This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/8Ljz3seCOU0SNV0gsb7nbyE1us8.roa File: 8Ljz3seCOU0SNV0gsb7nbyE1us8.roa (raw, json) Hash identifier: 5mxn00L/BkHAVIffiKEwefaUdNGKUinwbPLnGWN/DNs= Subject key identifier: F0:B8:F3:DE:C7:82:39:4D:12:35:5D:20:B1:BE:E7:6F:21:35:BA:CF Certificate issuer: /CN=20c5ee02d2e05861dd906fe06b3844f04d378c73 Certificate serial: 019B7D5AD414A1DDF731A4FCAFAD485BB087 Authority key identifier: 20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/8Ljz3seCOU0SNV0gsb7nbyE1us8.roa Signing time: Fri 02 Jan 2026 06:17:43 +0000 ROA not before: Fri 02 Jan 2026 06:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60337 IP address blocks: 2a0a:7d80:1001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:d4:14:a1:dd:f7:31:a4:fc:af:ad:48:5b:b0:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20c5ee02d2e05861dd906fe06b3844f04d378c73 Validity Not Before: Jan 2 06:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0b8f3dec782394d12355d20b1bee76f2135bacf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f8:09:f3:35:49:a7:33:9c:d4:af:aa:80:cd: 82:78:4d:0f:7d:1e:91:b5:82:e5:b6:56:7c:a2:68: e8:d2:d0:c8:9f:0d:b4:0c:e9:69:f4:c1:68:49:7a: d3:29:29:78:6b:53:67:c2:14:66:88:1b:ec:7f:13: 0c:12:77:bc:57:c7:f9:b0:1b:a9:e9:f5:df:7d:f9: b7:55:8f:a9:db:22:33:38:46:1e:44:3b:cd:74:7c: 19:9c:5b:fd:ff:f8:fd:f5:2c:12:24:02:c0:c5:10: 64:06:55:a1:30:d7:52:cc:fd:24:e3:f6:5d:07:54: f5:50:83:f1:aa:17:a8:fe:60:42:a4:5f:d2:f3:f9: 41:0e:1e:50:84:c9:a0:bb:63:82:d4:82:9b:42:6c: 5e:2b:ea:e3:4b:5d:24:7d:c2:c9:15:c9:d9:f4:73: c9:df:8e:80:e2:ab:50:60:f2:84:b2:e5:cf:3b:86: 55:ad:55:de:4d:9c:64:d8:3e:49:5c:72:4d:6b:5b: f5:67:14:80:f8:da:a0:1a:00:be:80:ed:26:dd:78: 19:b9:72:e6:6d:6b:52:db:9c:28:9c:c9:b1:77:4a: d9:e1:5a:5e:1f:a2:82:7c:a2:4d:f6:74:5a:ce:01: 7b:4f:03:7c:ba:1d:22:8c:42:99:fd:e3:bb:7c:cc: d9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B8:F3:DE:C7:82:39:4D:12:35:5D:20:B1:BE:E7:6F:21:35:BA:CF X509v3 Authority Key Identifier: keyid:20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/8Ljz3seCOU0SNV0gsb7nbyE1us8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:7d80:1001::/48 Signature Algorithm: sha256WithRSAEncryption 2d:59:39:f5:ba:bb:11:e4:b2:bf:0f:76:f9:d1:43:aa:a7:1b: 7d:26:ca:27:dc:65:c8:bb:8b:99:d0:cb:3b:b4:d6:1c:50:96: ec:2b:97:bd:98:31:b7:d7:57:ad:b2:c4:d4:df:a5:18:a2:31: 