This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/gOsnPN51JdqXbU7U2UpYjxamgYc.roa File: gOsnPN51JdqXbU7U2UpYjxamgYc.roa (raw, json) Hash identifier: 8GlXmQuMLJ/ByaFvYFSGg2IvXa7+oGovEgm8C1RxLl0= Subject key identifier: 80:EB:27:3C:DE:75:25:DA:97:6D:4E:D4:D9:4A:58:8F:16:A6:81:87 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6D5B38D0EF1A96C64057945E05829 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/gOsnPN51JdqXbU7U2UpYjxamgYc.roa Signing time: Fri 02 Jan 2026 12:20:21 +0000 ROA not before: Fri 02 Jan 2026 12:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198079 IP address blocks: 2a0c:9a40:83b0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d5:b3:8d:0e:f1:a9:6c:64:05:79:45:e0:58:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80eb273cde7525da976d4ed4d94a588f16a68187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:67:19:9a:2e:11:8f:0f:b6:c2:80:85:4c:88: 51:49:70:51:26:28:3b:e2:58:e0:38:0b:97:bf:ac: df:9f:ca:03:98:dc:15:36:84:4a:b4:1c:97:e8:d9: 7b:e2:eb:60:52:a1:e0:ad:58:4e:e3:df:00:22:65: 3f:92:be:73:5e:55:ae:e6:07:96:9a:6f:fc:10:36: 62:81:fb:19:13:73:b4:b0:1c:86:52:83:8d:2b:67: 18:d5:35:0f:f4:8e:e0:3a:9b:b3:b8:5d:d3:5a:6a: d8:c3:18:7c:67:dd:45:ac:be:a4:54:42:df:ed:be: 06:0e:12:b0:b9:d1:05:dc:7e:20:bd:a6:5c:dd:54: a0:2e:02:e5:20:61:f4:1b:02:77:99:69:c7:a2:ef: c6:de:1c:5f:28:20:2c:03:52:d7:44:c4:ce:bf:90: e9:34:6f:f2:ff:12:b7:9e:bb:da:9d:37:02:53:48: 2f:e0:4d:60:47:71:1f:c2:4e:90:1e:c8:7d:34:25: 51:53:88:2c:89:c4:ce:7b:21:3a:65:0b:0c:5e:b4: 8e:fc:c0:f6:ab:82:ee:53:22:4d:d9:d5:89:4f:25: fc:ee:1c:d9:04:00:1d:71:fa:52:4b:99:35:95:e3: 73:49:95:4a:55:c2:e2:66:26:b1:bd:56:9c:20:d3: ed:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:EB:27:3C:DE:75:25:DA:97:6D:4E:D4:D9:4A:58:8F:16:A6:81:87 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/gOsnPN51JdqXbU7U2UpYjxamgYc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:83b0::/48 Signature Algorithm: sha256WithRSAEncryption 94:f0:01:de:5d:72:f5:14:4e:1c:0e:07:d2:10:14:1f:77:ad: 06:fe:5e:b6:78:c8:02:75:8b:66:bd:d9:86:59:bc:21:8a:84: 3b:26:97:93:ce:3f:e5:ec:09:1b:47:0b:39:04:9d:3b:93:34: fe:8c:3c:54:7e:e7:96:a8:4a:31:fe:d3:f2:98:e5:e3:3e:04: 2c:56:74:89:1f:48:62:07:d8:a4:75:4a:33:fb:ea:86:bf:bd: 1b:d2:af:07:d3:df:92:57:f8:b2:9f:f5:cd:2d:9b:2c:6b:b4: d8:34:1e:92:65:d1:50:df:42:8f:8e:14:e8:17:cc:9f:7b:70: db:de:dd:16:dd:8f:5b:36:15:4c:ec:12:e0:9e:79:9a:6e:48: c6:e2:45:1e:9d:62:94:01:0b:1c:ac:5f:25:6d:1b:fe:ce:c6: 19:e0:de:e6:06:ad:4f:04:1b:ec:c3:8a:97:c7:8e:a0:3f:59: b7:a9:2b:6a:39:b9:8d:fc:16:fd:24:3b:76:97:07:e8:d3:27: 89:9e:3b:93:10:69:37:de:88:17:d0:92:1d:93:71:8f:a5:0e: 09:98:34:91:5c:45:29:93:3c:01:71:f8:79:84:69:06:1d:65: 0c:e7:14:21:06:5d:4c:a0:07:b5:12:49:36:36:ff:3a:f0:3f: cd:ff:8a:bf -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+ptWzjQ7xqWxkBXlF4FgpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGViMjczY2RlNzUyNWRhOTc2ZDRlZDRkOTRhNTg4ZjE2YTY4MTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumcZmi4Rjw+2woCFTIhRSXBRJig7 4ljgOAuXv6zfn8oDmNwVNoRKtByX6Nl74utgUqHgrVhO498AImU/kr5zXlWu5geW mm/8EDZigfsZE3O0sByGUoONK2cY1TUP9I7gOpuzuF3TWmrYwxh8Z91FrL6kVELf 7b4GDhKwudEF3H4gvaZc3VSgLgLlIGH0GwJ3mWnHou/G3hxfKCAsA1LXRMTOv5Dp NG/y/xK3nrvanTcCU0gv4E1gR3Efwk6QHsh9NCVRU4gsicTOeyE6ZQsMXrSO/MD2 q4LuUyJN2dWJTyX87hzZBAAdcfpSS5k1leNzSZVKVcLiZiaxvVacINPtcQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIDrJzzedSXal21O1NlKWI8WpoGHMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvZ09zblBONTFKZHFYYlU3VTJVcFlqeGFtZ1ljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIOw MA0GCSqGSIb3DQEBCwUAA4IBAQCU8AHeXXL1FE4cDgfSEBQfd60G/l62eMgCdYtm vdmGWbwhioQ7JpeTzj/l7AkbRws5BJ07kzT+jDxUfueWqEox/tPymOXjPgQsVnSJ H0hiB9ikdUoz++qGv70b0q8H09+SV/iyn/XNLZssa7TYNB6SZdFQ30KPjhToF8yf e3Db3t0W3Y9bNhVM7BLgnnmabkjG4kUenWKUAQscrF8lbRv+zsYZ4N7mBq1PBBvs w4qXx46gP1m3qStqObmN/Bb9JDt2lwfo0yeJnjuTEGk33ogX0JIdk3GPpQ4JmDSR XEUpkzwBcfh5hGkGHWUM5xQhBl1MoAe1Ekk2Nv868D/N/4q/ -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:42 2026 by rpki-client