This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/P_eGv8Ts4S81-hoIfGkINiGVVGQ.roa File: P_eGv8Ts4S81-hoIfGkINiGVVGQ.roa (raw, json) Hash identifier: GLTssa41ICMBtipCA+V62cyNywz11Q3QOpboQaIrZ9o= Subject key identifier: 3F:F7:86:BF:C4:EC:E1:2F:35:FA:1A:08:7C:69:08:36:21:95:54:64 Certificate issuer: /CN=8324872b1ddbe3264fa666a66f1f4e4bb52fd854 Certificate serial: 019B7759616CFBF67167FE3946F2B8CE6795 Authority key identifier: 83:24:87:2B:1D:DB:E3:26:4F:A6:66:A6:6F:1F:4E:4B:B5:2F:D8:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/P_eGv8Ts4S81-hoIfGkINiGVVGQ.roa Signing time: Thu 01 Jan 2026 02:18:24 +0000 ROA not before: Thu 01 Jan 2026 02:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206600 IP address blocks: 2001:678:324::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 08:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:61:6c:fb:f6:71:67:fe:39:46:f2:b8:ce:67:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8324872b1ddbe3264fa666a66f1f4e4bb52fd854 Validity Not Before: Jan 1 02:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ff786bfc4ece12f35fa1a087c69083621955464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6f:ea:7b:44:84:3a:e4:22:21:76:e2:3e:e8: 8c:bc:10:e7:f2:70:3a:5e:e3:e1:01:64:68:65:2e: ba:6d:63:51:b3:56:fe:e4:56:ba:14:ce:0a:27:d1: a2:2d:95:2a:83:12:7b:02:5b:55:e7:00:e7:5e:37: 1f:dd:22:a6:f5:49:60:88:52:16:de:97:db:f5:ae: 9a:26:65:3b:9a:04:dc:aa:3a:84:9a:14:d4:24:d9: c5:d2:24:b2:2d:16:69:32:2f:f3:8e:ea:36:e7:a0: 13:61:09:bd:8b:b3:90:c0:71:96:a3:6f:ac:99:7f: c5:f6:13:0d:6c:cb:f1:83:ff:20:26:c0:3a:7a:46: 45:3c:69:49:1d:45:ea:ab:00:2d:04:6c:2d:79:41: 0e:d3:2a:11:fc:2f:1e:a1:5d:75:8c:81:1b:bf:89: 2c:f7:7f:56:9c:90:9a:4b:6f:e3:94:0e:76:07:93: 37:11:3e:a1:57:5a:b6:29:68:ad:a8:6a:63:ae:16: d2:17:e0:df:7a:b9:62:9a:58:8b:3c:0f:16:20:bf: cc:df:49:f7:06:c7:ee:37:9b:6c:d1:e3:af:a2:9f: a8:e4:f1:4f:1d:dd:01:ea:93:79:e3:c7:a6:a4:f6: 10:85:2a:ab:69:96:79:c9:69:c2:55:f2:53:e9:25: ae:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F7:86:BF:C4:EC:E1:2F:35:FA:1A:08:7C:69:08:36:21:95:54:64 X509v3 Authority Key Identifier: keyid:83:24:87:2B:1D:DB:E3:26:4F:A6:66:A6:6F:1F:4E:4B:B5:2F:D8:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/P_eGv8Ts4S81-hoIfGkINiGVVGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:324::/48 Signature Algorithm: sha256WithRSAEncryption 3d:19:f6:c5:a0:a2:43:e7:be:e4:a1:76:5e:97:21:74:42:d3: