This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/GoQ2pW0J_933ITOYr6rqq9EIbrQ.roa File: GoQ2pW0J_933ITOYr6rqq9EIbrQ.roa (raw, json) Hash identifier: tKfgDPMmtVyaPODH9xVO5b6jSIkFqfcU29cf6LiBAWM= Subject key identifier: 1A:84:36:A5:6D:09:FF:DD:F7:21:33:98:AF:AA:EA:AB:D1:08:6E:B4 Certificate issuer: /CN=38203463eb944b25c65135ca47bdbdab646f3984 Certificate serial: 019B7B366CFE793137D9A128C0518C59D208 Authority key identifier: 38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/GoQ2pW0J_933ITOYr6rqq9EIbrQ.roa Signing time: Thu 01 Jan 2026 20:18:42 +0000 ROA not before: Thu 01 Jan 2026 20:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208136 IP address blocks: 2a00:8860:d00::/40 maxlen: 64 2a00:8861:d00::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:6c:fe:79:31:37:d9:a1:28:c0:51:8c:59:d2:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38203463eb944b25c65135ca47bdbdab646f3984 Validity Not Before: Jan 1 20:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a8436a56d09ffddf7213398afaaeaabd1086eb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:06:16:79:8d:e1:2e:8f:55:52:f0:b3:3c:f5: 73:e2:49:7d:88:d9:3e:10:db:c1:d0:7f:31:70:0d: 68:59:43:d8:43:5d:a1:8d:79:4c:06:d2:96:8b:7a: 7c:bc:50:39:e3:b9:b1:b8:34:25:c2:27:95:e9:51: 1f:76:4d:bf:95:ed:7e:39:96:90:b6:33:41:a4:6b: 76:8b:7f:ef:69:46:fb:ae:1c:27:ac:5e:f6:91:f4: c8:f8:ac:1a:43:58:d1:25:01:07:bc:70:7d:8b:9d: 54:26:4e:71:63:ce:81:85:f5:27:98:67:c9:6c:4e: c0:ea:64:1a:ac:4b:f2:48:14:e5:66:4f:f2:49:cf: ab:d8:74:cd:90:e0:09:b9:57:e3:b3:61:bb:34:02: f0:f7:33:c7:7b:f5:fe:17:db:9e:5f:35:06:93:d6: 90:a8:1b:5b:94:b4:32:43:14:85:74:d5:40:ff:6e: 4c:30:64:ef:1f:23:59:4f:5b:80:dc:6e:45:17:70: 03:6d:5d:57:85:1a:ce:03:e4:1a:d9:5d:d6:64:e2: 09:f6:2d:89:7a:ff:5b:bb:cc:b8:60:0d:6d:b3:16: e7:09:c9:e9:b5:fe:69:c2:0c:1b:b0:45:6c:45:8f: 19:39:0b:0b:9a:4a:24:7f:ea:a9:aa:aa:90:6a:75: 49:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:84:36:A5:6D:09:FF:DD:F7:21:33:98:AF:AA:EA:AB:D1:08:6E:B4 X509v3 Authority Key Identifier: keyid:38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/GoQ2pW0J_933ITOYr6rqq9EIbrQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:8860:d00::/40 2a00:8861:d00::/40 Signature Algorithm: sha256WithRSAEncryption 80:6d:3a:cf:fd:ab:df:fd:ff:dc:a6:2a:5c:f0:2a:a1:ba:04: 29:4f:24:a0:1c:f7:77:ca:dd:c9:90:35:eb:44:e0:a4:db:32: a7:ae:82:d8:4e:d6:c9:9e:32:fb:9b:a4:41:f1:f4:76:85:0f: 1a:82:88:70:e2:db:25:fc:10:49:30:39:f4:28:fa:73:b1:03: cc:39:43:fc:c7:f2:93:f1:40:00:d6:8e:1e:9c:a2:c5:0b:9c: d1:14:f6:a2:6c:2a:db:c1:85:70:5c:58:b2:85:70:1a:6b:47: 1d:df:c0:05:02:2a:ea:bb:35:00:46:ed:5f:54:38:07:23:01: aa:6d:d0:b0:7d:a0:0f:7f:5d:65:77:4c:76:10:09:08:2f:31: 7b:ff:2a:c3:15:0c:b2:cf:16:bd:2e:74:65:22:a8:a7:39:27: 89:f7:23:bb:4c:1b:8c:98:dd:29:f1:63:ff:77:dc:74:b3:24: a1:b2:42:5c:4e:bd:1f:8e:21:37:65:79:eb:33:3f:b1:2a:9c: 5d:6b:1f:b6:cb:3d:6c:08:76:35:95:d2:8a:30:a6:9a:e7:de: 1c:45:cc:f7:34:22:b8:11:cc:70:b6:3e:bc:f2:2d:e9:a4:08: 93:e7:50:f5:bc:5b:e7:fb:ca:00:de:50:56:85:2e:d4:5d:ef: ee:10:77:46 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt7Nmz+eTE32aEowFGMWdIIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjAzNDYzZWI5NDRiMjVjNjUxMzVjYTQ3YmRiZGFiNjQ2 ZjM5ODQwHhcNMjYwMTAxMjAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTg0MzZhNTZkMDlmZmRkZjcyMTMzOThhZmFhZWFhYmQxMDg2ZWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgYWeY3hLo9VUvCzPPVz4kl9iNk+ ENvB0H8xcA1oWUPYQ12hjXlMBtKWi3p8vFA547mxuDQlwieV6VEfdk2/le1+OZaQ tjNBpGt2i3/vaUb7rhwnrF72kfTI+KwaQ1jRJQEHvHB9i51UJk5xY86BhfUnmGfJ bE7A6mQarEvySBTlZk/ySc+r2HTNkOAJuVfjs2G7NALw9zPHe/X+F9ueXzUGk9aQ qBtblLQyQxSFdNVA/25MMGTvHyNZT1uA3G5FF3ADbV1XhRrOA+Qa2V3WZOIJ9i2J ev9bu8y4YA1tsxbnCcnptf5pwgwbsEVsRY8ZOQsLmkokf+qpqqqQanVJWwIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFBqENqVtCf/d9yEzmK+q6qvRCG60MB8GA1UdIwQY MBaAFDggNGPrlEslxlE1yke9vatkbzmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1Nzgt NTg5MzUxNzliOTg1LzEvR29RMnBXMEpfOTMzSVRPWXI2cnFxOUVJYnJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1NzgtNTg5MzUxNzliOTg1 LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYAKgCIYA0D BgAqAIhhDTANBgkqhkiG9w0BAQsFAAOCAQEAgG06z/2r3/3/3KYqXPAqoboEKU8k oBz3d8rdyZA160TgpNsyp66C2E7WyZ4y+5ukQfH0doUPGoKIcOLbJfwQSTA59Cj6 c7EDzDlD/Mfyk/FAANaOHpyixQuc0RT2omwq28GFcFxYsoVwGmtHHd/ABQIq6rs1 AEbtX1Q4ByMBqm3QsH2gD39dZXdMdhAJCC8xe/8qwxUMss8WvS50ZSKopzknifcj u0wbjJjdKfFj/3fcdLMkobJCXE69H44hN2V56zM/sSqcXWsftss9bAh2NZXSijCm mufeHEXM9zQiuBHMcLY+vPIt6aQIk+dQ9bxb5/vKAN5QVoUu1F3v7hB3Rg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:22:27 2026 by rpki-client