0b:49:57:b2:df:36:fe:58:86:0a:b6:fc:9c:5e:8c:c5:6a:ed: 62:40:ff:18:e0:c9:25:98:78:a7:ad:c9:f1:0f:f8:66:5c:72: b2:79:e0:44:88:d2:5f:1f:fb:ee:0d:93:d7:f4:17:ab:c5:a9: 7c:59:e0:b8:b5:c0:69:42:18:a5:0c:92:de:e1:69:ad:99:27: dc:88:3f:a4:46:12:64:7e:5c:b2:d3:c3:fb:e5:e7:41:90:da: 53:5e:09:c3:cb:9c:58:ca:82:84:88:ec:13:77:d2:82:ee:0d: 5c:cd:fe:4b:39:ed:ff:86:60:1d:3d:2c:45:81:57:ad:04:01: ae:b4:98:cf:5d:4f:6f:15:25:a5:aa:27:fa:bb:9d:ec:31:d7: 05:c9:5a:84:1e:eb:12:06:81:4c:7a:1c:02:5a:1a:b5:63:0e: 64:bf:0c:44:d7:31:60:f8:4a:f0:64:ba:75:dc:94:28:e5:e6: 59:ff:e7:31:76:ea:1b:5f:e2:b3:7e:72:e7:ea:29:6f:16:b5: 3b:2d:d4:1d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9WtQUod33MaT8r61IW7CHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYzVlZTAyZDJlMDU4NjFkZDkwNmZlMDZiMzg0NGYwNGQz NzhjNzMwHhcNMjYwMTAyMDYxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGI4ZjNkZWM3ODIzOTRkMTIzNTVkMjBiMWJlZTc2ZjIxMzViYWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vgJ8zVJpzOc1K+qgM2CeE0PfR6R tYLltlZ8omjo0tDInw20DOlp9MFoSXrTKSl4a1NnwhRmiBvsfxMMEne8V8f5sBup 6fXfffm3VY+p2yIzOEYeRDvNdHwZnFv9//j99SwSJALAxRBkBlWhMNdSzP0k4/Zd B1T1UIPxqheo/mBCpF/S8/lBDh5QhMmgu2OC1IKbQmxeK+rjS10kfcLJFcnZ9HPJ 346A4qtQYPKEsuXPO4ZVrVXeTZxk2D5JXHJNa1v1ZxSA+NqgGgC+gO0m3XgZuXLm bWtS25wonMmxd0rZ4VpeH6KCfKJN9nRazgF7TwN8uh0ijEKZ/eO7fMzZUwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPC4897HgjlNEjVdILG+528hNbrPMB8GA1UdIwQY MBaAFCDF7gLS4Fhh3ZBv4Gs4RPBNN4xzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU1YdUF0TGdXR0hka0dfZ2F6aEU4RTAzakhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85NzkyOTYtZWY3YS00YmFjLThjMTUt Njc3NzEzNTlhMmIzLzEvOExqejNzZUNPVTBTTlYwZ3NiN25ieUUxdXM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC85NzkyOTYtZWY3YS00YmFjLThjMTUtNjc3NzEzNTlhMmIz LzEvSU1YdUF0TGdXR0hka0dfZ2F6aEU4RTAzakhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgp9gBAB MA0GCSqGSIb3DQEBCwUAA4IBAQAtWTn1ursR5LK/D3b50UOqpxt9Json3GXIu4uZ 0Ms7tNYcUJbsK5e9mDG311etssTU36UYojELSVey3zb+WIYKtvycXozFau1iQP8Y 4MklmHinrcnxD/hmXHKyeeBEiNJfH/vuDZPX9Berxal8WeC4tcBpQhilDJLe4Wmt mSfciD+kRhJkflyy08P75edBkNpTXgnDy5xYyoKEiOwTd9KC7g1czf5LOe3/hmAd PSxFgVetBAGutJjPXU9vFSWlqif6u53sMdcFyVqEHusSBoFMehwCWhq1Yw5kvwxE 1zFg+ErwZLp13JQo5eZZ/+cxduobX+KzfnLn6ilvFrU7LdQd -----END CERTIFICATE-----Generated at Mon Jan 26 23:23:23 2026 by rpki-client