This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/l8WM5SXhhLHZk6-0rTuPZujifDU.roa File: l8WM5SXhhLHZk6-0rTuPZujifDU.roa (raw, json) Hash identifier: OwasY0cE4RjsEomhMQYGit6AbKnSUZ5M+37Aov/WE20= Subject key identifier: 97:C5:8C:E5:25:E1:84:B1:D9:93:AF:B4:AD:3B:8F:66:E8:E2:7C:35 Certificate issuer: /CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0 Certificate serial: 019B7CEE56143A7BAF28FB7E3CBEF29ED7E3 Authority key identifier: F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/l8WM5SXhhLHZk6-0rTuPZujifDU.roa Signing time: Fri 02 Jan 2026 04:19:12 +0000 ROA not before: Fri 02 Jan 2026 04:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207713 IP address blocks: 2a00:b703:fff1::/48 maxlen: 48 2a00:b703:fff2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 16:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:56:14:3a:7b:af:28:fb:7e:3c:be:f2:9e:d7:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0 Validity Not Before: Jan 2 04:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97c58ce525e184b1d993afb4ad3b8f66e8e27c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:80:01:53:0e:32:d6:4a:ce:83:2e:be:bf:18: 87:dc:68:64:7c:06:02:21:4d:a6:f0:ef:97:0f:e7: b7:df:73:3d:b2:42:d3:f3:50:ad:1a:09:1a:5b:b1: 3e:7e:6f:ca:1c:2d:2c:4b:1a:f2:2a:6f:d6:85:c1: 54:66:ed:c5:0c:ad:4a:ee:1f:80:47:1e:76:8a:1b: a5:9e:c8:88:32:ba:e9:e2:ab:29:de:50:4e:63:2c: fd:b9:0c:b2:cd:5b:a6:d4:3f:e6:d8:2c:68:ca:c8: 26:73:53:56:42:71:c4:94:46:d1:38:84:f1:b9:86: 8b:c4:8a:d0:e0:9c:5b:2e:18:d9:f6:ed:41:7d:19: 46:6b:d9:52:90:02:7a:3d:96:55:49:40:89:95:96: b9:9d:07:3a:7f:d9:bc:e7:2e:62:53:37:a2:ff:66: 96:27:aa:f0:33:95:00:f1:76:01:73:23:ab:ce:52: c2:ac:c7:4d:ff:13:10:94:c1:0e:67:57:bd:0c:d9: 83:1b:49:cf:78:c3:34:5f:fc:cd:0e:3e:c3:70:4e: bf:7a:6f:24:4a:bf:2e:c1:3b:3b:25:c0:37:35:e6: eb:e0:18:1d:03:8f:13:45:e4:1a:ee:4c:a8:91:fc: b6:7a:4d:3c:84:1e:92:3d:c0:fb:21:57:21:69:b5: e3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C5:8C:E5:25:E1:84:B1:D9:93:AF:B4:AD:3B:8F:66:E8:E2:7C:35 X509v3 Authority Key Identifier: keyid:F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/l8WM5SXhhLHZk6-0rTuPZujifDU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:b703:fff1::-2a00:b703:fff2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 3a:27:4a:f9:b6:0c:24:08:e9:2d:fe:0d:77:c0:06:ef:ae:58: 8c:85:78:28:4e:32:30:db:b9:53:e0:1c:c6:f2:7d:f7:42:84: ca:18:44:67:a9:c9:a8:c0:b6:1f:fb:45:d3:a5:17:4a:cb:0e: 2f:02:20:ad:43:6a:5d:f1:97:6c:d3:33:a3:9a:b0:92:cd:21: 8e:97:9c:81:43:67:b6:58:26:42:ac:71:08:d7:dc:25:9d:21: f9:0f:86:41:86:99:49:08:2d:85:3e:58:e9:8a:26:75:6d:be: c7:8a:74:79:91:6f:7c:bc:19:b7:cd:ae:20:a0:cf:cd:c6:8a: ea:32:96:7b:0e:43:b1:32:9f:fb:9e:f1:1a:88:ff:19:b3:d5: ac:0f:47:94:69:5d:c0:54:a3:b1:86:2b:e3:0a:b4:10:5d:1f: b3:70:72:12:34:dc:cf:5b:01:03:b5:d8:1c:a7:c3:dd:e8:a0: d7:19:dc:8b:18:c6:ec:3b:fe:1f:37:14:24:14:0d:7e:96:86: 83:12:c0:96:a2:e1:c5:89:38:07:a7:15:50:34:7c:4d:33:b6: c1:2a:fc:20:57:fc:72:9d:ca:6c:8c:73:53:8f:4f:02:09:1d: b1:ec:10:5d:04:b9:fa:51:82:28:8f:65:87:d1:cb:ef:b2:70: 3a:7e:eb:ea -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt87lYUOnuvKPt+PL7yntfjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNWNiOWFmYzhhODY3MGUxZjExNmNiZDIxNDk5YzlmNzEy MTViYzAwHhcNMjYwMTAyMDQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2M1OGNlNTI1ZTE4NGIxZDk5M2FmYjRhZDNiOGY2NmU4ZTI3YzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4ABUw4y1krOgy6+vxiH3GhkfAYC IU2m8O+XD+e333M9skLT81CtGgkaW7E+fm/KHC0sSxryKm/WhcFUZu3FDK1K7h+A Rx52ihulnsiIMrrp4qsp3lBOYyz9uQyyzVum1D/m2Cxoysgmc1NWQnHElEbROITx uYaLxIrQ4JxbLhjZ9u1BfRlGa9lSkAJ6PZZVSUCJlZa5nQc6f9m85y5iUzei/2aW J6rwM5UA8XYBcyOrzlLCrMdN/xMQlMEOZ1e9DNmDG0nPeMM0X/zNDj7DcE6/em8k Sr8uwTs7JcA3Nebr4BgdA48TReQa7kyokfy2ek08hB6SPcD7IVchabXjpQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFJfFjOUl4YSx2ZOvtK07j2bo4nw1MB8GA1UdIwQY MBaAFPFcua/IqGcOHxFsvSFJnJ9xIVvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFZ5NXI4aW9adzRmRVd5OUlVbWNuM0VoVzhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85NzdkNzAtNmM4Ny00MDlkLThlZjgt MDI3YTc0M2JhNDYyLzEvbDhXTTVTWGhoTEhaazYtMHJUdVBadWppZkRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi85NzdkNzAtNmM4Ny00MDlkLThlZjgtMDI3YTc0M2JhNDYy LzEvOFZ5NXI4aW9adzRmRVd5OUlVbWNuM0VoVzhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqALcD //EDBwAqALcD//IwDQYJKoZIhvcNAQELBQADggEBADonSvm2DCQI6S3+DXfABu+u WIyFeChOMjDbuVPgHMbyffdChMoYRGepyajAth/7RdOlF0rLDi8CIK1Dal3xl2zT M6OasJLNIY6XnIFDZ7ZYJkKscQjX3CWdIfkPhkGGmUkILYU+WOmKJnVtvseKdHmR b3y8GbfNriCgz83GiuoylnsOQ7Eyn/ue8RqI/xmz1awPR5RpXcBUo7GGK+MKtBBd H7NwchI03M9bAQO12Bynw93ooNcZ3IsYxuw7/h83FCQUDX6WhoMSwJai4cWJOAen FVA0fE0ztsEq/CBX/HKdymyMc1OPTwIJHbHsEF0EufpRgiiPZYfRy++ycDp+6+o= -----END CERTIFICATE-----Generated at Sat Jan 10 03:16:18 2026 by rpki-client