This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/8IEhIJsz--VphNwQBf5v1Cer_Qo.roa File: 8IEhIJsz--VphNwQBf5v1Cer_Qo.roa (raw, json) Hash identifier: GZYWkcMikSfb94iB4i8wbNXJ0NyD6DtC4RxEi0xJfzM= Subject key identifier: F0:81:21:20:9B:33:FB:E5:69:84:DC:10:05:FE:6F:D4:27:AB:FD:0A Certificate issuer: /CN=58a127453dfba17e10c347fa34bbebab14905a57 Certificate serial: 019B7AC8BDBB67983DE2E66D4F2184422D4D Authority key identifier: 58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/8IEhIJsz--VphNwQBf5v1Cer_Qo.roa Signing time: Thu 01 Jan 2026 18:18:54 +0000 ROA not before: Thu 01 Jan 2026 18:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204723 IP address blocks: 2001:678:5d0::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:bd:bb:67:98:3d:e2:e6:6d:4f:21:84:42:2d:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58a127453dfba17e10c347fa34bbebab14905a57 Validity Not Before: Jan 1 18:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f08121209b33fbe56984dc1005fe6fd427abfd0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cc:34:fc:4b:9b:1b:07:f8:21:d2:9a:09:64: c2:27:18:eb:ec:18:11:88:98:3d:05:b2:a8:80:0a: 54:d3:f0:e7:90:fa:4f:dc:d5:63:b3:98:82:9a:a3: 00:06:b1:62:07:1a:7a:5f:5a:6e:da:ea:90:c1:cb: bd:77:5e:86:e6:c7:c7:4b:00:e6:65:38:3a:e6:b5: 52:0d:6d:27:8c:1c:f1:0e:88:2a:68:16:05:94:54: 48:be:43:eb:7e:30:a5:8b:39:a8:2b:47:0c:32:fe: 92:bc:69:4c:b0:f5:d6:ca:41:e7:65:b4:55:11:41: f0:62:a8:3c:34:e3:01:d2:e7:ae:d2:64:88:e0:c5: 64:77:eb:48:78:eb:02:57:6e:ca:26:79:a3:d7:77: 17:8e:12:8d:26:2a:b2:ae:64:79:d4:82:2c:71:6a: e6:7f:d2:c1:8f:d4:c7:77:3b:d6:53:b4:aa:28:e7: 03:8f:f5:44:05:6f:88:d6:8f:bd:f6:4d:1c:09:c3: 9f:1a:43:35:fd:07:9d:3e:90:c2:21:97:cb:9b:e7: 2d:54:28:42:3d:5c:b8:e3:e0:b2:59:ec:c2:e4:a9: 6f:bf:b5:9a:ab:3d:d0:a0:df:3f:0c:3b:ce:1d:f3: 89:31:9c:de:f7:85:12:05:6e:32:38:bc:5e:37:c0: d4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:81:21:20:9B:33:FB:E5:69:84:DC:10:05:FE:6F:D4:27:AB:FD:0A X509v3 Authority Key Identifier: keyid:58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/8IEhIJsz--VphNwQBf5v1Cer_Qo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:5d0::/48 Signature Algorithm: sha256WithRSAEncryption 5a:49:2c:24:5f:86:d6:8e:c0:5e:af:9f:20:53:24:62:b3:8a: 90:a2:c7:1f:70:9a:08:2d:c0:08:d0:d6:36:5e:fa:65:10:ae: e3:3f:e9:d8:09:ae:a7:c1:d1:23:c4:3e:20:42:73:59:f6:7e: