This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/8S2f0mMNsD7xxV7Ty48Yj_vXc24.roa File: 8S2f0mMNsD7xxV7Ty48Yj_vXc24.roa (raw, json) Hash identifier: bbt0XT/b4GdymMLqxvA9TWB6kuEszEh++apw2K2jMJo= Subject key identifier: F1:2D:9F:D2:63:0D:B0:3E:F1:C5:5E:D3:CB:8F:18:8F:FB:D7:73:6E Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Certificate serial: 019B7F83443971B09090062C1635560DB25D Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/8S2f0mMNsD7xxV7Ty48Yj_vXc24.roa Signing time: Fri 02 Jan 2026 16:21:07 +0000 ROA not before: Fri 02 Jan 2026 16:21:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211286 IP address blocks: 2a0d:8d04::/32 maxlen: 48 2a0d:8d04::/48 maxlen: 48 2a0d:8d04:5::/48 maxlen: 48 2a0d:8d04:a::/48 maxlen: 48 2a0d:8d04:b::/48 maxlen: 48 2a0d:8d04:d::/48 maxlen: 48 2a0d:8d04:71a::/48 maxlen: 48 2a0d:8d04:71b::/48 maxlen: 48 2a0d:8d04:71d::/48 maxlen: 48 2a0d:8d04:5000::/36 maxlen: 48 2a0d:8d04:6000::/36 maxlen: 36 2a0d:8d04:a000::/36 maxlen: 36 2a0d:8d04:b000::/36 maxlen: 36 2a0d:8d04:c000::/35 maxlen: 35 2a0d:8d04:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:44:39:71:b0:90:90:06:2c:16:35:56:0d:b2:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Validity Not Before: Jan 2 16:21:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f12d9fd2630db03ef1c55ed3cb8f188ffbd7736e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a6:ca:e3:e2:4d:f6:06:a0:00:9b:6f:c9:cb: 05:1e:b1:0b:55:ff:3a:d8:50:80:16:d5:0f:4b:25: a6:c5:97:b7:e1:b8:83:80:98:45:41:56:1d:1d:a4: 26:2e:c6:53:1d:f7:14:85:e0:43:8a:23:50:1b:84: ff:c9:fa:e8:eb:66:e8:99:5c:66:fc:12:cf:7c:5c: c6:ee:85:2d:57:4b:10:88:9f:d3:58:f1:6d:e0:b1: 61:23:95:0d:0e:81:6a:67:89:d8:0b:f8:fd:1b:b0: 32:ee:bd:e1:3c:37:6b:02:fa:6a:00:56:0d:01:3b: 57:77:9d:d5:44:c1:3e:c3:7d:22:69:fe:98:d7:37: 22:8c:b3:10:1a:ca:b4:59:dc:89:f5:cc:1c:4f:2c: 3b:9b:d6:a9:55:11:d6:4d:66:d7:2b:e0:ae:85:68: b0:85:be:bf:9c:e0:ef:a1:a3:d3:fe:95:95:0f:09: 69:6b:cf:ac:ba:ac:cc:b5:f3:78:d6:90:b4:5b:d3: cb:f1:0e:cd:3a:fa:4d:f7:68:68:1a:72:c7:63:04: ed:37:a4:51:6d:1f:92:6e:4c:d2:0f:e6:56:a3:ab: e2:62:13:b3:71:4c:6b:f6:fa:44:24:ad:5b:a5:b1: e0:7c:bf:a2:82:2e:ad:70:3b:4f:18:5c:ff:46:d5: bc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:2D:9F:D2:63:0D:B0:3E:F1:C5:5E:D3:CB:8F:18:8F:FB:D7:73:6E X509v3 Authority Key Identifier: keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/8S2f0mMNsD7xxV7Ty48Yj_vXc24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:8d04::/32 