This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/1-8KgAPre3SF7bRKA3fLmqxwchcI.roa File: 1-8KgAPre3SF7bRKA3fLmqxwchcI.roa (raw, json) Hash identifier: u0Xe2ZYaUqmKlNfA25Uh4YAKw25zRG/IeNSgOriRYIQ= Subject key identifier: FB:C2:A0:00:FA:DE:DD:21:7B:6D:12:80:DD:F2:E6:AB:1C:1C:85:C2 Certificate issuer: /CN=b162156f59cfc79396e64f3342de64de3f88ee18 Certificate serial: 019B7BA3B7AA2B07422AC0B7CC4F9086F67D Authority key identifier: B1:62:15:6F:59:CF:C7:93:96:E6:4F:33:42:DE:64:DE:3F:88:EE:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/1-8KgAPre3SF7bRKA3fLmqxwchcI.roa Signing time: Thu 01 Jan 2026 22:18:05 +0000 ROA not before: Thu 01 Jan 2026 22:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215948 IP address blocks: 2001:67c:5ac::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.mft rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:b7:aa:2b:07:42:2a:c0:b7:cc:4f:90:86:f6:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b162156f59cfc79396e64f3342de64de3f88ee18 Validity Not Before: Jan 1 22:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbc2a000fadedd217b6d1280ddf2e6ab1c1c85c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7a:72:ff:db:86:c6:0a:fe:00:c3:9e:6b:2a: d9:15:c2:3c:02:cc:18:7a:c0:7f:3e:44:02:b2:e8: ff:78:11:e7:61:d6:6c:74:b9:d3:13:69:1b:52:ff: 5e:fa:6a:1c:44:6b:b5:29:ec:c9:7f:da:41:48:48: 6b:80:5b:8e:83:af:a0:80:20:0b:95:bc:fe:0b:e8: c0:73:b4:04:2a:ec:d7:f6:44:00:83:ff:50:c9:e8: 43:ad:6f:e8:ff:76:fe:ca:1c:4f:30:e1:b1:93:cc: 3f:3c:9c:7d:67:ac:af:ab:e1:be:c1:71:d2:3c:01: e6:b7:da:42:ac:02:f2:3a:38:20:a7:40:d3:7a:8f: 8d:46:e2:af:cd:75:9c:77:40:fd:23:e7:72:59:de: e2:53:be:1d:5b:90:05:f0:4f:ea:bb:f7:4e:91:08: 78:02:f4:e3:8c:90:fe:d0:b6:7c:ed:c3:df:5e:aa: 01:4f:9c:d2:e2:61:92:3b:21:7c:20:40:7c:95:d6: 9b:1a:da:42:df:02:16:4e:37:1e:01:19:4e:ac:ab: 83:e1:dc:2d:e8:25:90:64:d2:1b:8a:b6:cc:84:c9: 04:a6:8a:39:16:31:e8:d1:d9:55:26:fc:5d:f3:e7: 61:36:4b:ba:39:62:48:39:1a:cf:31:2b:bd:2b:06: 77:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C2:A0:00:FA:DE:DD:21:7B:6D:12:80:DD:F2:E6:AB:1C:1C:85:C2 X509v3 Authority Key Identifier: keyid:B1:62:15:6F:59:CF:C7:93:96:E6:4F:33:42:DE:64:DE:3F:88:EE:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWIVb1nPx5OW5k8zQt5k3j-I7hg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/1-8KgAPre3SF7bRKA3fLmqxwchcI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9657a5-8ce2-405e-ac8c-dd2accacfccc/1/sWIVb1nPx5OW5k8zQt5k3j-I7hg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:5ac::/48 Signature Algorithm: