This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8jtqke15jiVVgsW0zYQtio2Aazk.roa File: 8jtqke15jiVVgsW0zYQtio2Aazk.roa (raw, json) Hash identifier: XQzlAT2yUVDJdv3GdvL5w8y9mESknshvqjKnXNVm938= Subject key identifier: F2:3B:6A:91:ED:79:8E:25:55:82:C5:B4:CD:84:2D:8A:8D:80:6B:39 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B8FC6AB271E7CCC7B45C055B880F795A1 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8jtqke15jiVVgsW0zYQtio2Aazk.roa Signing time: Mon 05 Jan 2026 20:08:40 +0000 ROA not before: Mon 05 Jan 2026 20:08:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213928 IP address blocks: 2a0e:97c0:190::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8f:c6:ab:27:1e:7c:cc:7b:45:c0:55:b8:80:f7:95:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 5 20:08:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f23b6a91ed798e255582c5b4cd842d8a8d806b39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e3:23:46:2a:ba:28:f8:e5:c7:20:44:01:1e: a7:4e:34:9e:71:30:14:b8:7e:d6:e3:4c:b3:1c:52: b6:4f:95:a2:7a:2c:b5:72:4e:48:89:a6:d8:5a:b3: fe:29:3f:a8:c4:96:78:5b:5a:9b:d7:f6:fb:8f:b7: 6d:a2:85:27:66:3e:f9:41:4f:9e:8b:a3:ab:15:22: 60:5d:32:4a:b7:d4:b5:d6:07:1a:55:8b:59:27:e5: c4:90:a7:87:11:7d:f5:1a:44:ed:5a:bc:9f:52:3d: d9:2d:6a:65:a8:17:49:b4:b0:c7:07:ac:fc:12:f3: 61:e9:62:e1:da:d2:c7:06:5c:1d:3d:d9:84:6d:2a: ac:db:79:6a:cc:0c:10:4c:f0:36:f0:4a:a4:d4:f1: 6a:16:c0:08:16:2b:7f:e9:62:7f:4b:7e:0b:16:c1: ef:88:44:1f:df:3b:ed:3b:1b:19:4f:77:80:79:80: 06:62:12:72:7a:73:e3:5e:b6:1e:ca:55:ba:6f:b2: 09:2b:dc:1a:c9:38:80:e5:91:69:23:95:84:68:e2: 23:f6:33:4e:64:68:4b:01:47:29:00:7b:6a:c2:57: 3a:30:78:a3:b6:c6:94:47:9e:db:73:e6:b1:a4:3c: d6:bf:77:c0:a9:0c:1d:c5:10:a4:7c:cc:e2:53:7e: 69:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3B:6A:91:ED:79:8E:25:55:82:C5:B4:CD:84:2D:8A:8D:80:6B:39 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8jtqke15jiVVgsW0zYQtio2Aazk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:190::/44 Signature Algorithm: sha256WithRSAEncryption 70:65:0b:9d:23:0a:6c:64:00:f2:89:7e:a1:db:f3:93:5c:3d: 2c:9a:05:f7:63:ad:b3:d0:67:39:a5:a4:a7:7a:38:d3:29:a4: 89:09:57:d4:d5:2d:d8:dc:26:32:35:6f:8c:61:72:c1:84:00: 8c:e3:c7:d4:ed:7b:4d:6b:7e:ac:ec:5f:dc:29:4b:d6:45:10: 99:d8:e6:68:5a:6b:d6:5a:b5:41:42:12:18:c3:51:7a:c8:4e: 08:f2:de:1f:ea:97:a8:85:59:70:a7:db:77:da:45:bf:ba:96: 25:2b:78:2e:a9:d7:4c:35:b4:54:5e:a6:a8:b3:bf:48:d6:35: b2:47:39:04:ef:f5:25:5e:ea:99:59:a7:a4:92:25:28:3e:01: be:2a:85:89:e4:0a:03:f3:04:e6:df:c9:60:5a:22:c8:70:61: 3d:94:25:30:94:b7:b1:42:a3:d0:e0:3f:a4:f9:03:7c:49:ed: 71:e4:e0:e2:5e:a7:fe:0c:5a:88:82:4b:85:34:fe:8f:88:c8: 28:5f:3a:22:56:20:9e:7e:15:3f:78:ee:aa:2d:32:f8:8d:32: 36:44:a4:20:70:ed:c1:ae:50:da:8c:b3:75:7d:9d:63:85:22: cc:87:0e:82:5a:4b:68:f0:61:79:28:bf:15:27:38:a3:aa:c4: fb:a4:5b:a9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZuPxqsnHnzMe0XAVbiA95WhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTA1MjAwODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjNiNmE5MWVkNzk4ZTI1NTU4MmM1YjRjZDg0MmQ4YThkODA2YjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuMjRiq6KPjlxyBEAR6nTjSecTAU uH7W40yzHFK2T5Wieiy1ck5IiabYWrP+KT+oxJZ4W1qb1/b7j7dtooUnZj75QU+e i6OrFSJgXTJKt9S11gcaVYtZJ+XEkKeHEX31GkTtWryfUj3ZLWplqBdJtLDHB6z8 EvNh6WLh2tLHBlwdPdmEbSqs23lqzAwQTPA28Eqk1PFqFsAIFit/6WJ/S34LFsHv iEQf3zvtOxsZT3eAeYAGYhJyenPjXrYeylW6b7IJK9wayTiA5ZFpI5WEaOIj9jNO ZGhLAUcpAHtqwlc6MHijtsaUR57bc+axpDzWv3fAqQwdxRCkfMziU35pQwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPI7apHteY4lVYLFtM2ELYqNgGs5MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvOGp0cWtlMTVqaVZWZ3NXMHpZUXRpbzJBYXprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAGQ MA0GCSqGSIb3DQEBCwUAA4IBAQBwZQudIwpsZADyiX6h2/OTXD0smgX3Y62z0Gc5 paSnejjTKaSJCVfU1S3Y3CYyNW+MYXLBhACM48fU7XtNa36s7F/cKUvWRRCZ2OZo WmvWWrVBQhIYw1F6yE4I8t4f6peohVlwp9t32kW/upYlK3guqddMNbRUXqaos79I 1jWyRzkE7/UlXuqZWaekkiUoPgG+KoWJ5AoD8wTm38lgWiLIcGE9lCUwlLexQqPQ 4D+k+QN8Se1x5ODiXqf+DFqIgkuFNP6PiMgoXzoiViCefhU/eO6qLTL4jTI2RKQg cO3BrlDajLN1fZ1jhSLMhw6CWkto8GF5KL8VJzijqsT7pFup -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:43 2026 by rpki-client