This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/8JAMg4wQZ1HYXxCoAJzAOlpHuNw.roa File: 8JAMg4wQZ1HYXxCoAJzAOlpHuNw.roa (raw, json) Hash identifier: 2xP+LQ/44T5PjFm66oeLGDe4Xdoh9zwpP0u/SruBfjU= Subject key identifier: F0:90:0C:83:8C:10:67:51:D8:5F:10:A8:00:9C:C0:3A:5A:47:B8:DC Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C1321A841BF5200EC4A3E1402D1B843 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/8JAMg4wQZ1HYXxCoAJzAOlpHuNw.roa Signing time: Fri 02 Jan 2026 00:19:47 +0000 ROA not before: Fri 02 Jan 2026 00:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39639 IP address blocks: 2a01:7680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:21:a8:41:bf:52:00:ec:4a:3e:14:02:d1:b8:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0900c838c106751d85f10a8009cc03a5a47b8dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bf:b5:4c:f9:97:ae:55:b6:a6:8e:de:f2:da: 2f:b5:d4:99:7c:0b:20:dc:2d:d4:05:be:e9:03:66: 8c:09:0a:27:d3:8c:c8:99:c5:f2:71:47:21:04:a1: d8:a0:6b:9f:85:6d:f0:40:bd:21:ea:e1:f6:c5:e5: ee:89:24:4d:44:3c:91:11:7e:f4:5e:1f:24:0e:31: 1b:00:98:3e:22:97:22:60:9c:05:99:23:9d:a6:d8: ef:29:1c:08:75:ba:cc:a3:62:42:9a:24:dc:7c:95: ac:ea:db:e5:c7:73:54:d4:54:09:e6:05:04:fc:eb: 12:d9:55:6b:64:18:d5:e1:e0:27:77:63:9b:7a:79: 24:66:88:b8:a8:27:dc:cc:46:97:39:fe:55:59:5c: e5:f7:ee:e3:dd:68:73:a6:b6:a3:57:b2:0e:4b:75: f0:53:3c:2b:41:b9:69:e4:e4:6e:0a:ce:4b:52:72: 77:d4:09:d0:66:2a:16:82:58:a4:0e:d3:3b:06:4f: 98:f8:3c:af:d7:63:93:e8:cf:a0:e2:50:87:f8:74: 1b:0b:c4:75:5e:4d:ed:e4:cc:5b:6a:46:aa:d0:dc: 50:ee:2f:89:57:95:0d:37:80:11:93:c0:32:8c:73: 6f:75:d8:8b:13:bd:ec:b3:26:f5:33:02:8b:30:96: e3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:90:0C:83:8C:10:67:51:D8:5F:10:A8:00:9C:C0:3A:5A:47:B8:DC X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/8JAMg4wQZ1HYXxCoAJzAOlpHuNw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:7680::/32 Signature Algorithm: sha256WithRSAEncryption 9d:c7:25:2f:00:45:bb:23:c9:6e:bd:3d:03:1e:42:a4:18:69: df:f6:4d:d8:96:c6:bf:36:5b:70:26:f5:fb:28:0f:55:1d:f0: 2e:ff:b6:86:80:df:28:48:a2:a3:c7:25:90:f5:89:af:66:f8: fe:fe:97:73:f7:77:63:50:2e:19:e5:9b:4f:06:1e:ec:ae:59: 45:5a:82:45:d0:f7:5f:cb:d3:e4:fc:36:9b:d2:7c:fc:97:ca: 5d:86:4a:35:0b:6e:b1:f4:1d:a8:f9:20:f3:5d:e9:5c:e1:5d: 22:73:18:8b:a5:82:83:af:5e:8b:cb:6e:d3:05:40:84:fe:8a: df:f4:84:20:07:b7:38:15:59:fb:e0:c8:2e:df:e6:40:46:be: f8:2d:48:35:c8:14:d8:20:1b:eb:36:7a:e7:78:8f:03:3c:22: 2c:bc:42:0a:9a:f0:ea:a0:95:c1:cb:9a:73:4e:eb:7a:43:36: 48:88:35:fb:a8:58:46:f8:a1:9f:99:33:29:d0:1f:7b:11:bd: d5:b0:65:94:9e:21:8a:7a:97:1d:6e:a3:3d:a7:10:4e:37:df: bc:51:ef:b9:5a:b3:6c:5c:3d:d6:71:c0:3f:3a:a6:48:f5:b6: 2e:1f:2e:20:5f:29:6b:5d:48:af:3f:30:e9:73:57:e2:ce:bf: f3:a5:df:b5 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8EyGoQb9SAOxKPhQC0bhDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDkwMGM4MzhjMTA2NzUxZDg1ZjEwYTgwMDljYzAzYTVhNDdiOGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b+1TPmXrlW2po7e8tovtdSZfAsg 3C3UBb7pA2aMCQon04zImcXycUchBKHYoGufhW3wQL0h6uH2xeXuiSRNRDyREX70 Xh8kDjEbAJg+IpciYJwFmSOdptjvKRwIdbrMo2JCmiTcfJWs6tvlx3NU1FQJ5gUE /OsS2VVrZBjV4eAnd2ObenkkZoi4qCfczEaXOf5VWVzl9+7j3WhzprajV7IOS3Xw UzwrQblp5ORuCs5LUnJ31AnQZioWglikDtM7Bk+Y+Dyv12OT6M+g4lCH+HQbC8R1 Xk3t5Mxbakaq0NxQ7i+JV5UNN4ARk8AyjHNvddiLE73ssyb1MwKLMJbjowIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPCQDIOMEGdR2F8QqACcwDpaR7jcMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvOEpBTWc0d1FaMUhZWHhDb0FKekFPbHBIdU53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgF2gDAN BgkqhkiG9w0BAQsFAAOCAQEAncclLwBFuyPJbr09Ax5CpBhp3/ZN2JbGvzZbcCb1 +ygPVR3wLv+2hoDfKEiio8clkPWJr2b4/v6Xc/d3Y1AuGeWbTwYe7K5ZRVqCRdD3 X8vT5Pw2m9J8/JfKXYZKNQtusfQdqPkg813pXOFdInMYi6WCg69ei8tu0wVAhP6K 3/SEIAe3OBVZ++DILt/mQEa++C1INcgU2CAb6zZ653iPAzwiLLxCCprw6qCVwcua c07rekM2SIg1+6hYRvihn5kzKdAfexG91bBllJ4hinqXHW6jPacQTjffvFHvuVqz bFw91nHAPzqmSPW2Lh8uIF8pa11Irz8w6XNX4s6/86XftQ== -----END CERTIFICATE-----Generated at Fri Jan 23 21:38:38 2026 by rpki-client