This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/O8aab7ETvqqwSTW9yBuIrVx21zA.roa File: O8aab7ETvqqwSTW9yBuIrVx21zA.roa (raw, json) Hash identifier: bF8gQPkhavadSZ42TEdRPqMvaurgxudJuIdc/vCC8/Y= Subject key identifier: 3B:C6:9A:6F:B1:13:BE:AA:B0:49:35:BD:C8:1B:88:AD:5C:76:D7:30 Certificate issuer: /CN=20c8d5c373a6bf3bab229394360b86d0096aecbd Certificate serial: 019B7F83EF39DCE1B3951500A79EAD4F1F87 Authority key identifier: 20:C8:D5:C3:73:A6:BF:3B:AB:22:93:94:36:0B:86:D0:09:6A:EC:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMjVw3OmvzurIpOUNguG0Alq7L0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/O8aab7ETvqqwSTW9yBuIrVx21zA.roa Signing time: Fri 02 Jan 2026 16:21:51 +0000 ROA not before: Fri 02 Jan 2026 16:21:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211742 IP address blocks: 2001:67c:293c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.mft rsync://rpki.ripe.net/repository/DEFAULT/IMjVw3OmvzurIpOUNguG0Alq7L0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:ef:39:dc:e1:b3:95:15:00:a7:9e:ad:4f:1f:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20c8d5c373a6bf3bab229394360b86d0096aecbd Validity Not Before: Jan 2 16:21:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3bc69a6fb113beaab04935bdc81b88ad5c76d730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:12:0c:c3:c7:84:36:72:9d:ed:06:01:cc:91: 13:7f:c5:a6:26:9b:0f:7a:9a:dc:f2:ad:e0:b9:ca: b3:5f:80:90:71:fb:7b:33:35:09:6d:0e:a3:2f:9d: b4:0a:b2:4f:24:47:47:5d:73:3f:25:7f:26:a7:b3: 27:04:dc:26:d3:ac:1e:bb:54:56:23:4d:5a:78:a1: 1f:ff:98:87:5b:2c:40:3c:30:44:6d:c6:44:31:bf: f6:98:d9:ed:6b:17:e0:c7:83:fa:42:f6:23:a7:0c: f8:e4:d0:18:56:ed:7b:ae:92:3d:ca:2e:a4:72:0d: 46:76:cf:07:fc:89:d0:5d:6d:cf:eb:17:b2:82:b2: de:bd:b6:71:8c:27:c2:57:fa:5b:b7:fb:9d:8f:e5: ae:84:81:61:22:8d:a8:5e:65:b9:e0:11:aa:11:65: fd:f1:28:6d:07:fc:9f:44:66:dc:4a:e6:7e:78:d4: 0a:53:a6:2a:cc:2f:fb:f2:76:36:de:fd:75:c8:ce: 57:8a:ad:9f:ce:ce:47:ed:96:55:6d:de:13:3b:4b: 7e:0f:7d:56:70:5f:7c:7f:37:98:6e:9f:ac:f8:7e: e7:7b:04:77:c4:7d:20:04:b6:20:78:e5:9b:9f:fb: 67:2a:e8:34:58:2b:aa:3c:b4:00:81:bd:83:2f:ea: cd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C6:9A:6F:B1:13:BE:AA:B0:49:35:BD:C8:1B:88:AD:5C:76:D7:30 X509v3 Authority Key Identifier: keyid:20:C8:D5:C3:73:A6:BF:3B:AB:22:93:94:36:0B:86:D0:09:6A:EC:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMjVw3OmvzurIpOUNguG0Alq7L0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/O8aab7ETvqqwSTW9yBuIrVx21zA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:293c::/48 