d8:e5:9c:3f:c9:b6:f2:50:88:63:e8:d0:30:5f:1b:1d:49:a5: b2:23:a3:eb:63:e4:01:3c:89:f8:1b:ce:5b:56:64:5d:ec:d7: 4c:d1:d0:20:9d:70:9f:1e:17:37:17:fe:91:22:1c:c3:b1:f1: b4:c2:f5:d0:b8:55:c9:87:87:d3:bf:a3:2b:47:34:12:09:4a: 4f:ce:0e:2a:b1:10:92:dc:f9:d9:e7:30:61:26:db:83:50:6e: 14:ad:31:90:a6:67:9b:6f:01:06:d1:55:92:38:d4:28:6d:61: d4:5e:7c:0a:bb:ba:7a:60:5e:dd:c6:78:75:1c:99:fe:2b:9a: 89:6e:e1:f7:44:12:c5:34:77:ed:39:54:2a:97:4a:ee:90:b2: de:84:9f:21:ca:ec:79:1b:d9:6e:3a:ac:a5:c7:9a:cb:d7:ad: f5:91:6d:90:6a:a9:e6:37:e6:cf:32:5b:ea:5b:26:e2:b6:f5: b0:1b:2f:0f:f2:11:e9:7b:67:c5:08:d7:71:7c:bb:db:48:63: 79:69:17:78 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6yL27Z5g94uZtTyGEQi1NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YTEyNzQ1M2RmYmExN2UxMGMzNDdmYTM0YmJlYmFiMTQ5 MDVhNTcwHhcNMjYwMTAxMTgxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDgxMjEyMDliMzNmYmU1Njk4NGRjMTAwNWZlNmZkNDI3YWJmZDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcw0/EubGwf4IdKaCWTCJxjr7BgR iJg9BbKogApU0/DnkPpP3NVjs5iCmqMABrFiBxp6X1pu2uqQwcu9d16G5sfHSwDm ZTg65rVSDW0njBzxDogqaBYFlFRIvkPrfjClizmoK0cMMv6SvGlMsPXWykHnZbRV EUHwYqg8NOMB0ueu0mSI4MVkd+tIeOsCV27KJnmj13cXjhKNJiqyrmR51IIscWrm f9LBj9THdzvWU7SqKOcDj/VEBW+I1o+99k0cCcOfGkM1/QedPpDCIZfLm+ctVChC PVy44+CyWezC5Klvv7Waqz3QoN8/DDvOHfOJMZze94USBW4yOLxeN8DUXQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPCBISCbM/vlaYTcEAX+b9Qnq/0KMB8GA1UdIwQY MBaAFFihJ0U9+6F+EMNH+jS766sUkFpXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0tFblJUMzdvWDRRdzBmNk5MdnJxeFNRV2xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9mMWRmZTMtMjYwOS00NmI4LWIwM2Yt ZGE5NjAxOWQ0YzIwLzEvOElFaElKc3otLVZwaE53UUJmNXYxQ2VyX1FvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9mMWRmZTMtMjYwOS00NmI4LWIwM2YtZGE5NjAxOWQ0YzIw LzEvV0tFblJUMzdvWDRRdzBmNk5MdnJxeFNRV2xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAXQ MA0GCSqGSIb3DQEBCwUAA4IBAQBaSSwkX4bWjsBer58gUyRis4qQoscfcJoILcAI 0NY2XvplEK7jP+nYCa6nwdEjxD4gQnNZ9n7Y5Zw/ybbyUIhj6NAwXxsdSaWyI6Pr Y+QBPIn4G85bVmRd7NdM0dAgnXCfHhc3F/6RIhzDsfG0wvXQuFXJh4fTv6MrRzQS CUpPzg4qsRCS3PnZ5zBhJtuDUG4UrTGQpmebbwEG0VWSONQobWHUXnwKu7p6YF7d xnh1HJn+K5qJbuH3RBLFNHftOVQql0rukLLehJ8hyux5G9luOqylx5rL1631kW2Q aqnmN+bPMlvqWybitvWwGy8P8hHpe2fFCNdxfLvbSGN5aRd4 -----END CERTIFICATE-----Generated at Wed Jan 7 07:16:05 2026 by rpki-client