This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/cgltiBmxkER1m9-Jsj_FVL0zH98.roa File: cgltiBmxkER1m9-Jsj_FVL0zH98.roa (raw, json) Hash identifier: dIkJRmf3ULgeowq+TPQWVffObqs+Ag9S6NmYI3pbI4I= Subject key identifier: 72:09:6D:88:19:B1:90:44:75:9B:DF:89:B2:3F:C5:54:BD:33:1F:DF Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA7610E84A38446B99253DF6FD5D1FD Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/cgltiBmxkER1m9-Jsj_FVL0zH98.roa Signing time: Fri 02 Jan 2026 12:20:56 +0000 ROA not before: Fri 02 Jan 2026 12:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210090 IP address blocks: 2a06:e881:5100::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:61:0e:84:a3:84:46:b9:92:53:df:6f:d5:d1:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72096d8819b19044759bdf89b23fc554bd331fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d0:16:d8:7c:7c:3a:6f:39:4a:b1:e3:37:bd: 4b:7a:cb:22:97:a6:e0:43:f1:2d:99:5d:59:3c:7f: 6b:bf:d0:77:4d:33:21:e4:84:62:a7:93:38:1c:eb: 05:a8:24:29:0e:85:80:45:ef:c7:41:50:7f:e4:c8: 4d:9a:07:a1:50:80:76:b6:fe:89:b8:8f:2a:83:ed: 6a:72:9b:45:51:43:09:ce:e2:19:da:79:34:f0:fc: 8c:69:2e:e1:2e:d8:44:46:db:21:fc:6c:ae:a3:1d: b0:52:c8:ca:7c:9c:22:1b:93:90:bc:4a:dd:e9:57: 3d:67:6f:c8:6c:f0:2c:8e:00:97:8b:7f:ed:6a:13: 0f:0f:25:7c:b9:0b:87:4d:72:1b:1c:66:46:56:52: d0:0b:66:85:c4:46:8d:6f:c4:c6:f9:3f:54:37:99: 80:21:a0:d0:7b:d8:7e:9a:55:6a:7b:7a:84:ed:78: 08:f2:9b:58:e8:c3:e2:0f:23:d1:59:76:2f:99:71: 47:12:f3:4c:d6:29:bb:1c:51:33:4f:77:66:b8:37: 13:43:b0:60:37:04:60:c2:ab:3f:ae:4f:6f:4a:82: dc:c5:fd:c5:0a:ed:b6:01:54:f6:a3:39:85:66:58: 40:75:79:ef:a6:cd:d3:36:48:8b:e1:c1:25:2f:5c: 02:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:09:6D:88:19:B1:90:44:75:9B:DF:89:B2:3F:C5:54:BD:33:1F:DF X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/cgltiBmxkER1m9-Jsj_FVL0zH98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:e881:5100::/44 Signature Algorithm: sha256WithRSAEncryption c8:a0:7a:f1:18:d1:8c:b0:db:a2:ba:15:db:de:52:fd:84:c4: 26:27:86:50:55:39:20:6d:fe:9b:7c:25:f0:ea:b4:da:59:c6: 20:f4:05:9c:8b:2a:eb:56:df:8e:9e:63:e3:4f:9a:22:f5:13: 3c:4e:b4:f1:7e:cb:56:d8:a8:4c:0f:a7:c7:cd:f7:57:19:3e: d2:d9:05:37:57:29:69:1b:f3:0a:62:a7:9c:0f:32:77:59:ac: 04:5c:68:32:3f:99:e5:57:4b:7f:7e:79:53:c6:35:c8:c8:99: 0f:a3:d6:9c:ed:cb:0a:1f:9b:91:6f:b6:3a:83:2a:a6:ef:fc: 9e:b2:c9:86:b5:a9:7a:5b:38:4c:ee:6f:bf:0d:94:55:3b:7d: 6b:88:04:82:6b:e1:94:19:0a:07:84:af:72:e1:28:28:b2:cf: 76:18:df:3a:c0:59:c0:f4:f7:70:ff:c8:4b:19:60:b5:49:6c: 37:2d:f3:d7:c5:62:89:db:ad:8d:ac:37:00:93:87:ae:57:d1: 6a:26:78:97:cf:f9:67:6d:82:68:e6:92:08:b0:fd:a1:1c:48: a0:eb:7b:cd:04:df:ea:58:b7:e2:3f:ac:16:7a:06:b4:45:b3: c4:b7:4f:a9:bc:05:2f:f2:cd:4d:b7:20:e6:44:20:16:21:99: 2c:1b:2d:cf -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+p2EOhKOERrmSU99v1dH9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjA5NmQ4ODE5YjE5MDQ0NzU5YmRmODliMjNmYzU1NGJkMzMxZmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9AW2Hx8Om85SrHjN71Lessil6bg Q/EtmV1ZPH9rv9B3TTMh5IRip5M4HOsFqCQpDoWARe/HQVB/5MhNmgehUIB2tv6J uI8qg+1qcptFUUMJzuIZ2nk08PyMaS7hLthERtsh/Gyuox2wUsjKfJwiG5OQvErd 6Vc9Z2/IbPAsjgCXi3/tahMPDyV8uQuHTXIbHGZGVlLQC2aFxEaNb8TG+T9UN5mA IaDQe9h+mlVqe3qE7XgI8ptY6MPiDyPRWXYvmXFHEvNM1im7HFEzT3dmuDcTQ7Bg NwRgwqs/rk9vSoLcxf3FCu22AVT2ozmFZlhAdXnvps3TNkiL4cElL1wC3wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHIJbYgZsZBEdZvfibI/xVS9Mx/fMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvY2dsdGlCbXhrRVIxbTktSnNqX0ZWTDB6SDk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgbogVEA MA0GCSqGSIb3DQEBCwUAA4IBAQDIoHrxGNGMsNuiuhXb3lL9hMQmJ4ZQVTkgbf6b fCXw6rTaWcYg9AWciyrrVt+OnmPjT5oi9RM8TrTxfstW2KhMD6fHzfdXGT7S2QU3 VylpG/MKYqecDzJ3WawEXGgyP5nlV0t/fnlTxjXIyJkPo9ac7csKH5uRb7Y6gyqm 7/yessmGtal6WzhM7m+/DZRVO31riASCa+GUGQoHhK9y4Sgoss92GN86wFnA9Pdw /8hLGWC1SWw3LfPXxWKJ262NrDcAk4euV9FqJniXz/lnbYJo5pIIsP2hHEig63vN BN/qWLfiP6wWega0RbPEt0+pvAUv8s1NtyDmRCAWIZksGy3P -----END CERTIFICATE-----Generated at Tue Jan 20 22:47:39 2026 by rpki-client