This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/a204a5-1950-4b44-ac90-81a2b347da84/1/gJbUBkmjzM03WI2ADG9L7fT_3Og.roa File: gJbUBkmjzM03WI2ADG9L7fT_3Og.roa (raw, json) Hash identifier: ZCcvoDNoaVrapqisPO3bNKoR4t2bO/O9XiMaFF5M1H4= Subject key identifier: 80:96:D4:06:49:A3:CC:CD:37:58:8D:80:0C:6F:4B:ED:F4:FF:DC:E8 Certificate issuer: /CN=be84ae7c0503ac450934c9f6cff39a1537a5126d Certificate serial: 019B797DF956BCDB24BAB6ADC3A48644381A Authority key identifier: BE:84:AE:7C:05:03:AC:45:09:34:C9:F6:CF:F3:9A:15:37:A5:12:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/voSufAUDrEUJNMn2z_OaFTelEm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/a204a5-1950-4b44-ac90-81a2b347da84/1/gJbUBkmjzM03WI2ADG9L7fT_3Og.roa Signing time: Thu 01 Jan 2026 12:17:37 +0000 ROA not before: Thu 01 Jan 2026 12:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42275 IP address blocks: 2a12:8e40:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/a204a5-1950-4b44-ac90-81a2b347da84/1/voSufAUDrEUJNMn2z_OaFTelEm0.crl rsync://rpki.ripe.net/repository/DEFAULT/86/a204a5-1950-4b44-ac90-81a2b347da84/1/voSufAUDrEUJNMn2z_OaFTelEm0.mft rsync://rpki.ripe.net/repository/DEFAULT/voSufAUDrEUJNMn2z_OaFTelEm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:f9:56:bc:db:24:ba:b6:ad:c3:a4:86:44:38:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be84ae7c0503ac450934c9f6cff39a1537a5126d Validity Not Before: Jan 1 12:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8096d40649a3cccd37588d800c6f4bedf4ffdce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f2:be:32:2b:96:48:3d:a2:c4:7f:43:2b:a4: 66:cc:ad:c6:ee:eb:f3:b9:23:7b:04:9f:6a:bf:8c: 93:3a:0c:55:80:d0:7c:7e:a8:6a:c6:06:9b:3d:74: 15:15:04:99:3f:45:4d:f9:49:2b:71:67:6d:aa:c4: 7e:12:6d:de:be:18:f9:4f:7b:da:3d:b2:e0:2b:08: 3a:4f:24:8a:bd:3a:ee:e8:ea:d0:b6:21:65:27:96: 8b:14:31:9e:23:38:11:9d:2c:08:93:04:cc:a7:3d: 6c:90:bd:e2:51:e3:d3:d9:c2:10:f2:67:b1:9d:81: bc:e9:df:cf:f0:8e:26:10:26:b3:03:ae:5e:5c:d2: 71:6b:06:60:f0:05:4e:77:62:22:ce:23:d9:bc:31: 17:91:dc:b6:b9:ca:38:02:68:56:b5:1a:0e:97:f9: c3:3d:1e:ac:39:30:3b:43:2a:f9:4f:a7:53:93:e0: 51:5b:96:c2:70:19:56:12:af:b9:86:06:2d:4a:db: 7e:59:89:e9:ff:ab:8f:8b:1c:1e:e6:f8:a6:7f:e5: 1d:b2:4f:a0:ec:fa:ed:a2:e3:87:e2:95:54:f7:9c: cf:74:a2:ca:d3:f7:d8:a4:9b:03:3e:a0:19:d5:85: 86:4a:49:d0:0e:14:40:b5:ac:37:71:01:5a:53:43: 93:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:96:D4:06:49:A3:CC:CD:37:58:8D:80:0C:6F:4B:ED:F4:FF:DC:E8 X509v3 Authority Key Identifier: keyid:BE:84:AE:7C:05:03:AC:45:09:34:C9:F6:CF:F3:9A:15:37:A5:12:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/voSufAUDrEUJNMn2z_OaFTelEm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a204a5-1950-4b44-ac90-81a2b347da84/1/gJbUBkmjzM03WI2ADG9L7fT_3Og.