This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/gsI_C722cXnt1GoVdkVRKSAu9Qw.roa File: gsI_C722cXnt1GoVdkVRKSAu9Qw.roa (raw, json) Hash identifier: N42/xMELrDPspuciN9pOwwDhIi5jUfFEEPNly9kQFvE= Subject key identifier: 82:C2:3F:0B:BD:B6:71:79:ED:D4:6A:15:76:45:51:29:20:2E:F5:0C Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6DB367246F3DCC8B1238D5A27DE35 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/gsI_C722cXnt1GoVdkVRKSAu9Qw.roa Signing time: Fri 02 Jan 2026 12:20:22 +0000 ROA not before: Fri 02 Jan 2026 12:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199832 IP address blocks: 2a0c:9a40:8980::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:db:36:72:46:f3:dc:c8:b1:23:8d:5a:27:de:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82c23f0bbdb67179edd46a1576455129202ef50c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:02:12:04:b8:b7:fb:c1:ef:ca:35:4a:3e:fb: fc:e7:fe:08:5d:58:29:2a:c8:70:a4:3b:b8:fe:98: 83:4c:f5:12:ac:46:bc:6f:0e:e8:70:f2:f0:7d:0e: 96:49:a7:b2:4a:9f:a8:21:af:82:c1:f1:12:06:ac: a0:9e:7d:ab:1f:38:94:07:97:f4:52:ee:c6:e9:19: 29:04:87:00:b8:21:25:98:43:64:84:68:d9:74:45: ac:ad:7e:b1:e0:59:a7:09:5e:4a:7b:84:a6:b3:43: 45:36:3c:77:0d:49:3d:dc:04:f5:74:da:78:6f:f2: 7c:c5:79:c8:fd:ff:11:79:4b:1a:74:a4:68:44:40: 24:9d:7e:ea:28:43:98:fa:f9:c6:73:7f:fa:21:83: 2c:45:60:f7:6e:3a:60:12:b9:de:31:ac:84:3c:f0: 77:85:57:61:e0:6c:d6:76:76:0d:ae:ab:75:f9:de: 4c:f7:b4:e7:97:82:bd:6d:2d:49:8e:f9:5e:7d:59: b5:58:82:10:90:eb:1d:5c:97:2c:cc:b4:ea:aa:03: 3a:59:ff:e0:52:a1:0b:3b:07:06:10:0f:78:10:60: 53:29:28:de:b6:9d:3d:ea:8c:af:94:06:d8:e4:cd: af:ba:d1:00:fc:64:9c:9c:0b:76:e1:3b:53:17:df: a4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C2:3F:0B:BD:B6:71:79:ED:D4:6A:15:76:45:51:29:20:2E:F5:0C X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/gsI_C722cXnt1GoVdkVRKSAu9Qw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8980::/44 Signature Algorithm: sha256WithRSAEncryption 07:e7:1f:99:43:e6:31:b4:c1:e8:2a:1a:ae:ed:21:26:93:42: 5a:88:ec:9e:8b:84:b8:9d:80:86:c6:73:9e:df:f2:6a:58:17: a9:aa:5b:f6:c5:c0:2f:65:da:49:0a:f3:d4:d2:37:3a:21:4b: d3:cb:fb:6e:21:2b:88:ac:dd:8a:d3:68:87:eb:55:0d:e3:41: fa:7c:5d:bf:0a:11:01:cb:22:bc:f3:5f:2b:6e:64:62:78:b9: 90:72:6a:52:99:3d:4e:e5:25:a1:8f:18:1c:1a:fa:36:75:c3: ab:d3:93:b9:78:50:0d:a4:10:b4:5e:c3:e0:59:b0:f8:26:eb: d4:d4:4a:a6:b5:8f:86:f5:e6:be:7b:0d:e3:20:d9:e5:ba:19: 69:7b:43:96:62:49:f2:ad:3e:5c:7f:1d:e1:58:6a:d9:95:98: 9d:74:44:72:ae:81:2f:7e:c6:eb:f4:bd:e0:6f:92:47:bf:d3: 38:09:5c:56:47:18:ae:78:77:de:32:e7:a9:70:53:b0:0a:57: b4:63:40:3a:63:8c:9f:82:94:2b:98:05:be:93:11:24:6c:81: 44:6b:d5:d4:78:f5:53:cf:f1:c5:b1:f0:42:45:40:ea:aa:fa: f0:83:55:80:81:4c:90:6b:85:1d:14:7d:e6:e7:d3:f9:65:a2: 39:f8:e8:69 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pts2ckbz3MixI41aJ941MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmMyM2YwYmJkYjY3MTc5ZWRkNDZhMTU3NjQ1NTEyOTIwMmVmNTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QISBLi3+8HvyjVKPvv85/4IXVgp KshwpDu4/piDTPUSrEa8bw7ocPLwfQ6WSaeySp+oIa+CwfESBqygnn2rHziUB5f0 Uu7G6RkpBIcAuCElmENkhGjZdEWsrX6x4FmnCV5Ke4Sms0NFNjx3DUk93AT1dNp4 b/J8xXnI/f8ReUsadKRoREAknX7qKEOY+vnGc3/6IYMsRWD3bjpgErneMayEPPB3 hVdh4GzWdnYNrqt1+d5M97Tnl4K9bS1JjvlefVm1WIIQkOsdXJcszLTqqgM6Wf/g UqELOwcGEA94EGBTKSjetp096oyvlAbY5M2vutEA/GScnAt24TtTF9+krQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFILCPwu9tnF57dRqFXZFUSkgLvUMMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvZ3NJX0M3MjJjWG50MUdvVmRrVlJLU0F1OVF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQImA MA0GCSqGSIb3DQEBCwUAA4IBAQAH5x+ZQ+YxtMHoKhqu7SEmk0JaiOyei4S4nYCG xnOe3/JqWBepqlv2xcAvZdpJCvPU0jc6IUvTy/tuISuIrN2K02iH61UN40H6fF2/ ChEByyK8818rbmRieLmQcmpSmT1O5SWhjxgcGvo2dcOr05O5eFANpBC0XsPgWbD4 JuvU1EqmtY+G9ea+ew3jINnluhlpe0OWYknyrT5cfx3hWGrZlZiddERyroEvfsbr 9L3gb5JHv9M4CVxWRxiueHfeMuepcFOwCle0Y0A6Y4yfgpQrmAW+kxEkbIFEa9XU ePVTz/HFsfBCRUDqqvrwg1WAgUyQa4UdFH3m59P5ZaI5+Ohp -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:38 2026 by rpki-client