This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/gKnl6zVoIeKgo92UVGQsPpHqtzE.roa File: gKnl6zVoIeKgo92UVGQsPpHqtzE.roa (raw, json) Hash identifier: 56ktfiqABwMNzwOBBq7mQNUi4gG3qwUkwZC4BiFM9Oc= Subject key identifier: 80:A9:E5:EB:35:68:21:E2:A0:A3:DD:94:54:64:2C:3E:91:EA:B7:31 Certificate issuer: /CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16 Certificate serial: 019B797EDAFD7F0ED59F0D0C48ECC0C1EC78 Authority key identifier: 4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/gKnl6zVoIeKgo92UVGQsPpHqtzE.roa Signing time: Thu 01 Jan 2026 12:18:35 +0000 ROA not before: Thu 01 Jan 2026 12:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203038 IP address blocks: 2a0d:bbc0::/48 maxlen: 48 2a0d:bbc0:1::/48 maxlen: 48 2a0d:bbc0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:da:fd:7f:0e:d5:9f:0d:0c:48:ec:c0:c1:ec:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16 Validity Not Before: Jan 1 12:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80a9e5eb356821e2a0a3dd9454642c3e91eab731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:37:33:4e:50:8c:1d:f9:93:47:f3:30:28:b0: 76:f4:df:72:19:a4:f6:c1:b3:e0:b7:e7:a7:7c:aa: 8b:d3:20:9c:1e:df:65:03:16:74:02:d4:11:15:3a: 12:9d:56:69:32:09:6f:09:84:ee:4a:e1:66:fd:08: 01:9e:37:22:57:b8:9f:5d:34:90:19:5d:cf:5c:5c: e2:a2:42:04:66:0c:d6:4d:7f:fa:38:91:0c:a9:bd: 8c:72:6a:19:f0:7b:92:89:04:4d:12:93:27:e1:45: ba:6c:de:c7:11:f9:6b:0d:fe:9e:73:b1:53:ed:5b: b5:d2:ef:9c:5a:ad:65:e9:37:fa:60:3e:fb:4c:be: 17:8e:da:84:a7:15:7e:0f:c8:b9:ac:c6:38:dc:03: 3b:bc:36:cf:d2:40:3c:0d:84:5f:f8:8a:27:f7:53: 6e:d4:41:49:71:58:8c:35:20:a4:ee:cd:b9:39:e9: a5:94:ea:19:0e:7c:9d:3c:2e:bb:43:88:b0:c7:f8: b8:c6:2d:79:06:33:86:27:ab:71:1e:e1:b9:0e:72: ff:39:6d:ee:63:77:53:08:73:36:a8:ab:ad:04:34: 3c:38:81:85:af:cf:dd:04:d5:06:58:73:d5:3c:d8: 68:55:88:78:ea:a5:6b:a7:0f:57:d8:dd:64:08:e4: 39:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A9:E5:EB:35:68:21:E2:A0:A3:DD:94:54:64:2C:3E:91:EA:B7:31 X509v3 Authority Key Identifier: keyid:4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/gKnl6zVoIeKgo92UVGQsPpHqtzE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:bbc0::-2a0d:bbc0:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 52:99:e4:3b:68:65:c3:74:01:36:dc:66:8a:53:26:66:a2:ee: 24:af:80:f0:2f:c0:93:7a:96:80:fd:90:cc:80:54:74:42:53: 77:8f:e9:12:0f:fa:7e:db:56:4a:64:07:0a:ab:4e:9a:c1:a8: 