This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/gPV7EW9AFX2L-Yp7Qx9BYhxlAQE.roa File: gPV7EW9AFX2L-Yp7Qx9BYhxlAQE.roa (raw, json) Hash identifier: lkXFK6k16StyOksCdwdIHGiKSWfXLwNlzOAXGvT0mn0= Subject key identifier: 80:F5:7B:11:6F:40:15:7D:8B:F9:8A:7B:43:1F:41:62:1C:65:01:01 Certificate issuer: /CN=8d5ab1424c412b3fbf4efae9ae1e68e36c2bee81 Certificate serial: 019B46A88C8F9BA285A933B3D1058512474C Authority key identifier: 8D:5A:B1:42:4C:41:2B:3F:BF:4E:FA:E9:AE:1E:68:E3:6C:2B:EE:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVqxQkxBKz-_Tvrprh5o42wr7oE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/gPV7EW9AFX2L-Yp7Qx9BYhxlAQE.roa Signing time: Mon 22 Dec 2025 15:23:29 +0000 ROA not before: Mon 22 Dec 2025 15:23:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198533 IP address blocks: 2a0a:fc00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.mft rsync://rpki.ripe.net/repository/DEFAULT/jVqxQkxBKz-_Tvrprh5o42wr7oE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:a8:8c:8f:9b:a2:85:a9:33:b3:d1:05:85:12:47:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d5ab1424c412b3fbf4efae9ae1e68e36c2bee81 Validity Not Before: Dec 22 15:23:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=80f57b116f40157d8bf98a7b431f41621c650101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:05:c6:b4:32:6a:ed:17:e5:60:4d:05:3d:2e: fc:20:12:6f:3d:f1:34:6a:b5:7f:e7:c2:53:61:9d: c8:f8:76:0c:3f:bd:da:e5:b4:de:83:a2:26:4e:8e: e7:df:47:56:33:52:80:d4:eb:fc:99:aa:57:7c:66: a5:2e:71:82:10:12:49:3e:d5:17:92:fa:71:6b:c4: 0b:18:29:2f:2e:8a:46:cb:03:80:c6:a5:3f:04:80: ab:73:e1:c5:f4:9a:67:fa:5c:2b:68:5b:35:55:cf: 52:ed:fa:8e:cf:f2:15:1c:c5:24:c6:14:e5:a0:40: 98:91:d8:5d:44:a9:45:39:64:98:13:84:02:73:97: a3:f8:1b:5d:59:f3:c7:99:da:51:08:5d:a8:e7:c2: 5a:98:e2:be:7d:3f:ef:e5:0a:c3:d8:7f:d9:64:a7: 02:02:fa:94:3d:29:12:98:15:e0:13:1c:94:2a:d4: fe:59:da:67:65:76:73:f9:7a:f8:e1:ac:6b:2c:ff: 9d:40:75:04:f7:65:b3:7f:83:b8:0d:7c:da:5e:16: 5f:4e:0b:7c:0a:45:57:d6:9c:0c:ad:3e:a2:ee:36: 52:0a:95:ca:d9:a6:fa:cf:83:a3:62:97:39:1d:cf: b6:b9:b0:ae:40:69:4b:55:32:9b:e0:c8:87:48:6c: e6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F5:7B:11:6F:40:15:7D:8B:F9:8A:7B:43:1F:41:62:1C:65:01:01 X509v3 Authority Key Identifier: keyid:8D:5A:B1:42:4C:41:2B:3F:BF:4E:FA:E9:AE:1E:68:E3:6C:2B:EE:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVqxQkxBKz-_Tvrprh5o42wr7oE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/gPV7EW9AFX2L-Yp7Qx9BYhxlAQE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:fc00::/29 