This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa File: 1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa (raw, json) Hash identifier: a385zNiEurpE9zRwf9X4UBpg40A2fY4ohIw0B9nkrro= Subject key identifier: F8:3F:0E:9A:06:37:9C:A4:A3:DA:FD:CC:26:65:A5:3D:89:DB:F4:24 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019B7C12FC2AD74DF05A2FDEC007D3E545EA Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa Signing time: Fri 02 Jan 2026 00:19:37 +0000 ROA not before: Fri 02 Jan 2026 00:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210989 IP address blocks: 2a0d:1a40:7b00::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 06:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:fc:2a:d7:4d:f0:5a:2f:de:c0:07:d3:e5:45:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Jan 2 00:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f83f0e9a06379ca4a3dafdcc2665a53d89dbf424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c0:6e:bc:f5:8f:ec:d4:10:33:91:e7:85:d7: e3:9a:ee:e7:d2:03:07:b7:e6:3d:e6:3b:b2:1a:87: 97:98:89:37:94:95:22:e1:cd:64:1f:0a:1a:3f:98: 53:b6:e8:7d:8d:67:e4:3d:ea:bd:7b:0c:ad:2c:7f: f8:6a:94:e4:1f:13:bb:d9:b4:84:b5:d9:f2:44:59: 8c:db:01:5f:96:d3:1c:92:cb:d8:72:6c:d1:a3:2a: 0b:9b:f7:56:d8:df:78:a2:a0:ee:96:62:2d:d4:15: d3:5a:ce:88:36:85:10:bf:a4:87:e6:2b:76:72:da: 63:cc:8a:51:17:70:36:81:ca:62:c3:87:6c:bd:63: 45:44:c3:61:c8:9a:70:e0:cc:6b:48:93:9b:a1:39: c5:e3:47:95:63:e9:c5:76:d3:39:94:7c:5a:ea:73: f1:dc:74:aa:6c:ed:91:25:fd:2b:39:fa:ff:87:a3: 83:60:18:44:4c:28:9f:c9:9d:e6:56:76:e1:d3:9a: 91:be:8e:af:f7:fd:c7:2b:34:a5:1e:bb:58:13:fa: 8b:ad:3e:8b:6f:49:c9:a6:ec:fb:06:9c:93:fc:a8: 17:58:64:be:00:bf:40:bd:24:f1:8a:32:32:a4:0b: 5d:dc:f2:81:7f:6f:ad:82:8f:ca:8e:25:76:86:d9: 8f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3F:0E:9A:06:37:9C:A4:A3:DA:FD:CC:26:65:A5:3D:89:DB:F4:24 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/1-D8OmgY3nKSj2v3MJmWlPYnb9CQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:1a40:7b00::/44 Signature Algorithm: sha256WithRSAEncryption 4c:20:88:8e:15:73:52:8f:32:31:e5:64:a8:06:7a:7a:b4:67: 9d:70:fa:cc:17:c0:26:58:2d:00:49:0c:4e:5d:bd:10:a2:73: 97:c3:8a:e2:8a:49:f0:3d:ee:f1:83:90:aa:81:99:0b:be:c8: 54:87:ff:dd:90:9c:f1:b8:b9:48:7a:3f:28:6f:da:e0:75:88: 22:9e:63:b0:50:25:6d:11:f5:f0:8f:8d:fb:a1:da:49:c5:10: 11:61:3a:f2:ce:cd:fd:f8:cf:4e:2e:4c:e7:61:c8:5e:84:14: b9:49:fb:21:8f:10:fa:1f:41:80:43:bf:c8:3d:24:4d:ff:ca: e5:a2:32:16:41:fc:bd:33:22:df:3b:01:3a:03:0b:a4:26:2d: d2:fc:9c:57:15:0f:ce:9d:d3:17:b3:47:f8:f4:9e:2d:0d:f2: 43:b5:60:0e:9e:70:8e:6b:d9:ad:c6:43:1e:3f:dd:96:ef:dc: 87:80:f3:39:ed:db:a4:0f:87:e2:8a:33:78:62:b3:c0:31:95: 59:20:a2:90:58:7c:e7:ce:5d:85:4a:6e:d4:b2:0d:3a:de:f4: 40:a7:c6:db:ea:f3:30:c9:07:84:e5:55:58:bd:aa:5b:c6:9a: db:f4:55:34:f3:a5:91:69:2e:4e:bd:4d:16:c3:cc:90:8e:3e: f5:18:08:99 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt8Evwq103wWi/ewAfT5UXqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwMTAyMDAxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODNmMGU5YTA2Mzc5Y2E0YTNkYWZkY2MyNjY1YTUzZDg5ZGJmNDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucBuvPWP7NQQM5Hnhdfjmu7n0gMH t+Y95juyGoeXmIk3lJUi4c1kHwoaP5hTtuh9jWfkPeq9ewytLH/4apTkHxO72bSE tdnyRFmM2wFfltMcksvYcmzRoyoLm/dW2N94oqDulmIt1BXTWs6INoUQv6SH5it2 ctpjzIpRF3A2gcpiw4dsvWNFRMNhyJpw4MxrSJOboTnF40eVY+nFdtM5lHxa6nPx 3HSqbO2RJf0rOfr/h6ODYBhETCifyZ3mVnbh05qRvo6v9/3HKzSlHrtYE/qLrT6L b0nJpuz7BpyT/KgXWGS+AL9AvSTxijIypAtd3PKBf2+tgo/KjiV2htmPPwIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFPg/DpoGN5yko9r9zCZlpT2J2/QkMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvMS1EOE9tZ1kzbktTajJ2M01KbVdsUFluYjlDUS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMGMvZDgzNzc3LTViYTgtNGYxZS04NTFjLTkyODE5ZGU4YTAz Ni8xLzdYZm11U1d6dDZlcnVTaUYxVjF6UGNYNll0SS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoNGkB7 ADANBgkqhkiG9w0BAQsFAAOCAQEATCCIjhVzUo8yMeVkqAZ6erRnnXD6zBfAJlgt AEkMTl29EKJzl8OK4opJ8D3u8YOQqoGZC77IVIf/3ZCc8bi5SHo/KG/a4HWIIp5j sFAlbRH18I+N+6HaScUQEWE68s7N/fjPTi5M52HIXoQUuUn7IY8Q+h9BgEO/yD0k Tf/K5aIyFkH8vTMi3zsBOgMLpCYt0vycVxUPzp3TF7NH+PSeLQ3yQ7VgDp5wjmvZ rcZDHj/dlu/ch4DzOe3bpA+H4oozeGKzwDGVWSCikFh8585dhUpu1LINOt70QKfG 2+rzMMkHhOVVWL2qW8aa2/RVNPOlkWkuTr1NFsPMkI4+9RgImQ== -----END CERTIFICATE-----Generated at Wed Jan 7 15:53:21 2026 by rpki-client