This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/08tWIG0PWPMB6teHHPxQow1s2uE.roa File: 08tWIG0PWPMB6teHHPxQow1s2uE.roa (raw, json) Hash identifier: TRz7F0l+NZVOM8RvaeEJy+Qjij2W704OcN/st69PivQ= Subject key identifier: D3:CB:56:20:6D:0F:58:F3:01:EA:D7:87:1C:FC:50:A3:0D:6C:DA:E1 Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 019B76EB85A04A1ADAD7DEAA793CC2F67A15 Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/08tWIG0PWPMB6teHHPxQow1s2uE.roa Signing time: Thu 01 Jan 2026 00:18:25 +0000 ROA not before: Thu 01 Jan 2026 00:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51765 IP address blocks: 2a11:840:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:85:a0:4a:1a:da:d7:de:aa:79:3c:c2:f6:7a:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Jan 1 00:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3cb56206d0f58f301ead7871cfc50a30d6cdae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6e:a5:cd:c1:37:c0:2e:3c:d2:c5:59:e3:21: 70:1b:a4:33:24:3c:da:5a:be:79:25:20:16:bb:51: f8:e1:0c:25:9f:a4:e4:d8:7a:28:56:f3:46:0c:04: 45:b4:6a:9d:d5:34:01:f3:e3:d1:63:91:a4:a3:10: 1e:44:a6:41:4d:0b:1d:97:80:74:f3:5d:74:e4:6c: 0f:52:5f:40:5d:b0:75:36:d6:ff:be:86:7b:02:c3: a7:99:f7:c1:bb:d8:c0:29:d3:5f:27:3f:34:f8:30: 73:a0:f5:22:30:85:dd:ee:39:21:d0:4b:13:fd:4f: a5:7d:83:14:be:92:66:b7:78:da:e2:8b:68:54:90: 21:f2:73:f2:6c:36:1c:1b:b1:fe:22:00:9f:aa:33: 60:a3:f5:53:9b:99:ea:5b:77:be:b0:5a:0d:4e:61: e2:2e:b3:f8:ee:a8:45:b8:f4:63:09:25:2e:91:a4: 5c:0b:2a:8f:de:28:99:33:21:c0:7c:aa:1b:32:6c: 61:4b:c2:c7:96:1a:cd:7c:28:cd:58:54:63:ba:4d: 1f:e4:f9:03:ae:da:90:e6:49:0a:26:72:35:22:79: b8:26:e9:9b:82:b1:bb:e3:31:af:25:fa:0d:78:af: b9:de:3b:e4:04:93:c2:5a:18:0c:02:3f:74:71:a7: c0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CB:56:20:6D:0F:58:F3:01:EA:D7:87:1C:FC:50:A3:0D:6C:DA:E1 X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/08tWIG0PWPMB6teHHPxQow1s2uE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:840:21::/48 Signature Algorithm: sha256WithRSAEncryption 57:7a:f4:2b:61:c3:16:82:8d:58:c7:62:d5:c1:a4:84:57:e8: 6a:96:66:e3:4a:67:16:3d:1b:e5:d3:63:f9:ad:03:22:0f:8f: 4b:5f:78:f7:f0:93:26:ff:84:8f:08:7a:9c:c2:14:2e:ec:55: 5f:8c:a2:ac:af:fb:41:39:3a:7d:0d:f1:69:6a:1b:dc:c4:39: 89:53:0a:6a:14:f6:53:35:31:d7:ed:fb:37:62:9c:96:c3:8a: 73:81:95:2d:e8:00:dd:86:27:a9:7d:c1:ce:d9:de:9b:5d:a4: e4:4a:5e:47:18:bc:ac:a0:4f:69:e6:9e:2f:e7:42:32:94:5c: 73:9b:b2:5b:68:37:6e:d8:cb:a6:d4:1c:6d:43:db:6a:22:39: 6c:5f:e2:c5:95:7e:4a:0f:e9:89:4f:ce:c8:79:c8:9f:9c:8e: 4c:bb:1d:a5:85:7c:b0:3a:f2:a2:0d:8e:de:4f:35:e7:94:65: 4d:b6:fb:72:e4:c6:ba:aa:28:2a:71:b8:2e:ce:cd:9f:92:7a: 75:a3:e8:60:7b:14:c0:dd:57:99:4b:4c:ef:3e:23:d2:e0:0a: f5:ec:7d:bd:43:90:59:99:87:c6:19:d4:46:1f:24:6d:8f:1f: a0:2a:99:86:0c:91:bb:e7:f0:d7:fe:3f:0b:63:2c:11:b2:46: fc:47:e1:c6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt264WgShra196qeTzC9noVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjYwMTAxMDAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2NiNTYyMDZkMGY1OGYzMDFlYWQ3ODcxY2ZjNTBhMzBkNmNkYWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG6lzcE3wC480sVZ4yFwG6QzJDza Wr55JSAWu1H44Qwln6Tk2HooVvNGDARFtGqd1TQB8+PRY5GkoxAeRKZBTQsdl4B0 81105GwPUl9AXbB1Ntb/voZ7AsOnmffBu9jAKdNfJz80+DBzoPUiMIXd7jkh0EsT /U+lfYMUvpJmt3ja4otoVJAh8nPybDYcG7H+IgCfqjNgo/VTm5nqW3e+sFoNTmHi LrP47qhFuPRjCSUukaRcCyqP3iiZMyHAfKobMmxhS8LHlhrNfCjNWFRjuk0f5PkD rtqQ5kkKJnI1Inm4JumbgrG74zGvJfoNeK+53jvkBJPCWhgMAj90cafAewIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNPLViBtD1jzAerXhxz8UKMNbNrhMB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvMDh0V0lHMFBXUE1CNnRlSEhQeFFvdzFzMnVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhEIQAAh MA0GCSqGSIb3DQEBCwUAA4IBAQBXevQrYcMWgo1Yx2LVwaSEV+hqlmbjSmcWPRvl 02P5rQMiD49LX3j38JMm/4SPCHqcwhQu7FVfjKKsr/tBOTp9DfFpahvcxDmJUwpq FPZTNTHX7fs3YpyWw4pzgZUt6ADdhiepfcHO2d6bXaTkSl5HGLysoE9p5p4v50Iy lFxzm7JbaDdu2Mum1BxtQ9tqIjlsX+LFlX5KD+mJT87IecifnI5Mux2lhXywOvKi DY7eTzXnlGVNtvty5Ma6qigqcbguzs2fknp1o+hgexTA3VeZS0zvPiPS4Ar17H29 Q5BZmYfGGdRGHyRtjx+gKpmGDJG75/DX/j8LYywRskb8R+HG -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:18 2026 by rpki-client