Signature Algorithm: sha256WithRSAEncryption 06:de:3a:43:97:b1:ab:59:aa:6f:3a:c2:21:27:9f:ee:3d:ba: 80:ec:87:29:52:f8:94:73:74:a5:d2:94:96:c4:f7:24:17:40: 61:5c:3d:18:12:7d:59:98:22:da:39:c7:fe:b0:a3:df:be:80: df:c1:1f:ac:36:43:f9:63:9b:1b:43:1f:8a:1c:2c:f0:5a:78: 00:24:b0:b4:e3:60:b4:72:34:02:08:7f:8f:9a:fd:74:ff:20: 4c:90:60:ba:16:20:0a:cb:4d:1d:cc:ae:79:59:2b:36:af:30: e6:a7:5b:96:a0:96:35:9f:94:3a:4f:87:63:a3:14:f8:9f:e7: 48:eb:c8:70:d9:70:3f:96:fb:92:ba:f5:7f:37:74:ce:7f:fd: ca:e7:c3:51:2a:38:3f:c9:66:c4:17:89:b5:f7:84:b7:aa:71: 87:85:9f:fc:32:55:af:5f:e7:4e:7e:a3:68:1e:1b:91:d7:24: 9e:cd:87:8c:5e:14:46:c8:7c:27:d4:17:44:d0:2d:7d:68:70: bc:58:51:a3:e3:ad:e3:42:58:be:87:d6:d9:b7:49:96:49:2c: 6d:8b:5a:f9:e2:5e:b1:20:5d:21:81:26:8b:ec:15:ac:25:d3: 90:f6:7c:78:0d:00:c7:dd:1d:d4:5f:a9:3d:54:90:90:0c:67: 30:99:1e:54 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZtGqIyPm6KFqTOz0QWFEkdMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNWFiMTQyNGM0MTJiM2ZiZjRlZmFlOWFlMWU2OGUzNmMy YmVlODEwHhcNMjUxMjIyMTUyMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGY1N2IxMTZmNDAxNTdkOGJmOThhN2I0MzFmNDE2MjFjNjUwMTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwXGtDJq7RflYE0FPS78IBJvPfE0 arV/58JTYZ3I+HYMP73a5bTeg6ImTo7n30dWM1KA1Ov8mapXfGalLnGCEBJJPtUX kvpxa8QLGCkvLopGywOAxqU/BICrc+HF9Jpn+lwraFs1Vc9S7fqOz/IVHMUkxhTl oECYkdhdRKlFOWSYE4QCc5ej+BtdWfPHmdpRCF2o58JamOK+fT/v5QrD2H/ZZKcC AvqUPSkSmBXgExyUKtT+WdpnZXZz+Xr44axrLP+dQHUE92Wzf4O4DXzaXhZfTgt8 CkVX1pwMrT6i7jZSCpXK2ab6z4OjYpc5Hc+2ubCuQGlLVTKb4MiHSGzmVwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFID1exFvQBV9i/mKe0MfQWIcZQEBMB8GA1UdIwQY MBaAFI1asUJMQSs/v0766a4eaONsK+6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZxeFFreEJLei1fVHZycHJoNW80MndyN29FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85ZGRhZmQtMDM0Ni00OWExLWFjM2Qt ZjEwMDJmNTQ4NjE1LzEvZ1BWN0VXOUFGWDJMLVlwN1F4OUJZaHhsQVFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC85ZGRhZmQtMDM0Ni00OWExLWFjM2QtZjEwMDJmNTQ4NjE1 LzEvalZxeFFreEJLei1fVHZycHJoNW80MndyN29FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgr8ADAN BgkqhkiG9w0BAQsFAAOCAQEABt46Q5exq1mqbzrCISef7j26gOyHKVL4lHN0pdKU lsT3JBdAYVw9GBJ9WZgi2jnH/rCj376A38EfrDZD+WObG0Mfihws8Fp4ACSwtONg tHI0Agh/j5r9dP8gTJBguhYgCstNHcyueVkrNq8w5qdblqCWNZ+UOk+HY6MU+J/n SOvIcNlwP5b7krr1fzd0zn/9yufDUSo4P8lmxBeJtfeEt6pxh4Wf/DJVr1/nTn6j aB4bkdckns2HjF4URsh8J9QXRNAtfWhwvFhRo+Ot40JYvofW2bdJlkksbYta+eJe sSBdIYEmi+wVrCXTkPZ8eA0Ax90d1F+pPVSQkAxnMJkeVA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:58:29 2025 by rpki-client