ba:c3:a0:b7:be:c1:70:03:c4:17:0b:7a:2f:9c:1a:da:3c:a5: 7d:0e:e8:02:d0:59:ea:99:45:20:6a:75:6a:72:ad:e5:ec:79: 21:7a:f3:6c:e2:1c:c8:61:fc:87:56:45:67:3e:7e:1d:bf:f7: 98:5d:8d:5f:b3:4d:08:9e:08:d0:48:50:3e:7b:1d:ac:15:a9: c4:10:58:5d:98:f5:70:58:f1:d6:7a:2b:3b:82:b4:3a:c7:8a: ad:ee:a0:6c:07:ed:00:5e:5a:5c:be:00:96:41:80:30:4c:62: ef:0d:e3:0c:07:9e:ef:77:c6:d1:9b:de:d4:f3:5a:ce:fd:47: 86:fd:1e:cb:3b:3a:3d:92:58:f9:57:1b:12:e2:0a:50:72:39: b3:d9:18:8d:62:20:54:70:61:ed:ae:07:29:53:57:88:63:62: 40:27:d5:72:8c:3a:da:17:4d:3d:5e:6b:9c:89:55:9f:c2:96: 77:0c:97:18:7e:c4:c3:e3:6c:7d:35:08:4f:3a:bb:16:85:81: 45:d4:3e:62:1e:79:4c:83:5d:5a:bb:ba:a8:bb:17:cb:f5:a9: c7:62:41:1f:91:3a:22:b8:1a:fb:62:47:05:ef:9c:d2:1c:1d: 2c:03:32:87 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WWFs+/ZxZ/45RvK4zmeVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMjQ4NzJiMWRkYmUzMjY0ZmE2NjZhNjZmMWY0ZTRiYjUy ZmQ4NTQwHhcNMjYwMTAxMDIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmY3ODZiZmM0ZWNlMTJmMzVmYTFhMDg3YzY5MDgzNjIxOTU1NDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm/qe0SEOuQiIXbiPuiMvBDn8nA6 XuPhAWRoZS66bWNRs1b+5Fa6FM4KJ9GiLZUqgxJ7AltV5wDnXjcf3SKm9UlgiFIW 3pfb9a6aJmU7mgTcqjqEmhTUJNnF0iSyLRZpMi/zjuo256ATYQm9i7OQwHGWo2+s mX/F9hMNbMvxg/8gJsA6ekZFPGlJHUXqqwAtBGwteUEO0yoR/C8eoV11jIEbv4ks 939WnJCaS2/jlA52B5M3ET6hV1q2KWitqGpjrhbSF+DferlimliLPA8WIL/M30n3 BsfuN5ts0eOvop+o5PFPHd0B6pN548empPYQhSqraZZ5yWnCVfJT6SWuJQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFD/3hr/E7OEvNfoaCHxpCDYhlVRkMB8GA1UdIwQY MBaAFIMkhysd2+MmT6Zmpm8fTku1L9hUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3lTSEt4M2I0eVpQcG1hbWJ4OU9TN1V2MkZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS83NzhjNjYtOWE1MS00M2M2LTkyYTct Zjg3YjYyZmI2MWZmLzEvUF9lR3Y4VHM0UzgxLWhvSWZHa0lOaUdWVkdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS83NzhjNjYtOWE1MS00M2M2LTkyYTctZjg3YjYyZmI2MWZm LzEvZ3lTSEt4M2I0eVpQcG1hbWJ4OU9TN1V2MkZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAMk MA0GCSqGSIb3DQEBCwUAA4IBAQA9GfbFoKJD577koXZelyF0QtO6w6C3vsFwA8QX C3ovnBraPKV9DugC0FnqmUUganVqcq3l7HkhevNs4hzIYfyHVkVnPn4dv/eYXY1f s00IngjQSFA+ex2sFanEEFhdmPVwWPHWeis7grQ6x4qt7qBsB+0AXlpcvgCWQYAw TGLvDeMMB57vd8bRm97U81rO/UeG/R7LOzo9klj5VxsS4gpQcjmz2RiNYiBUcGHt rgcpU1eIY2JAJ9VyjDraF009XmuciVWfwpZ3DJcYfsTD42x9NQhPOrsWhYFF1D5i HnlMg11au7qouxfL9anHYkEfkToiuBr7YkcF75zSHB0sAzKH -----END CERTIFICATE-----Generated at Tue Jan 27 12:42:23 2026 by rpki-client