This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/GPXU7Ns_-Qod2rxu8EiuPRDVCa8.roa File: GPXU7Ns_-Qod2rxu8EiuPRDVCa8.roa (raw, json) Hash identifier: 7OKqVxHEVdr0RqmHr9BbhNCU6myD1AnmsS98MV+FfzU= Subject key identifier: 18:F5:D4:EC:DB:3F:F9:0A:1D:DA:BC:6E:F0:48:AE:3D:10:D5:09:AF Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6F04EFE0E173A7BD066D760BFD66B Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/GPXU7Ns_-Qod2rxu8EiuPRDVCa8.roa Signing time: Fri 02 Jan 2026 12:20:28 +0000 ROA not before: Fri 02 Jan 2026 12:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207792 IP address blocks: 2a0c:9a40:8850::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f0:4e:fe:0e:17:3a:7b:d0:66:d7:60:bf:d6:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18f5d4ecdb3ff90a1ddabc6ef048ae3d10d509af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:47:29:b4:ff:9e:cd:e8:96:3e:c9:e0:2f:f7: 66:08:ff:15:4a:cd:e7:35:95:7a:d4:c6:42:ac:6f: df:9f:c1:f7:4b:c3:c1:14:19:83:89:bd:00:5f:48: 9e:4f:6b:ae:9d:37:53:60:6a:41:7c:23:12:82:cc: 42:0a:c1:60:98:b0:92:48:53:72:ce:a5:03:38:43: 99:ce:ad:92:9a:76:2c:09:db:43:56:59:c2:e4:ed: b9:91:63:a7:5a:73:ce:7f:45:75:17:4d:64:60:19: f0:ad:64:0b:05:fb:80:85:dd:a3:45:44:52:d8:71: 1d:cc:73:42:56:03:c8:f9:6e:9c:06:63:be:5d:ff: 88:57:95:e4:64:af:8e:a9:b6:d0:59:a6:8b:6f:a8: 76:38:14:75:08:da:2b:04:48:f2:aa:e1:ef:34:1e: 4e:45:13:60:95:08:16:ee:fb:09:48:05:31:ea:c6: 77:a9:ec:cf:d1:09:fb:90:4d:55:0d:d1:38:c8:fb: 33:9f:76:3c:18:67:fb:7d:33:dc:7d:65:89:de:3e: 05:06:88:15:b3:f8:d9:9a:dd:31:42:c8:46:09:8f: ef:c7:c3:0b:a6:df:7a:a3:51:97:da:e7:53:65:cc: f2:f3:d9:99:f0:c2:89:13:c0:ac:77:07:bf:b3:c4: 7d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F5:D4:EC:DB:3F:F9:0A:1D:DA:BC:6E:F0:48:AE:3D:10:D5:09:AF X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/GPXU7Ns_-Qod2rxu8EiuPRDVCa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8850::/46 Signature Algorithm: sha256WithRSAEncryption 69:59:54:6a:7e:59:49:9a:40:11:71:61:ec:63:9c:f9:32:ae: d6:03:3b:8b:d4:f6:98:58:34:bc:08:9d:36:09:5e:d4:8b:01: b0:73:78:6a:7d:4e:79:18:2a:c9:e8:00:48:23:7d:31:d3:d9: 8e:fc:89:92:08:b8:6f:c2:a5:fa:89:de:b8:da:3f:5e:84:6c: 47:ec:55:f7:6c:bb:c1:7a:0e:97:8d:e7:5c:71:ab:ed:11:56: 36:1c:8f:9a:b2:cd:65:86:e7:5e:46:67:e3:69:d6:68:06:74: 68:7f:44:0c:78:06:36:fe:69:3e:9a:b5:47:59:fd:2a:2f:68: 3c:1a:41:98:92:9e:1b:b3:89:67:86:1c:3c:11:71:2c:a9:03: 05:6c:94:05:b0:fe:8c:3c:2d:ba:8f:ea:d4:d1:d9:96:c1:0a: 6a:f1:28:36:0e:8a:57:e7:db:8c:de:4b:f1:3c:47:dd:2c:da: d4:22:74:b7:88:52:fd:38:2c:93:fc:d2:8b:79:56:c0:38:a7: ce:67:55:6e:26:65:e6:6b:01:66:17:e3:67:8b:91:7f:d9:78: 66:2f:df:d7:51:2d:a0:49:27:90:5a:5a:27:f6:cf:8d:32:8e: ea:ec:e7:5d:2f:fe:ad:5b:fa:cc:7a:6f:3a:2d:3f:7a:de:49: 0a:62:68:58 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pvBO/g4XOnvQZtdgv9ZrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGY1ZDRlY2RiM2ZmOTBhMWRkYWJjNmVmMDQ4YWUzZDEwZDUwOWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkcptP+ezeiWPsngL/dmCP8VSs3n NZV61MZCrG/fn8H3S8PBFBmDib0AX0ieT2uunTdTYGpBfCMSgsxCCsFgmLCSSFNy zqUDOEOZzq2SmnYsCdtDVlnC5O25kWOnWnPOf0V1F01kYBnwrWQLBfuAhd2jRURS 2HEdzHNCVgPI+W6cBmO+Xf+IV5XkZK+OqbbQWaaLb6h2OBR1CNorBEjyquHvNB5O RRNglQgW7vsJSAUx6sZ3qezP0Qn7kE1VDdE4yPszn3Y8GGf7fTPcfWWJ3j4FBogV s/jZmt0xQshGCY/vx8MLpt96o1GX2udTZczy89mZ8MKJE8Csdwe/s8R90wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBj11OzbP/kKHdq8bvBIrj0Q1QmvMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvR1BYVTdOc18tUW9kMnJ4dThFaXVQUkRWQ2E4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKgyaQIhQ MA0GCSqGSIb3DQEBCwUAA4IBAQBpWVRqfllJmkARcWHsY5z5Mq7WAzuL1PaYWDS8 CJ02CV7UiwGwc3hqfU55GCrJ6ABII30x09mO/ImSCLhvwqX6id642j9ehGxH7FX3 bLvBeg6XjedccavtEVY2HI+ass1lhudeRmfjadZoBnRof0QMeAY2/mk+mrVHWf0q L2g8GkGYkp4bs4lnhhw8EXEsqQMFbJQFsP6MPC26j+rU0dmWwQpq8Sg2DopX59uM 3kvxPEfdLNrUInS3iFL9OCyT/NKLeVbAOKfOZ1VuJmXmawFmF+Nni5F/2XhmL9/X US2gSSeQWlon9s+NMo7q7OddL/6tW/rMem86LT963kkKYmhY -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:22 2026 by rpki-client