This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/8UBmehwGdY8iuXNCWS6BinLaLLM.roa File: 8UBmehwGdY8iuXNCWS6BinLaLLM.roa (raw, json) Hash identifier: yVfpt2K9nseTwLkmCDpzBGSgITdwwwvM+scH37TzO1s= Subject key identifier: F1:40:66:7A:1C:06:75:8F:22:B9:73:42:59:2E:81:8A:72:DA:2C:B3 Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019B7758F47E8A7E7496F961116CD84F8C48 Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/8UBmehwGdY8iuXNCWS6BinLaLLM.roa Signing time: Thu 01 Jan 2026 02:17:57 +0000 ROA not before: Thu 01 Jan 2026 02:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207781 IP address blocks: 2a09:e1c1:efc0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f4:7e:8a:7e:74:96:f9:61:11:6c:d8:4f:8c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Jan 1 02:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f140667a1c06758f22b97342592e818a72da2cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d8:ee:1d:3e:ac:cc:ee:b1:a3:a2:cd:b4:c8: d3:81:61:09:e2:7e:cd:6c:0c:a5:5f:fc:e9:63:35: 9f:89:30:ce:40:fb:95:9a:14:98:ca:30:39:44:2a: e4:0b:d9:ce:4b:21:8e:22:1f:cd:42:f8:d7:4b:94: d7:45:2e:89:51:8d:34:0a:ab:5f:d8:88:44:92:fe: 0f:cd:dd:91:67:d1:0f:95:4e:f7:b7:b6:01:2f:4c: 9d:fe:0c:ce:b5:1d:91:cd:3a:28:f5:22:96:3b:dd: 8f:5e:66:a2:dc:d2:fa:6d:49:cc:26:00:26:c3:14: 16:36:73:ee:3a:d6:8d:1b:b0:22:d3:00:db:f7:bd: 31:52:3e:58:c8:21:56:3b:1b:17:34:2a:0b:0d:87: a7:fd:c0:d5:ac:6e:bf:af:0c:6c:31:84:cf:a7:b2: 5b:f0:0b:6e:4b:09:6b:5a:2f:1a:91:33:be:d4:a3: a4:86:e1:bc:64:46:7a:75:37:24:8c:96:eb:f6:a8: fe:34:26:3d:6a:51:22:77:22:91:13:50:3f:8f:7c: f6:0b:b2:bf:3f:df:a4:e7:06:9e:b3:89:b0:ca:78: b6:83:6b:45:f4:a7:91:e5:e1:b4:86:ea:1b:ae:02: 05:53:66:e6:3f:53:21:34:54:74:20:98:c8:e8:8f: 9f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:40:66:7A:1C:06:75:8F:22:B9:73:42:59:2E:81:8A:72:DA:2C:B3 X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/8UBmehwGdY8iuXNCWS6BinLaLLM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:e1c1:efc0::/44 Signature Algorithm: sha256WithRSAEncryption af:28:60:03:06:3a:0f:bf:d5:35:6f:b4:24:9c:0a:7b:36:fc: 6c:0e:7f:cd:f5:89:98:df:3e:75:ce:22:5a:7f:87:0d:41:2e: cd:b9:8c:d3:d0:6e:9a:2b:0c:b3:37:2b:7d:29:24:8e:c9:59: 85:c5:4f:da:fb:0e:4d:a3:6d:e9:55:f1:a8:e3:08:95:26:6e: 1d:cc:ee:ee:44:15:ef:23:e9:fa:ca:28:39:b9:e3:78:29:d1: 76:66:48:a0:a5:a6:9e:9b:27:3c:21:6e:f7:02:75:9e:d8:57: a8:b2:34:22:2d:ce:c3:72:f4:37:75:f0:a5:b4:46:5a:45:f2: 3c:ad:cf:2c:2e:09:fb:22:4c:6e:72:11:af:97:a1:fd:14:84: 8f:fc:e0:1b:1a:5f:3b:d9:3a:fe:75:aa:37:35:60:c2:d9:e2: 50:28:26:04:db:9f:31:3a:50:55:37:25:1c:55:d4:e2:4c:f1: ec:54:35:4f:84:23:37:4c:e0:d2:7c:37:13:e4:99:0b:77:20: f2:91:96:ca:eb:d4:62:6e:0c:0e:a1:a1:5e:45:6b:60:61:cb: 3e:8f:f9:06:3c:a9:c1:8b:ba:88:9c:20:b0:75:49:60:ba:72: 19:03:d3:f6:e4:30:93:63:8d:ac:a0:c8:c5:e6:46:6a:ed:8a: e4:2b:b4:78 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WPR+in50lvlhEWzYT4xIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjYwMTAxMDIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTQwNjY3YTFjMDY3NThmMjJiOTczNDI1OTJlODE4YTcyZGEyY2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNjuHT6szO6xo6LNtMjTgWEJ4n7N bAylX/zpYzWfiTDOQPuVmhSYyjA5RCrkC9nOSyGOIh/NQvjXS5TXRS6JUY00Cqtf 2IhEkv4Pzd2RZ9EPlU73t7YBL0yd/gzOtR2RzToo9SKWO92PXmai3NL6bUnMJgAm wxQWNnPuOtaNG7Ai0wDb970xUj5YyCFWOxsXNCoLDYen/cDVrG6/rwxsMYTPp7Jb 8AtuSwlrWi8akTO+1KOkhuG8ZEZ6dTckjJbr9qj+NCY9alEidyKRE1A/j3z2C7K/ P9+k5waes4mwyni2g2tF9KeR5eG0huobrgIFU2bmP1MhNFR0IJjI6I+fCwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPFAZnocBnWPIrlzQlkugYpy2iyzMB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEvOFVCbWVod0dkWThpdVhOQ1dTNkJpbkxhTExNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgnhwe/A MA0GCSqGSIb3DQEBCwUAA4IBAQCvKGADBjoPv9U1b7QknAp7NvxsDn/N9YmY3z51 ziJaf4cNQS7NuYzT0G6aKwyzNyt9KSSOyVmFxU/a+w5No23pVfGo4wiVJm4dzO7u RBXvI+n6yig5ueN4KdF2Zkigpaaemyc8IW73AnWe2FeosjQiLc7DcvQ3dfCltEZa RfI8rc8sLgn7IkxuchGvl6H9FISP/OAbGl872Tr+dao3NWDC2eJQKCYE258xOlBV NyUcVdTiTPHsVDVPhCM3TODSfDcT5JkLdyDykZbK69RibgwOoaFeRWtgYcs+j/kG PKnBi7qInCCwdUlgunIZA9P25DCTY42soMjF5kZq7YrkK7R4 -----END CERTIFICATE-----Generated at Wed Jan 21 00:03:45 2026 by rpki-client