This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8T7nT7LmTUJPkep0GShxipx9eGU.roa File: 8T7nT7LmTUJPkep0GShxipx9eGU.roa (raw, json) Hash identifier: 5B8ws+ndzQroyE71hx7g2Xp63G4oFmoEkwVzrKeS+/c= Subject key identifier: F1:3E:E7:4F:B2:E6:4D:42:4F:91:EA:74:19:28:71:8A:9C:7D:78:65 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CCFC504ACF4B2F60EAB115FA0979D Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8T7nT7LmTUJPkep0GShxipx9eGU.roa Signing time: Fri 02 Jan 2026 06:19:53 +0000 ROA not before: Fri 02 Jan 2026 06:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142438 IP address blocks: 2a0e:b107:da0::/44 maxlen: 48 2a0e:b107:14a0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 17:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:cf:c5:04:ac:f4:b2:f6:0e:ab:11:5f:a0:97:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f13ee74fb2e64d424f91ea741928718a9c7d7865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:49:67:cf:da:87:4b:60:1a:c4:1c:0e:d5:f7: ed:68:e7:4b:63:48:df:ac:c4:2c:26:3e:c5:24:bd: 45:18:ce:6d:c2:8e:35:63:ad:31:67:13:56:71:60: 7b:ea:a3:a7:de:30:d3:9f:c6:bb:6b:bb:39:3b:34: 71:2d:dd:62:f1:58:39:4c:08:f3:3d:9a:b5:5b:b4: 50:08:b3:93:24:70:8a:ba:67:d0:23:d5:ff:4c:16: 0a:e5:7d:80:b2:9a:86:eb:93:94:bc:b3:15:f1:e8: fe:42:6f:58:ab:d7:02:11:4a:b4:3f:30:ac:46:63: 1f:96:65:ec:a6:e6:72:90:f9:c5:f1:f0:57:3f:f1: 56:db:13:7a:51:83:d3:c9:25:5f:0c:87:a5:11:37: a9:9e:6d:d9:fb:30:c4:2e:d4:7c:27:e3:04:34:9c: 12:26:d5:71:b5:f6:f0:63:06:bd:6e:35:1f:9a:3a: 0a:f1:2f:cd:fb:89:97:8c:cb:a5:bf:7c:fd:39:d9: fc:7d:97:24:28:5f:45:85:7f:11:29:84:b4:15:bc: 62:9b:35:1f:69:1e:b9:c7:f9:d9:a7:9b:c9:48:71: d6:60:ce:5d:b8:44:35:dd:1d:ce:63:b8:7d:9a:3b: b0:3c:84:4c:6d:d2:87:2f:1c:1a:7a:2e:8b:52:b1: 9d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:3E:E7:4F:B2:E6:4D:42:4F:91:EA:74:19:28:71:8A:9C:7D:78:65 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8T7nT7LmTUJPkep0GShxipx9eGU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:da0::/44 2a0e:b107:14a0::/44 Signature Algorithm: sha256WithRSAEncryption 3d:27:55:4b:59:bc:8a:79:11:b2:4c:be:58:05:b7:d0:42:23: 1b:b0:42:b3:0a:5a:69:13:28:2c:97:ac:0e:0f:8d:13:f8:df: 45:3e:91:9d:74:53:ca:fa:86:55:d1:ef:a9:44:67:a0:99:54: d8:ef:b5:03:b4:2b:d8:ac:70:8e:c1:d8:9c:be:b2:e3:c0:30: ef:fc:87:26:df:d9:3f:c7:c9:e6:0a:d7:a9:92:2d:09:f2:a6: 68:e0:b8:a5:5a:64:8e:9b:8f:f7:b5:9a:84:f9:8d:d2:ac:3f: 12:2f:c4:3e:3f:78:62:fb:ff:bf:6c:bc:22:f3:84:11:0d:4d: 79:b6:de:6e:98:3c:a0:36:3f:53:cc:86:7d:40:61:9f:12:3c: 25:15:05:e1:b2:ff:f5:3a:28:d4:4a:8c:9b:e6:f0:66:8b:86: 77:89:f5:85:88:64:6e:85:f4:eb:14:e1:a8:a0:c9:77:5e:0e: e9:9f:ef:60:79:6b:43:df:96:37:ce:c1:9f:8f:f9:4e:f3:92: e4:e2:6e:f9:c6:5d:84:05:6d:9b:1d:a9:e6:82:79:03:18:30: 91:dd:37:12:af:87:ab:50:4a:b8:6f:4c:b8:0d:30:66:21:ce: ce:3b:76:56:c1:20:16:7c:73:88:1f:e0:ed:11:1d:4a:68:0b: 00:73:c4:f8 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XM/FBKz0svYOqxFfoJedMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTNlZTc0ZmIyZTY0ZDQyNGY5MWVhNzQxOTI4NzE4YTljN2Q3ODY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqklnz9qHS2AaxBwO1fftaOdLY0jf rMQsJj7FJL1FGM5two41Y60xZxNWcWB76qOn3jDTn8a7a7s5OzRxLd1i8Vg5TAjz PZq1W7RQCLOTJHCKumfQI9X/TBYK5X2AspqG65OUvLMV8ej+Qm9Yq9cCEUq0PzCs RmMflmXspuZykPnF8fBXP/FW2xN6UYPTySVfDIelETepnm3Z+zDELtR8J+MENJwS JtVxtfbwYwa9bjUfmjoK8S/N+4mXjMulv3z9Odn8fZckKF9FhX8RKYS0FbximzUf aR65x/nZp5vJSHHWYM5duEQ13R3OY7h9mjuwPIRMbdKHLxwaei6LUrGdawIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPE+50+y5k1CT5HqdBkocYqcfXhlMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvOFQ3blQ3TG1UVUpQa2VwMEdTaHhpcHg5ZUdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg6xBw2g AwcEKg6xBxSgMA0GCSqGSIb3DQEBCwUAA4IBAQA9J1VLWbyKeRGyTL5YBbfQQiMb sEKzClppEygsl6wOD40T+N9FPpGddFPK+oZV0e+pRGegmVTY77UDtCvYrHCOwdic vrLjwDDv/Icm39k/x8nmCtepki0J8qZo4LilWmSOm4/3tZqE+Y3SrD8SL8Q+P3hi +/+/bLwi84QRDU15tt5umDygNj9TzIZ9QGGfEjwlFQXhsv/1OijUSoyb5vBmi4Z3 ifWFiGRuhfTrFOGooMl3Xg7pn+9geWtD35Y3zsGfj/lO85Lk4m75xl2EBW2bHanm gnkDGDCR3TcSr4erUEq4b0y4DTBmIc7OO3ZWwSAWfHOIH+DtER1KaAsAc8T4 -----END CERTIFICATE-----Generated at Sat Jan 10 02:19:46 2026 by rpki-client