This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/gDXbZmoh3h3zgQMsKTHZeJDo2is.roa File: gDXbZmoh3h3zgQMsKTHZeJDo2is.roa (raw, json) Hash identifier: rttQ2PQuFckIYFgX3B5UbmODCphTfPdRCqPnAskJGlc= Subject key identifier: 80:35:DB:66:6A:21:DE:1D:F3:81:03:2C:29:31:D9:78:90:E8:DA:2B Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82CFEBA8D1354BAF88AB48C7F74929 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/gDXbZmoh3h3zgQMsKTHZeJDo2is.roa Signing time: Fri 02 Jan 2026 16:20:37 +0000 ROA not before: Fri 02 Jan 2026 16:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208088 IP address blocks: 2a0b:b87:ffb3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:cf:eb:a8:d1:35:4b:af:88:ab:48:c7:f7:49:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8035db666a21de1df381032c2931d97890e8da2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8b:d5:9b:10:bb:4a:a7:09:c1:1c:3b:2b:60: 8d:9b:7b:0f:b3:c2:a4:1b:fc:e0:a3:d9:80:72:da: ce:8f:b7:60:d8:f6:68:98:06:dd:8a:6f:c1:eb:1a: df:2d:3b:62:50:44:11:19:27:a6:a6:78:bd:02:01: a5:a7:a1:b0:74:ec:1b:67:c5:ed:89:ac:ea:b3:11: 30:83:96:8b:23:f4:5e:56:46:95:0c:39:e2:84:3a: f9:55:67:8c:15:5f:41:d1:04:fd:3c:43:1d:e2:32: 6c:fb:31:f7:bb:1e:2f:8d:c2:64:89:b3:01:94:6b: f5:73:52:9b:20:ce:e2:70:96:df:7f:00:a2:33:c0: 53:2d:5b:43:70:bc:95:da:b8:a3:19:23:96:c7:70: f5:fd:98:fd:52:57:75:dd:d1:9e:41:3b:f1:0f:5c: e7:7b:0f:05:ba:bc:67:a1:b1:23:28:1b:b7:9c:bd: 1c:49:89:00:c2:0e:e1:c7:8f:3f:2c:94:89:2c:9b: 86:31:92:96:ea:4f:0b:22:db:d9:3f:ff:73:11:49: ea:12:f6:43:d6:3a:95:f0:84:48:1a:17:18:d3:a7: c6:c9:07:70:7e:89:75:9e:82:75:e1:5e:00:d9:03: 8e:d3:a3:05:9d:93:05:d8:e1:7b:96:e7:ea:4d:97: 3f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:35:DB:66:6A:21:DE:1D:F3:81:03:2C:29:31:D9:78:90:E8:DA:2B X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/gDXbZmoh3h3zgQMsKTHZeJDo2is.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:b87:ffb3::/48 Signature Algorithm: sha256WithRSAEncryption b6:20:c4:5b:89:6a:4d:65:42:e8:a6:6d:ac:37:0d:58:ce:1d: 09:ca:a3:f5:f0:ee:de:f9:75:94:43:66:fe:b3:2c:6d:91:c5: c4:b6:20:34:c3:50:91:ec:b3:81:54:ed:fa:19:50:86:b3:ad: 3d:54:6e:7d:61:56:13:65:20:7e:d0:2e:f1:a9:b4:69:9f:1b: 37:9e:03:06:96:03:c6:56:65:3a:67:93:f5:fa:93:34:54:de: 8b:d4:c8:c9:67:53:f8:55:12:45:85:be:5b:df:4c:0d:06:cb: 25:1e:6e:37:0f:c4:ac:e1:22:a3:c5:a5:6a:4b:50:63:11:2f: 90:d0:d4:08:f7:8c:74:a3:99:7e:45:a2:e6:32:05:0d:a6:6e: f2:cb:fb:0b:4c:20:7d:2b:06:43:9a:23:a6:72:bb:39:0b:f0: 82:15:80:e4:4c:f9:ff:59:45:b9:47:31:9d:21:05:86:ab:51: 10:18:ad:36:a9:d1:83:48:b8:36:ec:c0:d6:c7:fe:08:dc:54: b9:8a:1a:a9:7b:f3:3a:17:d9:49:1e:4e:59:62:7d:ce:a4:8f: 89:21:be:0e:f8:b3:8f:91:cb:ea:8a:76:79:6a:51:99:a5:35: 46:15:7c:2e:a9:61:cc:95:e0:d5:59:4a:f5:47:a1:41:31:ac: 8a:89:9a:8c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/gs/rqNE1S6+Iq0jH90kpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDM1ZGI2NjZhMjFkZTFkZjM4MTAzMmMyOTMxZDk3ODkwZThkYTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4vVmxC7SqcJwRw7K2CNm3sPs8Kk G/zgo9mActrOj7dg2PZomAbdim/B6xrfLTtiUEQRGSempni9AgGlp6GwdOwbZ8Xt iazqsxEwg5aLI/ReVkaVDDnihDr5VWeMFV9B0QT9PEMd4jJs+zH3ux4vjcJkibMB lGv1c1KbIM7icJbffwCiM8BTLVtDcLyV2rijGSOWx3D1/Zj9Uld13dGeQTvxD1zn ew8FurxnobEjKBu3nL0cSYkAwg7hx48/LJSJLJuGMZKW6k8LItvZP/9zEUnqEvZD 1jqV8IRIGhcY06fGyQdwfol1noJ14V4A2QOO06MFnZMF2OF7lufqTZc/zwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIA122ZqId4d84EDLCkx2XiQ6NorMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvZ0RYYlptb2gzaDN6Z1FNc0tUSFplSkRvMmlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgsLh/+z MA0GCSqGSIb3DQEBCwUAA4IBAQC2IMRbiWpNZULopm2sNw1Yzh0JyqP18O7e+XWU Q2b+syxtkcXEtiA0w1CR7LOBVO36GVCGs609VG59YVYTZSB+0C7xqbRpnxs3ngMG lgPGVmU6Z5P1+pM0VN6L1MjJZ1P4VRJFhb5b30wNBsslHm43D8Ss4SKjxaVqS1Bj ES+Q0NQI94x0o5l+RaLmMgUNpm7yy/sLTCB9KwZDmiOmcrs5C/CCFYDkTPn/WUW5 RzGdIQWGq1EQGK02qdGDSLg27MDWx/4I3FS5ihqpe/M6F9lJHk5ZYn3OpI+JIb4O +LOPkcvqinZ5alGZpTVGFXwuqWHMleDVWUr1R6FBMayKiZqM -----END CERTIFICATE-----Generated at Tue Jan 20 15:18:01 2026 by rpki-client