Signature Algorithm: sha256WithRSAEncryption 5d:98:6a:81:19:bb:7d:77:29:a4:8c:a3:da:70:73:09:c4:b1: 84:fb:22:14:14:65:a9:e1:4f:bc:77:98:4f:20:88:6a:63:fe: 04:3d:54:8a:e6:b4:33:ad:8c:98:33:ee:80:a4:34:05:81:70: 0c:b1:a2:71:b9:3d:b4:56:57:e0:c6:c1:29:12:bc:ca:b4:b0: 8b:b9:c3:8d:f8:e6:ca:70:57:0e:7a:f2:cd:60:fe:80:96:fc: 5a:3c:5b:84:e0:52:aa:25:ab:98:8c:d4:fc:2f:51:df:8e:d2: 3f:d1:af:59:0b:86:d1:e5:c0:0f:30:ee:86:41:96:55:fa:70: d3:07:a5:f9:0e:e6:62:e4:6f:73:26:90:a6:bd:f9:06:2e:46: 47:7a:7d:e7:31:d6:3f:60:1f:bf:86:60:10:6d:1f:61:e6:69: b6:fb:76:4c:9e:05:12:5e:b4:14:b9:a9:9a:9a:fa:dd:46:e4: 18:f9:5a:c4:83:46:38:e5:c7:00:e2:17:ef:51:33:bf:02:db: 12:2e:d7:e7:0f:aa:f0:68:f2:cf:a7:10:d7:e4:a2:7f:b3:51: 38:cb:db:50:4c:59:d6:4f:4a:0c:a8:81:9b:8a:ea:10:c7:50: 79:dd:d9:d5:3a:c2:e0:02:ef:86:5c:17:2f:02:13:58:56:7c: 83:9e:21:3e -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/g0Q5cbCQkAYsFjVWDbJdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NGZhMGFkODk4NzE0OWYwNTUzNDcyNGI0NWEyZjRkNWVi ZjQ3NWQwHhcNMjYwMTAyMTYyMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTJkOWZkMjYzMGRiMDNlZjFjNTVlZDNjYjhmMTg4ZmZiZDc3MzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKbK4+JN9gagAJtvycsFHrELVf86 2FCAFtUPSyWmxZe34biDgJhFQVYdHaQmLsZTHfcUheBDiiNQG4T/yfro62bomVxm /BLPfFzG7oUtV0sQiJ/TWPFt4LFhI5UNDoFqZ4nYC/j9G7Ay7r3hPDdrAvpqAFYN ATtXd53VRME+w30iaf6Y1zcijLMQGsq0WdyJ9cwcTyw7m9apVRHWTWbXK+CuhWiw hb6/nODvoaPT/pWVDwlpa8+suqzMtfN41pC0W9PL8Q7NOvpN92hoGnLHYwTtN6RR bR+SbkzSD+ZWo6viYhOzcUxr9vpEJK1bpbHgfL+igi6tcDtPGFz/RtW8FQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPEtn9JjDbA+8cVe08uPGI/713NuMB8GA1UdIwQY MBaAFMZPoK2JhxSfBVNHJLRaL01ev0ddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEt YmNmNzcwMjY5MzlkLzEvOFMyZjBtTU5zRDd4eFY3VHk0OFlqX3ZYYzI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEtYmNmNzcwMjY5Mzlk LzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg2NBDAN BgkqhkiG9w0BAQsFAAOCAQEAXZhqgRm7fXcppIyj2nBzCcSxhPsiFBRlqeFPvHeY TyCIamP+BD1Uiua0M62MmDPugKQ0BYFwDLGicbk9tFZX4MbBKRK8yrSwi7nDjfjm ynBXDnryzWD+gJb8WjxbhOBSqiWrmIzU/C9R347SP9GvWQuG0eXADzDuhkGWVfpw 0wel+Q7mYuRvcyaQpr35Bi5GR3p95zHWP2Afv4ZgEG0fYeZptvt2TJ4FEl60FLmp mpr63UbkGPlaxINGOOXHAOIX71EzvwLbEi7X5w+q8Gjyz6cQ1+Sif7NROMvbUExZ 1k9KDKiBm4rqEMdQed3Z1TrC4ALvhlwXLwITWFZ8g54hPg== -----END CERTIFICATE-----Generated at Mon Feb 2 09:40:07 2026 by rpki-client