This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/gXm46Hmm-qTO4hodxrSof3TLiNM.roa File: gXm46Hmm-qTO4hodxrSof3TLiNM.roa (raw, json) Hash identifier: xq/l2oyKL3r2u7cjQoxp//Kygz431FReQyIA4fXa0hU= Subject key identifier: 81:79:B8:E8:79:A6:FA:A4:CE:E2:1A:1D:C6:B4:A8:7F:74:CB:88:D3 Certificate issuer: /CN=37689eaacbaf68af35d3fafb9674de48a6fc0978 Certificate serial: 019B7F14E0351344863CBDB77D3723206FCB Authority key identifier: 37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/gXm46Hmm-qTO4hodxrSof3TLiNM.roa Signing time: Fri 02 Jan 2026 14:20:33 +0000 ROA not before: Fri 02 Jan 2026 14:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210482 IP address blocks: 141.80.0.0/16 maxlen: 24 2001:678:480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:e0:35:13:44:86:3c:bd:b7:7d:37:23:20:6f:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37689eaacbaf68af35d3fafb9674de48a6fc0978 Validity Not Before: Jan 2 14:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8179b8e879a6faa4cee21a1dc6b4a87f74cb88d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d2:29:f6:82:79:9d:fb:0e:e8:e9:8d:93:86: 3e:ad:c4:94:a6:de:b7:19:3c:93:bf:c4:14:5b:b3: dd:f1:34:02:2d:c2:d8:43:14:62:24:d5:24:e9:1c: 94:a8:81:9f:e3:72:5f:2b:72:b4:5a:86:ab:f4:3e: 68:5a:6f:89:ca:28:e9:39:00:73:0b:02:13:34:3f: 26:52:50:b7:0b:d4:e1:b2:d4:32:11:4e:ab:5d:dd: 9f:ec:ff:53:c9:0b:8c:b3:40:42:37:7c:a7:0e:0e: 95:c3:00:46:4e:07:13:a6:96:f8:16:b8:2e:df:79: 74:14:f3:0d:01:46:49:5e:aa:5d:24:02:23:a9:be: c5:06:70:af:ea:ab:ce:7b:ca:b9:fa:2c:04:af:d9: 1e:0b:e8:ba:9b:ee:67:7f:f7:32:a4:dc:86:88:08: fa:dc:7b:62:2e:07:67:c7:33:54:70:64:cb:fb:ce: 17:bc:ef:78:af:f9:94:ab:d5:19:e7:3c:bb:b6:48: 04:10:c1:92:e2:f9:a3:29:76:e8:aa:fd:ad:c2:6c: c0:ae:39:2a:68:a1:0d:7f:bb:14:e2:b2:5f:18:2d: 2b:17:4d:69:a0:94:ce:d5:b9:40:2d:a1:2f:2d:27: eb:28:d8:bf:1d:e3:83:be:23:b8:72:26:98:66:f4: b9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:79:B8:E8:79:A6:FA:A4:CE:E2:1A:1D:C6:B4:A8:7F:74:CB:88:D3 X509v3 Authority Key Identifier: keyid:37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/gXm46Hmm-qTO4hodxrSof3TLiNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.80.0.0/16 IPv6: 2001:678:480::/48 Signature Algorithm: sha256WithRSAEncryption 1f:87:95:f0:57:12:20:09:96:d0:a9:3a:6b:89:8b:cb:c8:a0: b8:99:38:d5:61:99:51:25:13:4e:e7:4e:8c:4c:c2:34:00:53: 74:4a:e8:a8:51:e2:46:de:46:89:dd:3a:70:44:5e:fa:33:f2: 