This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/RGuoIl9DVjZoVRFdyLsbkIpxpX4.roa File: RGuoIl9DVjZoVRFdyLsbkIpxpX4.roa (raw, json) Hash identifier: QX0JUlKOV1KBSeBc5bN+sLd61BhNqd06bMD5WOrZxew= Subject key identifier: 44:6B:A8:22:5F:43:56:36:68:55:11:5D:C8:BB:1B:90:8A:71:A5:7E Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019B7C807FA41ED726BFAE022E4817D204DC Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/RGuoIl9DVjZoVRFdyLsbkIpxpX4.roa Signing time: Fri 02 Jan 2026 02:19:14 +0000 ROA not before: Fri 02 Jan 2026 02:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50113 IP address blocks: 2a0c:5d00:1001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:7f:a4:1e:d7:26:bf:ae:02:2e:48:17:d2:04:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Jan 2 02:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=446ba8225f4356366855115dc8bb1b908a71a57e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:29:2b:ac:3a:e1:e7:ff:5c:73:2e:ae:d5:f6: 54:4c:74:ef:3e:28:35:a7:bb:07:6e:a5:b7:31:60: 62:d8:80:23:8d:8a:d4:a9:71:c5:67:bd:fa:80:8d: d7:44:07:ae:bb:0d:04:fb:4e:f6:70:24:17:7e:ff: 50:e4:00:3a:3e:2e:fa:6f:6a:34:62:89:fe:f9:92: 41:28:17:9a:87:75:7e:ac:ae:c9:a9:de:c8:88:47: 3c:de:b1:cb:19:89:bc:4f:27:83:ee:73:86:fe:6f: ae:b0:bd:53:72:38:5d:ef:8b:3c:0f:ac:00:a1:e5: 15:40:3a:13:e7:43:d0:2d:cf:ee:68:7a:d3:bf:92: c4:92:d3:00:67:e6:cf:4a:bb:67:8c:6e:76:cc:af: 80:66:eb:92:8b:db:9a:ee:fb:6c:30:c4:de:80:74: 15:e7:53:75:cd:08:33:77:14:e9:9c:22:a0:22:e8: 33:18:c2:5c:d0:a9:41:34:28:db:45:35:e0:a7:06: 23:23:a7:8b:85:a2:25:3f:c1:72:0a:aa:aa:67:ff: a9:34:bc:5e:bc:bc:ad:56:b9:48:a4:fa:0a:12:70: 73:20:2c:01:cd:09:a4:50:5b:bf:05:a5:2c:58:51: 53:8f:d0:5c:17:1f:3d:81:40:b6:e0:75:62:78:46: d5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6B:A8:22:5F:43:56:36:68:55:11:5D:C8:BB:1B:90:8A:71:A5:7E X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/RGuoIl9DVjZoVRFdyLsbkIpxpX4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:5d00:1001::/48 Signature Algorithm: sha256WithRSAEncryption 77:52:82:35:0e:61:d0:f8:52:8c:97:7f:89:33:37:41:05:9a: 21:4f:75:95:1a:3f:5d:e5:b5:42:54:99:8b:de:91:c1:1b:03: b1:2d:27:c9:41:42:c2:7b:79:8d:70:1b:03:35:a7:84:fa:17: f0:73:25:ec:fe:1b:e9:1b:a8:3a:d2:a4:9c:4c:c3:a9:b7:0d: 9e:c4:dd:0a:91:a4:81:38:65:8c:b8:89:1d:1c:a6:da:e2:83: 9c:e1:18:5f:4d:5c:a6:05:78:43:71:dc:12:e8:d6:0d:ef:22: c3:a8:f6:77:44:23:b3:dd:0d:6b:be:69:04:de:db:ec:a6:7b: cf:77:50:0a:a6:e0:f0:83:22:3b:0f:a7:8a:60:4d:3b:81:3e: 65:7a:32:38:ab:d1:f1:99:21:97:b9:61:6d:b2:42:c3:4f:f3: 88:ae:92:dc:28:74:8a:2c:95:ce:2e:95:4a:bc:02:f9:ac:41: c5:5c:cc:2e:aa:1b:7c:e6:df:8c:2b:72:db:f3:9a:e2:35:8a: e1:35:b9:0a:1f:67:4e:bd:a0:8d:dd:77:39:4a:e2:7e:37:95: 67:94:f1:92:c1:53:11:dc:fe:70:ca:2b:bf:73:95:88:1e:4d: 91:12:7d:72:b2:93:83:4b:40:30:52:ef:aa:16:64:3d:d3:79: 06:16:d0:22 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gH+kHtcmv64CLkgX0gTcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjYwMTAyMDIxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDZiYTgyMjVmNDM1NjM2Njg1NTExNWRjOGJiMWI5MDhhNzFhNTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyikrrDrh5/9ccy6u1fZUTHTvPig1 p7sHbqW3MWBi2IAjjYrUqXHFZ736gI3XRAeuuw0E+072cCQXfv9Q5AA6Pi76b2o0 Yon++ZJBKBeah3V+rK7Jqd7IiEc83rHLGYm8TyeD7nOG/m+usL1Tcjhd74s8D6wA oeUVQDoT50PQLc/uaHrTv5LEktMAZ+bPSrtnjG52zK+AZuuSi9ua7vtsMMTegHQV 51N1zQgzdxTpnCKgIugzGMJc0KlBNCjbRTXgpwYjI6eLhaIlP8FyCqqqZ/+pNLxe vLytVrlIpPoKEnBzICwBzQmkUFu/BaUsWFFTj9BcFx89gUC24HVieEbV/wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFERrqCJfQ1Y2aFURXci7G5CKcaV+MB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvUkd1b0lsOURWalpvVlJGZHlMc2JrSXB4cFg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgxdABAB MA0GCSqGSIb3DQEBCwUAA4IBAQB3UoI1DmHQ+FKMl3+JMzdBBZohT3WVGj9d5bVC VJmL3pHBGwOxLSfJQULCe3mNcBsDNaeE+hfwcyXs/hvpG6g60qScTMOptw2exN0K kaSBOGWMuIkdHKba4oOc4RhfTVymBXhDcdwS6NYN7yLDqPZ3RCOz3Q1rvmkE3tvs pnvPd1AKpuDwgyI7D6eKYE07gT5lejI4q9HxmSGXuWFtskLDT/OIrpLcKHSKLJXO LpVKvAL5rEHFXMwuqht85t+MK3Lb85riNYrhNbkKH2dOvaCN3Xc5SuJ+N5VnlPGS wVMR3P5wyiu/c5WIHk2REn1yspODS0AwUu+qFmQ903kGFtAi -----END CERTIFICATE-----Generated at Tue Jan 20 06:03:59 2026 by rpki-client