8a:b8:6f:3c:fb:9e:67:6b:94:05:1f:d7:ec:f2:69:43:f2:1b: 18:40:23:94:21:f1:ad:5a:3d:72:de:34:1a:bc:6d:02:90:3b: a2:0f:33:96:71:b7:f6:35:2a:a0:ac:8b:4d:f3:d0:13:d2:3a: 8b:c5:d0:9e:2f:ba:df:55:a7:bb:d7:12:fd:2c:e8:af:9b:24: 9f:f6:79:87:a5:98:1d:35:f6:ee:21:92:c4:c9:12:16:2c:ae: 8c:52:5c:ad:7b:9b:8f:d7:71:38:74:a4:3e:4e:d4:4a:fb:ab: 5f:dc:31:bf:d0:14:ff:e7:6d:44:ae:44:d5:c9:61:98:45:90: 2b:66:7e:95:b7:54:b7:f7:58:89:49:b9:3d:70:ed:ce:00:4f: 18:bf:ff:8c:c6:57:b8:b2:f1:7a:ff:1b:b1:64:d2:bd:b6:2a: fd:c7:45:c9:d4:0b:fe:cc:9d:98:e8:73:34:56:f7:3f:36:a0: ad:6d:c7:ba:1d:b3:ba:53:ae:9d:18:6a:84:a2:5e:d0:4f:64: 57:53:a4:8c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5ftr9fw7Vnw0MSOzAwex4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZjgwODAyYzY1NzlhNGQ0YTEwNjA4ZGNmOTJlOWFjZTk5 MDViMTYwHhcNMjYwMTAxMTIxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGE5ZTVlYjM1NjgyMWUyYTBhM2RkOTQ1NDY0MmMzZTkxZWFiNzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDczTlCMHfmTR/MwKLB29N9yGaT2 wbPgt+enfKqL0yCcHt9lAxZ0AtQRFToSnVZpMglvCYTuSuFm/QgBnjciV7ifXTSQ GV3PXFziokIEZgzWTX/6OJEMqb2McmoZ8HuSiQRNEpMn4UW6bN7HEflrDf6ec7FT 7Vu10u+cWq1l6Tf6YD77TL4XjtqEpxV+D8i5rMY43AM7vDbP0kA8DYRf+Ion91Nu 1EFJcViMNSCk7s25OemllOoZDnydPC67Q4iwx/i4xi15BjOGJ6txHuG5DnL/OW3u Y3dTCHM2qKutBDQ8OIGFr8/dBNUGWHPVPNhoVYh46qVrpw9X2N1kCOQ5GwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFICp5es1aCHioKPdlFRkLD6R6rcxMB8GA1UdIwQY MBaAFEz4CALGV5pNShBgjc+S6azpkFsWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFBnSUFzWlhtazFLRUdDTno1THByT21RV3hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8zOThiYmItMTg0Zi00ODUxLWIyYTAt OTFmNDlkOGQxMTVkLzEvZ0tubDZ6Vm9JZUtnbzkyVVZHUXNQcEhxdHpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8zOThiYmItMTg0Zi00ODUxLWIyYTAtOTFmNDlkOGQxMTVk LzEvVFBnSUFzWlhtazFLRUdDTno1THByT21RV3hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASMBADBQYqDbvA AwcAKg27wAACMA0GCSqGSIb3DQEBCwUAA4IBAQBSmeQ7aGXDdAE23GaKUyZmou4k r4DwL8CTepaA/ZDMgFR0QlN3j+kSD/p+21ZKZAcKq06awaiKuG88+55na5QFH9fs 8mlD8hsYQCOUIfGtWj1y3jQavG0CkDuiDzOWcbf2NSqgrItN89AT0jqLxdCeL7rf Vae71xL9LOivmySf9nmHpZgdNfbuIZLEyRIWLK6MUlyte5uP13E4dKQ+TtRK+6tf 3DG/0BT/521ErkTVyWGYRZArZn6Vt1S391iJSbk9cO3OAE8Yv/+Mxle4svF6/xux ZNK9tir9x0XJ1Av+zJ2Y6HM0Vvc/NqCtbce6HbO6U66dGGqEol7QT2RXU6SM -----END CERTIFICATE-----Generated at Sun Jan 25 15:47:35 2026 by rpki-client