This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/gMy5VRtjcztj2YFQASx1cj4m2tU.roa File: gMy5VRtjcztj2YFQASx1cj4m2tU.roa (raw, json) Hash identifier: i4wubG7qvvyeIDhOPCHBMQc07Q5NcbWAMdA4IcACldc= Subject key identifier: 80:CC:B9:55:1B:63:73:3B:63:D9:81:50:01:2C:75:72:3E:26:DA:D5 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 019B7C8037370ABB9A019D55F3D2547D1BFC Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/gMy5VRtjcztj2YFQASx1cj4m2tU.roa Signing time: Fri 02 Jan 2026 02:18:56 +0000 ROA not before: Fri 02 Jan 2026 02:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216044 IP address blocks: 2a0f:7803:fea0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:37:37:0a:bb:9a:01:9d:55:f3:d2:54:7d:1b:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: Jan 2 02:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80ccb9551b63733b63d98150012c75723e26dad5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5f:80:9a:96:eb:d7:72:40:3e:d7:2b:ae:5b: 75:b0:2f:c6:3e:e7:05:07:92:38:31:24:1d:e6:da: 9a:f4:bd:0b:cb:6c:c1:23:9a:b8:31:34:6d:fc:30: 23:11:f4:14:c1:14:75:b7:99:b6:ad:c6:52:bc:c8: a2:2b:a9:0d:a2:37:40:47:41:bc:8f:8d:bf:4f:a0: 70:0e:4e:2a:da:35:27:6a:e2:43:40:3c:61:76:bb: cd:c7:a2:5f:c6:be:73:ee:ae:1d:62:90:b0:60:29: 9d:6f:7b:47:01:00:82:ac:61:f3:8d:1f:05:90:c2: af:f1:47:4a:4e:d1:4b:f4:f1:7a:3f:5b:5b:60:11: cf:10:e9:f6:da:a4:ed:18:81:71:8c:6f:48:41:6f: 0d:17:fc:9b:b2:4c:50:e2:87:a0:ef:a3:f6:07:81: 20:d7:4a:24:ce:4f:02:92:cc:fa:25:fb:61:2d:01: 4b:32:22:18:2c:2d:31:3d:04:e1:d9:a6:ab:b1:9a: 44:2c:52:40:d5:23:77:12:4d:24:71:a8:1c:d7:27: a2:a0:4c:60:cd:b3:1d:91:12:af:6a:10:37:7e:98: 06:dd:f0:d2:7d:56:6e:cb:00:5b:44:24:e6:51:62: e0:89:a9:46:fa:91:19:13:de:6d:68:34:5a:d2:c4: 17:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:CC:B9:55:1B:63:73:3B:63:D9:81:50:01:2C:75:72:3E:26:DA:D5 X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/gMy5VRtjcztj2YFQASx1cj4m2tU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:7803:fea0::/44 Signature Algorithm: sha256WithRSAEncryption 11:b0:94:73:8a:25:9d:12:8c:db:ca:4d:ba:b7:d7:1d:86:a6: 02:49:3e:c8:86:ef:ec:05:69:0c:db:ca:75:2a:d3:60:27:46: 84:38:7e:d1:dd:13:cd:27:c0:76:c7:e2:0c:b4:35:20:6e:e0: 4a:2c:4d:98:2d:40:b3:0c:bf:6f:69:cb:fd:a6:08:1d:44:0c: d7:ec:32:eb:a9:52:a7:4e:75:27:2c:99:a6:93:ec:7c:d0:38: c6:23:43:ec:fa:25:bb:4e:d6:c5:4c:67:29:5c:da:34:87:b5: ea:3b:e9:66:d9:1b:7e:07:d6:ad:f9:a9:17:11:8c:c8:ac:ed: 29:57:36:7c:cb:45:a4:d4:93:f8:45:98:de:74:62:23:55:3b: 5e:9e:e8:77:ec:24:95:f6:04:0c:d3:1e:83:76:0e:29:04:b3: de:d7:41:48:aa:8f:c1:c4:0e:2c:ea:b8:84:3b:ff:8d:dc:2f: 4f:18:bf:cb:fc:8b:51:36:5d:b8:61:44:de:61:c1:28:9e:b0: 06:bc:4e:29:91:28:ab:f1:ae:ae:12:82:4e:87:0a:da:d9:3b: 08:2e:5b:30:96:30:45:86:8d:bc:7a:a7:6a:30:48:f5:57:16: 28:75:6d:f2:a1:2d:06:16:37:e8:cf:2b:d7:5a:ed:e4:e0:b8: 18:cb:5e:44 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gDc3CruaAZ1V89JUfRv8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjYwMTAyMDIxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGNjYjk1NTFiNjM3MzNiNjNkOTgxNTAwMTJjNzU3MjNlMjZkYWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1F+Ampbr13JAPtcrrlt1sC/GPucF B5I4MSQd5tqa9L0Ly2zBI5q4MTRt/DAjEfQUwRR1t5m2rcZSvMiiK6kNojdAR0G8 j42/T6BwDk4q2jUnauJDQDxhdrvNx6Jfxr5z7q4dYpCwYCmdb3tHAQCCrGHzjR8F kMKv8UdKTtFL9PF6P1tbYBHPEOn22qTtGIFxjG9IQW8NF/ybskxQ4oeg76P2B4Eg 10okzk8Cksz6JfthLQFLMiIYLC0xPQTh2aarsZpELFJA1SN3Ek0kcagc1yeioExg zbMdkRKvahA3fpgG3fDSfVZuywBbRCTmUWLgialG+pEZE95taDRa0sQXkQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIDMuVUbY3M7Y9mBUAEsdXI+JtrVMB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvZ015NVZSdGpjenRqMllGUUFTeDFjajRtMnRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg94A/6g MA0GCSqGSIb3DQEBCwUAA4IBAQARsJRziiWdEozbyk26t9cdhqYCST7Ihu/sBWkM 28p1KtNgJ0aEOH7R3RPNJ8B2x+IMtDUgbuBKLE2YLUCzDL9vacv9pggdRAzX7DLr qVKnTnUnLJmmk+x80DjGI0Ps+iW7TtbFTGcpXNo0h7XqO+lm2Rt+B9at+akXEYzI rO0pVzZ8y0Wk1JP4RZjedGIjVTtenuh37CSV9gQM0x6Ddg4pBLPe10FIqo/BxA4s 6riEO/+N3C9PGL/L/ItRNl24YUTeYcEonrAGvE4pkSir8a6uEoJOhwra2TsILlsw ljBFho28eqdqMEj1VxYodW3yoS0GFjfozyvXWu3k4LgYy15E -----END CERTIFICATE-----Generated at Wed Jan 21 16:59:54 2026 by rpki-client