This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/8jBZKYDCjSbF-WrXcz7gEysvloo.roa File: 8jBZKYDCjSbF-WrXcz7gEysvloo.roa (raw, json) Hash identifier: 05cI+ga3HmWpkoObbe9VDWs4oq6Oxq+x/ckDyrinwB8= Subject key identifier: F2:30:59:29:80:C2:8D:26:C5:F9:6A:D7:73:3E:E0:13:2B:2F:96:8A Certificate issuer: /CN=66ed3ba68c78bff2c4724400ade6348482fb4364 Certificate serial: 019B7E381F485B43491217C182C2F6337F3C Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/8jBZKYDCjSbF-WrXcz7gEysvloo.roa Signing time: Fri 02 Jan 2026 10:19:25 +0000 ROA not before: Fri 02 Jan 2026 10:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215827 IP address blocks: 2a14:3f80:30::/45 maxlen: 45 2a14:3f82:2000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:1f:48:5b:43:49:12:17:c1:82:c2:f6:33:7f:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364 Validity Not Before: Jan 2 10:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f230592980c28d26c5f96ad7733ee0132b2f968a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:80:e6:2d:ce:b6:2a:32:06:01:d2:00:f2:6f: f5:84:f0:dc:93:2c:e7:dd:a6:66:d6:e1:25:a3:62: 43:ba:57:8f:44:88:1a:ef:64:f6:62:7d:e1:a4:70: ba:13:0a:b5:08:4a:4f:22:51:22:61:8a:8b:33:dc: 2c:d0:6a:5b:18:55:26:0d:f1:7c:4d:36:80:e7:7c: 78:53:86:ad:eb:63:9d:15:02:a6:d1:8a:25:65:33: 7a:4c:d9:31:9d:b3:bd:34:5e:2d:00:ab:17:33:50: a5:b3:a1:94:2d:9a:ec:ee:7b:95:d8:18:6c:49:5e: ad:59:88:e4:83:41:b1:76:79:a9:1f:12:6b:a8:27: 11:73:82:61:a2:44:3a:7a:3c:7a:7a:a7:ee:af:47: 99:b9:a8:27:fd:ac:1c:01:9d:4d:fc:41:76:80:84: 77:db:2f:bc:3d:e9:93:fb:95:d3:44:d5:ee:63:3d: ed:a5:30:84:d3:d8:ff:69:1e:53:de:f5:02:70:7c: 26:44:9b:c9:67:18:fa:b5:1d:e2:54:36:a2:aa:5a: 8e:17:e1:cf:b9:4c:6e:18:75:62:88:14:4c:02:9a: 68:e0:3d:55:ee:f0:67:3b:ac:77:7e:41:fd:31:28: 80:68:e0:ae:0a:fc:fc:c2:5d:cc:d2:7b:20:5d:03: d6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:30:59:29:80:C2:8D:26:C5:F9:6A:D7:73:3E:E0:13:2B:2F:96:8A X509v3 Authority Key Identifier: keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/8jBZKYDCjSbF-WrXcz7gEysvloo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:3f80:30::/45 2a14:3f82:2000::/38 Signature Algorithm: sha256WithRSAEncryption 94:5c:be:a6:a8:b9:55:c0:33:06:82:21:5e:20:54:05:5a:25: 8c:f1:33:d9:7d:7a:50:c4:6d:b9:3e:c2:e7:7d:a9:6e:b6:2c: dd:bd:6d:d3:56:06:2c:9c:bb:0b:89:b7:52:d8:8e:88:e7:e7: 