This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/8owxK8n2-QPswD9j68BWL204xzM.roa File: 8owxK8n2-QPswD9j68BWL204xzM.roa (raw, json) Hash identifier: drgoQIq2QzWwcI/CWrbliROmqyOkrC7MImFv4B9pohI= Subject key identifier: F2:8C:31:2B:C9:F6:F9:03:EC:C0:3F:63:EB:C0:56:2F:6D:38:C7:33 Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0 Certificate serial: 019B7758D7EB2D0B45D14F2E0BDD4BCF58DC Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/8owxK8n2-QPswD9j68BWL204xzM.roa Signing time: Thu 01 Jan 2026 02:17:49 +0000 ROA not before: Thu 01 Jan 2026 02:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6369 IP address blocks: 2a0f:5707:ae00::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d7:eb:2d:0b:45:d1:4f:2e:0b:dd:4b:cf:58:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0 Validity Not Before: Jan 1 02:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f28c312bc9f6f903ecc03f63ebc0562f6d38c733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:58:ce:ef:1d:de:91:50:6d:0f:6f:81:da:39: 16:fc:d6:b0:04:1c:7c:30:e1:c2:66:c2:62:85:a0: 48:48:b8:1e:d4:89:92:72:a9:fb:34:3d:82:95:50: 6e:52:22:d3:01:86:b2:09:07:b9:8a:91:5a:88:80: 1e:e0:cc:44:a3:48:88:51:04:68:8e:87:25:ba:d8: 5d:1f:35:a1:a2:77:45:8b:0f:2f:b4:90:c5:be:42: ac:7d:a9:34:bd:dc:75:a0:d6:99:1d:c1:2d:be:6c: c7:ff:82:ea:11:da:bb:a0:6f:a6:5e:9d:50:c9:f9: 92:74:93:46:3d:15:8a:c3:5a:9e:2e:4c:dd:e6:5d: e9:6e:b5:bd:6e:5e:cd:51:8f:c6:fc:71:a2:64:86: 00:0f:8f:00:a9:28:fb:33:1f:5e:5c:3e:51:c5:b5: d3:99:8d:6e:ff:a9:cd:7f:3f:e9:79:aa:96:04:d3: 83:1f:28:33:fa:a2:aa:44:90:a6:a1:34:c6:4e:22: 47:34:ef:d5:8f:0d:6a:5b:2c:33:ee:0a:22:e5:5a: 1b:c1:f0:bb:62:34:57:ac:d0:dd:fe:0f:e2:01:c2: 94:7e:c3:0a:f0:c5:d2:bc:b4:35:a6:78:44:e9:6b: 5a:33:ab:9d:69:25:9f:e5:1e:fe:49:7e:74:13:7a: 52:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:8C:31:2B:C9:F6:F9:03:EC:C0:3F:63:EB:C0:56:2F:6D:38:C7:33 X509v3 Authority Key Identifier: keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/8owxK8n2-QPswD9j68BWL204xzM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:5707:ae00::/44 Signature Algorithm: sha256WithRSAEncryption b9:f2:8c:36:a0:b5:02:ff:a2:df:b7:fc:59:92:83:21:66:df: 84:19:12:03:07:84:f5:5f:72:c0:df:e3:b0:52:e4:92:54:c1: 34:da:ae:08:7e:22:41:cf:40:e9:e8:d1:18:25:c5:6f:06:97: 20:93:fa:64:c2:c0:b9:70:2f:4f:66:5c:7b:bb:f3:2c:2a:73: 78:5b:6b:a3:72:7b:3e:59:8e:34:6b:e8:a1:bf:62:2b:49:24: e7:4f:e1:57:91:a3:65:f9:d5:66:ef:aa:26:6e:9c:26:21:35: ad:e4:00:9e:4b:75:e9:ce:52:53:55:8c:a6:35:0f:58:aa:02: b8:42:b2:b7:b5:6d:5b:7a:d1:43:35:c0:c8:a6:7f:68:09:64: 2a:bc:81:13:f1:3b:6a:42:c8:5a:cc:18:7f:2e:6f:0d:f2:3f: e5:3e:1c:3b:ed:87:12:59:ec:8c:2c:8e:01:76:84:37:8e:96: 98:d0:9b:e4:32:9e:56:fe:66:ca:ca:2d:9d:d3:2c:ba:51:f5: 7e:9e:0c:8b:56:0e:46:32:74:fc:a0:7f:a9:95:5f:de:74:45: 8f:3c:17:4b:37:84:56:38:5d:b4:28:65:8b:6b:ce:62:e0:30: 44:6a:62:85:1a:ea:71:59:b3:9b:f7:63:d1:ef:90:2f:3b:24: 88:08:5e:ef -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WNfrLQtF0U8uC91Lz1jcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk NWFlZjAwHhcNMjYwMTAxMDIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjhjMzEyYmM5ZjZmOTAzZWNjMDNmNjNlYmMwNTYyZjZkMzhjNzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArljO7x3ekVBtD2+B2jkW/NawBBx8 MOHCZsJihaBISLge1ImScqn7ND2ClVBuUiLTAYayCQe5ipFaiIAe4MxEo0iIUQRo jocluthdHzWhondFiw8vtJDFvkKsfak0vdx1oNaZHcEtvmzH/4LqEdq7oG+mXp1Q yfmSdJNGPRWKw1qeLkzd5l3pbrW9bl7NUY/G/HGiZIYAD48AqSj7Mx9eXD5RxbXT mY1u/6nNfz/peaqWBNODHygz+qKqRJCmoTTGTiJHNO/Vjw1qWywz7goi5VobwfC7 YjRXrNDd/g/iAcKUfsMK8MXSvLQ1pnhE6WtaM6udaSWf5R7+SX50E3pSfwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPKMMSvJ9vkD7MA/Y+vAVi9tOMczMB8GA1UdIwQY MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt Y2MxYzliNWY2NjQwLzEvOG93eEs4bjItUVBzd0Q5ajY4QldMMjA0eHpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg9XB64A MA0GCSqGSIb3DQEBCwUAA4IBAQC58ow2oLUC/6Lft/xZkoMhZt+EGRIDB4T1X3LA 3+OwUuSSVME02q4IfiJBz0Dp6NEYJcVvBpcgk/pkwsC5cC9PZlx7u/MsKnN4W2uj cns+WY40a+ihv2IrSSTnT+FXkaNl+dVm76ombpwmITWt5ACeS3XpzlJTVYymNQ9Y qgK4QrK3tW1betFDNcDIpn9oCWQqvIET8TtqQshazBh/Lm8N8j/lPhw77YcSWeyM LI4BdoQ3jpaY0JvkMp5W/mbKyi2d0yy6UfV+ngyLVg5GMnT8oH+plV/edEWPPBdL N4RWOF20KGWLa85i4DBEamKFGupxWbOb92PR75AvOySICF7v -----END CERTIFICATE-----Generated at Mon Jan 26 12:32:29 2026 by rpki-client