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a204a5-1950-4b44-ac90-81a2b347da84/1/voSufAUDrEUJNMn2z_OaFTelEm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:8e40:2::/48 Signature Algorithm: sha256WithRSAEncryption 85:92:11:d6:39:4e:15:0b:ee:c1:72:40:ce:a2:0d:ab:6a:f7: 72:27:0c:73:f2:5a:75:46:28:7a:f2:11:b6:35:e5:5d:74:63: 61:d4:d4:19:7d:d8:71:68:da:75:d6:47:99:82:44:c4:28:d8: fe:8d:6c:cc:7a:ad:61:4a:57:7e:77:f8:a3:21:96:26:52:f3: 47:58:0c:b6:63:1c:11:cf:13:4e:11:75:40:93:33:d2:dc:55: 67:be:05:79:89:0b:42:b0:d6:64:37:bf:f4:97:40:f1:90:ab: 02:c4:90:a7:6e:b0:5d:d5:7c:c5:7c:e2:a9:d0:02:bc:25:50: 93:6c:8f:8e:4d:08:7a:7b:e5:83:54:6c:88:78:83:f1:94:8b: 68:27:11:0f:2a:aa:a3:1d:eb:e7:49:8c:da:94:5e:c1:81:f4: 9b:51:86:78:84:bc:b2:34:60:06:c5:41:59:be:30:2e:64:c9: 1c:98:6b:5b:70:2b:be:5a:93:2e:4e:4f:db:fb:1b:62:16:01: fb:5c:0e:9d:bd:b3:87:ed:80:3b:38:09:63:6b:2c:25:37:46: a9:30:c7:0c:73:2d:b0:04:9d:5b:eb:f1:4f:f9:78:4c:7c:7b: 1a:c5:39:7a:be:4f:c0:ce:82:fa:b1:14:35:41:51:d9:6e:d4: 7e:87:21:51 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fflWvNskuratw6SGRDgaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlODRhZTdjMDUwM2FjNDUwOTM0YzlmNmNmZjM5YTE1Mzdh NTEyNmQwHhcNMjYwMTAxMTIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDk2ZDQwNjQ5YTNjY2NkMzc1ODhkODAwYzZmNGJlZGY0ZmZkY2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/K+MiuWSD2ixH9DK6RmzK3G7uvz uSN7BJ9qv4yTOgxVgNB8fqhqxgabPXQVFQSZP0VN+UkrcWdtqsR+Em3evhj5T3va PbLgKwg6TySKvTru6OrQtiFlJ5aLFDGeIzgRnSwIkwTMpz1skL3iUePT2cIQ8mex nYG86d/P8I4mECazA65eXNJxawZg8AVOd2IiziPZvDEXkdy2uco4AmhWtRoOl/nD PR6sOTA7Qyr5T6dTk+BRW5bCcBlWEq+5hgYtStt+WYnp/6uPixwe5vimf+Udsk+g 7PrtouOH4pVU95zPdKLK0/fYpJsDPqAZ1YWGSknQDhRAtaw3cQFaU0OTrwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFICW1AZJo8zNN1iNgAxvS+30/9zoMB8GA1UdIwQY MBaAFL6ErnwFA6xFCTTJ9s/zmhU3pRJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdm9TdWZBVURyRVVKTk1uMnpfT2FGVGVsRW0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9hMjA0YTUtMTk1MC00YjQ0LWFjOTAt ODFhMmIzNDdkYTg0LzEvZ0piVUJrbWp6TTAzV0kyQURHOUw3ZlRfM09nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9hMjA0YTUtMTk1MC00YjQ0LWFjOTAtODFhMmIzNDdkYTg0 LzEvdm9TdWZBVURyRVVKTk1uMnpfT2FGVGVsRW0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhKOQAAC MA0GCSqGSIb3DQEBCwUAA4IBAQCFkhHWOU4VC+7BckDOog2ravdyJwxz8lp1Rih6 8hG2NeVddGNh1NQZfdhxaNp11keZgkTEKNj+jWzMeq1hSld+d/ijIZYmUvNHWAy2 YxwRzxNOEXVAkzPS3FVnvgV5iQtCsNZkN7/0l0DxkKsCxJCnbrBd1XzFfOKp0AK8 JVCTbI+OTQh6e+WDVGyIeIPxlItoJxEPKqqjHevnSYzalF7BgfSbUYZ4hLyyNGAG xUFZvjAuZMkcmGtbcCu+WpMuTk/b+xtiFgH7XA6dvbOH7YA7OAljaywlN0apMMcM cy2wBJ1b6/FP+XhMfHsaxTl6vk/AzoL6sRQ1QVHZbtR+hyFR -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:42 2026 by rpki-client