This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/8hVYPel1lCj54Itf-JZ0swg4NDU.roa File: 8hVYPel1lCj54Itf-JZ0swg4NDU.roa (raw, json) Hash identifier: 8vXpZvSQqRcIJBkv6M0oSSAAy8ttmBeMTFPoznBxM14= Subject key identifier: F2:15:58:3D:E9:75:94:28:F9:E0:8B:5F:F8:96:74:B3:08:38:34:35 Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071 Certificate serial: 019B7E38A57269C09DB5277A5855494355C0 Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/8hVYPel1lCj54Itf-JZ0swg4NDU.roa Signing time: Fri 02 Jan 2026 10:20:00 +0000 ROA not before: Fri 02 Jan 2026 10:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208240 IP address blocks: 2a07:3500:1060::/48 maxlen: 48 2a07:3500:1061::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a5:72:69:c0:9d:b5:27:7a:58:55:49:43:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071 Validity Not Before: Jan 2 10:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f215583de9759428f9e08b5ff89674b308383435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3c:34:fd:fe:2b:88:fd:b9:d9:84:7f:50:fc: 94:d1:a5:bd:9c:0f:8c:79:4f:0f:f4:de:fc:85:32: a9:db:44:fb:2e:8a:07:86:95:b3:79:13:b7:e6:f6: e2:3b:c0:3b:50:10:b3:63:aa:e5:9c:57:8a:26:45: 23:ba:6d:79:22:58:cb:ef:57:f4:0c:6a:a0:66:5e: fc:68:b6:4a:f5:ed:f8:86:9e:d6:6c:65:09:00:08: 69:08:54:ff:61:37:12:f9:3f:9f:8a:db:76:1c:77: 64:5c:ee:f8:b4:5a:ac:e2:3a:fc:99:da:17:69:4c: 03:ab:48:88:29:6f:1b:10:2f:cd:c6:c6:15:96:2e: e2:e7:39:6a:a9:f7:cc:cf:6e:68:54:c7:50:a2:50: b3:64:ed:cd:fd:e6:eb:07:b5:e4:d4:9e:35:04:07: fd:44:79:33:45:1c:fa:1d:a7:9f:cf:5a:68:bb:ad: a2:fe:00:5e:29:00:19:aa:a3:3d:56:99:8e:02:f9: a1:a4:45:24:2d:b7:38:d3:5b:85:67:9f:27:4a:2d: 2e:3a:3e:a1:fa:1b:8e:28:dd:59:01:07:c7:b4:b4: 85:58:b3:11:bc:ae:19:4e:44:d3:66:25:c9:4c:18: 06:5d:13:f6:bd:bf:00:68:05:17:dc:2e:54:b3:e6: fe:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:15:58:3D:E9:75:94:28:F9:E0:8B:5F:F8:96:74:B3:08:38:34:35 X509v3 Authority Key Identifier: keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/8hVYPel1lCj54Itf-JZ0swg4NDU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:3500:1060::/47 Signature Algorithm: sha256WithRSAEncryption c5:66:d3:5a:b4:96:f6:3e:d4:fe:48:ab:e1:e4:31:fe:8c:86: 8a:1e:b6:d2:d7:78:c5:f4:bf:fd:14:7f:a3:c6:0f:2f:5b:8c: 92:5c:3f:72:99:1e:85:83:50:4a:e5:59:05:0a:4c:66:80:e3: b5:b8:40:bb:a1:e0:1c:f4:49:1e:3d:94:a2:f6:5c:d5:84:c6: 32:4f:55:12:d1:90:72:ef:95:e0:6a:cc:f2:61:bc:3a:db:03: f9:bb:e7:54:64:57:53:71:51:4c:23:81:f8:0d:cb:c9:51:43: db:f1:e0:e4:76:2f:c4:77:3b:be:86:29:b1:8e:28:86:1c:02: 12:80:90:bd:92:e6:6f:98:2e:d5:7a:7c:6e:33:2e:85:9d:b7: 45:3c:69:9b:75:a7:f2:2b:50:1c:f6:84:53:9a:06:3a:9b:69: 84:9e:ac:1a:c6:3c:cc:9a:b8:ed:1e:45:d6:ad:d2:b5:ee:09: 30:1c:42:5b:9c:b1:b7:10:39:48:03:94:06:85:ed:26:b4:dc: 93:b4:7f:51:bd:80:8c:2e:d9:09:20:1f:7a:67:ea:cd:47:c2: 1b:6f:d8:bf:eb:64:1a:bf:bc:cf:49:d2:7e:24:07:ea:8b:a5: b9:84:67:9e:b1:c7:08:d1:87:f5:8d:0e:c0:f2:fd:a1:03:28: 09:24:12:49 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OKVyacCdtSd6WFVJQ1XAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl MTQwNzEwHhcNMjYwMTAyMTAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjE1NTgzZGU5NzU5NDI4ZjllMDhiNWZmODk2NzRiMzA4MzgzNDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTw0/f4riP252YR/UPyU0aW9nA+M eU8P9N78hTKp20T7LooHhpWzeRO35vbiO8A7UBCzY6rlnFeKJkUjum15IljL71f0 DGqgZl78aLZK9e34hp7WbGUJAAhpCFT/YTcS+T+fitt2HHdkXO74tFqs4jr8mdoX aUwDq0iIKW8bEC/NxsYVli7i5zlqqffMz25oVMdQolCzZO3N/ebrB7Xk1J41BAf9 RHkzRRz6Haefz1pou62i/gBeKQAZqqM9VpmOAvmhpEUkLbc401uFZ58nSi0uOj6h +huOKN1ZAQfHtLSFWLMRvK4ZTkTTZiXJTBgGXRP2vb8AaAUX3C5Us+b+QQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPIVWD3pdZQo+eCLX/iWdLMIODQ1MB8GA1UdIwQY MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt YWQ1NzU1MjJiMzY1LzEvOGhWWVBlbDFsQ2o1NEl0Zi1KWjBzd2c0TkRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1 LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKgc1ABBg MA0GCSqGSIb3DQEBCwUAA4IBAQDFZtNatJb2PtT+SKvh5DH+jIaKHrbS13jF9L/9 FH+jxg8vW4ySXD9ymR6Fg1BK5VkFCkxmgOO1uEC7oeAc9EkePZSi9lzVhMYyT1US 0ZBy75XgaszyYbw62wP5u+dUZFdTcVFMI4H4DcvJUUPb8eDkdi/Edzu+himxjiiG HAISgJC9kuZvmC7VenxuMy6FnbdFPGmbdafyK1Ac9oRTmgY6m2mEnqwaxjzMmrjt HkXWrdK17gkwHEJbnLG3EDlIA5QGhe0mtNyTtH9RvYCMLtkJIB96Z+rNR8Ibb9i/ 62Qav7zPSdJ+JAfqi6W5hGeesccI0Yf1jQ7A8v2hAygJJBJJ -----END CERTIFICATE-----Generated at Tue Jan 20 04:48:48 2026 by rpki-client