This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/j8vNC93uxoh-4kk4cHhskKuIFe4.roa File: j8vNC93uxoh-4kk4cHhskKuIFe4.roa (raw, json) Hash identifier: BN9kSSFWkYcPXBEGoOjVhdYG3iHtGqPP4CWGHkZ5iSk= Subject key identifier: 8F:CB:CD:0B:DD:EE:C6:88:7E:E2:49:38:70:78:6C:90:AB:88:15:EE Certificate issuer: /CN=0d6bb59e97bf3b1efc3569df956c45e472849861 Certificate serial: 019B7E38EAF4FFEC1B11C17BC3E60B927FFF Authority key identifier: 0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/j8vNC93uxoh-4kk4cHhskKuIFe4.roa Signing time: Fri 02 Jan 2026 10:20:17 +0000 ROA not before: Fri 02 Jan 2026 10:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40999 IP address blocks: 178.16.48.0/22 maxlen: 22 2a04:2100::/32 maxlen: 32 2a04:2101::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ea:f4:ff:ec:1b:11:c1:7b:c3:e6:0b:92:7f:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d6bb59e97bf3b1efc3569df956c45e472849861 Validity Not Before: Jan 2 10:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8fcbcd0bddeec6887ee2493870786c90ab8815ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3c:e1:04:4a:da:70:ea:74:e1:6b:5e:36:20: 66:a9:35:b9:69:4c:72:1c:25:4e:82:a3:d3:07:47: 35:a3:f6:eb:35:b6:b7:ab:a3:2e:d5:b2:cf:24:93: b0:44:79:2a:7f:22:4d:25:31:cd:a6:23:17:ea:5e: fb:b3:16:92:51:4c:38:c2:ef:75:fa:0c:80:8b:f9: f0:c7:6b:03:7a:c7:e3:f5:5a:95:89:c2:b8:eb:65: 35:c5:45:d0:0f:31:db:2a:6d:70:58:61:69:c5:e5: 8e:2e:b1:fb:da:58:e8:2b:04:e0:43:14:11:1c:94: 81:f4:a8:fd:0f:6c:74:f7:43:3e:80:40:a1:98:9b: 82:e3:b6:9b:dc:35:d9:a0:a9:f7:cf:dc:b0:00:89: 71:67:7a:d5:52:e6:03:78:e2:ed:fd:96:d4:08:96: f6:e7:ee:cb:42:d5:0d:d1:de:d5:3c:fb:b0:b2:de: 87:07:ca:7f:34:40:36:78:31:6d:05:99:b8:72:c6: ac:11:a5:b7:03:ef:86:a5:3c:31:64:43:13:9c:b5: ba:5f:91:7b:72:61:76:7f:25:d6:2f:68:9a:58:ac: 03:77:e6:61:86:ec:a3:56:14:36:b2:17:45:b7:b4: b5:cf:65:38:19:95:ad:10:f9:42:48:2b:56:35:4d: 58:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:CB:CD:0B:DD:EE:C6:88:7E:E2:49:38:70:78:6C:90:AB:88:15:EE X509v3 Authority Key Identifier: keyid:0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/j8vNC93uxoh-4kk4cHhskKuIFe4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.16.48.0/22 IPv6: 2a04:2100::/31 Signature Algorithm: sha256WithRSAEncryption 1e:9a:46:35:8d:ab:53:55:a9:35:7c:50:08:86:dd:12:5b:5c: 22:39:16:f3:17:76:4f:e2:66:91:6b:f6:b2:30:eb:bb:67:f0: 