This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/8SxGJ5DFSNG0dMTqjX5j_aIfojA.roa File: 8SxGJ5DFSNG0dMTqjX5j_aIfojA.roa (raw, json) Hash identifier: UBmJym8rt0MEO8CRo7VS6DUtfWJnrcVECmqoP+mtU7g= Subject key identifier: F1:2C:46:27:90:C5:48:D1:B4:74:C4:EA:8D:7E:63:FD:A2:1F:A2:30 Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F85A0E5A31101DF3E57F8FC4EB75D55 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/8SxGJ5DFSNG0dMTqjX5j_aIfojA.roa Signing time: Fri 02 Jan 2026 16:23:42 +0000 ROA not before: Fri 02 Jan 2026 16:23:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212470 IP address blocks: 2a0f:b240:5300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:a0:e5:a3:11:01:df:3e:57:f8:fc:4e:b7:5d:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f12c462790c548d1b474c4ea8d7e63fda21fa230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:46:30:8a:86:11:c8:96:ea:72:24:fe:f8:e9: d5:60:97:93:6b:f3:29:f3:37:a3:a2:9e:14:dc:3c: 5f:06:19:3e:02:a5:70:7c:2a:1f:9c:87:4a:c6:f5: da:c2:1a:3c:73:a5:da:da:06:07:b8:04:89:25:b8: 8a:0b:a8:36:2a:6e:9a:c6:4a:71:10:ca:5a:55:f8: 32:5c:29:c4:01:99:8d:0d:15:64:7e:00:40:f3:ae: 2d:a6:59:75:7c:1b:df:7b:7c:6a:2b:a4:31:bf:4a: 42:79:f6:fd:3b:69:ab:ff:b6:a5:b4:bd:00:e1:83: f3:c8:07:ec:f9:cf:e9:01:7f:1e:05:f3:81:54:42: b4:ce:b9:4d:21:73:56:12:7f:20:6a:b0:49:d2:a6: 13:31:a1:ca:ff:bf:0b:bd:ad:93:9f:d7:e7:21:78: 8c:1c:01:65:a3:f8:2f:11:34:8c:c7:0f:d6:8f:d8: 9b:24:64:95:c5:77:1f:4b:73:d2:c3:10:e9:7f:1f: f1:87:1a:a7:ed:22:8d:7c:d0:77:84:41:bb:31:bd: 96:c0:6e:f0:12:6a:dd:dc:14:ff:34:7c:bd:da:16: b3:f1:b5:ac:38:10:f0:b5:45:77:17:85:59:eb:3f: f8:13:6e:93:bb:8b:ff:93:a3:ac:e7:b3:56:3a:69: 67:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:2C:46:27:90:C5:48:D1:B4:74:C4:EA:8D:7E:63:FD:A2:1F:A2:30 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/8SxGJ5DFSNG0dMTqjX5j_aIfojA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:b240:5300::/40 Signature Algorithm: sha256WithRSAEncryption 02:10:c0:10:c1:0c:3e:45:0f:03:93:05:6d:b3:59:22:3e:ae: 45:51:f0:7f:88:12:cb:1d:07:e4:f8:9f:74:98:11:6d:a3:62: 02:6d:2d:f0:19:f8:46:b6:41:d1:8f:64:cc:2a:86:a7:80:b9: 74:44:e2:05:ba:11:bd:02:6e:a4:db:62:40:27:7e:47:ef:b0: b2:78:f9:49:9d:f0:34:3f:6d:df:66:7c:97:8c:9c:5d:da:59: 11:52:82:10:e8:6b:c5:cf:a2:9e:67:6a:72:aa:14:bf:d6:a9: 10:df:fe:ce:4d:38:64:aa:5f:20:62:62:10:08:fb:25:b8:60: ec:18:36:f4:c7:c5:ab:7d:02:b5:73:39:71:3d:83:7e:3a:66: 5b:72:ae:ae:4b:b4:70:55:10:76:5f:d9:33:d4:d0:4f:0a:7d: 5c:37:00:d5:3a:15:19:ff:8b:d3:0b:c7:1f:7d:ca:92:b7:0c: 0e:92:90:c9:b5:06:ce:49:52:2b:9e:cf:f0:51:52:b6:f1:f0: 73:a8:f6:a3:f0:84:a6:3c:05:db:14:cd:2e:6b:9f:03:2a:a3: 7e:16:2b:02:23:ce:bf:c3:25:80:a7:7d:64:8b:59:62:0b:0e: ca:14:fc:08:3f:ff:73:84:14:b5:42:0f:0c:a0:0d:f8:1b:6b: e3:c3:95:34 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/haDloxEB3z5X+PxOt11VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTJjNDYyNzkwYzU0OGQxYjQ3NGM0ZWE4ZDdlNjNmZGEyMWZhMjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUYwioYRyJbqciT++OnVYJeTa/Mp 8zejop4U3DxfBhk+AqVwfCofnIdKxvXawho8c6Xa2gYHuASJJbiKC6g2Km6axkpx EMpaVfgyXCnEAZmNDRVkfgBA864tpll1fBvfe3xqK6Qxv0pCefb9O2mr/7altL0A 4YPzyAfs+c/pAX8eBfOBVEK0zrlNIXNWEn8garBJ0qYTMaHK/78Lva2Tn9fnIXiM HAFlo/gvETSMxw/Wj9ibJGSVxXcfS3PSwxDpfx/xhxqn7SKNfNB3hEG7Mb2WwG7w Emrd3BT/NHy92haz8bWsOBDwtUV3F4VZ6z/4E26Tu4v/k6Os57NWOmlnnQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFPEsRieQxUjRtHTE6o1+Y/2iH6IwMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvOFN4R0o1REZTTkcwZE1UcWpYNWpfYUlmb2pBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQFMw DQYJKoZIhvcNAQELBQADggEBAAIQwBDBDD5FDwOTBW2zWSI+rkVR8H+IEssdB+T4 n3SYEW2jYgJtLfAZ+Ea2QdGPZMwqhqeAuXRE4gW6Eb0CbqTbYkAnfkfvsLJ4+Umd 8DQ/bd9mfJeMnF3aWRFSghDoa8XPop5nanKqFL/WqRDf/s5NOGSqXyBiYhAI+yW4 YOwYNvTHxat9ArVzOXE9g346Zltyrq5LtHBVEHZf2TPU0E8KfVw3ANU6FRn/i9ML xx99ypK3DA6SkMm1Bs5JUiuez/BRUrbx8HOo9qPwhKY8BdsUzS5rnwMqo34WKwIj zr/DJYCnfWSLWWILDsoU/Ag//3OEFLVCDwygDfgba+PDlTQ= -----END CERTIFICATE-----Generated at Wed Jan 21 11:57:35 2026 by rpki-client