This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8tQLY-cqk6WmZX4ihVBDk3-K5cU.roa File: 8tQLY-cqk6WmZX4ihVBDk3-K5cU.roa (raw, json) Hash identifier: bgNZjDF3SE7/6Eb3ANWsMsS7mztEkaKB0gYBhaLZGug= Subject key identifier: F2:D4:0B:63:E7:2A:93:A5:A6:65:7E:22:85:50:43:93:7F:8A:E5:C5 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D5FB8B8E87F4BD5D8E4EB0268E9CE Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8tQLY-cqk6WmZX4ihVBDk3-K5cU.roa Signing time: Fri 02 Jan 2026 06:20:29 +0000 ROA not before: Fri 02 Jan 2026 06:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213263 IP address blocks: 2a0e:b107:980::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:5f:b8:b8:e8:7f:4b:d5:d8:e4:eb:02:68:e9:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2d40b63e72a93a5a6657e22855043937f8ae5c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4a:94:d1:80:18:5a:e4:27:2d:c8:18:07:c7: 84:24:1b:ad:b5:9c:53:26:09:76:c2:7d:e6:b3:41: df:bc:11:3d:4a:56:b1:08:90:6b:6c:f7:7f:5d:1b: 28:66:b5:01:60:bd:58:97:73:29:29:96:36:50:df: 8c:7a:7b:c6:30:04:7c:69:83:b7:03:65:df:f6:6d: 8c:6b:54:98:44:42:92:a3:03:73:f0:a9:5e:29:06: 68:b6:50:2b:91:e7:cd:2b:71:4b:0a:ea:99:83:40: d5:79:68:03:4e:dc:eb:10:48:4c:7b:b0:bc:ae:ae: c7:76:1a:2f:f2:28:1b:05:53:89:9e:60:bb:5c:6e: a2:e8:95:33:c8:bf:29:7c:af:da:30:26:54:26:bf: 25:e9:0a:4b:6a:61:e1:68:e8:c8:cb:49:0d:d9:d6: 85:12:bd:5a:7c:78:8e:20:11:d7:29:3c:7b:2d:b8: bb:6d:44:fc:25:85:e1:b1:2c:d7:a0:54:a3:37:ce: b3:0d:45:5e:a0:df:ec:bf:a4:ef:ae:8b:de:bd:39: 64:41:93:03:cf:ee:85:d9:29:81:16:2e:b8:1c:ce: 32:b3:f0:d1:e4:b4:30:a1:07:46:09:1c:f1:5b:e7: 73:7b:46:03:3e:31:91:7d:60:8a:a7:9f:b1:8c:db: dd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D4:0B:63:E7:2A:93:A5:A6:65:7E:22:85:50:43:93:7F:8A:E5:C5 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8tQLY-cqk6WmZX4ihVBDk3-K5cU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:980::/44 Signature Algorithm: sha256WithRSAEncryption 80:51:46:db:0a:8b:52:dd:a9:b4:68:32:f2:16:5c:77:df:be: e6:be:d3:b1:df:f8:d8:f0:0d:90:b3:38:a5:4d:22:0c:d4:9f: 65:46:17:78:b1:3c:96:ee:59:71:38:a3:2a:78:38:02:c9:7e: 93:5b:18:cb:34:16:d7:ab:b6:da:ff:13:6e:2f:13:b6:d7:4e: a9:29:13:4d:78:84:d3:65:34:e8:d6:45:70:1c:3b:14:97:d3: 04:c3:fd:bb:22:ce:5d:fe:16:58:12:26:0a:f6:1d:5a:42:a6: b4:14:de:ba:73:2a:bb:c1:0e:b8:69:a7:d4:32:6b:07:34:af: f6:18:2f:d3:8c:dc:2c:b0:dd:b7:f1:4f:ef:bf:96:75:c5:ad: 64:8f:81:f7:9c:79:41:c7:20:34:39:af:32:82:84:46:5b:7f: a3:a1:f8:3e:62:23:7c:29:70:c4:06:d4:c2:cf:fa:df:2b:87: 0e:3c:bb:1c:f5:37:33:d3:35:a6:25:42:6e:e7:46:34:02:40: ad:73:d7:3e:e4:aa:82:34:ca:13:84:be:1f:ec:5b:3a:8e:15: d3:d1:4b:ab:e4:eb:ba:fc:a3:77:d4:95:a8:f6:4f:19:58:87: 9b:b9:0f:20:1d:d3:ad:c6:1a:48:3a:3a:d6:09:36:6d:11:a8: 0b:fd:64:69 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XV+4uOh/S9XY5OsCaOnOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmQ0MGI2M2U3MmE5M2E1YTY2NTdlMjI4NTUwNDM5MzdmOGFlNWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0qU0YAYWuQnLcgYB8eEJButtZxT Jgl2wn3ms0HfvBE9SlaxCJBrbPd/XRsoZrUBYL1Yl3MpKZY2UN+MenvGMAR8aYO3 A2Xf9m2Ma1SYREKSowNz8KleKQZotlArkefNK3FLCuqZg0DVeWgDTtzrEEhMe7C8 rq7Hdhov8igbBVOJnmC7XG6i6JUzyL8pfK/aMCZUJr8l6QpLamHhaOjIy0kN2daF Er1afHiOIBHXKTx7Lbi7bUT8JYXhsSzXoFSjN86zDUVeoN/sv6TvrovevTlkQZMD z+6F2SmBFi64HM4ys/DR5LQwoQdGCRzxW+dze0YDPjGRfWCKp5+xjNvdZQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPLUC2PnKpOlpmV+IoVQQ5N/iuXFMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvOHRRTFktY3FrNldtWlg0aWhWQkRrMy1LNWNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBwmA MA0GCSqGSIb3DQEBCwUAA4IBAQCAUUbbCotS3am0aDLyFlx3377mvtOx3/jY8A2Q szilTSIM1J9lRhd4sTyW7llxOKMqeDgCyX6TWxjLNBbXq7ba/xNuLxO2106pKRNN eITTZTTo1kVwHDsUl9MEw/27Is5d/hZYEiYK9h1aQqa0FN66cyq7wQ64aafUMmsH NK/2GC/TjNwssN238U/vv5Z1xa1kj4H3nHlBxyA0Oa8ygoRGW3+jofg+YiN8KXDE BtTCz/rfK4cOPLsc9Tcz0zWmJUJu50Y0AkCtc9c+5KqCNMoThL4f7Fs6jhXT0Uur 5Ou6/KN31JWo9k8ZWIebuQ8gHdOtxhpIOjrWCTZtEagL/WRp -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:06 2026 by rpki-client