This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/8s6AG_0JrzjWg4BaNcXSsAEn3Qg.roa File: 8s6AG_0JrzjWg4BaNcXSsAEn3Qg.roa (raw, json) Hash identifier: G1f9dVArvUO/qswkLFrkSyJeGmiXCkjeasIS9BOQinY= Subject key identifier: F2:CE:80:1B:FD:09:AF:38:D6:83:80:5A:35:C5:D2:B0:01:27:DD:08 Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Certificate serial: 019B797F30B55104C55AE423FD4ED94FDDC4 Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/8s6AG_0JrzjWg4BaNcXSsAEn3Qg.roa Signing time: Thu 01 Jan 2026 12:18:57 +0000 ROA not before: Thu 01 Jan 2026 12:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47152 IP address blocks: 2a05:b0c7:5000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 12:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:30:b5:51:04:c5:5a:e4:23:fd:4e:d9:4f:dd:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Validity Not Before: Jan 1 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2ce801bfd09af38d683805a35c5d2b00127dd08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:83:99:c0:fe:f2:8a:f4:96:19:9e:12:08:d9: 6b:51:06:49:f8:db:3f:5f:b3:38:fb:e5:d6:db:3f: 69:18:4b:54:f9:64:2c:ce:f9:11:07:b8:76:1f:7b: 52:97:0f:d5:4a:5e:e3:ff:aa:ac:ea:3d:1a:95:a2: 8e:14:f9:1e:48:69:56:03:50:43:c7:c2:56:31:91: 48:be:36:7a:0d:06:43:f6:54:69:fd:ad:fc:b3:b9: a6:59:e0:bd:45:87:a3:8a:19:07:2e:3a:84:ee:88: 0e:b5:38:26:69:22:c4:e2:79:ba:16:e8:23:3e:8f: c9:42:10:60:91:fd:a5:9c:ed:1b:95:c7:ed:9f:ac: 5b:e4:87:9e:b8:b0:12:8e:c5:39:8a:0d:2a:8e:32: 00:38:1b:fd:3c:ad:d2:d3:58:f1:7b:bd:6a:5d:a1: 78:9f:b8:fd:94:73:88:06:c4:66:16:eb:a7:f7:74: fa:60:9f:37:bc:da:d9:b2:d4:d5:ab:7f:de:1b:e4: ad:14:ef:78:77:01:c8:70:8a:b8:df:ec:ee:79:30: 52:c0:bc:b7:b5:9c:9a:bb:92:db:da:ff:b1:c3:6b: 1e:04:ff:ac:2a:73:2f:4c:b2:de:b0:89:08:5a:84: 85:db:df:85:98:c3:b3:73:9f:56:24:69:b5:b2:1e: 3b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CE:80:1B:FD:09:AF:38:D6:83:80:5A:35:C5:D2:B0:01:27:DD:08 X509v3 Authority Key Identifier: keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/8s6AG_0JrzjWg4BaNcXSsAEn3Qg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:b0c7:5000::/37 Signature Algorithm: sha256WithRSAEncryption 07:b3:26:55:7c:ad:11:89:d6:1c:c3:0d:c4:c5:fa:8c:e0:5f: 2d:24:9c:ef:db:29:b0:3b:b1:08:33:30:90:7a:62:c1:51:e4: 3e:3d:3d:9e:93:43:59:d6:d5:aa:4a:02:dc:f3:63:88:5a:7d: 3e:ba:65:c9:71:bf:39:1b:af:61:91:83:83:4d:cd:98:e7:3f: b0:ff:a3:eb:1a:b1:62:21:db:3d:7c:61:61:fd:ad:2f:59:c0: 5c:31:a5:b3:94:fc:0d:31:34:95:24:8b:f5:1a:ff:02:d0:f5: 77:db:f4:62:38:bf:a5:f1:af:12:df:ea:82:b6:21:28:c2:0c: aa:d5:91:e8:f2:1f:a3:1b:b3:06:07:4b:a2:a1:8e:d4:ad:59: 53:77:d5:77:02:98:ea:62:57:73:ab:69:12:e0:e4:e7:f3:e8: 81:73:f5:c6:7b:bb:f5:ff:37:16:33:76:fc:5d:b3:bc:df:e1: 58:9a:41:e7:9c:5a:0d:e5:ea:ce:08:c4:d6:96:b6:69:ba:9a: b4:e6:61:cf:4c:b9:1c:db:94:ad:41:9c:5f:01:e7:0a:3c:c1: 73:03:40:d5:17:e8:fc:e4:6b:8c:5d:62:3f:26:5a:94:51:1a: 1f:46:40:27:39:64:20:c4:03:1f:82:e9:c1:d9:55:a0:cf:ad: 92:1a:47:06 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt5fzC1UQTFWuQj/U7ZT93EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2 MWY5ZDUwHhcNMjYwMTAxMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmNlODAxYmZkMDlhZjM4ZDY4MzgwNWEzNWM1ZDJiMDAxMjdkZDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoOZwP7yivSWGZ4SCNlrUQZJ+Ns/ X7M4++XW2z9pGEtU+WQszvkRB7h2H3tSlw/VSl7j/6qs6j0alaKOFPkeSGlWA1BD x8JWMZFIvjZ6DQZD9lRp/a38s7mmWeC9RYejihkHLjqE7ogOtTgmaSLE4nm6Fugj Po/JQhBgkf2lnO0blcftn6xb5IeeuLASjsU5ig0qjjIAOBv9PK3S01jxe71qXaF4 n7j9lHOIBsRmFuun93T6YJ83vNrZstTVq3/eG+StFO94dwHIcIq43+zueTBSwLy3 tZyau5Lb2v+xw2seBP+sKnMvTLLesIkIWoSF29+FmMOzc59WJGm1sh47awIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFPLOgBv9Ca841oOAWjXF0rABJ90IMB8GA1UdIwQY MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt YjlkZDUxMDgyNjU1LzEvOHM2QUdfMEpyempXZzRCYU5jWFNzQUVuM1FnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1 LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDKgWwx1Aw DQYJKoZIhvcNAQELBQADggEBAAezJlV8rRGJ1hzDDcTF+ozgXy0knO/bKbA7sQgz MJB6YsFR5D49PZ6TQ1nW1apKAtzzY4hafT66Zclxvzkbr2GRg4NNzZjnP7D/o+sa sWIh2z18YWH9rS9ZwFwxpbOU/A0xNJUki/Ua/wLQ9Xfb9GI4v6XxrxLf6oK2ISjC DKrVkejyH6MbswYHS6KhjtStWVN31XcCmOpiV3OraRLg5Ofz6IFz9cZ7u/X/NxYz dvxds7zf4ViaQeecWg3l6s4IxNaWtmm6mrTmYc9MuRzblK1BnF8B5wo8wXMDQNUX 6Pzka4xdYj8mWpRRGh9GQCc5ZCDEAx+C6cHZVaDPrZIaRwY= -----END CERTIFICATE-----Generated at Sat Jan 10 22:07:07 2026 by rpki-client