This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/80AHb416dPFtah1nGaAc_7l46Ec.roa File: 80AHb416dPFtah1nGaAc_7l46Ec.roa (raw, json) Hash identifier: 2D/X4apH00Mk7Ti0XtGlvP9oq+7ZpgnstiU/IgSvOD0= Subject key identifier: F3:40:07:6F:8D:7A:74:F1:6D:6A:1D:67:19:A0:1C:FF:B9:78:E8:47 Certificate issuer: /CN=460d3149fc50ca9797f50fde9e02a083134c5019 Certificate serial: 019B7910243F95B5C5D239407EE97854382E Authority key identifier: 46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/80AHb416dPFtah1nGaAc_7l46Ec.roa Signing time: Thu 01 Jan 2026 10:17:39 +0000 ROA not before: Thu 01 Jan 2026 10:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214474 IP address blocks: 2a0a:d982:1991::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 22:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:24:3f:95:b5:c5:d2:39:40:7e:e9:78:54:38:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=460d3149fc50ca9797f50fde9e02a083134c5019 Validity Not Before: Jan 1 10:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f340076f8d7a74f16d6a1d6719a01cffb978e847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:76:2d:af:0e:cd:26:f0:b4:65:52:a6:ca:3d: 58:6b:13:3d:fb:6c:67:1b:7d:5f:9c:25:62:ce:03: 6b:ec:7a:0a:e7:40:70:0f:86:cb:a9:a3:33:dd:cf: 17:38:67:2e:c1:19:3c:29:f4:38:f2:99:ff:06:be: 2b:c5:8c:31:d4:d0:bb:4b:4d:ae:ed:3a:0c:2b:48: d4:46:10:c2:8f:3c:1d:f7:d9:dd:73:2b:d2:f1:27: 86:4f:f4:28:39:f8:6c:38:12:20:75:79:31:22:0f: 44:2e:35:66:d1:05:3b:5b:1a:8a:93:6e:db:3c:7e: 67:c4:66:44:82:a0:ee:c8:d2:f9:ab:bc:85:dc:f2: 23:d7:72:25:6a:57:98:2d:21:8e:2b:73:e1:a5:39: 32:1d:c0:65:7a:24:4b:6b:92:f7:ca:b9:4a:d5:58: 6c:36:52:8b:99:0b:3f:6c:f7:5a:69:b9:24:51:ec: cd:96:12:0d:dd:b1:18:fb:f0:a9:38:48:4e:14:26: da:6e:55:97:ad:6d:37:27:b4:18:82:c6:25:7b:78: e5:c8:7e:9b:b0:70:6e:4b:40:a5:ee:4f:66:9a:1a: 39:34:64:49:5f:db:5d:09:0d:d4:a5:73:d6:ba:a5: 71:4f:eb:b4:36:12:7a:90:7d:26:17:2f:a4:8f:36: e5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:40:07:6F:8D:7A:74:F1:6D:6A:1D:67:19:A0:1C:FF:B9:78:E8:47 X509v3 Authority Key Identifier: keyid:46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/80AHb416dPFtah1nGaAc_7l46Ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d982:1991::/48 Signature Algorithm: sha256WithRSAEncryption 17:77:3b:1a:df:a4:38:5c:e7:98:a6:da:d8:ee:66:e0:43:d8: fb:29:72:05:77:a6:d1:be:d6:ee:69:78:98:f7:09:bd:13:09: