This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/L8utE5ZsoaEfVCAqlDJmPEjxUzc.roa File: L8utE5ZsoaEfVCAqlDJmPEjxUzc.roa (raw, json) Hash identifier: CUEIlVOGs6w2qHtqNYoZZsm4LrWBVQZLAj9RVsaO+ww= Subject key identifier: 2F:CB:AD:13:96:6C:A1:A1:1F:54:20:2A:94:32:66:3C:48:F1:53:37 Certificate issuer: /CN=0698a5536490d70c8e37b76f32da684f1229d9ba Certificate serial: 019B7910A0321F58090F7078B0FC3E6CBB6D Authority key identifier: 06:98:A5:53:64:90:D7:0C:8E:37:B7:6F:32:DA:68:4F:12:29:D9:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpilU2SQ1wyON7dvMtpoTxIp2bo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/L8utE5ZsoaEfVCAqlDJmPEjxUzc.roa Signing time: Thu 01 Jan 2026 10:18:11 +0000 ROA not before: Thu 01 Jan 2026 10:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212594 IP address blocks: 2001:678:c4c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.crl rsync://rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.mft rsync://rpki.ripe.net/repository/DEFAULT/BpilU2SQ1wyON7dvMtpoTxIp2bo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a0:32:1f:58:09:0f:70:78:b0:fc:3e:6c:bb:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0698a5536490d70c8e37b76f32da684f1229d9ba Validity Not Before: Jan 1 10:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2fcbad13966ca1a11f54202a9432663c48f15337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:10:40:6d:45:07:4c:04:1c:de:2d:34:a6:73: 31:fb:c4:d0:f8:e5:4e:1a:86:f2:f8:3e:d0:d0:31: b3:db:d4:a1:24:fd:34:7d:e6:c6:cf:77:93:de:88: 03:fa:49:53:96:0d:62:5a:fb:21:cc:f6:d0:ce:61: e7:fb:86:11:b1:71:d2:a3:08:0b:96:7a:25:8b:a1: 71:83:7d:dd:43:80:15:bb:63:ee:4b:c0:2c:c8:92: 30:f2:e6:9f:1a:fd:98:a9:aa:b5:45:48:9e:8b:9f: 2f:55:b1:b6:4f:7d:23:fa:91:36:03:c1:91:a0:53: 17:30:d0:c5:bd:81:67:9c:76:ea:5f:7a:df:ef:74: 10:13:d2:ac:fc:06:cf:9e:cf:31:b4:42:32:4b:db: ca:16:16:c6:00:f2:68:23:e3:cf:62:86:f1:b4:85: d5:bd:ca:69:08:44:5b:44:a1:a0:ac:74:95:3f:3a: cc:13:42:81:4e:98:74:3a:bc:bb:60:f5:61:1d:ea: 5a:70:f8:a5:bc:e3:f2:1c:da:fd:97:44:09:76:3a: 64:6e:54:58:a0:ec:f3:4f:b1:de:43:1a:85:e8:3b: 6c:f5:d0:b1:5d:f0:d4:bb:dd:20:34:c3:cf:63:d4: 6b:8e:a1:80:61:ef:f6:c1:4c:66:b2:b8:90:ba:78: f0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:CB:AD:13:96:6C:A1:A1:1F:54:20:2A:94:32:66:3C:48:F1:53:37 X509v3 Authority Key Identifier: keyid:06:98:A5:53:64:90:D7:0C:8E:37:B7:6F:32:DA:68:4F:12:29:D9:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpilU2SQ1wyON7dvMtpoTxIp2bo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/L8utE5ZsoaEfVCAqlDJmPEjxUzc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:c4c::/48 