMDc3YjM5MWUzZDQ4ZmY1YjBhNTBi MzM2OWYwHhcNMjYwMTAyMDAxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzFjODM2OGE1ZWMwZTc1NzhhNmY0OWYwZmE2NjJlYmI5NWUxMjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu+UinMTmxBLljmBJvamXrRG2OCl iJnV4i3a93LE4kraMHYjxEH2IGA5vgQY+36tvh8St4etRLmfFG/oTCZRXMLoeO8v qOjOGza7VAmIY9yOi7TsrpAwhFu27EZM5Xb/JbP1/pdmNk8ItUz2m80ICE4C2Ttm UeJ7UhM3TQ0ShkBy+9EDqzbJ8nSgfqz5us5LeTgtnGWiB0UMlOFghiMl6NEsojcf t5D8Doi2O9K0lpaR/DFfnRcNXtyk6ekcjUSY9JAQQmx7tsplYByHxl2uDn5eaga9 4X+/8vwsBpdnW9IvcYukb7VF3y9lLG2XPtuMxQlMFLFtdaSaavQ7D+c3lQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFPMcg2il7A51eKb0nw+mYuu5XhIdMB8GA1UdIwQY MBaAFBufIboE5eMHezkePUj/WwpQszafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUt ZjUxYzVmYjNkZjlhLzEvOHh5RGFLWHNEblY0cHZTZkQ2Wmk2N2xlRWgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUtZjUxYzVmYjNkZjlh LzEvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgoCgBEw DQYJKoZIhvcNAQELBQADggEBACYNOTdlvxHnMhFNeuK8H26X1G2MAxWvWM0bKNNX IL1+odmHkydb4XoF0fDJ68I15O1DudbL0pGOUNoEgk5mdb9GgAf4biZ7ciXLTxfn kZ4tNG6OPmG9wlvXvgRq3ahkVu4+Pyy/nbPjWfLoYeKQ+IY4SN2zzzuEIhMne4fm t7LyuDKruSE7Ro/ATJVuzFHOXbRE2OhL0Vjrha4DRTGagXDxaUIqd4Swx6OG6TuO hqWfUgstW3ZvyjaV++IaxxhxiEdCLIZnJqL+UURLZqHLcQXeShGpsco8lZHAYPIh x/8M7xDLEdUXZFI0ZC0FT7p+gGoIokikLEovEA5+7Z3fnA0= -----END CERTIFICATE-----Generated at Wed Jan 21 17:33:57 2026 by rpki-client