This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/g0O8o9hRTm8S4xVKsUK0pxNFTIk.roa File: g0O8o9hRTm8S4xVKsUK0pxNFTIk.roa (raw, json) Hash identifier: YP1AJ0q+zSM445DjhCgE/dmdRBL7ryjwtDbdKhvu3Rg= Subject key identifier: 83:43:BC:A3:D8:51:4E:6F:12:E3:15:4A:B1:42:B4:A7:13:45:4C:89 Certificate issuer: /CN=29b79380fe407439cc2ecd3fac18157db36cf768 Certificate serial: 019B7834CCA7D1C47CB73CAE0686F6C85027 Authority key identifier: 29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/g0O8o9hRTm8S4xVKsUK0pxNFTIk.roa Signing time: Thu 01 Jan 2026 06:18:04 +0000 ROA not before: Thu 01 Jan 2026 06:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4755 IP address blocks: 2a05:6742:9050::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:cc:a7:d1:c4:7c:b7:3c:ae:06:86:f6:c8:50:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29b79380fe407439cc2ecd3fac18157db36cf768 Validity Not Before: Jan 1 06:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8343bca3d8514e6f12e3154ab142b4a713454c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d1:1b:2e:6f:d0:eb:fd:5f:37:09:1f:5c:b8: 2b:99:1c:d3:75:c0:61:e2:24:73:3c:e8:b9:e3:17: fa:f1:a3:9d:96:2f:c2:f9:cc:47:0c:c4:2d:3b:a4: bd:ea:a5:47:02:e7:5c:42:5f:67:41:da:56:41:ac: 74:5a:16:64:40:8e:9d:cb:b7:01:fb:2d:bc:6d:18: 5f:e8:36:72:60:c0:1b:47:22:67:e5:c0:27:61:ec: 5c:54:d5:56:ff:e3:16:34:da:62:ee:e4:bb:03:8d: 42:fd:93:61:68:97:7f:7b:da:bd:70:e3:9c:8a:54: 47:30:58:d5:c3:91:24:3e:03:fb:9d:7e:8d:78:4d: 8b:81:66:a2:aa:36:00:fd:8e:48:05:d1:f7:43:ea: 86:62:35:14:86:e4:02:d1:24:d4:6d:a4:db:f8:50: cf:6c:4c:d9:91:cb:7d:54:57:32:5a:c1:7b:2c:ea: 04:d3:0e:31:4f:67:11:ab:1e:22:26:42:1e:fa:f6: bd:ac:92:53:75:8e:30:2d:dc:89:6b:19:a3:03:39: 8f:09:24:53:91:f4:75:8c:8a:21:46:f6:da:ef:94: 28:7c:00:1d:f1:a5:e2:31:42:97:47:80:a6:f8:60: e0:a4:74:67:54:bd:b1:22:12:a0:6e:d7:be:e6:9b: 79:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:43:BC:A3:D8:51:4E:6F:12:E3:15:4A:B1:42:B4:A7:13:45:4C:89 X509v3 Authority Key Identifier: keyid:29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/g0O8o9hRTm8S4xVKsUK0pxNFTIk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:6742:9050::/46 Signature Algorithm: sha256WithRSAEncryption 5b:b3:b9:10:93:bb:64:2e:82:3d:a3:61:c7:36:16:1d:59:5d: fd:59:40:02:32:0b:16:27:71:c8:11:a9:45:7a:07:8a:a2:2b: 49:9c:e3:e8:59:6d:cb:c2:b2:1b:7d:10:14:95:d9:0e:9b:9d: 