95:0a:3b:17:1c:16:3e:44:3d:2e:7c:4d:88:e4:0c:44:73:37: 6e:24:9f:28:63:85:d3:5d:5a:7f:fe:b8:ec:e8:f4:1b:ec:60: 95:02:cb:97:cb:29:ac:80:0c:9d:29:28:16:9f:fd:29:1b:a9: f8:3d:ac:db:4b:59:86:1d:a7:53:91:cc:df:8a:4d:30:c6:c9: dd:9c:0c:ab:72:85:6a:75:88:3c:dc:e2:1c:8d:84:af:c7:68: 82:b3:08:b7:ca:05:bb:5a:ee:2f:b2:8e:0f:55:01:90:ca:f2: 49:a6:6e:a2:88:51:76:b8:9c:18:77:c2:ac:6d:e0:e0:1f:0f: 87:cb:a1:da:6a:f2:e6:30:de:df:85:41:e1:3c:1c:53:fa:4a: 9c:c1:d8:22:f9:a8:65:2a:8e:55:fe:a3:ac:87:7a:16:19:c6: 55:4c:05:f6:2f:06:27:58:dc:de:c8:ba:1a:3b:c4:c0:c3:b5: 4a:de:f5:40:6d:ae:eb:55:17:b1:00:26:92:ab:d1:1b:d3:0a: b0:0d:7c:a9 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt+OB9IW0NJEhfBgsL2M388MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZWQzYmE2OGM3OGJmZjJjNDcyNDQwMGFkZTYzNDg0ODJm YjQzNjQwHhcNMjYwMTAyMTAxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjMwNTkyOTgwYzI4ZDI2YzVmOTZhZDc3MzNlZTAxMzJiMmY5NjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4DmLc62KjIGAdIA8m/1hPDckyzn 3aZm1uElo2JDulePRIga72T2Yn3hpHC6Ewq1CEpPIlEiYYqLM9ws0GpbGFUmDfF8 TTaA53x4U4at62OdFQKm0YolZTN6TNkxnbO9NF4tAKsXM1Cls6GULZrs7nuV2Bhs SV6tWYjkg0GxdnmpHxJrqCcRc4JhokQ6ejx6eqfur0eZuagn/awcAZ1N/EF2gIR3 2y+8PemT+5XTRNXuYz3tpTCE09j/aR5T3vUCcHwmRJvJZxj6tR3iVDaiqlqOF+HP uUxuGHViiBRMAppo4D1V7vBnO6x3fkH9MSiAaOCuCvz8wl3M0nsgXQPWrQIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFPIwWSmAwo0mxflq13M+4BMrL5aKMB8GA1UdIwQY MBaAFGbtO6aMeL/yxHJEAK3mNISC+0NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnUwN3BveDR2X0xFY2tRQXJlWTBoSUw3UTJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iNzlhNjgtNWIwMi00MDk3LWEyZTMt MGE0M2I3YTNlYjU0LzEvOGpCWktZRENqU2JGLVdyWGN6N2dFeXN2bG9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9iNzlhNjgtNWIwMi00MDk3LWEyZTMtMGE0M2I3YTNlYjU0 LzEvWnUwN3BveDR2X0xFY2tRQXJlWTBoSUw3UTJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcDKhQ/gAAw AwYCKhQ/giAwDQYJKoZIhvcNAQELBQADggEBAJRcvqaouVXAMwaCIV4gVAVaJYzx M9l9elDEbbk+wud9qW62LN29bdNWBiycuwuJt1LYjojn55UKOxccFj5EPS58TYjk DERzN24knyhjhdNdWn/+uOzo9BvsYJUCy5fLKayADJ0pKBaf/Skbqfg9rNtLWYYd p1ORzN+KTTDGyd2cDKtyhWp1iDzc4hyNhK/HaIKzCLfKBbta7i+yjg9VAZDK8kmm bqKIUXa4nBh3wqxt4OAfD4fLodpq8uYw3t+FQeE8HFP6SpzB2CL5qGUqjlX+o6yH ehYZxlVMBfYvBidY3N7Iuho7xMDDtUre9UBtrutVF7EAJpKr0RvTCrANfKk= -----END CERTIFICATE-----Generated at Mon Feb 2 17:36:52 2026 by rpki-client