This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/8l0-rbUJJ5yl_F5t1WGOySUsQOI.roa File: 8l0-rbUJJ5yl_F5t1WGOySUsQOI.roa (raw, json) Hash identifier: 065Qj+kRYJW5mj1KN/1Un/hhPcBtSTaJS6BwFg5mPWw= Subject key identifier: F2:5D:3E:AD:B5:09:27:9C:A5:FC:5E:6D:D5:61:8E:C9:25:2C:40:E2 Certificate issuer: /CN=61b534437503668815add93cd17d0ad3e1b1a877 Certificate serial: 019B7C7FDFE0FFE3CFACB42CD1EB276BD7B9 Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/8l0-rbUJJ5yl_F5t1WGOySUsQOI.roa Signing time: Fri 02 Jan 2026 02:18:33 +0000 ROA not before: Fri 02 Jan 2026 02:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25596 IP address blocks: 2a02:58::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:df:e0:ff:e3:cf:ac:b4:2c:d1:eb:27:6b:d7:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877 Validity Not Before: Jan 2 02:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f25d3eadb509279ca5fc5e6dd5618ec9252c40e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:68:a0:ee:e4:05:f1:d3:10:3a:c0:89:20:54: e0:2c:01:0e:dc:e7:9e:1c:14:49:73:0f:f9:31:f2: 9c:77:3b:e0:d0:95:ef:ed:8f:b1:cd:10:0a:70:38: 23:ad:39:07:95:84:d7:e5:eb:5f:ee:5b:5a:31:e9: c0:77:20:0d:f9:45:06:82:6e:62:c9:ec:50:39:2f: ba:c5:fd:2b:f9:69:9d:e9:a7:e1:3a:24:1d:24:c5: 92:0e:cc:57:0e:bb:87:07:7d:b6:9b:a2:8e:a3:2f: 33:8d:f4:72:b2:40:5d:cf:33:3e:73:27:09:8c:5a: 5c:f7:48:6b:53:ed:1a:af:18:ae:2a:a2:11:49:af: ff:c6:68:4c:7c:f1:86:8c:02:af:c2:86:f9:9b:a3: 4e:25:53:2c:0f:47:f3:ff:a3:eb:e9:cb:c8:cd:ef: 86:b9:43:97:ca:75:6a:e0:48:76:8d:7c:38:aa:5f: 01:f9:0f:bf:da:48:bc:f4:74:66:72:4a:8d:10:49: 41:11:1b:b2:10:57:06:8c:52:0c:ac:8e:e4:5a:a4: 8f:3c:b5:e1:24:90:4e:4a:4e:41:0e:10:8c:2a:10: f7:89:7e:04:54:84:82:9c:f2:81:06:6d:36:64:5e: 05:db:4d:d9:f8:e1:db:7e:41:5a:81:7e:08:e6:47: 17:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:5D:3E:AD:B5:09:27:9C:A5:FC:5E:6D:D5:61:8E:C9:25:2C:40:E2 X509v3 Authority Key Identifier: keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/8l0-rbUJJ5yl_F5t1WGOySUsQOI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:58::/32 Signature Algorithm: sha256WithRSAEncryption 5d:1b:aa:62:e2:ba:0c:dd:2c:f5:fb:43:38:eb:92:32:83:f2: 52:d0:29:1e:57:68:6a:9f:f8:8d:03:e1:27:11:16:f8:bb:40: 6b:5b:8c:e3:1e:c4:dc:da:54:7b:44:02:2f:df:68:1e:40:22: 37:46:3c:2a:a9:a2:31:d0:51:bd:e3:09:12:6a:5e:1d:be:a1: b3:76:7c:a1:99:b4:96:7b:d3:3c:10:29:bc:54:c8:2f:9d:cc: 0a:4c:4a:18:fb:11:9f:26:26:f2:8e:c7:30:73:01:24:1d:e3: b3:d5:ee:ad:0f:88:f9:f3:6b:cb:09:5c:e3:b5:77:91:54:7a: 36:1b:13:22:c9:59:23:59:93:be:55:bd:d2:65:f8:72:53:b3: de:92:b0:2d:91:a7:5a:14:a9:a7:37:93:b2:15:b1:9f:c8:64: b8:ae:dc:ac:c1:5a:e2:2e:0c:95:6a:49:15:3b:20:a3:16:8d: d1:47:cd:ea:31:28:33:ad:2b:08:95:e6:1c:da:ed:a0:42:cb: 1c:3b:b2:3a:a5:1b:1a:e3:07:43:ef:1f:c6:58:67:ec:88:61: e9:70:87:e7:15:83:86:9b:e9:fb:3b:25:29:7b:17:63:2e:cf: e9:ab:f2:02:80:24:ee:5d:b3:bc:c5:82:ce:04:0b:03:b2:34: cf:b4:55:8e -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8f9/g/+PPrLQs0esna9e5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYjUzNDQzNzUwMzY2ODgxNWFkZDkzY2QxN2QwYWQzZTFi MWE4NzcwHhcNMjYwMTAyMDIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjVkM2VhZGI1MDkyNzljYTVmYzVlNmRkNTYxOGVjOTI1MmM0MGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2ig7uQF8dMQOsCJIFTgLAEO3Oee HBRJcw/5MfKcdzvg0JXv7Y+xzRAKcDgjrTkHlYTX5etf7ltaMenAdyAN+UUGgm5i yexQOS+6xf0r+Wmd6afhOiQdJMWSDsxXDruHB322m6KOoy8zjfRyskBdzzM+cycJ jFpc90hrU+0arxiuKqIRSa//xmhMfPGGjAKvwob5m6NOJVMsD0fz/6Pr6cvIze+G uUOXynVq4Eh2jXw4ql8B+Q+/2ki89HRmckqNEElBERuyEFcGjFIMrI7kWqSPPLXh JJBOSk5BDhCMKhD3iX4EVISCnPKBBm02ZF4F203Z+OHbfkFagX4I5kcXOQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPJdPq21CSecpfxebdVhjsklLEDiMB8GA1UdIwQY MBaAFGG1NEN1A2aIFa3ZPNF9CtPhsah3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWJVMFEzVURab2dWcmRrODBYMEswLUd4cUhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jMWFjZDYtMjMwYS00ZTM2LWE1OGYt ZjU1NWUyZTY4YTEwLzEvOGwwLXJiVUpKNXlsX0Y1dDFXR095U1VzUU9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9jMWFjZDYtMjMwYS00ZTM2LWE1OGYtZjU1NWUyZTY4YTEw LzEvWWJVMFEzVURab2dWcmRrODBYMEswLUd4cUhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgIAWDAN BgkqhkiG9w0BAQsFAAOCAQEAXRuqYuK6DN0s9ftDOOuSMoPyUtApHldoap/4jQPh JxEW+LtAa1uM4x7E3NpUe0QCL99oHkAiN0Y8KqmiMdBRveMJEmpeHb6hs3Z8oZm0 lnvTPBApvFTIL53MCkxKGPsRnyYm8o7HMHMBJB3js9XurQ+I+fNrywlc47V3kVR6 NhsTIslZI1mTvlW90mX4clOz3pKwLZGnWhSppzeTshWxn8hkuK7crMFa4i4MlWpJ FTsgoxaN0UfN6jEoM60rCJXmHNrtoELLHDuyOqUbGuMHQ+8fxlhn7Ihh6XCH5xWD hpvp+zslKXsXYy7P6avyAoAk7l2zvMWCzgQLA7I0z7RVjg== -----END CERTIFICATE-----Generated at Tue Jan 20 12:47:03 2026 by rpki-client