a3:bb:55:08:25:66:2c:5f:dc:1a:a3:49:ae:34:64:a0:79:17: 0f:66:62:ec:2e:5e:93:7e:ee:4f:5d:93:61:52:aa:24:7f:a3: 9a:3e:7c:89:97:38:38:2b:ed:ae:7b:e8:97:08:73:b5:a7:f6: 86:a3:db:ad:52:5c:76:c5:e5:6b:3a:fa:14:4d:b2:96:fe:2f: 93:b1:a3:3d:dd:d1:6a:3a:97:21:ff:c4:ad:3d:8e:5e:d0:2f: 46:f9:e2:21:60:54:26:e5:29:c7:21:68:22:22:aa:b2:a6:42: c4:92:70:d8:b1:6b:0e:6e:dc:90:e0:e5:c3:d2:81:8a:cd:78: 07:18:88:ce:06:95:43:f6:6e:fb:e1:c1:9e:5b:4e:bd:6f:51: 69:b8:df:70:21:f2:71:42:a7:ee:67:60:23:68:f4:5b:a5:66: 21:cc:9f:ca:33:37:a5:be:4f:c3:85:c3:19:dc:c2:05:cf:c6: f0:5a:5d:cc:99:c6:73:e7:85:3a:05:f7:b0:b6:1b:5d:ad:ee: fc:bf:9e:57:e6:9e:7b:00:17:d0:d1:83:b1:41:72:06:d0:2d: bb:3f:01:1b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5ECQ/lbXF0jlAful4VDguMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MGQzMTQ5ZmM1MGNhOTc5N2Y1MGZkZTllMDJhMDgzMTM0 YzUwMTkwHhcNMjYwMTAxMTAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzQwMDc2ZjhkN2E3NGYxNmQ2YTFkNjcxOWEwMWNmZmI5NzhlODQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXYtrw7NJvC0ZVKmyj1YaxM9+2xn G31fnCVizgNr7HoK50BwD4bLqaMz3c8XOGcuwRk8KfQ48pn/Br4rxYwx1NC7S02u 7ToMK0jURhDCjzwd99ndcyvS8SeGT/QoOfhsOBIgdXkxIg9ELjVm0QU7WxqKk27b PH5nxGZEgqDuyNL5q7yF3PIj13IlaleYLSGOK3PhpTkyHcBleiRLa5L3yrlK1Vhs NlKLmQs/bPdaabkkUezNlhIN3bEY+/CpOEhOFCbablWXrW03J7QYgsYle3jlyH6b sHBuS0Cl7k9mmho5NGRJX9tdCQ3UpXPWuqVxT+u0NhJ6kH0mFy+kjzbl2QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPNAB2+NenTxbWodZxmgHP+5eOhHMB8GA1UdIwQY MBaAFEYNMUn8UMqXl/UP3p4CoIMTTFAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmcweFNmeFF5cGVYOVFfZW5nS2dneE5NVUJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wMTYyNDYtMzc2Yy00NzI1LTgwYWUt NzViZDk0NmE3MzU1LzEvODBBSGI0MTZkUEZ0YWgxbkdhQWNfN2w0NkVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wMTYyNDYtMzc2Yy00NzI1LTgwYWUtNzViZDk0NmE3MzU1 LzEvUmcweFNmeFF5cGVYOVFfZW5nS2dneE5NVUJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgrZghmR MA0GCSqGSIb3DQEBCwUAA4IBAQAXdzsa36Q4XOeYptrY7mbgQ9j7KXIFd6bRvtbu aXiY9wm9Ewmju1UIJWYsX9wao0muNGSgeRcPZmLsLl6Tfu5PXZNhUqokf6OaPnyJ lzg4K+2ue+iXCHO1p/aGo9utUlx2xeVrOvoUTbKW/i+TsaM93dFqOpch/8StPY5e 0C9G+eIhYFQm5SnHIWgiIqqypkLEknDYsWsObtyQ4OXD0oGKzXgHGIjOBpVD9m77 4cGeW069b1FpuN9wIfJxQqfuZ2AjaPRbpWYhzJ/KMzelvk/DhcMZ3MIFz8bwWl3M mcZz54U6Bfewthtdre78v55X5p57ABfQ0YOxQXIG0C27PwEb -----END CERTIFICATE-----Generated at Wed Jan 21 07:23:28 2026 by rpki-client