Signature Algorithm: sha256WithRSAEncryption 83:6a:76:40:cd:ea:7c:30:3e:0a:76:aa:dc:a1:55:1d:09:42: 45:b5:18:c6:53:19:69:bf:fe:10:ef:3a:b0:4a:54:96:37:c6: c9:86:9b:4b:0a:a7:d0:8c:a6:e4:af:47:25:d4:ee:ba:09:5a: 8d:9a:3f:a0:52:41:3f:c2:96:1a:46:cd:f2:65:06:af:41:96: ec:3d:af:23:3a:23:34:8c:1d:a9:ea:98:04:b6:7e:71:75:b0: 35:00:cf:7e:4a:50:62:b2:83:d6:d7:82:0d:b2:5d:97:2b:f7: 37:1a:f1:0b:0c:d2:06:7e:b0:47:18:77:ae:5f:8e:6d:3d:b3: a1:d8:9d:ae:c8:a8:e9:66:44:53:ae:59:8c:68:1f:6a:fe:7e: ef:37:47:cc:8c:94:53:b9:aa:d8:83:3a:48:0b:65:c5:36:05: 5c:ed:a9:43:58:43:94:3b:fc:56:71:7e:42:c6:f0:1b:ed:8d: f6:72:5d:46:07:4a:b5:72:b1:fd:48:ee:19:b6:1f:bb:25:c4: be:e7:72:45:91:ca:8d:5a:23:0b:e4:92:0c:15:77:32:f8:d3: cd:26:7f:56:4e:24:85:6f:2d:fb:e2:1e:89:72:c0:ab:80:8e: 8c:f5:a9:fe:24:ee:0e:56:68:7c:1d:cc:8f:cd:86:39:8c:d3: 80:db:0b:29 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/g+853OGzlRUAp56tTx+HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYzhkNWMzNzNhNmJmM2JhYjIyOTM5NDM2MGI4NmQwMDk2 YWVjYmQwHhcNMjYwMTAyMTYyMTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmM2OWE2ZmIxMTNiZWFhYjA0OTM1YmRjODFiODhhZDVjNzZkNzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhIMw8eENnKd7QYBzJETf8WmJpsP eprc8q3gucqzX4CQcft7MzUJbQ6jL520CrJPJEdHXXM/JX8mp7MnBNwm06weu1RW I01aeKEf/5iHWyxAPDBEbcZEMb/2mNntaxfgx4P6QvYjpwz45NAYVu17rpI9yi6k cg1Gds8H/InQXW3P6xeygrLevbZxjCfCV/pbt/udj+WuhIFhIo2oXmW54BGqEWX9 8ShtB/yfRGbcSuZ+eNQKU6YqzC/78nY23v11yM5Xiq2fzs5H7ZZVbd4TO0t+D31W cF98fzeYbp+s+H7newR3xH0gBLYgeOWbn/tnKug0WCuqPLQAgb2DL+rNUwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDvGmm+xE76qsEk1vcgbiK1cdtcwMB8GA1UdIwQY MBaAFCDI1cNzpr87qyKTlDYLhtAJauy9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU1qVnczT212enVySXBPVU5ndUcwQWxxN0wwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84ZTk4NTUtNTk4OS00ODZlLTk0MzYt NTBhN2M5MjU5MWQwLzEvTzhhYWI3RVR2cXF3U1RXOXlCdUlyVngyMXpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy84ZTk4NTUtNTk4OS00ODZlLTk0MzYtNTBhN2M5MjU5MWQw LzEvSU1qVnczT212enVySXBPVU5ndUcwQWxxN0wwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCk8 MA0GCSqGSIb3DQEBCwUAA4IBAQCDanZAzep8MD4KdqrcoVUdCUJFtRjGUxlpv/4Q 7zqwSlSWN8bJhptLCqfQjKbkr0cl1O66CVqNmj+gUkE/wpYaRs3yZQavQZbsPa8j OiM0jB2p6pgEtn5xdbA1AM9+SlBisoPW14INsl2XK/c3GvELDNIGfrBHGHeuX45t PbOh2J2uyKjpZkRTrlmMaB9q/n7vN0fMjJRTuarYgzpIC2XFNgVc7alDWEOUO/xW cX5CxvAb7Y32cl1GB0q1crH9SO4Zth+7JcS+53JFkcqNWiML5JIMFXcy+NPNJn9W TiSFby374h6JcsCrgI6M9an+JO4OVmh8HcyPzYY5jNOA2wsp -----END CERTIFICATE-----Generated at Tue Feb 10 04:01:04 2026 by rpki-client