This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/8sbFknydqPHmjs1gAP3CPMoO8k8.roa File: 8sbFknydqPHmjs1gAP3CPMoO8k8.roa (raw, json) Hash identifier: CEwd7MgDo0zDsTqTHtydcNgQ47NWSBEma38K6quaoFs= Subject key identifier: F2:C6:C5:92:7C:9D:A8:F1:E6:8E:CD:60:00:FD:C2:3C:CA:0E:F2:4F Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EA5A707C04E5523A58B9B7A5C03C4 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/8sbFknydqPHmjs1gAP3CPMoO8k8.roa Signing time: Thu 01 Jan 2026 12:18:21 +0000 ROA not before: Thu 01 Jan 2026 12:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198527 IP address blocks: 2a0e:aa07:e0e0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a5:a7:07:c0:4e:55:23:a5:8b:9b:7a:5c:03:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2c6c5927c9da8f1e68ecd6000fdc23cca0ef24f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bf:99:cb:b2:d8:30:f1:e0:c8:e0:6a:51:13: c0:e4:5f:d2:58:5c:52:8e:42:b6:a8:b0:d6:ea:14: 6f:cf:57:03:8b:9d:e1:8c:de:da:03:2b:49:84:2c: 73:31:1a:62:78:1a:a4:8c:f7:44:a6:55:ce:a8:6d: 60:eb:60:23:8c:4d:6b:a0:76:db:9b:31:6b:6e:a2: db:5c:75:46:70:45:b8:28:a4:02:e1:50:68:45:b8: f8:36:fd:f9:9c:79:81:98:2e:72:c5:95:45:c3:a6: 1c:31:bd:a4:09:75:af:0e:ce:1f:cf:87:0f:3c:14: ed:c7:d9:16:dc:ee:88:ba:ec:62:ac:19:ed:d8:1e: 90:b3:a8:50:36:b6:de:09:93:00:0a:fe:48:f1:15: 0a:c1:9d:1c:43:56:24:95:e4:97:03:b1:bb:af:d4: 9f:94:b0:82:f2:56:69:66:f2:fb:c6:20:7f:71:92: c4:b5:a0:cf:cc:1b:af:2c:6b:a1:75:9e:7e:84:54: 54:8d:ab:11:9b:3e:ff:c8:2c:ac:9c:c0:fa:d4:86: 0e:0c:9a:ec:60:e5:a3:87:f4:d0:ad:d6:87:67:ef: e5:1e:18:00:17:d4:47:80:c2:9a:13:ef:11:90:cb: e7:95:6c:5c:33:fa:e4:ef:af:ea:c7:16:b3:79:c2: 42:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C6:C5:92:7C:9D:A8:F1:E6:8E:CD:60:00:FD:C2:3C:CA:0E:F2:4F X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/8sbFknydqPHmjs1gAP3CPMoO8k8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e0e0::/44 Signature Algorithm: sha256WithRSAEncryption 11:84:d0:60:72:06:14:1c:c6:38:4b:e2:ff:1c:cb:e8:51:15: 46:c7:e3:00:71:17:96:99:4d:94:60:13:91:5f:7c:2c:19:47: a6:7a:5a:be:b0:6a:83:34:87:0b:48:07:e2:c2:f4:fe:74:f4: 75:47:53:42:da:1e:53:08:16:63:e5:72:35:66:6b:1b:68:fa: f3:f6:18:a5:ba:1b:87:a4:c1:37:c5:ca:4f:7e:70:81:d5:6a: 3c:12:ef:bf:48:e1:20:9c:e8:b2:0d:e7:cc:54:4a:a9:c4:65: f9:05:6c:28:4c:d0:d5:13:cd:03:98:a1:64:43:4b:db:87:62: 96:a7:7b:a6:06:11:91:04:89:eb:b6:4f:9c:11:d5:c5:65:35: 78:93:99:e5:60:87:90:24:e5:38:17:2a:c3:94:18:f5:a8:fc: c3:85:22:d3:e7:41:0b:69:be:ab:09:a4:4f:4e:99:bb:44:cf: 81:d4:12:6f:4a:74:58:6c:c2:fd:2d:ba:f2:bf:b8:ae:e0:84: a4:ee:b9:d8:17:de:b2:5f:d3:b7:7c:fa:b5:cf:1f:c5:ab:9f: 19:90:a0:d5:12:1b:d8:f8:15:9e:f2:30:23:0b:d6:1b:f4:40: 8b:b3:02:1b:a3:32:e1:ba:ec:2e:06:10:ca:f6:46:7b:75:3d: 53:38:c8:b6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fqWnB8BOVSOli5t6XAPEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmM2YzU5MjdjOWRhOGYxZTY4ZWNkNjAwMGZkYzIzY2NhMGVmMjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur+Zy7LYMPHgyOBqURPA5F/SWFxS jkK2qLDW6hRvz1cDi53hjN7aAytJhCxzMRpieBqkjPdEplXOqG1g62AjjE1roHbb mzFrbqLbXHVGcEW4KKQC4VBoRbj4Nv35nHmBmC5yxZVFw6YcMb2kCXWvDs4fz4cP PBTtx9kW3O6IuuxirBnt2B6Qs6hQNrbeCZMACv5I8RUKwZ0cQ1YkleSXA7G7r9Sf lLCC8lZpZvL7xiB/cZLEtaDPzBuvLGuhdZ5+hFRUjasRmz7/yCysnMD61IYODJrs YOWjh/TQrdaHZ+/lHhgAF9RHgMKaE+8RkMvnlWxcM/rk76/qxxazecJC9wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPLGxZJ8najx5o7NYAD9wjzKDvJPMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvOHNiRmtueWRxUEhtanMxZ0FQM0NQTW9POGs4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qB+Dg MA0GCSqGSIb3DQEBCwUAA4IBAQARhNBgcgYUHMY4S+L/HMvoURVGx+MAcReWmU2U YBORX3wsGUemelq+sGqDNIcLSAfiwvT+dPR1R1NC2h5TCBZj5XI1ZmsbaPrz9hil uhuHpME3xcpPfnCB1Wo8Eu+/SOEgnOiyDefMVEqpxGX5BWwoTNDVE80DmKFkQ0vb h2KWp3umBhGRBInrtk+cEdXFZTV4k5nlYIeQJOU4FyrDlBj1qPzDhSLT50ELab6r CaRPTpm7RM+B1BJvSnRYbML9Lbryv7iu4ISk7rnYF96yX9O3fPq1zx/Fq58ZkKDV EhvY+BWe8jAjC9Yb9ECLswIbozLhuuwuBhDK9kZ7dT1TOMi2 -----END CERTIFICATE-----Generated at Tue Jan 6 21:30:59 2026 by rpki-client