This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/A8jOACTrxZvbWlAo7qYtsXeIojI.roa File: A8jOACTrxZvbWlAo7qYtsXeIojI.roa (raw, json) Hash identifier: WdYCbFkKRyFd2Vge2Su+8nzhSIHEZ7CtYFk4u6w6X2s= Subject key identifier: 03:C8:CE:00:24:EB:C5:9B:DB:5A:50:28:EE:A6:2D:B1:77:88:A2:32 Certificate issuer: /CN=eb764111aeffa86bd1ec3ca885b63de7f5650f6e Certificate serial: 019B79ED48055C1395342E86A79B6652CE20 Authority key identifier: EB:76:41:11:AE:FF:A8:6B:D1:EC:3C:A8:85:B6:3D:E7:F5:65:0F:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63ZBEa7_qGvR7DyohbY95_VlD24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/A8jOACTrxZvbWlAo7qYtsXeIojI.roa Signing time: Thu 01 Jan 2026 14:19:12 +0000 ROA not before: Thu 01 Jan 2026 14:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 2001:67c:b08::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/63ZBEa7_qGvR7DyohbY95_VlD24.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/63ZBEa7_qGvR7DyohbY95_VlD24.mft rsync://rpki.ripe.net/repository/DEFAULT/63ZBEa7_qGvR7DyohbY95_VlD24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 17:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:48:05:5c:13:95:34:2e:86:a7:9b:66:52:ce:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb764111aeffa86bd1ec3ca885b63de7f5650f6e Validity Not Before: Jan 1 14:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03c8ce0024ebc59bdb5a5028eea62db17788a232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0b:e5:6b:4b:85:17:48:81:27:ad:24:ab:df: 8b:91:62:55:14:07:c9:35:be:b0:e1:18:8b:77:ff: 9d:da:24:fc:53:b6:66:ff:8b:a1:f8:83:2d:f9:07: dd:8d:fe:a8:1a:2d:19:2d:11:fb:20:14:26:08:55: ff:13:33:fa:bf:50:35:b4:36:13:43:25:91:8d:4f: 56:1f:02:30:19:9f:31:05:16:a5:fd:61:85:8a:60: a1:77:a7:76:f8:c1:29:70:5b:83:69:50:b4:2b:41: 98:95:04:a9:e9:47:9b:4a:f3:a8:ca:2b:69:ec:38: d1:92:59:8e:4c:8e:42:da:41:de:74:a8:01:df:d7: 5a:63:d9:a2:54:46:1f:6e:85:d5:2f:94:31:cc:c1: 53:b6:c7:4c:06:a9:56:22:a2:1b:01:aa:65:2f:77: 68:a4:5e:a9:72:e1:d0:90:76:04:0e:1b:3f:89:9f: 1f:3e:2c:17:31:37:3d:2b:8a:f1:8f:09:a2:00:d8: 27:56:7e:cf:06:36:2f:45:f9:c2:57:1a:07:eb:e7: 62:0d:94:7e:a2:f2:24:f8:d3:22:13:c8:62:7d:9c: d6:10:c8:06:3f:19:3f:45:b2:57:da:8e:13:cc:0b: fb:fb:30:6f:1a:b0:b9:19:0b:82:ea:47:d1:1e:89: 3d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C8:CE:00:24:EB:C5:9B:DB:5A:50:28:EE:A6:2D:B1:77:88:A2:32 X509v3 Authority Key Identifier: keyid:EB:76:41:11:AE:FF:A8:6B:D1:EC:3C:A8:85:B6:3D:E7:F5:65:0F:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63ZBEa7_qGvR7DyohbY95_VlD24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/A8jOACTrxZvbWlAo7qYtsXeIojI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/63ZBEa7_qGvR7DyohbY95_VlD24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:b08::/48 