Signature Algorithm: sha256WithRSAEncryption 1a:f4:8b:f5:98:92:86:21:4b:b4:09:c1:d5:c8:fc:c7:2a:c6: cf:35:c4:b5:d8:71:b3:b3:01:76:9d:ac:f5:ef:01:e8:e5:9d: 3b:75:d1:53:70:d2:55:43:b0:c0:b6:4d:33:0a:7d:b0:87:7b: 4c:20:84:5e:97:a7:50:39:a1:f6:5d:93:ab:0e:c8:a1:6e:31: b2:dd:4b:66:2b:c7:e6:47:76:5c:8d:30:c0:24:1b:ca:43:10: fc:d6:8a:fb:77:2f:4b:39:a6:af:ab:b0:ab:09:91:eb:bf:2c: 7c:90:06:a5:01:b4:d3:1e:c6:72:be:54:92:49:e1:6f:f4:ca: 07:81:0e:d7:88:54:50:a0:ec:c5:7d:9c:ed:9a:bd:41:d3:e9: 50:1d:63:a3:da:2c:e9:56:dd:29:5b:7b:d4:2f:a1:13:52:93: 4c:2f:54:4c:ec:1d:ad:a6:c6:ee:8e:30:e0:4d:13:2c:f1:0f: 57:91:f0:f1:3f:78:28:f2:6e:58:51:e7:60:2d:82:1e:1e:76: 80:34:ce:6b:c9:50:29:b0:1c:d9:2e:4c:cb:65:8b:5f:85:18: 2b:37:60:ac:f0:d9:bb:b5:e2:42:71:87:b0:43:49:7f:06:5d: 5e:02:af:7d:f6:d8:46:78:ec:a6:fe:92:77:ae:d9:64:40:41: f5:2b:bc:3c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EKAyH1gJD3B4sPw+bLttMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2OThhNTUzNjQ5MGQ3MGM4ZTM3Yjc2ZjMyZGE2ODRmMTIy OWQ5YmEwHhcNMjYwMTAxMTAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZmNiYWQxMzk2NmNhMWExMWY1NDIwMmE5NDMyNjYzYzQ4ZjE1MzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xBAbUUHTAQc3i00pnMx+8TQ+OVO Goby+D7Q0DGz29ShJP00febGz3eT3ogD+klTlg1iWvshzPbQzmHn+4YRsXHSowgL lnoli6Fxg33dQ4AVu2PuS8AsyJIw8uafGv2Yqaq1RUiei58vVbG2T30j+pE2A8GR oFMXMNDFvYFnnHbqX3rf73QQE9Ks/AbPns8xtEIyS9vKFhbGAPJoI+PPYobxtIXV vcppCERbRKGgrHSVPzrME0KBTph0Ory7YPVhHepacPilvOPyHNr9l0QJdjpkblRY oOzzT7HeQxqF6Dts9dCxXfDUu90gNMPPY9RrjqGAYe/2wUxmsriQunjw+QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFC/LrROWbKGhH1QgKpQyZjxI8VM3MB8GA1UdIwQY MBaAFAaYpVNkkNcMjje3bzLaaE8SKdm6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnBpbFUyU1Exd3lPTjdkdk10cG9UeElwMmJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9kMzEzNjEtMDk2ZC00YThkLWFiNGYt YzNkYzczOTQyNWExLzEvTDh1dEU1WnNvYUVmVkNBcWxESm1QRWp4VXpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9kMzEzNjEtMDk2ZC00YThkLWFiNGYtYzNkYzczOTQyNWEx LzEvQnBpbFUyU1Exd3lPTjdkdk10cG9UeElwMmJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAxM MA0GCSqGSIb3DQEBCwUAA4IBAQAa9Iv1mJKGIUu0CcHVyPzHKsbPNcS12HGzswF2 naz17wHo5Z07ddFTcNJVQ7DAtk0zCn2wh3tMIIRel6dQOaH2XZOrDsihbjGy3Utm K8fmR3ZcjTDAJBvKQxD81or7dy9LOaavq7CrCZHrvyx8kAalAbTTHsZyvlSSSeFv 9MoHgQ7XiFRQoOzFfZztmr1B0+lQHWOj2izpVt0pW3vUL6ETUpNML1RM7B2tpsbu jjDgTRMs8Q9XkfDxP3go8m5YUedgLYIeHnaANM5ryVApsBzZLkzLZYtfhRgrN2Cs 8Nm7teJCcYewQ0l/Bl1eAq999thGeOym/pJ3rtlkQEH1K7w8 -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:18 2026 by rpki-client