This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/bGggoIJ0OIhztru4Ogj2F04fxYU.roa File: bGggoIJ0OIhztru4Ogj2F04fxYU.roa (raw, json) Hash identifier: rI3MIFU3uFDSoLZiKxRVKahJF8iOrDqQL65+rF7Ilf8= Subject key identifier: 6C:68:20:A0:82:74:38:88:73:B6:BB:B8:3A:08:F6:17:4E:1F:C5:85 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6C1ED56401B4864F09B3AB3C82C9F Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/bGggoIJ0OIhztru4Ogj2F04fxYU.roa Signing time: Fri 02 Jan 2026 12:20:16 +0000 ROA not before: Fri 02 Jan 2026 12:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3280 IP address blocks: 2a0c:9a40:8086::/48 maxlen: 48 2a0c:9a40:9086::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:c1:ed:56:40:1b:48:64:f0:9b:3a:b3:c8:2c:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c6820a08274388873b6bbb83a08f6174e1fc585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e0:03:e6:24:36:08:f0:2e:38:25:0b:2a:e2: 03:d9:41:f9:3f:6a:47:70:5b:b4:0f:6a:3b:8a:b5: 1d:66:0a:b4:98:84:17:61:a9:4f:39:de:a7:e5:07: e8:d9:33:4c:59:df:da:51:29:5e:ac:54:60:af:6d: 03:64:3a:cb:70:ef:75:93:b6:9e:56:0f:6c:9c:00: bb:3f:4b:b3:8c:7e:24:c8:af:2d:81:7a:cf:42:8f: ca:86:1c:13:74:79:1f:92:b1:bc:ae:58:20:70:47: 4c:f5:9d:7b:6a:ba:b8:ca:de:10:f0:9c:bf:20:68: 40:cf:d2:16:1f:53:2c:c0:22:ba:e6:20:6b:49:be: d2:bb:c7:61:5e:da:2e:48:9d:fb:04:67:20:9f:8b: 14:b5:f7:bd:c9:53:cd:37:5d:a8:43:6d:43:42:5f: b4:23:b7:11:5c:25:98:2d:86:6a:0f:0a:8b:a7:c3: 97:4e:4f:70:b1:7f:3e:b0:0a:ac:8b:9c:97:e9:57: 5d:3e:1c:d1:e8:14:38:5f:9f:aa:f5:32:99:0f:bd: 20:71:65:52:89:ce:26:d6:6d:be:ea:91:35:0d:1f: e8:c3:83:c7:80:e3:9a:0c:28:82:e2:87:5c:37:d4: 16:00:85:c2:a1:c1:32:3b:6f:71:4f:ed:1c:4d:76: f0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:68:20:A0:82:74:38:88:73:B6:BB:B8:3A:08:F6:17:4E:1F:C5:85 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/bGggoIJ0OIhztru4Ogj2F04fxYU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8086::/48 2a0c:9a40:9086::/48 Signature Algorithm: sha256WithRSAEncryption 9c:8f:24:27:4a:b1:30:00:ad:ba:28:a0:8f:a0:30:4d:a1:3e: 86:7c:f7:6c:ee:6b:07:0c:56:a6:df:3f:a7:71:9d:02:b7:47: cb:10:6e:7e:1d:2a:7f:86:42:26:52:b9:ed:da:11:63:42:0b: c4:52:ce:b9:ab:c2:6e:71:8f:3d:ac:6f:2f:e8:4e:7d:7b:e4: 99:dd:7f:b6:84:d1:da:36:71:70:6f:eb:9f:94:a8:13:61:e5: 15:21:f7:f7:75:85:ac:fb:8c:2b:98:47:f3:80:e7:55:b9:53: 15:f3:dc:0d:23:e5:5c:53:2e:a1:84:09:f7:4f:f5:b4:37:42: e4:3b:8c:a7:0e:19:70:c8:3e:cd:2e:22:44:fd:67:15:ca:8e: cd:13:f1:2a:66:c0:ed:82:f2:2d:ca:1a:1f:a1:98:c0:93:f3: d9:d6:b6:f3:92:90:cb:35:71:9a:37:36:bb:be:30:b6:8b:5c: 48:6b:8b:cb:d3:87:8b:b0:57:93:d8:b9:d3:54:a5:51:d5:ad: d0:01:dd:65:b2:7a:62:79:08:72:fd:df:08:fd:cc:47:59:cc: 1d:6d:76:83:2a:47:67:83:86:fa:1b:56:d5:97:8a:80:89:bd: e2:c6:17:45:92:51:55:e4:24:67:87:ad:03:e3:83:24:46:d1: 28:23:a7:bc -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+psHtVkAbSGTwmzqzyCyfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzY4MjBhMDgyNzQzODg4NzNiNmJiYjgzYTA4ZjYxNzRlMWZjNTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+AD5iQ2CPAuOCULKuID2UH5P2pH cFu0D2o7irUdZgq0mIQXYalPOd6n5Qfo2TNMWd/aUSlerFRgr20DZDrLcO91k7ae Vg9snAC7P0uzjH4kyK8tgXrPQo/KhhwTdHkfkrG8rlggcEdM9Z17arq4yt4Q8Jy/ IGhAz9IWH1MswCK65iBrSb7Su8dhXtouSJ37BGcgn4sUtfe9yVPNN12oQ21DQl+0 I7cRXCWYLYZqDwqLp8OXTk9wsX8+sAqsi5yX6VddPhzR6BQ4X5+q9TKZD70gcWVS ic4m1m2+6pE1DR/ow4PHgOOaDCiC4odcN9QWAIXCocEyO29xT+0cTXbwqwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGxoIKCCdDiIc7a7uDoI9hdOH8WFMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvYkdnZ29JSjBPSWh6dHJ1NE9najJGMDRmeFlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgyaQICG AwcAKgyaQJCGMA0GCSqGSIb3DQEBCwUAA4IBAQCcjyQnSrEwAK26KKCPoDBNoT6G fPds7msHDFam3z+ncZ0Ct0fLEG5+HSp/hkImUrnt2hFjQgvEUs65q8JucY89rG8v 6E59e+SZ3X+2hNHaNnFwb+uflKgTYeUVIff3dYWs+4wrmEfzgOdVuVMV89wNI+Vc Uy6hhAn3T/W0N0LkO4ynDhlwyD7NLiJE/WcVyo7NE/EqZsDtgvItyhofoZjAk/PZ 1rbzkpDLNXGaNza7vjC2i1xIa4vL04eLsFeT2LnTVKVR1a3QAd1lsnpieQhy/d8I /cxHWcwdbXaDKkdng4b6G1bVl4qAib3ixhdFklFV5CRnh60D44MkRtEoI6e8 -----END CERTIFICATE-----Generated at Tue Jan 20 09:06:52 2026 by rpki-client