This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/gAI3TYt-nVZq6H2EfddLQaxp-wM.roa File: gAI3TYt-nVZq6H2EfddLQaxp-wM.roa (raw, json) Hash identifier: fZ9PBdgi8A0hxtZExl64JgqcPpAb427TsMVqrj+q0vg= Subject key identifier: 80:02:37:4D:8B:7E:9D:56:6A:E8:7D:84:7D:D7:4B:41:AC:69:FB:03 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA70C0F97ABDF8EF5ABB99CC1D7DE08 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/gAI3TYt-nVZq6H2EfddLQaxp-wM.roa Signing time: Fri 02 Jan 2026 12:20:35 +0000 ROA not before: Fri 02 Jan 2026 12:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214304 IP address blocks: 2a0c:9a40:8e20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:0c:0f:97:ab:df:8e:f5:ab:b9:9c:c1:d7:de:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8002374d8b7e9d566ae87d847dd74b41ac69fb03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:21:82:86:47:74:c2:44:f4:21:29:4a:b7:b9: f8:c2:5f:65:55:cc:20:ad:f5:94:5b:1f:2c:8a:f2: 6a:d1:2d:a2:19:d8:99:8c:9c:09:8b:c7:3f:1f:93: a2:00:03:19:40:1b:b7:fc:c1:ac:3d:97:83:18:72: 73:19:b8:fd:8c:06:ac:a3:02:94:a6:d8:2e:5d:6c: cf:82:85:2c:b2:08:6e:28:d5:c3:a4:cb:aa:f4:b2: 86:72:17:55:43:36:23:29:ad:98:09:3b:2c:58:d0: 9a:0d:3a:70:3b:0b:03:81:c1:dc:9c:e0:45:f2:be: 0e:ad:15:52:5f:85:9a:13:88:53:40:2e:34:14:71: 10:b9:94:5f:33:5b:be:d8:46:d8:30:02:6e:95:02: 4c:ed:2a:2b:c9:20:7e:f6:52:9e:8a:bf:d8:1b:11: 57:45:8a:6c:3a:82:3a:72:c3:3f:79:6d:83:db:31: 24:89:94:64:92:95:53:9d:a8:63:aa:ba:f4:35:51: 9e:00:9c:2d:de:34:87:9a:50:89:f8:27:4e:f8:ac: 6a:6f:a9:2b:90:69:f4:d1:1b:3d:43:66:62:ae:e4: cb:6d:97:08:58:4e:19:99:ef:65:b8:cc:08:8c:90: 0d:d3:db:a7:64:85:e7:b7:62:87:57:26:eb:9e:3d: bc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:02:37:4D:8B:7E:9D:56:6A:E8:7D:84:7D:D7:4B:41:AC:69:FB:03 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/gAI3TYt-nVZq6H2EfddLQaxp-wM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8e20::/48 Signature Algorithm: sha256WithRSAEncryption 8b:29:69:39:56:20:b0:d6:52:00:3f:d7:6f:b5:c1:70:f1:98: 7c:87:89:8a:26:cc:42:9c:47:62:b1:c6:79:73:41:f2:f9:12: 04:24:22:e4:7b:7f:0a:80:6b:42:d7:2d:d9:60:da:01:a3:9d: 8c:ae:bd:f0:60:5f:0b:d8:cd:da:2d:ca:78:59:28:49:13:80: 3e:e8:49:9e:2d:3f:5b:d8:7e:e8:22:e4:5f:a7:99:53:e8:d9: c1:7c:c7:f0:c6:a1:7b:c0:1b:64:62:3b:f8:4b:03:5b:ed:3c: b3:ec:5f:1c:1a:74:04:78:c1:40:ad:f4:1a:d9:8f:0e:f7:af: 7c:27:5d:8e:bf:d9:f3:56:98:f1:0f:68:39:5a:06:73:a6:a8: fb:dc:75:82:7a:4f:60:64:e9:2b:68:f6:ab:e4:82:3d:b0:a3: ad:aa:4d:aa:f3:93:67:9c:c2:53:0d:e8:7c:78:b2:aa:a6:15: 91:49:85:f0:db:75:9e:0e:94:78:f8:62:58:62:17:9d:ac:00: 9a:f8:a8:d3:1c:ea:35:b9:cd:96:c5:ed:32:d3:7d:7e:e4:81: 08:cb:af:e1:84:84:61:c3:71:be:2a:2f:2e:63:23:55:11:81: cd:dc:2d:b8:d4:02:95:ec:03:9c:73:34:68:3c:d8:b3:19:a6: b2:dd:23:13 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pwwPl6vfjvWruZzB194IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDAyMzc0ZDhiN2U5ZDU2NmFlODdkODQ3ZGQ3NGI0MWFjNjlmYjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryGChkd0wkT0ISlKt7n4wl9lVcwg rfWUWx8sivJq0S2iGdiZjJwJi8c/H5OiAAMZQBu3/MGsPZeDGHJzGbj9jAasowKU ptguXWzPgoUssghuKNXDpMuq9LKGchdVQzYjKa2YCTssWNCaDTpwOwsDgcHcnOBF 8r4OrRVSX4WaE4hTQC40FHEQuZRfM1u+2EbYMAJulQJM7SorySB+9lKeir/YGxFX RYpsOoI6csM/eW2D2zEkiZRkkpVTnahjqrr0NVGeAJwt3jSHmlCJ+CdO+Kxqb6kr kGn00Rs9Q2ZiruTLbZcIWE4Zme9luMwIjJAN09unZIXnt2KHVybrnj28xwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIACN02Lfp1Wauh9hH3XS0GsafsDMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvZ0FJM1RZdC1uVlpxNkgyRWZkZExRYXhwLXdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQI4g MA0GCSqGSIb3DQEBCwUAA4IBAQCLKWk5ViCw1lIAP9dvtcFw8Zh8h4mKJsxCnEdi scZ5c0Hy+RIEJCLke38KgGtC1y3ZYNoBo52Mrr3wYF8L2M3aLcp4WShJE4A+6Eme LT9b2H7oIuRfp5lT6NnBfMfwxqF7wBtkYjv4SwNb7Tyz7F8cGnQEeMFArfQa2Y8O 9698J12Ov9nzVpjxD2g5WgZzpqj73HWCek9gZOkraPar5II9sKOtqk2q85NnnMJT Deh8eLKqphWRSYXw23WeDpR4+GJYYhedrACa+KjTHOo1uc2Wxe0y031+5IEIy6/h hIRhw3G+Ki8uYyNVEYHN3C241AKV7AOcczRoPNizGaay3SMT -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:36 2026 by rpki-client