This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/_8VJWkXr3bzkwgkhCXmclje7ivw.roa File: _8VJWkXr3bzkwgkhCXmclje7ivw.roa (raw, json) Hash identifier: zaM4bElEDCzEKiBqEWYy0K32aC7wXL/fnEdwKNc1ylk= Subject key identifier: FF:C5:49:5A:45:EB:DD:BC:E4:C2:09:21:09:79:9C:96:37:BB:8A:FC Certificate issuer: /CN=a41f7bb7bea1581624fcb6503ab5a70f420c9b3e Certificate serial: 019B7D5C7EE96196BB97A71EE18DE3468C7B Authority key identifier: A4:1F:7B:B7:BE:A1:58:16:24:FC:B6:50:3A:B5:A7:0F:42:0C:9B:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/_8VJWkXr3bzkwgkhCXmclje7ivw.roa Signing time: Fri 02 Jan 2026 06:19:32 +0000 ROA not before: Fri 02 Jan 2026 06:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 2001:678:105c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:7e:e9:61:96:bb:97:a7:1e:e1:8d:e3:46:8c:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a41f7bb7bea1581624fcb6503ab5a70f420c9b3e Validity Not Before: Jan 2 06:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffc5495a45ebddbce4c2092109799c9637bb8afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f3:b1:f5:99:a9:f5:0d:11:82:58:15:56:56: 6f:ce:c1:13:83:f9:a5:1e:e6:95:8a:bc:db:fa:42: 96:3e:11:f9:72:85:a8:d6:c9:e0:e8:5b:23:22:65: 5b:77:22:5f:ce:1a:32:d1:2d:c1:c2:8a:82:91:e5: 6a:e4:aa:1d:e4:d6:70:b3:ae:eb:7b:52:f3:f8:07: 23:6c:b9:63:1b:d5:31:3a:64:6f:50:96:b6:2d:35: b2:1d:8c:2c:bb:a2:b5:8e:ac:39:e2:9f:6f:06:3d: ce:a6:44:14:7c:a2:29:a7:c3:6f:3f:18:18:c1:ad: e7:48:28:25:af:0d:5f:72:16:a3:15:24:d2:30:19: d8:68:3d:17:6a:36:f5:db:b8:a4:0e:82:21:fd:4f: a1:77:dc:fb:b7:48:31:16:c3:41:b0:10:52:f7:0e: b8:b6:6f:45:90:b1:1a:8e:9d:21:d7:f7:95:25:20: db:16:37:f0:12:5c:b9:b5:77:bc:04:ad:04:20:77: 31:35:97:fd:f8:5f:75:22:9d:9c:05:87:21:e4:07: 42:c8:bf:f4:c4:51:f5:22:87:a6:f0:ff:b6:ee:de: b5:f7:55:10:50:d8:6d:54:4b:67:53:38:b4:04:28: 48:d1:6f:b7:ac:38:4a:4c:b2:39:a3:17:2a:af:e1: 62:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C5:49:5A:45:EB:DD:BC:E4:C2:09:21:09:79:9C:96:37:BB:8A:FC X509v3 Authority Key Identifier: keyid:A4:1F:7B:B7:BE:A1:58:16:24:FC:B6:50:3A:B5:A7:0F:42:0C:9B:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/_8VJWkXr3bzkwgkhCXmclje7ivw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:105c::/48 Signature Algorithm: sha256WithRSAEncryption 67:0a:32:7e:6f:4d:58:a2:9a:fb:ac:67:80:18:1d:f7:d7:32: b0:04:ef:65:c0:bd:6e:a8:4b:52:44:2f:56:a6:7a:30:fd:1c: