This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/1-8kJiWXbzYyQn9Z_qYA1FhOH3SQ.roa File: 1-8kJiWXbzYyQn9Z_qYA1FhOH3SQ.roa (raw, json) Hash identifier: sbcGPB93z3YNWrVB4YHHakteB4jeVAtpbXTGFYuXZTU= Subject key identifier: FB:C9:09:89:65:DB:CD:8C:90:9F:D6:7F:A9:80:35:16:13:87:DD:24 Certificate issuer: /CN=e278c4aaa021bed8b926e3591fdf50c8df6bc172 Certificate serial: 019B76EAB26867A44A5C8D9FF4B67D4E8EE5 Authority key identifier: E2:78:C4:AA:A0:21:BE:D8:B9:26:E3:59:1F:DF:50:C8:DF:6B:C1:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/1-8kJiWXbzYyQn9Z_qYA1FhOH3SQ.roa Signing time: Thu 01 Jan 2026 00:17:31 +0000 ROA not before: Thu 01 Jan 2026 00:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207824 IP address blocks: 2001:678:ba4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b2:68:67:a4:4a:5c:8d:9f:f4:b6:7d:4e:8e:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e278c4aaa021bed8b926e3591fdf50c8df6bc172 Validity Not Before: Jan 1 00:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbc9098965dbcd8c909fd67fa98035161387dd24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:04:6d:af:20:e9:7c:72:97:ea:cb:f6:30:fb: 16:1a:8e:51:75:37:b4:59:af:cc:f8:3f:c8:6f:c1: 77:e7:dc:c6:de:fb:00:f9:ed:fb:9a:03:d3:fe:67: 50:a1:c8:3a:48:1c:1c:0a:19:7e:67:d1:91:17:3e: a6:7c:25:5b:11:a0:80:f4:d0:a2:83:78:b0:9e:cb: 7a:7d:3c:55:cc:fa:00:39:03:93:12:42:86:a0:78: 10:f3:89:dc:6a:39:b1:2f:aa:f0:20:42:53:4f:c6: 72:11:98:8f:8f:c4:63:4b:ed:c5:fd:18:f8:fc:05: 73:73:c6:85:bc:1c:6d:58:aa:61:b3:cc:88:50:80: bd:be:e4:07:b6:4d:83:ee:0f:09:08:1d:20:ba:54: 73:f9:7a:1c:3f:bf:ba:29:0c:8f:2a:a2:03:76:b5: e6:0f:6c:b8:4d:93:bc:59:71:fd:70:e9:a0:92:59: f4:8f:44:28:1d:8d:32:ac:66:98:5b:b2:0d:6b:ee: a2:de:35:1f:6e:e3:51:a6:7d:92:52:be:47:ea:8b: a9:ea:1b:5c:af:55:27:d2:46:eb:a2:b5:37:3e:9c: ea:5b:eb:1b:06:4f:48:09:07:68:80:ba:8a:e5:99: 29:8b:57:2e:c8:da:92:fb:c6:51:4c:ae:30:37:7c: 8d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C9:09:89:65:DB:CD:8C:90:9F:D6:7F:A9:80:35:16:13:87:DD:24 X509v3 Authority Key Identifier: keyid:E2:78:C4:AA:A0:21:BE:D8:B9:26:E3:59:1F:DF:50:C8:DF:6B:C1:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/1-8kJiWXbzYyQn9Z_qYA1FhOH3SQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:ba4::/48 Signature Algorithm: sha256WithRSAEncryption 2a:6a:88:81:82:a8:ff:93:09:fe:ad:c4:39:56:84:d1:53:82: 0a:cc:58:7b:bb:41:cf:ca:d0:3a:f6:d0:65:65:36:1d:fe:4a: c4:b0:bb:0e:6a:10:c2:b6:4b:d5:f4:17:4a:bb:51:8f:2b:34: 2f:81:77:84:6c:fe:67:b5:58:e8:2c:e2:c8:0c:35:06:ae:10: 55:e4:64:4c:d9:9a:0f:1f:49:33:f3:93:62:36:08:40:f0:5b: 6e:95:05:3d:93:6b:fb:5d:e6:f2:6d:d5:af:90:7b:44:b8:a3: 62:aa:fd:eb:1c:03:36:06:d9:a9:5f:e3:30:93:af:52:b7:e3: 33:01:1a:19:4a:1a:1e:61:ed:67:72:cc:ee:8b:8a:88:07:d2: a3:df:59:74:74:64:2a:58:50:d1:15:0d:ee:c5:f4:db:9d:3b: 07:bf:c6:63:5d:9a:91:de:7a:50:6e:04:5c:26:09:02:a5:98: 79:81:da:e8:df:17:94:27:31:b3:6b:66:26:73:4d:c5:1b:59: 7e:71:cd:8e:6e:2d:96:6f:4f:df:8b:91:53:1e:cd:e7:b3:ff: ed:4f:08:7c:91:04:b0:87:6b:da:79:c8:bd:39:b8:d2:d5:a5: 6b:ba:17:be:ab:c1:89:87:43:e4:16:9a:2f:5d:01:25:f3:66: 86:2f:6c:07 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt26rJoZ6RKXI2f9LZ9To7lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyNzhjNGFhYTAyMWJlZDhiOTI2ZTM1OTFmZGY1MGM4ZGY2 YmMxNzIwHhcNMjYwMTAxMDAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmM5MDk4OTY1ZGJjZDhjOTA5ZmQ2N2ZhOTgwMzUxNjEzODdkZDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QRtryDpfHKX6sv2MPsWGo5RdTe0 Wa/M+D/Ib8F359zG3vsA+e37mgPT/mdQocg6SBwcChl+Z9GRFz6mfCVbEaCA9NCi g3iwnst6fTxVzPoAOQOTEkKGoHgQ84ncajmxL6rwIEJTT8ZyEZiPj8RjS+3F/Rj4 /AVzc8aFvBxtWKphs8yIUIC9vuQHtk2D7g8JCB0gulRz+XocP7+6KQyPKqIDdrXm D2y4TZO8WXH9cOmgkln0j0QoHY0yrGaYW7INa+6i3jUfbuNRpn2SUr5H6oup6htc r1Un0kbrorU3PpzqW+sbBk9ICQdogLqK5Zkpi1cuyNqS+8ZRTK4wN3yNzQIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFPvJCYll282MkJ/Wf6mANRYTh90kMB8GA1UdIwQY MBaAFOJ4xKqgIb7YuSbjWR/fUMjfa8FyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNG5qRXFxQWh2dGk1SnVOWkg5OVF5Tjlyd1hJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jMDY5MzctOTNiMy00NDJlLTg2NzYt ZmM0MzM5MTk4OGY3LzEvMS04a0ppV1hiell5UW45Wl9xWUExRmhPSDNTUS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMjkvYzA2OTM3LTkzYjMtNDQyZS04Njc2LWZjNDMzOTE5ODhm Ny8xLzRuakVxcUFodnRpNUp1TlpIOTlReU45cndYSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBngL pDANBgkqhkiG9w0BAQsFAAOCAQEAKmqIgYKo/5MJ/q3EOVaE0VOCCsxYe7tBz8rQ OvbQZWU2Hf5KxLC7DmoQwrZL1fQXSrtRjys0L4F3hGz+Z7VY6CziyAw1Bq4QVeRk TNmaDx9JM/OTYjYIQPBbbpUFPZNr+13m8m3Vr5B7RLijYqr96xwDNgbZqV/jMJOv UrfjMwEaGUoaHmHtZ3LM7ouKiAfSo99ZdHRkKlhQ0RUN7sX02507B7/GY12akd56 UG4EXCYJAqWYeYHa6N8XlCcxs2tmJnNNxRtZfnHNjm4tlm9P34uRUx7N57P/7U8I fJEEsIdr2nnIvTm40tWla7oXvqvBiYdD5BaaL10BJfNmhi9sBw== -----END CERTIFICATE-----Generated at Mon Jan 12 09:56:48 2026 by rpki-client