7c:4e:d1:3a:64:ae:87:30:52:5e:3c:40:ec:3f:b9:ce:ef:ea: 5f:eb:7a:de:36:cc:6a:25:4c:7e:1f:6e:a8:b0:7e:b4:71:86: b4:5f:c3:aa:09:d9:b5:f7:89:1e:ca:12:23:a0:29:40:ac:6e: 49:0f:bf:07:51:47:32:80:45:71:26:c6:72:1e:bf:65:13:54: 3a:49:83:95:7d:cc:46:d1:a9:9f:89:dd:49:bd:34:6c:55:bc: 1e:ca:15:38:f4:5d:61:a3:ea:0d:3b:42:8d:ce:12:e4:df:a0: 21:05:5e:5b:07:2a:55:8d:66:6c:61:68:c0:fd:cd:7d:75:83: 62:d0:21:77:94:1e:ee:70:95:2e:7d:99:25:27:17:36:36:f7: d9:ac:bd:f0:d5:81:25:b7:ed:44:2f:7c:e6:0c:31:46:89:59: b1:7c:e8:57:68:7f:ee:06:24:10:20:50:df:bb:56:5c:36:8e: 28:56:5a:d4:91:95:dd:4d:1a:2c:fc:6d:6b:25:b5:8a:31:ed: a0:d8:e9:6e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4NMyn0cR8tzyuBob2yFAnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5Yjc5MzgwZmU0MDc0MzljYzJlY2QzZmFjMTgxNTdkYjM2 Y2Y3NjgwHhcNMjYwMTAxMDYxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzQzYmNhM2Q4NTE0ZTZmMTJlMzE1NGFiMTQyYjRhNzEzNDU0Yzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNEbLm/Q6/1fNwkfXLgrmRzTdcBh 4iRzPOi54xf68aOdli/C+cxHDMQtO6S96qVHAudcQl9nQdpWQax0WhZkQI6dy7cB +y28bRhf6DZyYMAbRyJn5cAnYexcVNVW/+MWNNpi7uS7A41C/ZNhaJd/e9q9cOOc ilRHMFjVw5EkPgP7nX6NeE2LgWaiqjYA/Y5IBdH3Q+qGYjUUhuQC0STUbaTb+FDP bEzZkct9VFcyWsF7LOoE0w4xT2cRqx4iJkIe+va9rJJTdY4wLdyJaxmjAzmPCSRT kfR1jIohRvba75QofAAd8aXiMUKXR4Cm+GDgpHRnVL2xIhKgbte+5pt5XwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFINDvKPYUU5vEuMVSrFCtKcTRUyJMB8GA1UdIwQY MBaAFCm3k4D+QHQ5zC7NP6wYFX2zbPdoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2JlVGdQNUFkRG5NTHMwX3JCZ1ZmYk5zOTJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zOTM4NDItZTdlZi00ODkzLTljMWIt MWU4NDIxMThkYjZmLzEvZzBPOG85aFJUbThTNHhWS3NVSzBweE5GVElrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8zOTM4NDItZTdlZi00ODkzLTljMWItMWU4NDIxMThkYjZm LzEvS2JlVGdQNUFkRG5NTHMwX3JCZ1ZmYk5zOTJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKgVnQpBQ MA0GCSqGSIb3DQEBCwUAA4IBAQBbs7kQk7tkLoI9o2HHNhYdWV39WUACMgsWJ3HI EalFegeKoitJnOPoWW3LwrIbfRAUldkOm518TtE6ZK6HMFJePEDsP7nO7+pf63re NsxqJUx+H26osH60cYa0X8OqCdm194keyhIjoClArG5JD78HUUcygEVxJsZyHr9l E1Q6SYOVfcxG0amfid1JvTRsVbweyhU49F1ho+oNO0KNzhLk36AhBV5bBypVjWZs YWjA/c19dYNi0CF3lB7ucJUufZklJxc2NvfZrL3w1YElt+1EL3zmDDFGiVmxfOhX aH/uBiQQIFDfu1ZcNo4oVlrUkZXdTRos/G1rJbWKMe2g2Olu -----END CERTIFICATE-----Generated at Tue Jan 20 02:57:04 2026 by rpki-client