This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/gF0x-IgTBvCJCERAByN93AH9MjM.roa File: gF0x-IgTBvCJCERAByN93AH9MjM.roa (raw, json) Hash identifier: f9L9sZ2MryoARd93KF5kcE6ImNuSL3mNiWJ8yZc3d58= Subject key identifier: 80:5D:31:F8:88:13:06:F0:89:08:44:40:07:23:7D:DC:01:FD:32:33 Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec Certificate serial: 019B7F1588D053B21814082B5367668EE115 Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/gF0x-IgTBvCJCERAByN93AH9MjM.roa Signing time: Fri 02 Jan 2026 14:21:16 +0000 ROA not before: Fri 02 Jan 2026 14:21:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210756 IP address blocks: 2a03:90c0:b0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:88:d0:53:b2:18:14:08:2b:53:67:66:8e:e1:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec Validity Not Before: Jan 2 14:21:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=805d31f8881306f08908444007237ddc01fd3233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:53:b5:62:46:b0:ad:97:6c:ae:ba:f3:e2:0c: 69:4f:86:7a:61:8f:f1:94:e8:6d:52:2a:38:31:97: 8f:23:12:9b:c7:d3:a5:9b:84:aa:6f:51:e9:f1:6b: 78:6d:71:8e:d9:0b:30:1c:64:9a:71:4c:77:2f:a4: a5:3f:86:e8:7f:95:d1:90:a4:7e:15:f5:53:a4:90: dc:4b:ef:e0:ec:d3:51:22:a9:cd:38:59:f6:47:c6: b7:60:46:e8:fe:66:b5:b8:47:73:21:4d:21:9c:ea: 18:8a:a4:bb:19:eb:ca:07:27:55:55:91:7d:48:30: ba:60:70:3c:6c:f6:7f:3b:60:4b:06:26:d2:e3:8f: 21:d1:b3:a8:43:29:2a:2c:c9:2a:7f:84:e1:c8:b1: c3:90:c3:18:85:f4:23:c7:89:1c:e8:19:18:64:a0: de:ec:bb:f1:5a:05:92:b9:75:d8:86:cf:6c:52:9e: 87:8a:31:df:75:06:ef:87:10:73:2e:36:e0:75:d5: ff:9e:8d:a7:d9:67:b3:ef:4e:fe:c7:a2:7b:61:33: 81:ee:91:9e:99:d6:59:8f:f4:16:e1:71:df:a7:f7: 34:2f:2a:b4:5c:7c:1c:f7:60:bc:12:ff:0a:5e:22: bc:7f:2e:67:30:07:f9:3e:a6:47:67:fb:d1:04:1b: d9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:5D:31:F8:88:13:06:F0:89:08:44:40:07:23:7D:DC:01:FD:32:33 X509v3 Authority Key Identifier: keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/gF0x-IgTBvCJCERAByN93AH9MjM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:90c0:b0::/44 Signature Algorithm: sha256WithRSAEncryption df:c0:63:7e:9a:b8:60:5d:09:85:0c:50:72:94:f4:d2:81:ef: 76:39:35:2d:18:db:ea:41:f0:a2:60:dd:71:20:e7:6a:11:b4: f4:63:87:c7:19:92:4f:37:be:bd:02:16:97:a4:fb:df:b2:88: a0:ce:dd:63:52:61:c4:40:38:10:82:b0:f5:ed:88:6d:38:aa: 20:f9:fb:a7:17:0a:a5:57:3a:27:9d:31:08:0d:ff:5e:69:bf: 7b:5a:f7:ea:bd:eb:49:8b:b2:5c:ef:f3:be:87:72:c9:88:b8: f8:79:46:4e:d3:72:73:ff:6e:5e:e5:85:eb:a4:3d:d0:bb:ef: a0:3f:6a:69:de:ea:ce:f8:a9:16:64:ed:4c:d1:03:f3:60:72: 11:4e:d0:3e:5f:af:6f:11:7b:0f:3f:72:8c:42:1f:21:87:7a: 06:9b:53:2e:81:12:17:22:aa:77:c8:b6:f7:16:2b:5b:ac:32: 65:e7:eb:87:42:f7:ee:71:69:95:ed:00:b3:01:ec:ac:29:aa: 6e:f1:22:b7:5b:6b:ee:71:18:46:1e:c9:e9:71:5f:51:ae:7e: 3f:90:08:5e:25:ba:e5:33:87:1c:b4:b0:88:d1:0e:a7:0d:f5: 5f:9f:d8:49:73:81:b4:c4:54:14:7a:5d:8a:74:66:42:38:c6: 0d:d0:36:e1 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FYjQU7IYFAgrU2dmjuEVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZTRmNmE3NzM2OGI3Y2VjZmU2NzIyMGI0MzY1NzZiMWUw MDhhZWMwHhcNMjYwMTAyMTQyMTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDVkMzFmODg4MTMwNmYwODkwODQ0NDAwNzIzN2RkYzAxZmQzMjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVO1YkawrZdsrrrz4gxpT4Z6YY/x lOhtUio4MZePIxKbx9Olm4Sqb1Hp8Wt4bXGO2QswHGSacUx3L6SlP4bof5XRkKR+ FfVTpJDcS+/g7NNRIqnNOFn2R8a3YEbo/ma1uEdzIU0hnOoYiqS7GevKBydVVZF9 SDC6YHA8bPZ/O2BLBibS448h0bOoQykqLMkqf4ThyLHDkMMYhfQjx4kc6BkYZKDe 7LvxWgWSuXXYhs9sUp6HijHfdQbvhxBzLjbgddX/no2n2Wez707+x6J7YTOB7pGe mdZZj/QW4XHfp/c0Lyq0XHwc92C8Ev8KXiK8fy5nMAf5PqZHZ/vRBBvZpwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIBdMfiIEwbwiQhEQAcjfdwB/TIzMB8GA1UdIwQY MBaAFADk9qdzaLfOz+ZyILQ2V2seAIrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMt YjA3ZDg0MTZhZTRhLzEvZ0YweC1JZ1RCdkNKQ0VSQUJ5TjkzQUg5TWpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMtYjA3ZDg0MTZhZTRh LzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgOQwACw MA0GCSqGSIb3DQEBCwUAA4IBAQDfwGN+mrhgXQmFDFBylPTSge92OTUtGNvqQfCi YN1xIOdqEbT0Y4fHGZJPN769AhaXpPvfsoigzt1jUmHEQDgQgrD17YhtOKog+fun FwqlVzonnTEIDf9eab97WvfqvetJi7Jc7/O+h3LJiLj4eUZO03Jz/25e5YXrpD3Q u++gP2pp3urO+KkWZO1M0QPzYHIRTtA+X69vEXsPP3KMQh8hh3oGm1MugRIXIqp3 yLb3FitbrDJl5+uHQvfucWmV7QCzAeysKapu8SK3W2vucRhGHsnpcV9Rrn4/kAhe JbrlM4cctLCI0Q6nDfVfn9hJc4G0xFQUel2KdGZCOMYN0Dbh -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:43 2026 by rpki-client