This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/8e-ji3MlBHqESJv-dJqsRbQFhUM.roa File: 8e-ji3MlBHqESJv-dJqsRbQFhUM.roa (raw, json) Hash identifier: Inn2X3T8PqTFHbAYxQKCSrqq6qvNEdlfs2loA46Mbh4= Subject key identifier: F1:EF:A3:8B:73:25:04:7A:84:48:9B:FE:74:9A:AC:45:B4:05:85:43 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3971E89E51041FBF8F7A503440E26A Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/8e-ji3MlBHqESJv-dJqsRbQFhUM.roa Signing time: Fri 02 Jan 2026 10:20:52 +0000 ROA not before: Fri 02 Jan 2026 10:20:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215932 IP address blocks: 2a0c:b641:b50::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:71:e8:9e:51:04:1f:bf:8f:7a:50:34:40:e2:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1efa38b7325047a84489bfe749aac45b4058543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0b:96:3c:92:d4:fe:68:c8:22:9e:d1:e0:17: 67:53:fe:7e:96:0b:8f:bf:15:70:f5:ac:0e:d3:d1: f8:0d:6b:c3:94:9f:3d:c7:2e:ef:30:16:4e:21:c9: 57:bf:c5:6f:0c:e3:3c:01:3a:c1:bf:18:07:8e:29: 42:f4:fc:5a:94:87:6e:e5:1f:4b:35:18:f0:19:89: 1f:35:ea:72:69:02:d2:d2:ab:54:84:2a:e5:16:f2: 54:76:9f:62:ce:b7:c2:03:c3:14:44:ba:6e:db:e8: b4:d4:1c:6c:d3:02:a1:6f:92:70:9a:19:d3:c7:f6: 80:64:8e:e0:59:c6:dc:c9:03:1f:46:09:46:5a:a7: 17:fc:da:8e:d4:2e:e9:2a:6b:40:f0:78:2c:42:82: 23:3e:42:9b:5e:30:13:da:5f:4a:29:cc:56:ff:c4: 94:d2:81:d8:c8:0d:16:08:aa:f1:a1:ae:ce:5e:dc: e4:7a:a3:a8:2c:94:09:54:0d:b5:ca:67:26:93:1f: 4d:dc:66:90:7a:24:9d:aa:b4:1b:fd:97:99:7c:b4: 6b:01:06:94:0c:83:30:78:e3:27:34:c9:0b:45:92: 19:e2:de:e4:d3:63:dc:64:96:1a:5a:f1:06:f8:5e: 90:1d:e1:97:1e:c4:06:69:e3:91:1d:5d:80:81:f2: 5a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:EF:A3:8B:73:25:04:7A:84:48:9B:FE:74:9A:AC:45:B4:05:85:43 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/8e-ji3MlBHqESJv-dJqsRbQFhUM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:b50::/44 Signature Algorithm: sha256WithRSAEncryption 55:d2:4a:91:53:dd:17:14:9d:63:9a:9c:c1:7c:c8:50:9e:6b: 78:f7:94:c3:dc:9a:01:15:0b:c9:8e:0a:f4:5b:50:d5:1f:31: 96:a4:13:38:de:b8:01:8b:47:e3:11:f8:27:33:a5:7f:16:1b: f6:4d:ab:8e:03:43:70:26:e7:df:fd:6d:31:7f:d8:8b:d0:35: 21:95:7d:fd:8a:f0:c9:49:93:76:dd:ae:9c:93:f9:a3:8d:3f: 65:05:64:3d:9c:ed:23:6e:5d:de:e4:b4:25:a1:3f:41:99:dd: f5:36:79:f2:6d:2a:b2:16:dd:c7:af:3a:c8:75:9f:20:da:23: 6d:f1:9c:ed:22:9e:34:b1:5c:19:e7:91:81:7a:62:63:8c:9f: fb:03:e6:6f:22:8f:da:20:97:eb:3e:86:5c:47:12:55:4f:9f: c3:05:70:44:3f:7c:53:76:f1:93:7d:b7:5c:e3:9f:5c:5e:80: d6:4f:1a:38:45:e0:ec:3d:bf:ee:da:13:8f:89:16:05:fa:97: bd:05:62:c1:3c:70:50:d7:8e:4d:67:93:a0:b7:ff:f2:98:47: 63:4f:4c:de:02:21:a0:b7:89:57:60:59:8d:9f:cf:84:17:3f: 6b:60:91:78:b3:4e:ad:6b:02:ba:0f:43:fc:ff:4f:26:53:86: 1b:a0:45:8a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OXHonlEEH7+PelA0QOJqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWVmYTM4YjczMjUwNDdhODQ0ODliZmU3NDlhYWM0NWI0MDU4NTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AuWPJLU/mjIIp7R4BdnU/5+lguP vxVw9awO09H4DWvDlJ89xy7vMBZOIclXv8VvDOM8ATrBvxgHjilC9PxalIdu5R9L NRjwGYkfNepyaQLS0qtUhCrlFvJUdp9izrfCA8MURLpu2+i01Bxs0wKhb5JwmhnT x/aAZI7gWcbcyQMfRglGWqcX/NqO1C7pKmtA8HgsQoIjPkKbXjAT2l9KKcxW/8SU 0oHYyA0WCKrxoa7OXtzkeqOoLJQJVA21ymcmkx9N3GaQeiSdqrQb/ZeZfLRrAQaU DIMweOMnNMkLRZIZ4t7k02PcZJYaWvEG+F6QHeGXHsQGaeORHV2AgfJaRwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPHvo4tzJQR6hEib/nSarEW0BYVDMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvOGUtamkzTWxCSHFFU0p2LWRKcXNSYlFGaFVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQtQ MA0GCSqGSIb3DQEBCwUAA4IBAQBV0kqRU90XFJ1jmpzBfMhQnmt495TD3JoBFQvJ jgr0W1DVHzGWpBM43rgBi0fjEfgnM6V/Fhv2TauOA0NwJuff/W0xf9iL0DUhlX39 ivDJSZN23a6ck/mjjT9lBWQ9nO0jbl3e5LQloT9Bmd31NnnybSqyFt3HrzrIdZ8g 2iNt8ZztIp40sVwZ55GBemJjjJ/7A+ZvIo/aIJfrPoZcRxJVT5/DBXBEP3xTdvGT fbdc459cXoDWTxo4ReDsPb/u2hOPiRYF+pe9BWLBPHBQ145NZ5Ogt//ymEdjT0ze AiGgt4lXYFmNn8+EFz9rYJF4s06tawK6D0P8/08mU4YboEWK -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:59 2026 by rpki-client