This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/8YBwOotyLS2h7Bd2s6jHy2zPrAM.roa File: 8YBwOotyLS2h7Bd2s6jHy2zPrAM.roa (raw, json) Hash identifier: tVCSOcfP5D/IltKQq/VCjFNHxuz/aHy6IKMpOAq5EPY= Subject key identifier: F1:80:70:3A:8B:72:2D:2D:A1:EC:17:76:B3:A8:C7:CB:6C:CF:AC:03 Certificate issuer: /CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db Certificate serial: 019B7D5C3E0F0FC4AF7E7275EC9AE10237F8 Authority key identifier: DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/8YBwOotyLS2h7Bd2s6jHy2zPrAM.roa Signing time: Fri 02 Jan 2026 06:19:15 +0000 ROA not before: Fri 02 Jan 2026 06:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211895 IP address blocks: 2001:67c:21b4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.mft rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:3e:0f:0f:c4:af:7e:72:75:ec:9a:e1:02:37:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db Validity Not Before: Jan 2 06:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f180703a8b722d2da1ec1776b3a8c7cb6ccfac03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d0:43:09:c1:73:f9:22:bf:5b:83:60:8e:8e: f7:46:fc:36:11:e7:0d:78:65:ce:bf:ce:9e:ab:8f: 94:a2:96:b8:75:21:53:3e:ce:c4:e7:bc:67:81:9d: 14:86:04:d1:ab:b8:d1:70:e5:c5:a4:ce:ce:80:65: 69:46:fd:da:e4:0d:68:68:13:01:7e:23:54:fd:c8: 1c:27:5a:40:f1:c6:62:15:da:b6:5b:9c:79:9e:21: 1a:ea:a5:e4:33:03:dd:0d:0d:3e:1c:97:6f:9e:0e: af:b8:7b:8d:2f:0f:66:a2:fa:82:cf:e2:b5:52:c4: e9:52:87:85:70:f9:db:7b:84:d6:30:8a:98:d0:f2: fb:ef:7e:73:5e:f7:1f:a6:0c:67:b7:d5:4c:1a:69: 92:75:18:07:c3:42:9c:6d:2a:b7:3b:13:54:52:29: 40:a2:88:df:66:c8:4e:3b:41:ec:97:e5:ba:73:a1: 9a:a5:77:af:1f:cc:50:6b:93:ee:a0:5d:71:85:97: cb:26:58:65:25:b0:25:d4:09:a6:ce:ec:5b:65:6c: 18:07:fc:e9:ee:1f:45:1a:a5:dd:9d:26:47:60:52: 3d:74:f2:82:58:ca:55:0f:2a:ec:2e:78:11:4f:3b: 85:d2:eb:93:f7:dc:87:b9:d7:d3:1c:5a:af:5b:1a: ed:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:80:70:3A:8B:72:2D:2D:A1:EC:17:76:B3:A8:C7:CB:6C:CF:AC:03 X509v3 Authority Key Identifier: keyid:DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/8YBwOotyLS2h7Bd2s6jHy2zPrAM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:21b4::/48 Signature Algorithm: sha256WithRSAEncryption a5:f1:12:58:87:e5:67:41:8a:17:45:21:8a:69:a8:d2:55:08: b0:1c:f6:e7:4c:b9:5d:8c:60:4d:ec:42:ec:02:0d:23:78:57: b2:83:c4:ff:cc:ae:97:9d:80:79:fb:5f:e5:82:b3:a1:bb:bc: 4d:ae:22:ee:2b:a7:02:a1:ae:b3:47:a4:35:62:a8:35:1d:81: d0:eb:d1:e3:cc:08:47:1b:35:9e:5f:74:85:05:93:ab:88:c2: bf:55:25:b5:80:a9:00:e3:02:75:7d:5c:b1:8e:2b:29:d2:6c: 96:4d:23:33:2c:3f:44:08:43:33:53:1b:28:c1:df:da:8a:37: 7b:98:c6:92:bc:6d:8b:d9:3b:66:95:a6:c4:bf:f0:fa:90:21: c0:fe:b8:36:5d:7e:e1:c5:9e:ef:3e:c9:ef:b4:06:9e:4d:f4: c7:84:21:31:12:03:cf:35:72:61:3a:5d:55:ac:dd:71:ce:03: ed:0d:de:8f:d0:bc:17:bc:c2:dd:36:76:66:02:7e:df:2d:c2: 78:d1:fa:38:38:5d:9e:eb:79:15:02:45:80:40:78:f2:da:ec: 79:f9:c1:85:72:bb:51:ec:c5:71:35:24:10:67:74:df:43:a1: 36:cf:02:8d:97:0c:7b:12:92:88:bd:c9:3c:ed:31:b0:be:96: e8:3d:eb:d9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XD4PD8SvfnJ17JrhAjf4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYTEyMjA3YWY0ZDE4NmM0NGRhMjUzM2MwYjhmMWZkMWY1 NWQ4ZGIwHhcNMjYwMTAyMDYxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTgwNzAzYThiNzIyZDJkYTFlYzE3NzZiM2E4YzdjYjZjY2ZhYzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8dBDCcFz+SK/W4Ngjo73Rvw2EecN eGXOv86eq4+Uopa4dSFTPs7E57xngZ0UhgTRq7jRcOXFpM7OgGVpRv3a5A1oaBMB fiNU/cgcJ1pA8cZiFdq2W5x5niEa6qXkMwPdDQ0+HJdvng6vuHuNLw9movqCz+K1 UsTpUoeFcPnbe4TWMIqY0PL7735zXvcfpgxnt9VMGmmSdRgHw0KcbSq3OxNUUilA oojfZshOO0Hsl+W6c6GapXevH8xQa5PuoF1xhZfLJlhlJbAl1AmmzuxbZWwYB/zp 7h9FGqXdnSZHYFI9dPKCWMpVDyrsLngRTzuF0uuT99yHudfTHFqvWxrt3wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPGAcDqLci0toewXdrOox8tsz6wDMB8GA1UdIwQY MBaAFNuhIgevTRhsRNolM8C48f0fVdjbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjZFaUI2OU5HR3hFMmlVendManhfUjlWMk5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jODAxMGUtMzI4OS00YTM2LWEyYjgt MTJiMmJjNTgwNTNhLzEvOFlCd09vdHlMUzJoN0JkMnM2akh5MnpQckFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9jODAxMGUtMzI4OS00YTM2LWEyYjgtMTJiMmJjNTgwNTNh LzEvMjZFaUI2OU5HR3hFMmlVendManhfUjlWMk5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCG0 MA0GCSqGSIb3DQEBCwUAA4IBAQCl8RJYh+VnQYoXRSGKaajSVQiwHPbnTLldjGBN 7ELsAg0jeFeyg8T/zK6XnYB5+1/lgrOhu7xNriLuK6cCoa6zR6Q1Yqg1HYHQ69Hj zAhHGzWeX3SFBZOriMK/VSW1gKkA4wJ1fVyxjisp0myWTSMzLD9ECEMzUxsowd/a ijd7mMaSvG2L2TtmlabEv/D6kCHA/rg2XX7hxZ7vPsnvtAaeTfTHhCExEgPPNXJh Ol1VrN1xzgPtDd6P0LwXvMLdNnZmAn7fLcJ40fo4OF2e63kVAkWAQHjy2ux5+cGF crtR7MVxNSQQZ3TfQ6E2zwKNlwx7EpKIvck87TGwvpboPevZ -----END CERTIFICATE-----Generated at Tue Jan 27 03:01:23 2026 by rpki-client