Signature Algorithm: sha256WithRSAEncryption a5:26:3d:85:ec:e2:79:a4:29:c6:04:42:7d:97:df:b5:11:53: cb:17:30:10:33:45:f5:21:fb:d5:c6:1a:b9:26:9f:ea:01:15: 94:6c:1d:ce:54:be:87:84:ed:dd:bc:51:81:ad:52:ab:8e:c7: a5:69:2c:d6:30:7b:bb:ef:49:5d:17:10:f4:79:92:9d:8b:4f: a2:f7:d6:77:79:af:49:da:03:48:d1:67:b8:ae:98:6f:a8:31: 52:54:6e:5b:d2:20:ee:0d:ff:b3:26:c4:b6:b1:a8:37:77:86: c5:87:75:3b:ab:35:84:f4:eb:37:fe:15:32:26:dc:01:98:a0: dd:4f:ef:51:8d:7c:bc:58:af:69:2c:ea:51:e9:cb:29:92:ba: c0:63:fc:78:60:62:ab:49:71:5c:34:f4:57:80:ea:b0:60:01: 98:d9:8a:6b:e7:d3:ed:11:83:12:85:77:97:c4:ab:44:28:a1: 9e:b4:d6:47:19:c9:29:17:ef:d9:88:37:3b:58:eb:ee:09:9c: 80:2f:89:6b:68:d6:10:e6:79:0c:18:02:eb:a3:5b:46:e1:32: 99:d6:a1:2c:8e:01:26:3a:2a:b7:4d:ac:40:d6:b1:8d:b0:d6: 57:23:fb:05:30:c8:5a:62:c8:6d:1e:71:bc:1e:d4:85:43:60: 71:93:a4:4f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57UgFXBOVNC6Gp5tmUs4gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViNzY0MTExYWVmZmE4NmJkMWVjM2NhODg1YjYzZGU3ZjU2 NTBmNmUwHhcNMjYwMTAxMTQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2M4Y2UwMDI0ZWJjNTliZGI1YTUwMjhlZWE2MmRiMTc3ODhhMjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgvla0uFF0iBJ60kq9+LkWJVFAfJ Nb6w4RiLd/+d2iT8U7Zm/4uh+IMt+Qfdjf6oGi0ZLRH7IBQmCFX/EzP6v1A1tDYT QyWRjU9WHwIwGZ8xBRal/WGFimChd6d2+MEpcFuDaVC0K0GYlQSp6UebSvOoyitp 7DjRklmOTI5C2kHedKgB39daY9miVEYfboXVL5QxzMFTtsdMBqlWIqIbAaplL3do pF6pcuHQkHYEDhs/iZ8fPiwXMTc9K4rxjwmiANgnVn7PBjYvRfnCVxoH6+diDZR+ ovIk+NMiE8hifZzWEMgGPxk/RbJX2o4TzAv7+zBvGrC5GQuC6kfRHok9lwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAPIzgAk68Wb21pQKO6mLbF3iKIyMB8GA1UdIwQY MBaAFOt2QRGu/6hr0ew8qIW2Pef1ZQ9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjNaQkVhN19xR3ZSN0R5b2hiWTk1X1ZsRDI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8wM2IxZTctMzExMy00OGQ2LTliNzgt YjI4ODQ4ODhhZDNmLzEvQThqT0FDVHJ4WnZiV2xBbzdxWXRzWGVJb2pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8wM2IxZTctMzExMy00OGQ2LTliNzgtYjI4ODQ4ODhhZDNm LzEvNjNaQkVhN19xR3ZSN0R5b2hiWTk1X1ZsRDI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAsI MA0GCSqGSIb3DQEBCwUAA4IBAQClJj2F7OJ5pCnGBEJ9l9+1EVPLFzAQM0X1IfvV xhq5Jp/qARWUbB3OVL6HhO3dvFGBrVKrjselaSzWMHu770ldFxD0eZKdi0+i99Z3 ea9J2gNI0We4rphvqDFSVG5b0iDuDf+zJsS2sag3d4bFh3U7qzWE9Os3/hUyJtwB mKDdT+9RjXy8WK9pLOpR6cspkrrAY/x4YGKrSXFcNPRXgOqwYAGY2Ypr59PtEYMS hXeXxKtEKKGetNZHGckpF+/ZiDc7WOvuCZyAL4lraNYQ5nkMGALro1tG4TKZ1qEs jgEmOiq3TaxA1rGNsNZXI/sFMMhaYshtHnG8HtSFQ2Bxk6RP -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:34 2026 by rpki-client