6f:a4:e2:36:73:f7:19:04:5c:8c:4e:cb:03:11:d3:53:26:92: 65:e3:82:37:95:68:db:9b:7b:b2:67:9e:fd:66:b3:1b:5c:eb: 13:b5:6e:99:b2:60:1a:e5:fe:e0:1e:20:9d:14:86:3d:d8:16: de:31:8b:2c:dc:6a:e7:7e:af:c9:a2:af:66:3e:6c:cb:64:cf: 46:a2:05:83:12:99:8f:76:8c:96:43:a0:f5:a5:49:4c:c8:4d: d9:02:a4:7c:df:43:be:af:d5:73:3d:d9:28:b4:6a:ad:d0:c9: 40:cf:cd:a3:b8:38:53:a7:24:38:fd:9f:68:cd:31:ec:1d:f1: c9:75:45:8b:90:a1:23:f9:d9:1e:44:26:ec:c7:d4:be:32:2c: 39:85:48:e7:d2:f2:17:df:d2:63:eb:3e:38:c2:80:09:a1:34: 85:f8:19:c4:1f:ff:11:6c:9f:70:0c:96:e6:f0:1f:b7:73:ca: f3:e9:5e:73:1d:0f:46:14:98:1e:f8:24:cc:af:86:3d:c7:3d: 06:4e:b1:83:ea:3c:9d:7f:c8:2e:3b:e8:3a:c0:ac:35:69:df: 1c:51:99:85 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OOr0/+wbEcF7w+YLkn//MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNmJiNTllOTdiZjNiMWVmYzM1NjlkZjk1NmM0NWU0NzI4 NDk4NjEwHhcNMjYwMTAyMTAyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmNiY2QwYmRkZWVjNjg4N2VlMjQ5Mzg3MDc4NmM5MGFiODgxNWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTzhBEracOp04WteNiBmqTW5aUxy HCVOgqPTB0c1o/brNba3q6Mu1bLPJJOwRHkqfyJNJTHNpiMX6l77sxaSUUw4wu91 +gyAi/nwx2sDesfj9VqVicK462U1xUXQDzHbKm1wWGFpxeWOLrH72ljoKwTgQxQR HJSB9Kj9D2x090M+gEChmJuC47ab3DXZoKn3z9ywAIlxZ3rVUuYDeOLt/ZbUCJb2 5+7LQtUN0d7VPPuwst6HB8p/NEA2eDFtBZm4csasEaW3A++GpTwxZEMTnLW6X5F7 cmF2fyXWL2iaWKwDd+ZhhuyjVhQ2shdFt7S1z2U4GZWtEPlCSCtWNU1YIwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFI/LzQvd7saIfuJJOHB4bJCriBXuMB8GA1UdIwQY MBaAFA1rtZ6Xvzse/DVp35VsReRyhJhhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFd1MW5wZV9PeDc4TlduZmxXeEY1SEtFbUdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZDNkZTQtNzZhNS00OTQxLWI2MjYt ZTk1NGUxNmFiMjdkLzEvajh2TkM5M3V4b2gtNGtrNGNIaHNrS3VJRmU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85ZDNkZTQtNzZhNS00OTQxLWI2MjYtZTk1NGUxNmFiMjdk LzEvRFd1MW5wZV9PeDc4TlduZmxXeEY1SEtFbUdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCshAwMA0E AgACMAcDBQEqBCEAMA0GCSqGSIb3DQEBCwUAA4IBAQAemkY1jatTVak1fFAIht0S W1wiORbzF3ZP4maRa/ayMOu7Z/BvpOI2c/cZBFyMTssDEdNTJpJl44I3lWjbm3uy Z579ZrMbXOsTtW6ZsmAa5f7gHiCdFIY92BbeMYss3Grnfq/Joq9mPmzLZM9GogWD EpmPdoyWQ6D1pUlMyE3ZAqR830O+r9VzPdkotGqt0MlAz82juDhTpyQ4/Z9ozTHs HfHJdUWLkKEj+dkeRCbsx9S+Miw5hUjn0vIX39Jj6z44woAJoTSF+BnEH/8RbJ9w DJbm8B+3c8rz6V5zHQ9GFJge+CTMr4Y9xz0GTrGD6jydf8guO+g6wKw1ad8cUZmF -----END CERTIFICATE-----Generated at Thu Feb 5 19:43:49 2026 by rpki-client