69:db:e5:a9:be:36:e1:94:87:a6:83:58:86:52:f6:b7:8b:d0: e0:3e:2e:cf:f4:a3:5b:69:cb:ba:dd:e8:65:ae:57:91:95:5c: 53:d8:21:46:1e:11:96:43:ca:e1:c9:f6:ee:75:1d:57:ee:6f: 04:f6:73:fc:3e:80:76:c1:c8:99:a5:bf:90:49:8a:1f:b2:ea: da:15:d7:df:bf:ff:43:90:0e:29:cf:9a:00:df:7f:46:2b:c1: d8:6d:b4:a6:87:7b:4b:03:8d:9f:ae:9e:a5:ad:68:75:9e:5c: 55:11:78:62:87:94:b7:4a:93:9e:b6:cb:ee:d3:08:19:26:74: 2b:15:0f:62:a1:61:7b:84:c5:ed:4b:f4:b1:7c:22:5a:28:35: 9d:5c:bd:49:78:0f:72:e0:6c:b0:6e:38:18:34:0e:e9:86:c1: 1e:84:ca:ce:3d:37:1d:de:81:ea:db:66:35:41:ab:a9:ee:32: 09:6c:0d:12:87:ef:ec:11:70:66:86:32:c3:d4:dc:93:1e:92: eb:cf:b7:c6 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt/FOA1E0SGPL23fTcjIG/LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3Njg5ZWFhY2JhZjY4YWYzNWQzZmFmYjk2NzRkZTQ4YTZm YzA5NzgwHhcNMjYwMTAyMTQyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTc5YjhlODc5YTZmYWE0Y2VlMjFhMWRjNmI0YTg3Zjc0Y2I4OGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdIp9oJ5nfsO6OmNk4Y+rcSUpt63 GTyTv8QUW7Pd8TQCLcLYQxRiJNUk6RyUqIGf43JfK3K0Woar9D5oWm+JyijpOQBz CwITND8mUlC3C9ThstQyEU6rXd2f7P9TyQuMs0BCN3ynDg6VwwBGTgcTppb4Frgu 33l0FPMNAUZJXqpdJAIjqb7FBnCv6qvOe8q5+iwEr9keC+i6m+5nf/cypNyGiAj6 3HtiLgdnxzNUcGTL+84XvO94r/mUq9UZ5zy7tkgEEMGS4vmjKXboqv2twmzArjkq aKENf7sU4rJfGC0rF01poJTO1blALaEvLSfrKNi/HeODviO4ciaYZvS5XQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFIF5uOh5pvqkzuIaHca0qH90y4jTMB8GA1UdIwQY MBaAFDdonqrLr2ivNdP6+5Z03kim/Al4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjJpZXFzdXZhSzgxMF9yN2xuVGVTS2I4Q1hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS84NDE3OWQtNGM2NS00NGI4LWIzMGIt NWRhYmI0ZTQ3YWJiLzEvZ1htNDZIbW0tcVRPNGhvZHhyU29mM1RMaU5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS84NDE3OWQtNGM2NS00NGI4LWIzMGItNWRhYmI0ZTQ3YWJi LzEvTjJpZXFzdXZhSzgxMF9yN2xuVGVTS2I4Q1hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjALBAIAATAFAwMAjVAwDwQC AAIwCQMHACABBngEgDANBgkqhkiG9w0BAQsFAAOCAQEAH4eV8FcSIAmW0Kk6a4mL y8iguJk41WGZUSUTTudOjEzCNABTdEroqFHiRt5Gid06cERe+jPyadvlqb424ZSH poNYhlL2t4vQ4D4uz/SjW2nLut3oZa5XkZVcU9ghRh4RlkPK4cn27nUdV+5vBPZz /D6AdsHImaW/kEmKH7Lq2hXX37//Q5AOKc+aAN9/RivB2G20pod7SwONn66epa1o dZ5cVRF4YoeUt0qTnrbL7tMIGSZ0KxUPYqFhe4TF7Uv0sXwiWig1nVy9SXgPcuBs sG44GDQO6YbBHoTKzj03Hd6B6ttmNUGrqe4yCWwNEofv7BFwZoYyw9Tckx6S68+3 xg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:15 2026 by rpki-client