This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/b8CAm_rQtEAP1gGzH70uNRS-qes.roa File: b8CAm_rQtEAP1gGzH70uNRS-qes.roa (raw, json) Hash identifier: FgGmLE4zChuIvuqdSzF1h7R3nc27MpEpqg0NIWrSMtc= Subject key identifier: 6F:C0:80:9B:FA:D0:B4:40:0F:D6:01:B3:1F:BD:2E:35:14:BE:A9:EB Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA765653D1778F1649D54F0A585B028 Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/b8CAm_rQtEAP1gGzH70uNRS-qes.roa Signing time: Fri 02 Jan 2026 12:20:58 +0000 ROA not before: Fri 02 Jan 2026 12:20:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214022 IP address blocks: 2a0a:79c7:f001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:65:65:3d:17:78:f1:64:9d:54:f0:a5:85:b0:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6fc0809bfad0b4400fd601b31fbd2e3514bea9eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:92:46:c1:93:98:7b:91:b8:7b:75:ac:f8:54: 28:37:28:74:fe:8f:73:45:25:85:65:18:92:be:d2: ac:d7:82:15:36:77:2e:50:dc:2d:d6:83:e9:4a:1e: 76:57:5a:84:61:34:30:1e:11:f1:3d:fa:76:fe:95: eb:1a:f0:9d:61:28:4e:30:92:38:1a:20:64:58:7e: 26:a8:07:fd:3f:a6:eb:be:6d:d1:05:b9:01:d4:c5: 51:2e:62:28:2a:14:d0:50:78:06:de:ce:fb:d7:95: 93:24:53:80:6b:07:80:c3:2c:c1:f5:55:0f:f1:18: b0:7c:59:f7:ba:dc:5e:e7:68:33:90:ae:67:b4:4c: 4f:f8:d1:ff:b3:ce:0e:0a:12:26:1c:5e:94:28:20: 9c:6c:a3:39:d2:f4:ef:f5:b0:2e:5d:9a:0d:51:c4: c2:e2:44:b6:48:61:4c:d2:fa:45:ab:7e:e7:b3:7d: 2d:15:34:2e:42:87:2d:9a:72:1e:98:61:b3:a4:29: d5:c8:48:fa:c3:41:4b:b1:bc:13:8d:96:90:31:9d: db:a7:46:4d:4b:43:ca:ad:e2:a4:5e:31:75:78:81: 93:47:fe:26:0e:f9:4d:65:63:79:c1:e7:7f:0c:72: b4:01:1f:ca:ae:69:4d:c8:d5:a3:22:89:dd:f8:e9: a7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C0:80:9B:FA:D0:B4:40:0F:D6:01:B3:1F:BD:2E:35:14:BE:A9:EB X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/b8CAm_rQtEAP1gGzH70uNRS-qes.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:79c7:f001::/48 Signature Algorithm: sha256WithRSAEncryption 5c:38:94:29:71:82:57:3a:75:9f:af:17:fb:57:71:f0:86:8e: 11:e5:21:d0:e1:89:31:a7:9f:1a:4c:a2:ab:2a:c1:8a:e5:9c: a5:91:32:8f:c5:a7:e8:d7:36:e9:5b:c3:f1:f2:a3:32:90:41: 3f:de:18:32:f4:fa:6d:32:24:cf:8a:fe:e9:9a:a7:55:6f:ca: fe:60:92:6c:83:b9:c8:f5:b1:e8:47:ec:19:a2:97:0b:d7:3d: 69:07:70:22:7b:72:2e:cb:d1:53:47:9d:7e:f0:d0:c3:9d:92: 16:ff:a0:e3:a1:fa:a5:4e:62:f7:f4:b1:1d:bd:1d:ca:98:be: 4a:b9:ae:bb:9b:4b:39:2b:5a:b9:19:a4:eb:27:bb:50:79:fc: d7:89:08:86:a8:41:4e:67:e3:c7:1a:0e:f5:45:1f:d7:47:3f: b5:4c:08:39:4d:57:6d:48:5f:46:20:39:fc:7b:e3:74:51:43: 3d:ae:88:c5:1f:91:5f:44:9b:fd:43:52:e9:94:2f:1b:62:9b: d4:c2:74:3f:53:6d:70:a4:86:b1:09:f8:56:70:5b:81:c1:1d: 89:50:49:2a:89:18:cd:60:23:f5:34:e8:52:0d:e0:cf:a7:79: 29:fe:22:58:cf:ee:5b:20:67:ac:e5:ea:69:3e:43:f7:cb:82: a4:7c:b0:42 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+p2VlPRd48WSdVPClhbAoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmMwODA5YmZhZDBiNDQwMGZkNjAxYjMxZmJkMmUzNTE0YmVhOWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5JGwZOYe5G4e3Ws+FQoNyh0/o9z RSWFZRiSvtKs14IVNncuUNwt1oPpSh52V1qEYTQwHhHxPfp2/pXrGvCdYShOMJI4 GiBkWH4mqAf9P6brvm3RBbkB1MVRLmIoKhTQUHgG3s7715WTJFOAaweAwyzB9VUP 8RiwfFn3utxe52gzkK5ntExP+NH/s84OChImHF6UKCCcbKM50vTv9bAuXZoNUcTC 4kS2SGFM0vpFq37ns30tFTQuQoctmnIemGGzpCnVyEj6w0FLsbwTjZaQMZ3bp0ZN S0PKreKkXjF1eIGTR/4mDvlNZWN5wed/DHK0AR/KrmlNyNWjIond+Omn2QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFG/AgJv60LRAD9YBsx+9LjUUvqnrMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvYjhDQW1fclF0RUFQMWdHekg3MHVOUlMtcWVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgp5x/AB MA0GCSqGSIb3DQEBCwUAA4IBAQBcOJQpcYJXOnWfrxf7V3Hwho4R5SHQ4Ykxp58a TKKrKsGK5ZylkTKPxafo1zbpW8Px8qMykEE/3hgy9PptMiTPiv7pmqdVb8r+YJJs g7nI9bHoR+wZopcL1z1pB3Aie3Iuy9FTR51+8NDDnZIW/6DjofqlTmL39LEdvR3K mL5Kua67m0s5K1q5GaTrJ7tQefzXiQiGqEFOZ+PHGg71RR/XRz+1TAg5TVdtSF9G IDn8e+N0UUM9rojFH5FfRJv9Q1LplC8bYpvUwnQ/U21wpIaxCfhWcFuBwR2JUEkq iRjNYCP1NOhSDeDPp3kp/iJYz+5bIGes5eppPkP3y4KkfLBC -----END CERTIFICATE-----Generated at Tue Jan 20 22:47:34 2026 by rpki-client