This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/8w-IWf2lrtKPBt5qMeYx4vc1wIo.roa File: 8w-IWf2lrtKPBt5qMeYx4vc1wIo.roa (raw, json) Hash identifier: dmXJGV07k4HSNMpFyTWiKNXuMOxONHC1FWpZG/gmuUw= Subject key identifier: F3:0F:88:59:FD:A5:AE:D2:8F:06:DE:6A:31:E6:31:E2:F7:35:C0:8A Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Certificate serial: 019B7F834654CF91D0819AD073E8C85EBCEA Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/8w-IWf2lrtKPBt5qMeYx4vc1wIo.roa Signing time: Fri 02 Jan 2026 16:21:08 +0000 ROA not before: Fri 02 Jan 2026 16:21:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216355 IP address blocks: 2a06:d1c1:1f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:46:54:cf:91:d0:81:9a:d0:73:e8:c8:5e:bc:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Validity Not Before: Jan 2 16:21:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f30f8859fda5aed28f06de6a31e631e2f735c08a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9d:d5:48:04:cb:2f:68:44:b5:5d:73:4c:e9: 3d:60:d2:78:21:68:c3:0a:64:13:2a:fc:32:a3:b8: d3:0c:7b:fb:b7:7b:97:74:cb:a6:f5:79:3f:0d:db: ea:31:c9:1e:dc:a1:e9:46:89:41:aa:d7:61:c2:de: b9:58:4c:55:e6:20:b6:62:cf:82:75:f6:f4:cb:4a: 00:46:17:78:22:e8:88:34:65:bf:55:4e:da:e2:76: 00:fc:c2:11:31:dc:5e:7d:83:35:e7:9c:9c:d7:da: 0b:dc:e5:bb:09:46:2d:dd:e2:17:42:a8:a1:4d:bb: 51:54:24:65:8c:31:43:76:78:58:2b:ca:82:aa:59: a1:0f:08:e9:1c:e9:d3:59:86:93:59:73:df:e1:e5: e1:5d:1a:f2:50:18:fd:07:c7:d9:2f:13:85:d2:84: 97:fc:75:24:15:62:85:88:f0:03:61:c6:8f:e3:1a: 0f:a9:9e:1a:3c:e9:3d:ed:be:4a:dc:25:94:a2:ff: f5:13:8a:2a:62:d7:c8:ce:63:a9:2c:83:9f:63:84: 11:a8:e6:7e:3b:9c:fe:9c:d3:9e:9e:02:03:c8:a6: 98:4f:2a:8a:45:0f:1c:11:d0:12:b6:aa:d5:c6:66: d9:00:e2:08:6a:a8:08:1f:ca:b8:35:1e:d0:7f:70: a3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:0F:88:59:FD:A5:AE:D2:8F:06:DE:6A:31:E6:31:E2:F7:35:C0:8A X509v3 Authority Key Identifier: keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/8w-IWf2lrtKPBt5qMeYx4vc1wIo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:d1c1:1f::/48 Signature Algorithm: sha256WithRSAEncryption 00:25:62:f3:46:85:5c:be:e0:b1:73:bf:ef:6b:f8:65:57:f5: 3e:fc:b5:f0:af:6c:0a:d3:61:22:a3:bc:7d:d6:3c:5f:f1:d3: ea:c8:d1:b5:f8:b6:b1:86:ba:61:81:ba:01:5d:e5:19:89:94: d3:9b:50:15:da:c5:a3:7d:73:0c:a8:95:53:68:f9:59:56:e2: bb:29:68:4a:16:93:a7:52:06:0f:b7:ef:50:55:69:33:2c:a6: 37:06:66:f7:04:58:d1:2d:c1:8d:d3:13:52:5e:e1:e6:f8:78: 4b:c5:a1:ee:90:e1:c6:95:0b:8c:54:79:28:b1:23:64:5e:c5: 21:c4:84:49:08:65:f9:58:81:05:13:b0:bd:96:63:0a:2c:36: 75:49:24:1d:0f:da:c4:af:fb:c7:87:73:38:5a:c5:7e:29:b0: 05:8d:a8:20:17:94:b9:c8:c2:d0:5f:55:b4:7d:be:18:45:7f: b4:c5:a1:9b:03:c4:b3:dd:e6:30:3f:70:9e:13:2e:41:10:39: a7:c2:7d:ac:4d:ff:ab:3d:a9:ad:ee:d4:1e:df:a5:27:88:2d: 25:c9:fd:ae:65:bc:fe:cd:5b:5d:fe:7a:38:ca:9f:7e:d4:80: da:22:a4:41:71:bd:eb:3d:6b:37:5d:81:94:c6:db:50:fd:9d: d7:2e:24:07 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/g0ZUz5HQgZrQc+jIXrzqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NGZhMGFkODk4NzE0OWYwNTUzNDcyNGI0NWEyZjRkNWVi ZjQ3NWQwHhcNMjYwMTAyMTYyMTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzBmODg1OWZkYTVhZWQyOGYwNmRlNmEzMWU2MzFlMmY3MzVjMDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt53VSATLL2hEtV1zTOk9YNJ4IWjD CmQTKvwyo7jTDHv7t3uXdMum9Xk/DdvqMcke3KHpRolBqtdhwt65WExV5iC2Ys+C dfb0y0oARhd4IuiINGW/VU7a4nYA/MIRMdxefYM155yc19oL3OW7CUYt3eIXQqih TbtRVCRljDFDdnhYK8qCqlmhDwjpHOnTWYaTWXPf4eXhXRryUBj9B8fZLxOF0oSX /HUkFWKFiPADYcaP4xoPqZ4aPOk97b5K3CWUov/1E4oqYtfIzmOpLIOfY4QRqOZ+ O5z+nNOengIDyKaYTyqKRQ8cEdAStqrVxmbZAOIIaqgIH8q4NR7Qf3CjCQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPMPiFn9pa7SjwbeajHmMeL3NcCKMB8GA1UdIwQY MBaAFMZPoK2JhxSfBVNHJLRaL01ev0ddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEt YmNmNzcwMjY5MzlkLzEvOHctSVdmMmxydEtQQnQ1cU1lWXg0dmMxd0lvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEtYmNmNzcwMjY5Mzlk LzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgbRwQAf MA0GCSqGSIb3DQEBCwUAA4IBAQAAJWLzRoVcvuCxc7/va/hlV/U+/LXwr2wK02Ei o7x91jxf8dPqyNG1+LaxhrphgboBXeUZiZTTm1AV2sWjfXMMqJVTaPlZVuK7KWhK FpOnUgYPt+9QVWkzLKY3Bmb3BFjRLcGN0xNSXuHm+HhLxaHukOHGlQuMVHkosSNk XsUhxIRJCGX5WIEFE7C9lmMKLDZ1SSQdD9rEr/vHh3M4WsV+KbAFjaggF5S5yMLQ X1W0fb4YRX+0xaGbA8Sz3eYwP3CeEy5BEDmnwn2sTf+rPamt7tQe36UniC0lyf2u Zbz+zVtd/no4yp9+1IDaIqRBcb3rPWs3XYGUxttQ/Z3XLiQH -----END CERTIFICATE-----Generated at Mon Feb 2 09:39:57 2026 by rpki-client