This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/G2elpiRe3mLE21vYizlf0cxzEYA.roa File: G2elpiRe3mLE21vYizlf0cxzEYA.roa (raw, json) Hash identifier: Eg0ncyWZplHxiExP5Yc2JBQmHWqje615/1fpu2tFHEM= Subject key identifier: 1B:67:A5:A6:24:5E:DE:62:C4:DB:5B:D8:8B:39:5F:D1:CC:73:11:80 Certificate issuer: /CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2 Certificate serial: 019B7BA523A7CE03FF16F569549FC5CE3011 Authority key identifier: E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/G2elpiRe3mLE21vYizlf0cxzEYA.roa Signing time: Thu 01 Jan 2026 22:19:38 +0000 ROA not before: Thu 01 Jan 2026 22:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38949 IP address blocks: 80.94.48.0/20 maxlen: 20 2a02:c80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:23:a7:ce:03:ff:16:f5:69:54:9f:c5:ce:30:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2 Validity Not Before: Jan 1 22:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b67a5a6245ede62c4db5bd88b395fd1cc731180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4a:0e:59:eb:4a:1b:72:f1:fc:64:84:b0:45: c9:3f:f4:cc:d1:12:bc:fc:69:d4:af:ed:d1:22:a9: 16:11:ed:e9:57:de:da:a6:29:b1:ab:32:f0:fa:e3: 7f:a9:28:6f:07:4c:0b:f4:83:16:a7:c9:02:b7:04: e9:b5:91:6d:fe:63:0c:a3:e1:88:e2:54:31:50:c1: 19:e1:6e:e5:bd:a9:45:8a:7f:6e:b9:2a:b0:33:04: 46:11:9f:92:0d:c6:e5:b2:3b:51:4a:6a:6a:b3:7f: 58:6a:59:40:60:c4:cd:34:6e:33:16:3c:f5:a2:f2: 90:2d:d3:53:da:15:df:6f:7a:a4:50:35:3f:92:5c: da:95:41:6e:e9:14:1c:62:16:58:55:f1:dc:7d:00: 89:59:b5:9a:7a:50:4a:a5:e1:10:d0:ee:38:c2:cf: b9:47:5d:67:13:e3:73:32:d1:71:f7:e1:94:19:e0: b9:10:6c:38:84:33:60:b4:69:e5:7a:49:fc:8d:75: c9:46:ff:b8:e0:a4:96:58:57:40:48:86:92:0e:66: fa:0f:9e:56:57:0b:09:d5:95:28:d3:d4:37:72:4e: 5c:ec:8c:7c:09:90:99:5b:05:da:54:e1:8c:a7:c3: 4c:f6:de:f5:c4:aa:73:81:f8:bc:dd:62:e8:2c:4e: 5e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:67:A5:A6:24:5E:DE:62:C4:DB:5B:D8:8B:39:5F:D1:CC:73:11:80 X509v3 Authority Key Identifier: keyid:E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/G2elpiRe3mLE21vYizlf0cxzEYA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.94.48.0/20 IPv6: 2a02:c80::/32 Signature Algorithm: sha256WithRSAEncryption a7:6b:b9:eb:3a:22:e2:07:91:fc:9d:f1:9d:0d:18:e9:c7:2d: 31:19:65:b6:03:03:c9:fd:99:c9:0a:5b:ab:17:f2:05:8e:37: 2c:05:93:a2:11:b5:26:b4:47:72:a8:31:be:02:24:b9:f9:ad: 46:6c:22:42:42:9b:8d:f0:2e:a5:9b:78:37:e7:55:3b:55:9a: a2:03:2f:9b:e2:e7:84:1a:c8:3f:05:40:d1:00:bc:af:78:81: 62:2d:0b:50:8f:ee:ea:9a:58:ca:78:b0:46:c5:3a:1d:0f:03: fb:62:3f:36:d0:5a:a1:40:ee:76:b4:42:26:4b:e0:3f:05:e0: 5f:07:44:a0:19:8e:1f:bb:d1:b0:15:d0:db:f5:3a:08:2f:a0: aa:4a:3c:d8:d6:36:4d:e1:ba:4f:fd:c4:56:f9:e1:3e:fd:d6: e5:c0:93:90:6f:60:59:ad:02:84:29:75:ee:8f:c6:20:bf:80: 38:d8:e0:34:e8:f9:e6:4c:a4:7d:3a:b2:8a:51:aa:a0:70:0a: c6:db:0f:cd:99:c0:8d:3d:f5:fc:f0:2a:95:a4:b5:0d:89:7c: 3c:90:7b:7d:ad:1a:3d:0a:b7:15:f5:74:93:73:7c:12:e9:09: 4d:9d:ab:34:b2:51:f5:42:b8:e4:d2:5e:5a:cc:4d:a8:4f:44: d5:55:ab:12 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7pSOnzgP/FvVpVJ/FzjARMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyOGE4NmNjYmY1NjdiZDlhMjgyZmRkZjc1ZjBiN2Y1NTQy MjIyZDIwHhcNMjYwMTAxMjIxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjY3YTVhNjI0NWVkZTYyYzRkYjViZDg4YjM5NWZkMWNjNzMxMTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0oOWetKG3Lx/GSEsEXJP/TM0RK8 /GnUr+3RIqkWEe3pV97apimxqzLw+uN/qShvB0wL9IMWp8kCtwTptZFt/mMMo+GI 4lQxUMEZ4W7lvalFin9uuSqwMwRGEZ+SDcblsjtRSmpqs39YallAYMTNNG4zFjz1 ovKQLdNT2hXfb3qkUDU/klzalUFu6RQcYhZYVfHcfQCJWbWaelBKpeEQ0O44ws+5 R11nE+NzMtFx9+GUGeC5EGw4hDNgtGnlekn8jXXJRv+44KSWWFdASIaSDmb6D55W VwsJ1ZUo09Q3ck5c7Ix8CZCZWwXaVOGMp8NM9t71xKpzgfi83WLoLE5eywIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBtnpaYkXt5ixNtb2Is5X9HMcxGAMB8GA1UdIwQY MBaAFOKKhsy/VnvZooL933Xwt/VUIiLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNG9xR3pMOVdlOW1pZ3YzZmRmQzM5VlFpSXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9jODkwMGMtZjNkMi00NTdjLWIzOGIt NmQ3NjUwY2EzZDA0LzEvRzJlbHBpUmUzbUxFMjF2WWl6bGYwY3h6RVlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9jODkwMGMtZjNkMi00NTdjLWIzOGItNmQ3NjUwY2EzZDA0 LzEvNG9xR3pMOVdlOW1pZ3YzZmRmQzM5VlFpSXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEUF4wMA0E AgACMAcDBQAqAgyAMA0GCSqGSIb3DQEBCwUAA4IBAQCna7nrOiLiB5H8nfGdDRjp xy0xGWW2AwPJ/ZnJClurF/IFjjcsBZOiEbUmtEdyqDG+AiS5+a1GbCJCQpuN8C6l m3g351U7VZqiAy+b4ueEGsg/BUDRALyveIFiLQtQj+7qmljKeLBGxTodDwP7Yj82 0FqhQO52tEImS+A/BeBfB0SgGY4fu9GwFdDb9ToIL6CqSjzY1jZN4bpP/cRW+eE+ /dblwJOQb2BZrQKEKXXuj8Ygv4A42OA06PnmTKR9OrKKUaqgcArG2w/NmcCNPfX8 8CqVpLUNiXw8kHt9rRo9CrcV9XSTc3wS6QlNnas0slH1Qrjk0l5azE2oT0TVVasS -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:23 2026 by rpki-client