This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/gA8K0uCGARt0iMHybj1fl0_l9iM.roa File: gA8K0uCGARt0iMHybj1fl0_l9iM.roa (raw, json) Hash identifier: oF5vhF0FQd0hgOhUSqj7/e1FPt2MEHPpP+wGYckBTNY= Subject key identifier: 80:0F:0A:D2:E0:86:01:1B:74:88:C1:F2:6E:3D:5F:97:4F:E5:F6:23 Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de Certificate serial: 019B7D5D2E7C05B0CA045870B568DBD97800 Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/gA8K0uCGARt0iMHybj1fl0_l9iM.roa Signing time: Fri 02 Jan 2026 06:20:17 +0000 ROA not before: Fri 02 Jan 2026 06:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211575 IP address blocks: 2a14:7dc0:500::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 15 Jan 2026 04:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:2e:7c:05:b0:ca:04:58:70:b5:68:db:d9:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de Validity Not Before: Jan 2 06:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=800f0ad2e086011b7488c1f26e3d5f974fe5f623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ff:b7:a6:2e:a0:66:31:3e:7a:34:94:07:26: 6c:38:94:4e:1c:a7:28:9d:82:9c:0c:5b:c2:f3:28: ef:68:6d:aa:35:91:e4:62:15:97:5d:79:c3:a4:97: 38:63:b3:d2:0c:e4:39:4a:a2:d8:5b:d9:92:90:36: 5c:1b:7b:7b:a8:82:0e:c1:ab:50:7e:d6:17:64:a1: 36:a0:79:8b:1c:2c:bf:a4:9a:24:26:3a:4b:64:2f: 37:2d:4e:89:2b:8b:b9:d5:37:2a:e8:c6:5e:35:93: d5:88:6d:e1:06:4f:55:5a:2e:38:61:f2:fe:14:77: 8c:51:ca:ba:54:d7:61:4a:db:26:a1:0c:0a:d9:02: ed:8b:40:ff:be:c6:2c:5c:ae:76:8e:52:66:c0:40: 09:de:43:78:62:66:4c:19:26:ee:d0:f3:d5:cc:a2: 5a:3c:8d:bc:5d:5d:4a:b5:8d:bb:81:b8:b6:2c:7c: 6c:1c:6f:8b:c6:3d:b3:93:63:ea:bb:34:60:0c:d2: ad:c6:97:e1:54:c2:60:81:f7:b4:5e:f8:c3:31:fd: a1:4a:79:59:fb:17:d5:45:5b:ee:e0:15:d8:94:27: fe:66:c6:f0:78:91:7b:b6:7e:dd:f1:09:6a:32:84: 3e:0e:a6:77:b6:3b:fb:01:9c:31:e5:d3:3e:16:bf: d3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:0F:0A:D2:E0:86:01:1B:74:88:C1:F2:6E:3D:5F:97:4F:E5:F6:23 X509v3 Authority Key Identifier: keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/gA8K0uCGARt0iMHybj1fl0_l9iM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7dc0:500::/44 Signature Algorithm: sha256WithRSAEncryption 31:64:48:3e:79:26:c5:1f:40:f8:eb:43:74:ec:bd:b0:cf:d8: 13:a0:bb:6c:36:43:12:6a:9d:59:a8:1d:b7:89:44:0b:f8:aa: 78:9b:b4:75:73:00:ae:aa:6b:4a:67:a3:52:d4:e6:6c:3d:c8: a7:45:dd:58:32:45:d5:ac:95:3e:b5:7b:fc:85:4f:26:aa:07: f7:f0:e1:12:8e:4f:69:42:ff:e2:ef:cb:0c:26:3e:d5:8a:89: 1d:81:f4:5e:be:0a:02:2f:26:f5:0f:c7:4a:a8:dc:1f:47:d2: 1c:9a:5f:48:fa:ae:6b:fa:7a:dd:29:63:ce:c7:b6:51:d2:10: 58:0d:7b:9b:34:5d:d7:01:4c:a5:5f:6e:97:0b:f7:f7:a5:70: 11:cf:63:fe:68:fc:ca:33:e8:bb:66:5c:a9:ef:08:89:d3:c0: b5:87:07:f2:09:e7:00:a6:7b:09:c9:30:3e:12:9c:35:60:70: 0a:b4:4d:14:7b:ae:8f:56:d2:c4:a8:c1:44:26:85:23:32:bf: 7b:a5:4a:3c:92:fd:7d:5a:62:49:6e:9c:df:0c:63:11:b9:92: 07:be:7c:4b:d0:8e:56:d1:fc:ea:56:16:8b:89:4f:ad:4d:2e: 1a:72:da:a2:c3:93:e5:0f:2e:e9:86:19:50:b3:6e:4f:85:d4: 4c:1a:bd:08 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XS58BbDKBFhwtWjb2XgAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZDNjYTJjMjMxYWZkZjNiMDM1NWM3N2E3Y2JiMjI2Zjgx Yjc0ZGUwHhcNMjYwMTAyMDYyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDBmMGFkMmUwODYwMTFiNzQ4OGMxZjI2ZTNkNWY5NzRmZTVmNjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP+3pi6gZjE+ejSUByZsOJROHKco nYKcDFvC8yjvaG2qNZHkYhWXXXnDpJc4Y7PSDOQ5SqLYW9mSkDZcG3t7qIIOwatQ ftYXZKE2oHmLHCy/pJokJjpLZC83LU6JK4u51Tcq6MZeNZPViG3hBk9VWi44YfL+ FHeMUcq6VNdhStsmoQwK2QLti0D/vsYsXK52jlJmwEAJ3kN4YmZMGSbu0PPVzKJa PI28XV1KtY27gbi2LHxsHG+Lxj2zk2PquzRgDNKtxpfhVMJggfe0XvjDMf2hSnlZ +xfVRVvu4BXYlCf+ZsbweJF7tn7d8QlqMoQ+DqZ3tjv7AZwx5dM+Fr/TSwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIAPCtLghgEbdIjB8m49X5dP5fYjMB8GA1UdIwQY MBaAFNjTyiwjGv3zsDVcd6fLsib4G3TeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTkt OTkxMjhiZjZhODQxLzEvZ0E4SzB1Q0dBUnQwaU1IeWJqMWZsMF9sOWlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTktOTkxMjhiZjZhODQx LzEvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhR9wAUA MA0GCSqGSIb3DQEBCwUAA4IBAQAxZEg+eSbFH0D460N07L2wz9gToLtsNkMSap1Z qB23iUQL+Kp4m7R1cwCuqmtKZ6NS1OZsPcinRd1YMkXVrJU+tXv8hU8mqgf38OES jk9pQv/i78sMJj7ViokdgfRevgoCLyb1D8dKqNwfR9Icml9I+q5r+nrdKWPOx7ZR 0hBYDXubNF3XAUylX26XC/f3pXARz2P+aPzKM+i7Zlyp7wiJ08C1hwfyCecApnsJ yTA+Epw1YHAKtE0Ue66PVtLEqMFEJoUjMr97pUo8kv19WmJJbpzfDGMRuZIHvnxL 0I5W0fzqVhaLiU+tTS4actqiw5PlDy7phhlQs25PhdRMGr0I -----END CERTIFICATE-----Generated at Wed Jan 14 13:02:10 2026 by rpki-client