This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/8nexRfCgHzMdNUs9wkfr3_mYg18.roa File: 8nexRfCgHzMdNUs9wkfr3_mYg18.roa (raw, json) Hash identifier: cyrw/c8H96zkOj/moUIy3Ry+VD2Nad5aZw1qA876piA= Subject key identifier: F2:77:B1:45:F0:A0:1F:33:1D:35:4B:3D:C2:47:EB:DF:F9:98:83:5F Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C8032EA61D7E91875624706901EE2BB Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/8nexRfCgHzMdNUs9wkfr3_mYg18.roa Signing time: Fri 02 Jan 2026 02:18:55 +0000 ROA not before: Fri 02 Jan 2026 02:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215304 IP address blocks: 2a0f:7803:fb40::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:32:ea:61:d7:e9:18:75:62:47:06:90:1e:e2:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f277b145f0a01f331d354b3dc247ebdff998835f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:56:04:95:aa:73:91:82:a1:a7:38:6e:3d:57: 69:e2:99:99:a6:07:ce:eb:4a:96:85:61:bd:01:4d: 89:6f:60:16:7b:0c:7d:1e:ee:37:69:e9:6b:d7:24: 34:ef:2e:14:2c:58:a9:c9:1a:3d:97:aa:7b:c4:9d: 06:3d:bb:39:7d:c8:34:51:1d:0b:c6:9b:9e:fa:dc: bc:36:b4:97:4f:3b:38:2d:ca:f9:a7:70:29:c3:ab: 76:a3:c6:27:84:8f:a0:91:c2:8a:e2:40:8c:74:73: 94:57:34:cb:f8:e7:00:e7:da:d5:02:ee:f8:a4:a6: 27:b6:ba:1c:ce:ab:41:e4:2d:13:41:b9:eb:ff:a1: 2b:37:7d:cb:9b:01:27:8a:9c:02:51:08:04:83:19: ba:14:80:a5:bb:87:7b:2d:86:4b:8a:5f:0c:55:1a: 18:d4:3f:df:34:d9:47:15:c3:76:c7:74:7d:61:77: ab:c7:24:32:90:4f:f6:31:13:e6:cc:8a:ed:9b:2a: 51:0d:af:c8:db:d4:5a:fb:d9:80:e1:1c:d6:bd:74: 14:c4:f7:e7:29:40:27:65:37:03:f0:84:38:f2:51: 2a:7f:e0:7c:03:76:ea:aa:21:e1:46:85:3c:5d:9e: 28:75:58:e9:b9:7e:17:2b:91:97:27:21:ff:09:47: 03:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:77:B1:45:F0:A0:1F:33:1D:35:4B:3D:C2:47:EB:DF:F9:98:83:5F X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/8nexRfCgHzMdNUs9wkfr3_mYg18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:fb40::/44 Signature Algorithm: sha256WithRSAEncryption 8c:cf:5f:3e:3b:f3:92:c6:19:ab:01:7c:e8:34:fa:1b:65:60: 44:e1:7a:ef:62:47:f1:e5:2b:5b:32:dd:15:88:5b:75:4f:62: b1:3b:40:77:ca:86:04:a3:3c:e1:49:9e:9e:b4:f2:88:9d:27: 65:33:bf:09:d9:1d:d7:18:72:da:50:0b:c8:4d:a1:a8:76:db: 44:bc:e9:b0:4f:9f:24:7e:87:43:89:5c:96:0c:f6:02:d2:7a: 6e:62:b9:85:b7:43:2d:a7:52:00:87:38:46:9d:18:31:a6:36: 5d:ff:6c:8d:8a:bc:13:2a:da:cd:3a:d4:2e:37:86:71:01:96: 06:3b:4b:5d:35:40:73:8d:bb:50:d5:1e:44:8c:b8:91:36:d8: 2d:15:6a:11:4e:5c:38:3f:70:50:8e:88:4e:e4:53:9c:5c:ca: cc:aa:e3:f6:f0:1f:82:c5:00:13:e3:c2:4d:18:b1:ee:9c:e5: 87:cf:7d:e9:8a:31:6c:1d:d2:3a:4c:d3:12:37:cd:1d:a3:40: 40:30:10:f9:a2:09:27:e3:7b:98:3c:4e:fa:f4:60:ee:20:e4: 67:02:7f:fb:4f:90:ad:03:91:6e:06:01:d6:ed:7a:f0:3a:a8: 5d:09:ae:14:38:88:97:ab:18:03:3d:e6:f3:ee:20:98:d3:65: d3:78:1c:de -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gDLqYdfpGHViRwaQHuK7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjc3YjE0NWYwYTAxZjMzMWQzNTRiM2RjMjQ3ZWJkZmY5OTg4MzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFYElapzkYKhpzhuPVdp4pmZpgfO 60qWhWG9AU2Jb2AWewx9Hu43aelr1yQ07y4ULFipyRo9l6p7xJ0GPbs5fcg0UR0L xpue+ty8NrSXTzs4Lcr5p3Apw6t2o8YnhI+gkcKK4kCMdHOUVzTL+OcA59rVAu74 pKYntroczqtB5C0TQbnr/6ErN33LmwEnipwCUQgEgxm6FIClu4d7LYZLil8MVRoY 1D/fNNlHFcN2x3R9YXerxyQykE/2MRPmzIrtmypRDa/I29Ra+9mA4RzWvXQUxPfn KUAnZTcD8IQ48lEqf+B8A3bqqiHhRoU8XZ4odVjpuX4XK5GXJyH/CUcDCwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPJ3sUXwoB8zHTVLPcJH69/5mINfMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvOG5leFJmQ2dIek1kTlVzOXdrZnIzX21ZZzE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg94A/tA MA0GCSqGSIb3DQEBCwUAA4IBAQCMz18+O/OSxhmrAXzoNPobZWBE4XrvYkfx5Stb Mt0ViFt1T2KxO0B3yoYEozzhSZ6etPKInSdlM78J2R3XGHLaUAvITaGodttEvOmw T58kfodDiVyWDPYC0npuYrmFt0Mtp1IAhzhGnRgxpjZd/2yNirwTKtrNOtQuN4Zx AZYGO0tdNUBzjbtQ1R5EjLiRNtgtFWoRTlw4P3BQjohO5FOcXMrMquP28B+CxQAT 48JNGLHunOWHz33pijFsHdI6TNMSN80do0BAMBD5ogkn43uYPE769GDuIORnAn/7 T5CtA5FuBgHW7XrwOqhdCa4UOIiXqxgDPebz7iCY02XTeBze -----END CERTIFICATE-----Generated at Wed Jan 21 00:40:25 2026 by rpki-client