This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/8QowToFWOkypHOOmOlay9H9m3cI.roa File: 8QowToFWOkypHOOmOlay9H9m3cI.roa (raw, json) Hash identifier: FEurkgF3+aXJgB8qUw5KyF+e2MK/WZfbCLqpt4IVc9o= Subject key identifier: F1:0A:30:4E:81:56:3A:4C:A9:1C:E3:A6:3A:56:B2:F4:7F:66:DD:C2 Certificate issuer: /CN=8050504f4b1776e80b8ad9f8b356e613b585b35a Certificate serial: 019B7CED4734110876C24ECAFE5F86E472C3 Authority key identifier: 80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/8QowToFWOkypHOOmOlay9H9m3cI.roa Signing time: Fri 02 Jan 2026 04:18:03 +0000 ROA not before: Fri 02 Jan 2026 04:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61232 IP address blocks: 2001:678:e44::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:47:34:11:08:76:c2:4e:ca:fe:5f:86:e4:72:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8050504f4b1776e80b8ad9f8b356e613b585b35a Validity Not Before: Jan 2 04:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f10a304e81563a4ca91ce3a63a56b2f47f66ddc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d6:10:d8:e9:27:19:3d:85:8c:3b:92:d6:3c: 88:e8:b5:19:47:43:92:05:6b:6b:50:9b:5c:da:9c: 77:67:dd:68:1f:68:de:09:c1:0f:06:7d:ce:09:a4: d9:49:9f:d8:54:32:92:c8:0d:d0:10:7e:11:e6:b6: c1:87:3c:72:23:3f:64:d3:e3:ee:ce:33:31:08:91: e3:e2:4f:00:3d:1a:74:1e:98:35:44:f1:27:65:82: ca:2a:ff:73:b0:af:4c:01:ee:ef:b2:66:33:4f:c8: 1c:35:3e:20:de:0b:53:65:ca:d7:17:b0:14:d1:64: 17:c5:b5:1b:b5:61:08:01:64:43:91:f3:57:a3:a4: 03:ac:db:d6:23:c4:f2:28:55:ab:57:e6:43:0a:66: 60:25:20:e9:08:73:62:97:59:22:71:f1:93:e1:da: f7:1b:56:e0:6c:a8:cb:d6:69:63:bb:4e:73:9b:32: 6b:39:06:fa:71:ae:c7:f8:51:a9:06:fa:2e:92:e2: a3:e7:0e:c6:32:21:13:a9:ba:a8:53:6a:72:f8:a9: eb:a9:67:79:ee:f3:f3:51:11:62:11:75:ae:55:2c: e4:7a:ee:a5:db:40:ea:e1:8a:73:dd:18:4d:f1:b3: b6:f1:14:58:aa:c0:80:e1:24:6c:9f:46:76:20:f2: e5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:0A:30:4E:81:56:3A:4C:A9:1C:E3:A6:3A:56:B2:F4:7F:66:DD:C2 X509v3 Authority Key Identifier: keyid:80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/8QowToFWOkypHOOmOlay9H9m3cI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:e44::/48 Signature Algorithm: sha256WithRSAEncryption 9d:f5:f9:95:10:5f:12:b3:96:e7:1a:01:b2:62:df:f9:08:54: 25:43:1f:33:78:b0:61:2d:e0:db:4c:29:71:bd:78:fb:16:56: 7b:0b:d9:cc:fd:7a:16:96:5e:c9:97:69:c0:b4:6e:f7:37:8f: 8c:1f:5e:0d:dd:d4:c6:9f:b8:4b:03:ce:7f:5a:cf:c4:de:6e: c5:1f:14:7c:e8:f3:95:75:5e:ab:10:5e:4d:2d:91:73:27:80: 9c:4e:64:62:08:08:ac:7a:f3:c0:32:f6:b8:22:6a:3a:e0:2d: 11:05:10:7b:31:8b:82:c8:d2:42:6d:53:62:02:b2:af:48:48: ac:48:8c:44:26:d3:bf:89:e3:da:a5:e0:ae:05:2b:9b:ea:f6: aa:ca:82:4f:65:f3:25:78:30:7f:53:77:f4:e3:48:37:3c:f3: f5:63:c1:d5:54:21:0d:77:39:85:cb:78:ed:01:9c:5a:26:6b: b0:8b:a9:48:f4:f7:5e:d5:79:ab:07:b8:36:ca:51:4f:43:30: 96:a4:5c:84:13:21:cb:16:ae:d4:da:e0:d0:7e:0b:e3:d5:43: fc:80:f8:58:ff:56:aa:37:5e:08:af:83:74:d5:45:ab:ff:37: 0f:2c:dd:46:54:b7:c4:b5:7f:93:06:1c:7e:c1:7f:55:40:4a: 4c:83:18:c3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87Uc0EQh2wk7K/l+G5HLDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwNTA1MDRmNGIxNzc2ZTgwYjhhZDlmOGIzNTZlNjEzYjU4 NWIzNWEwHhcNMjYwMTAyMDQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTBhMzA0ZTgxNTYzYTRjYTkxY2UzYTYzYTU2YjJmNDdmNjZkZGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9YQ2OknGT2FjDuS1jyI6LUZR0OS BWtrUJtc2px3Z91oH2jeCcEPBn3OCaTZSZ/YVDKSyA3QEH4R5rbBhzxyIz9k0+Pu zjMxCJHj4k8APRp0Hpg1RPEnZYLKKv9zsK9MAe7vsmYzT8gcNT4g3gtTZcrXF7AU 0WQXxbUbtWEIAWRDkfNXo6QDrNvWI8TyKFWrV+ZDCmZgJSDpCHNil1kicfGT4dr3 G1bgbKjL1mlju05zmzJrOQb6ca7H+FGpBvoukuKj5w7GMiETqbqoU2py+KnrqWd5 7vPzURFiEXWuVSzkeu6l20Dq4Ypz3RhN8bO28RRYqsCA4SRsn0Z2IPLlCQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPEKME6BVjpMqRzjpjpWsvR/Zt3CMB8GA1UdIwQY MBaAFIBQUE9LF3boC4rZ+LNW5hO1hbNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0ZCUVQwc1hkdWdMaXRuNHMxYm1FN1dGczFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9iNTk3MTUtYjA1YS00YjRhLWE5MjIt MDE0NGEzMjgyYTJlLzEvOFFvd1RvRldPa3lwSE9PbU9sYXk5SDltM2NJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9iNTk3MTUtYjA1YS00YjRhLWE5MjItMDE0NGEzMjgyYTJl LzEvZ0ZCUVQwc1hkdWdMaXRuNHMxYm1FN1dGczFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA5E MA0GCSqGSIb3DQEBCwUAA4IBAQCd9fmVEF8Ss5bnGgGyYt/5CFQlQx8zeLBhLeDb TClxvXj7FlZ7C9nM/XoWll7Jl2nAtG73N4+MH14N3dTGn7hLA85/Ws/E3m7FHxR8 6POVdV6rEF5NLZFzJ4CcTmRiCAisevPAMva4Imo64C0RBRB7MYuCyNJCbVNiArKv SEisSIxEJtO/iePapeCuBSub6vaqyoJPZfMleDB/U3f040g3PPP1Y8HVVCENdzmF y3jtAZxaJmuwi6lI9Pde1XmrB7g2ylFPQzCWpFyEEyHLFq7U2uDQfgvj1UP8gPhY /1aqN14Ir4N01UWr/zcPLN1GVLfEtX+TBhx+wX9VQEpMgxjD -----END CERTIFICATE-----Generated at Mon Jan 26 22:06:43 2026 by rpki-client