This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/w8URK5vKjljx92x_yDk3GY2lRdg.roa File: w8URK5vKjljx92x_yDk3GY2lRdg.roa (raw, json) Hash identifier: s0ZUUzcSEkjObMtc81gbAZdNnpXZWeZUC8YnkDOMQFk= Subject key identifier: C3:C5:11:2B:9B:CA:8E:58:F1:F7:6C:7F:C8:39:37:19:8D:A5:45:D8 Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C12F7A002D4BBCAA806D3D5D8C58C46 Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/w8URK5vKjljx92x_yDk3GY2lRdg.roa Signing time: Fri 02 Jan 2026 00:19:36 +0000 ROA not before: Fri 02 Jan 2026 00:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48038 IP address blocks: 212.243.39.0/24 maxlen: 24 2001:918:ff3e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:f7:a0:02:d4:bb:ca:a8:06:d3:d5:d8:c5:8c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3c5112b9bca8e58f1f76c7fc83937198da545d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:22:d3:79:9e:99:27:28:61:7f:12:15:3a:48: 65:23:85:37:4c:5b:97:49:a2:0c:bb:ee:52:39:17: 8e:64:2a:10:14:99:e9:16:fe:07:1b:3d:88:c4:11: c6:3e:28:3b:ef:9f:f1:74:10:a3:9d:b7:85:3b:0f: 05:33:18:10:aa:45:26:f5:51:40:38:44:1d:85:d3: 83:48:10:05:5d:9b:2d:1b:ca:05:f9:21:c6:57:06: 82:cc:33:75:b1:cc:2b:e0:18:61:03:28:91:27:a3: ff:ea:33:86:3f:15:b0:27:4a:20:3f:95:06:8d:28: 46:54:8f:6f:7a:d7:ed:84:88:58:66:77:1d:df:b3: 64:20:f0:4b:e1:02:08:00:2c:b2:f3:c9:64:14:cc: 72:7e:b4:13:34:01:c2:69:e8:18:f0:8c:66:da:94: 72:ef:ec:d1:f6:12:aa:c7:a4:07:b6:93:e4:49:f2: c6:0b:c9:8f:b8:cb:5d:52:bd:27:e7:6c:a6:46:64: d5:a8:53:20:82:2c:5d:8f:e9:62:3a:2c:ba:87:49: e3:16:eb:4a:dc:79:46:4d:64:85:cc:1b:b6:45:8e: 04:9a:5b:ff:44:98:67:a5:52:1a:9e:64:89:5d:fb: 1e:39:40:71:5c:9e:0b:1c:03:a3:f5:da:b7:26:7c: 08:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C5:11:2B:9B:CA:8E:58:F1:F7:6C:7F:C8:39:37:19:8D:A5:45:D8 X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/w8URK5vKjljx92x_yDk3GY2lRdg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.243.39.0/24 IPv6: 2001:918:ff3e::/48 Signature Algorithm: sha256WithRSAEncryption 3b:ff:e5:a6:ac:a1:b6:ee:2b:bf:76:2c:a8:69:d0:79:a7:0e: 03:1b:41:9e:96:45:5d:d4:26:6b:38:52:96:3f:ab:b6:57:1c: 40:55:9d:92:18:15:16:0d:0e:65:7c:e3:94:d0:1a:6f:4a:34: 78:a7:c4:ff:f2:01:b5:a0:14:2e:15:7b:8e:9b:a4:54:20:63: 9d:97:18:98:36:0b:44:61:53:63:b9:3a:ea:95:2e:6e:8c:b8: 8e:5b:33:7b:b6:b9:84:bd:39:07:54:65:6b:5f:2a:95:b9:c8: 0b:19:a6:0d:13:6d:a6:db:80:33:b2:9c:92:07:ad:23:93:d8: 83:cc:f2:31:91:b5:df:1f:80:63:b5:77:fa:1f:fb:7c:1d:03: f9:b5:2f:f2:f6:12:40:cd:9d:ca:7d:09:72:9f:f1:0b:b9:f4: e3:88:94:76:96:e5:a2:14:94:46:75:68:fb:3f:a1:b5:2f:28: 56:3e:26:e4:12:03:d3:d3:e2:53:a7:de:54:7a:c3:49:d4:66: 5b:d0:fb:0c:20:2f:40:44:c4:20:53:fc:c5:cf:dd:1b:c9:08: 2d:7f:1d:f4:cf:ad:6f:67:cb:d0:a9:f7:bb:e5:46:03:bf:25: af:22:ef:04:88:a4:83:4c:7b:2c:95:a3:cd:78:e5:d6:bc:21: a3:07:d4:5c -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8EvegAtS7yqgG09XYxYxGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2M1MTEyYjliY2E4ZTU4ZjFmNzZjN2ZjODM5MzcxOThkYTU0NWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyLTeZ6ZJyhhfxIVOkhlI4U3TFuX SaIMu+5SOReOZCoQFJnpFv4HGz2IxBHGPig775/xdBCjnbeFOw8FMxgQqkUm9VFA OEQdhdODSBAFXZstG8oF+SHGVwaCzDN1scwr4BhhAyiRJ6P/6jOGPxWwJ0ogP5UG jShGVI9vetfthIhYZncd37NkIPBL4QIIACyy88lkFMxyfrQTNAHCaegY8Ixm2pRy 7+zR9hKqx6QHtpPkSfLGC8mPuMtdUr0n52ymRmTVqFMggixdj+liOiy6h0njFutK 3HlGTWSFzBu2RY4Emlv/RJhnpVIanmSJXfseOUBxXJ4LHAOj9dq3JnwINQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMPFESubyo5Y8fdsf8g5NxmNpUXYMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvdzhVUks1dktqbGp4OTJ4X3lEazNHWTJsUmRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA1PMnMA8E AgACMAkDBwAgAQkY/z4wDQYJKoZIhvcNAQELBQADggEBADv/5aasobbuK792LKhp 0HmnDgMbQZ6WRV3UJms4UpY/q7ZXHEBVnZIYFRYNDmV845TQGm9KNHinxP/yAbWg FC4Ve46bpFQgY52XGJg2C0RhU2O5OuqVLm6MuI5bM3u2uYS9OQdUZWtfKpW5yAsZ pg0TbabbgDOynJIHrSOT2IPM8jGRtd8fgGO1d/of+3wdA/m1L/L2EkDNncp9CXKf 8Qu59OOIlHaW5aIUlEZ1aPs/obUvKFY+JuQSA9PT4lOn3lR6w0nUZlvQ+wwgL0BE xCBT/MXP3RvJCC1/HfTPrW9ny9Cp97vlRgO/Ja8i7wSIpINMeyyVo8145da8IaMH 1Fw= -----END CERTIFICATE-----Generated at Mon Jan 26 17:46:25 2026 by rpki-client