This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/i8o1wvAhrbjSp3BYIhISOUXvW1I.roa File: i8o1wvAhrbjSp3BYIhISOUXvW1I.roa (raw, json) Hash identifier: 4Iwgm5dU08CJdYBhUPj/wfHJLQ3KLg/J2wrS95smlME= Subject key identifier: 8B:CA:35:C2:F0:21:AD:B8:D2:A7:70:58:22:12:12:39:45:EF:5B:52 Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba Certificate serial: 019B7AC7936B683C9D053A386511DE01020F Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/i8o1wvAhrbjSp3BYIhISOUXvW1I.roa Signing time: Thu 01 Jan 2026 18:17:38 +0000 ROA not before: Thu 01 Jan 2026 18:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57831 IP address blocks: 2a07:8f40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:93:6b:68:3c:9d:05:3a:38:65:11:de:01:02:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba Validity Not Before: Jan 1 18:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bca35c2f021adb8d2a770582212123945ef5b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e8:6e:ed:3f:74:54:a3:8d:be:f0:d1:19:03: b2:df:69:02:87:c6:2c:a9:2e:2b:62:1b:a5:9b:26: 54:7f:c7:f0:35:79:c6:b0:b5:99:7c:f9:15:17:ec: 1f:9f:77:98:c3:19:47:8a:ba:c3:6e:5c:cf:dd:74: 4b:57:85:d7:29:5d:40:9b:f0:a0:ac:27:5f:1f:b0: 1b:36:d6:8d:9f:35:c8:aa:ed:51:3b:b7:53:24:85: c3:19:02:cb:e8:9e:5b:b0:71:0b:5a:f7:50:50:0b: 8c:fd:09:ff:35:36:3a:45:21:64:93:8f:6a:95:9a: 19:64:75:59:31:5d:a7:e0:b2:d7:54:4e:57:ff:bf: ea:4e:26:f9:49:d4:0c:d4:de:9b:05:0a:93:46:bc: af:89:97:ea:39:59:ae:94:3b:da:a5:1c:81:40:de: c2:d2:83:f7:89:98:77:23:6d:3c:ca:b8:91:f3:d6: f2:73:76:7e:83:70:aa:76:22:67:80:19:40:21:86: 87:ef:64:c3:3c:f1:52:14:11:d5:44:2d:ab:6d:01: 54:5e:15:42:e0:8f:e7:bc:5c:77:11:a3:71:c5:31: 5a:fb:ab:81:92:59:3a:16:b6:cd:ab:b9:b6:80:1e: ca:5f:ee:cf:10:d0:bd:0c:cb:f9:ca:b4:f0:bb:60: 88:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CA:35:C2:F0:21:AD:B8:D2:A7:70:58:22:12:12:39:45:EF:5B:52 X509v3 Authority Key Identifier: keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/i8o1wvAhrbjSp3BYIhISOUXvW1I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:8f40::/29 Signature Algorithm: sha256WithRSAEncryption aa:31:47:7e:d7:d7:ce:d5:5f:27:53:4c:77:39:bd:97:2f:db: f3:6d:3f:9e:9d:a2:79:6f:82:e9:06:9d:41:08:a3:39:88:0b: 08:16:05:b3:6e:a2:97:80:e6:81:0d:a2:5f:0d:68:dc:4a:23: bd:ad:a8:62:b1:a0:bb:df:1f:22:39:70:32:7a:d7:d4:97:9d: 2d:24:c4:0e:47:07:2d:35:c6:b7:fb:be:b6:5a:76:5f:e4:fe: 4b:5b:df:4c:66:8d:93:bf:47:26:23:5f:8c:88:04:a2:46:1f: 6d:3f:96:c4:54:3d:96:52:ee:0e:39:d6:07:52:28:58:93:ed: e7:21:49:59:c5:81:56:80:72:f4:91:39:05:e5:0f:45:5a:87: 83:27:16:6c:0d:87:08:dd:d5:83:48:ec:36:33:ae:1a:57:0c: 5a:9c:97:d3:77:e4:66:43:a5:61:18:6c:9d:bc:9d:d3:fa:02: 6f:ad:c5:ea:3d:88:a3:ab:f1:0a:4f:37:89:1f:68:65:d6:39: 1a:f2:dc:61:0a:c9:95:52:90:12:a8:0b:cf:da:f2:fb:ad:94: 46:bc:8c:90:64:dc:62:af:80:9b:7e:d4:82:95:dd:73:1d:98: 8f:5b:66:a1:1b:2e:9c:a7:78:ca:b9:eb:9a:71:a4:6b:36:7c: 89:a2:44:7b -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6x5NraDydBTo4ZRHeAQIPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1 OTVlYmEwHhcNMjYwMTAxMTgxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmNhMzVjMmYwMjFhZGI4ZDJhNzcwNTgyMjEyMTIzOTQ1ZWY1YjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+hu7T90VKONvvDRGQOy32kCh8Ys qS4rYhulmyZUf8fwNXnGsLWZfPkVF+wfn3eYwxlHirrDblzP3XRLV4XXKV1Am/Cg rCdfH7AbNtaNnzXIqu1RO7dTJIXDGQLL6J5bsHELWvdQUAuM/Qn/NTY6RSFkk49q lZoZZHVZMV2n4LLXVE5X/7/qTib5SdQM1N6bBQqTRryviZfqOVmulDvapRyBQN7C 0oP3iZh3I208yriR89byc3Z+g3CqdiJngBlAIYaH72TDPPFSFBHVRC2rbQFUXhVC 4I/nvFx3EaNxxTFa+6uBklk6FrbNq7m2gB7KX+7PENC9DMv5yrTwu2CI5QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFIvKNcLwIa240qdwWCISEjlF71tSMB8GA1UdIwQY MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt MTA5ODJlMDQwZDUzLzEvaThvMXd2QWhyYmpTcDNCWUloSVNPVVh2VzFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgePQDAN BgkqhkiG9w0BAQsFAAOCAQEAqjFHftfXztVfJ1NMdzm9ly/b820/np2ieW+C6Qad QQijOYgLCBYFs26il4DmgQ2iXw1o3Eojva2oYrGgu98fIjlwMnrX1JedLSTEDkcH LTXGt/u+tlp2X+T+S1vfTGaNk79HJiNfjIgEokYfbT+WxFQ9llLuDjnWB1IoWJPt 5yFJWcWBVoBy9JE5BeUPRVqHgycWbA2HCN3Vg0jsNjOuGlcMWpyX03fkZkOlYRhs nbyd0/oCb63F6j2Io6vxCk83iR9oZdY5GvLcYQrJlVKQEqgLz9ry+62URryMkGTc Yq+Am37UgpXdcx2Yj1tmoRsunKd4yrnrmnGkazZ8iaJEew== -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:53 2026 by rpki-client