This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8I41b2gi-YUm9pFKKMsIUwKxBC4.roa File: 8I41b2gi-YUm9pFKKMsIUwKxBC4.roa (raw, json) Hash identifier: RkGK9LrFCONCyNK2lKqXAP2OiNdUUK7CaEpSOtQ3LTM= Subject key identifier: F0:8E:35:6F:68:22:F9:85:26:F6:91:4A:28:CB:08:53:02:B1:04:2E Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D8608168A1615BB8AF42D48297835 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8I41b2gi-YUm9pFKKMsIUwKxBC4.roa Signing time: Fri 02 Jan 2026 06:20:39 +0000 ROA not before: Fri 02 Jan 2026 06:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215855 IP address blocks: 2a0e:97c0:e60::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:86:08:16:8a:16:15:bb:8a:f4:2d:48:29:78:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f08e356f6822f98526f6914a28cb085302b1042e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:9b:04:00:13:ed:46:36:cd:26:01:00:2b:6b: 1d:02:5e:7c:51:df:2a:0e:1e:3b:1b:12:69:8e:e6: 0f:81:5a:43:5c:42:67:91:57:e5:7f:63:0f:2f:27: 1a:c5:6e:c2:cb:2c:41:36:3d:3e:49:20:bc:f2:c9: da:1d:16:22:bf:95:22:84:fd:af:93:d7:8f:f0:3f: 29:e0:94:12:35:a4:2e:59:a2:d4:88:73:25:64:84: 2a:57:1d:ac:07:76:6c:e5:46:1f:78:47:73:33:7a: 74:e0:7f:fd:c6:c4:af:92:e8:e6:4c:2f:18:fe:92: 2e:d6:37:d8:d6:a9:e6:bb:9d:14:13:d3:80:a4:f0: 63:57:b4:d4:a8:2c:d7:8b:3f:e4:d5:92:18:d0:17: 27:cd:6b:5a:4b:9b:44:4c:a7:04:e5:5e:4d:9e:4c: 7f:69:42:3c:91:b3:68:40:d0:c6:59:98:2b:39:b1: a5:c5:82:7d:99:f1:a6:c9:4c:bd:e2:a8:e8:66:14: b6:aa:be:15:83:8d:c8:8b:77:6b:35:fd:94:6a:85: 6f:4e:83:47:e0:67:04:9d:6b:1f:f1:69:48:b8:50: d2:d7:b3:86:a6:9c:03:b7:06:fb:4c:bc:2a:7d:76: 07:ec:5b:4c:e6:22:6a:88:68:31:79:51:59:b4:2d: de:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:8E:35:6F:68:22:F9:85:26:F6:91:4A:28:CB:08:53:02:B1:04:2E X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8I41b2gi-YUm9pFKKMsIUwKxBC4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:e60::/44 Signature Algorithm: sha256WithRSAEncryption c6:51:a9:40:d0:fb:c3:33:85:db:96:3f:a7:b2:e4:0b:4d:92: 55:ab:63:7c:6c:ed:34:6f:e6:3d:8f:eb:82:93:55:4e:67:96: 50:90:19:52:20:b3:0c:6d:69:03:7b:b1:79:e0:e0:9d:91:fb: 00:1e:58:56:63:c8:bd:f3:96:1a:8f:80:83:ea:e0:7e:51:0a: dd:a0:1e:e2:13:c3:1b:e5:80:66:01:f1:c5:cf:bb:d3:d8:73: 0b:0b:78:df:d0:09:ee:0a:a1:31:7a:48:71:ef:eb:36:51:f4: 67:7b:f6:0f:fd:11:3d:92:2d:03:b1:3c:55:42:05:82:42:31: c8:bc:4f:c7:38:24:4f:2b:16:10:46:38:4e:b5:03:06:39:fe: ff:5e:7c:f6:2a:7f:21:27:9a:16:8c:da:db:26:af:69:8e:f6: 33:30:12:61:1f:24:65:09:da:d6:57:3b:1f:bc:cb:55:b3:e3: be:39:ef:72:b5:ee:90:6c:0b:6a:94:20:91:b7:91:ea:68:27: 5b:bb:70:53:1a:25:33:a0:ae:a4:09:7f:17:d5:b1:6a:b6:f8: 30:15:79:36:4a:c2:1c:45:fd:6b:68:59:8c:c8:6a:a0:e1:e9: c0:76:99:87:dc:45:33:38:7e:af:30:7e:2a:2e:0f:01:80:ce: 27:f6:22:84 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XYYIFooWFbuK9C1IKXg1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDhlMzU2ZjY4MjJmOTg1MjZmNjkxNGEyOGNiMDg1MzAyYjEwNDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55sEABPtRjbNJgEAK2sdAl58Ud8q Dh47GxJpjuYPgVpDXEJnkVflf2MPLycaxW7CyyxBNj0+SSC88snaHRYiv5UihP2v k9eP8D8p4JQSNaQuWaLUiHMlZIQqVx2sB3Zs5UYfeEdzM3p04H/9xsSvkujmTC8Y /pIu1jfY1qnmu50UE9OApPBjV7TUqCzXiz/k1ZIY0BcnzWtaS5tETKcE5V5Nnkx/ aUI8kbNoQNDGWZgrObGlxYJ9mfGmyUy94qjoZhS2qr4Vg43Ii3drNf2UaoVvToNH 4GcEnWsf8WlIuFDS17OGppwDtwb7TLwqfXYH7FtM5iJqiGgxeVFZtC3eAwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPCONW9oIvmFJvaRSijLCFMCsQQuMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvOEk0MWIyZ2ktWVVtOXBGS0tNc0lVd0t4QkM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwA5g MA0GCSqGSIb3DQEBCwUAA4IBAQDGUalA0PvDM4Xblj+nsuQLTZJVq2N8bO00b+Y9 j+uCk1VOZ5ZQkBlSILMMbWkDe7F54OCdkfsAHlhWY8i985Yaj4CD6uB+UQrdoB7i E8Mb5YBmAfHFz7vT2HMLC3jf0AnuCqExekhx7+s2UfRne/YP/RE9ki0DsTxVQgWC QjHIvE/HOCRPKxYQRjhOtQMGOf7/Xnz2Kn8hJ5oWjNrbJq9pjvYzMBJhHyRlCdrW VzsfvMtVs+O+Oe9yte6QbAtqlCCRt5HqaCdbu3BTGiUzoK6kCX8X1bFqtvgwFXk2 SsIcRf1raFmMyGqg4enAdpmH3EUzOH6vMH4qLg8BgM4n9iKE -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:47 2026 by rpki-client