d8:c8:7f:e9:af:5b:7d:50:2d:e9:6f:ac:b2:e8:77:35:b4:51: 65:2c:58:96:a7:e1:95:e7:14:0a:08:3c:f1:c3:54:47:70:f9: 36:b3:73:b7:0a:97:e3:cb:4d:49:79:e4:f9:2a:de:ba:12:99: c7:60:2d:30:2a:df:fb:97:cf:63:00:5a:74:36:2c:0f:67:6a: 67:b8:0b:00:f9:94:ad:47:6c:c4:3d:7e:77:1c:d2:1c:71:06: fe:fa:c8:83:1c:a9:98:2a:0f:1d:86:61:eb:5f:49:98:a6:d2: fe:6c:2b:63:ff:e2:98:6b:b9:25:76:01:e0:31:ba:2d:26:db: 58:e8:d7:d3:94:7e:08:8d:6d:88:29:97:87:97:6e:d3:ec:ce: cd:73:0c:4f:1b:4a:fc:78:1f:f8:11:a1:44:97:11:1f:72:a1: 8a:df:f1:bc:e6:ee:58:e2:dd:8c:44:d6:98:b8:2c:6c:35:29: 18:a2:ab:04:7d:0f:36:01:18:9e:d6:1b:4f:74:c8:7e:43:6a: 27:8b:36:d9:d1:25:a9:8a:6e:3a:b5:2c:a3:78:6a:44:16:6f: 37:2b:f1:13 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XH7pYZa7l6ce4Y3jRox7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MWY3YmI3YmVhMTU4MTYyNGZjYjY1MDNhYjVhNzBmNDIw YzliM2UwHhcNMjYwMTAyMDYxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmM1NDk1YTQ1ZWJkZGJjZTRjMjA5MjEwOTc5OWM5NjM3YmI4YWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPOx9Zmp9Q0RglgVVlZvzsETg/ml HuaVirzb+kKWPhH5coWo1sng6FsjImVbdyJfzhoy0S3BwoqCkeVq5Kod5NZws67r e1Lz+AcjbLljG9UxOmRvUJa2LTWyHYwsu6K1jqw54p9vBj3OpkQUfKIpp8NvPxgY wa3nSCglrw1fchajFSTSMBnYaD0Xajb127ikDoIh/U+hd9z7t0gxFsNBsBBS9w64 tm9FkLEajp0h1/eVJSDbFjfwEly5tXe8BK0EIHcxNZf9+F91Ip2cBYch5AdCyL/0 xFH1Ioem8P+27t6191UQUNhtVEtnUzi0BChI0W+3rDhKTLI5oxcqr+Fi1QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFP/FSVpF69285MIJIQl5nJY3u4r8MB8GA1UdIwQY MBaAFKQfe7e+oVgWJPy2UDq1pw9CDJs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEI5N3Q3NmhXQllrX0xaUU9yV25EMElNbXo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yMTYwZjQtN2Q1Ny00YzdjLTg5YWYt OThmMWEyZGZjMzljLzEvXzhWSldrWHIzYnprd2draENYbWNsamU3aXZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8yMTYwZjQtN2Q1Ny00YzdjLTg5YWYtOThmMWEyZGZjMzlj LzEvcEI5N3Q3NmhXQllrX0xaUU9yV25EMElNbXo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBBc MA0GCSqGSIb3DQEBCwUAA4IBAQBnCjJ+b01Yopr7rGeAGB331zKwBO9lwL1uqEtS RC9Wpnow/RzYyH/pr1t9UC3pb6yy6Hc1tFFlLFiWp+GV5xQKCDzxw1RHcPk2s3O3 Cpfjy01JeeT5Kt66EpnHYC0wKt/7l89jAFp0NiwPZ2pnuAsA+ZStR2zEPX53HNIc cQb++siDHKmYKg8dhmHrX0mYptL+bCtj/+KYa7kldgHgMbotJttY6NfTlH4IjW2I KZeHl27T7M7NcwxPG0r8eB/4EaFElxEfcqGK3/G85u5Y4t2MRNaYuCxsNSkYoqsE fQ82ARie1htPdMh+Q2onizbZ0SWpim46tSyjeGpEFm83K/ET -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:13 2026 by rpki-client