sha256WithRSAEncryption a6:50:bc:d6:f0:08:c8:5c:f7:d3:83:d2:b7:06:ef:03:7a:34: e2:72:4b:0e:82:61:12:ab:ab:f7:67:04:44:5c:3e:83:c8:0d: 49:b1:1f:e6:54:3f:6f:65:e1:dc:73:ee:f2:cc:d1:c7:46:3a: 43:9a:e2:11:3f:20:48:d7:a3:86:44:4f:47:d6:7e:23:20:00: b5:e8:0d:7b:85:38:e6:ca:5d:20:23:cf:9e:22:a5:e5:0b:df: 2f:ed:a3:fe:bf:72:a7:e3:79:4a:f5:28:d5:90:eb:34:7d:0d: 1b:98:b1:07:cd:d6:90:6f:40:9e:07:d4:a4:9a:22:9f:c5:d0: c8:f5:2b:7a:32:90:a0:e9:6f:32:e2:86:90:43:9d:78:b7:31: bc:73:1c:37:5d:7c:f0:6a:42:82:df:70:af:0f:74:2e:21:61: 31:b5:ca:c3:f1:d9:2c:b7:7f:27:59:69:8c:90:0b:b8:fb:30: 0f:6a:70:10:27:c2:8b:d7:e9:a8:c6:44:28:fb:c2:10:a0:36: f5:59:99:a3:67:b8:26:56:4d:ba:53:ae:05:11:bf:13:f2:f9: b7:9f:04:c2:a0:41:28:94:76:ee:19:09:5f:77:06:60:06:07: 1e:ed:bf:35:e0:69:a1:00:1d:12:66:65:de:04:0e:83:c0:af: c7:df:c6:f4 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt7o7eqKwdCKsC3zE+QhvZ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNjIxNTZmNTljZmM3OTM5NmU2NGYzMzQyZGU2NGRlM2Y4 OGVlMTgwHhcNMjYwMTAxMjIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmMyYTAwMGZhZGVkZDIxN2I2ZDEyODBkZGYyZTZhYjFjMWM4NWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnpy/9uGxgr+AMOeayrZFcI8AswY esB/PkQCsuj/eBHnYdZsdLnTE2kbUv9e+mocRGu1KezJf9pBSEhrgFuOg6+ggCAL lbz+C+jAc7QEKuzX9kQAg/9QyehDrW/o/3b+yhxPMOGxk8w/PJx9Z6yvq+G+wXHS PAHmt9pCrALyOjggp0DTeo+NRuKvzXWcd0D9I+dyWd7iU74dW5AF8E/qu/dOkQh4 AvTjjJD+0LZ87cPfXqoBT5zS4mGSOyF8IEB8ldabGtpC3wIWTjceARlOrKuD4dwt 6CWQZNIbirbMhMkEpoo5FjHo0dlVJvxd8+dhNku6OWJIORrPMSu9KwZ3UwIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFPvCoAD63t0he20SgN3y5qscHIXCMB8GA1UdIwQY MBaAFLFiFW9Zz8eTluZPM0LeZN4/iO4YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1dJVmIxblB4NU9XNWs4elF0NWszai1JN2hnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85NjU3YTUtOGNlMi00MDVlLWFjOGMt ZGQyYWNjYWNmY2NjLzEvMS04S2dBUHJlM1NGN2JSS0EzZkxtcXh3Y2hjSS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMjcvOTY1N2E1LThjZTItNDA1ZS1hYzhjLWRkMmFjY2FjZmNj Yy8xL3NXSVZiMW5QeDVPVzVrOHpRdDVrM2otSTdoZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwF rDANBgkqhkiG9w0BAQsFAAOCAQEAplC81vAIyFz304PStwbvA3o04nJLDoJhEqur 92cERFw+g8gNSbEf5lQ/b2Xh3HPu8szRx0Y6Q5riET8gSNejhkRPR9Z+IyAAtegN e4U45spdICPPniKl5QvfL+2j/r9yp+N5SvUo1ZDrNH0NG5ixB83WkG9AngfUpJoi n8XQyPUrejKQoOlvMuKGkEOdeLcxvHMcN1188GpCgt9wrw90LiFhMbXKw/HZLLd/ J1lpjJALuPswD2pwECfCi9fpqMZEKPvCEKA29VmZo2e4JlZNulOuBRG/E/L5t58E wqBBKJR27hkJX3cGYAYHHu2/NeBpoQAdEmZl3gQOg8Cvx9/G9A== -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:20 2026 by rpki-client