This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/g-zatH8Oq_MQYmoyLk3Vs9WWR7o.roa
File: g-zatH8Oq_MQYmoyLk3Vs9WWR7o.roa (raw, json)
Hash identifier: l290wYJLj+aGbmI/IPkEFk5Ctmd1idN85NIe9PSePV0=
Subject key identifier: 83:EC:DA:B4:7F:0E:AB:F3:10:62:6A:32:2E:4D:D5:B3:D5:96:47:BA
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 019AB0D9CF099B326EF10740B277B21490CB
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/g-zatH8Oq_MQYmoyLk3Vs9WWR7o.roa
Signing time: Sun 23 Nov 2025 13:14:15 +0000
ROA not before: Sun 23 Nov 2025 13:14:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213449
IP address blocks: 2a14:c380:390::/48 maxlen: 48
2a14:c380:391::/48 maxlen: 48
2a14:c380:392::/48 maxlen: 48
2a14:c380:393::/48 maxlen: 48
2a14:c380:394::/48 maxlen: 48
2a14:c380:395::/48 maxlen: 48
2a14:c380:396::/48 maxlen: 48
2a14:c380:397::/48 maxlen: 48
2a14:c380:398::/48 maxlen: 48
2a14:c380:399::/48 maxlen: 48
2a14:c380:39a::/48 maxlen: 48
2a14:c380:39b::/48 maxlen: 48
2a14:c380:39c::/48 maxlen: 48
2a14:c380:39d::/48 maxlen: 48
2a14:c380:39e::/48 maxlen: 48
2a14:c380:39f::/48 maxlen: 48
2a14:c380:900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:b0:d9:cf:09:9b:32:6e:f1:07:40:b2:77:b2:14:90:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Nov 23 13:14:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83ecdab47f0eabf310626a322e4dd5b3d59647ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0b:0d:36:3f:77:6d:ff:03:93:64:d5:78:f2:
38:79:b8:4a:f2:83:61:39:87:51:59:81:1d:fb:37:
0b:10:39:8e:83:9a:ad:36:e8:b1:15:95:26:76:e6:
65:88:fd:80:59:bf:c9:fa:ab:c7:0f:2a:6b:eb:9f:
55:5c:7d:54:0b:63:90:46:d7:a0:ed:10:5e:64:84:
58:66:2d:8f:01:fb:5e:11:0f:a0:63:58:b5:60:77:
da:b0:f7:8f:13:c2:3d:00:9b:be:fa:33:6c:12:76:
f8:1b:35:3b:e9:9d:90:05:da:90:e6:ae:13:a8:5c:
ed:59:80:48:96:08:41:69:bd:0d:54:ed:3c:d9:04:
8b:8d:37:93:d9:8a:12:4d:74:c0:27:00:f0:ef:02:
83:8a:aa:67:1c:62:49:3c:6b:ad:9c:70:90:17:1a:
74:98:70:bf:0f:4a:c4:79:94:30:e3:e8:7e:ed:f9:
2e:bc:f9:ce:5c:54:c7:ad:6f:ea:39:4d:dd:a0:28:
38:7e:a4:20:74:2a:e1:c9:2c:3e:9d:5f:f2:b8:71:
e6:53:a9:7e:a0:99:4f:27:38:ee:0b:cb:c3:e7:5c:
5a:8b:6c:c9:1a:52:5b:2e:cc:3b:8d:f4:be:c3:d6:
e9:60:7f:ae:86:dd:e2:d3:f3:75:b9:ba:43:9d:c2:
56:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EC:DA:B4:7F:0E:AB:F3:10:62:6A:32:2E:4D:D5:B3:D5:96:47:BA
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/g-zatH8Oq_MQYmoyLk3Vs9WWR7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:390::/44
2a14:c380:900::/40
Signature Algorithm: sha256WithRSAEncryption
6e:db:a2:e8:09:06:fd:72:c0:7e:72:73:1b:c1:23:1f:76:f5:
c5:26:6a:9e:f6:bb:58:4a:9f:3e:3a:6c:6f:84:66:6a:4b:de:
49:30:53:0f:b3:1e:57:12:fd:c6:7d:88:3c:6f:64:5b:c8:8a:
fd:f7:46:30:ea:b2:96:02:94:9e:69:3b:95:c7:c8:94:8a:86:
f6:f0:65:09:c9:5b:97:85:07:c0:1f:67:82:66:bb:8a:f0:9c:
f9:bc:06:22:21:bd:65:70:d7:11:f4:c1:ef:54:04:e7:8d:86:
54:c8:3e:70:39:ef:04:35:b6:11:58:ee:c0:e9:c8:1f:39:49:
b8:73:82:4f:bd:b2:e1:b9:6c:5e:34:c2:32:ca:03:96:8e:b8:
c6:f4:e9:cd:a7:12:06:ac:c4:83:ac:b8:16:a1:5c:0f:33:82:
9f:03:10:bf:9f:00:78:7f:f1:e1:1f:0a:e7:18:f6:36:50:fb:
59:9e:de:47:fc:c7:85:3c:fa:5f:a8:2d:14:4c:c9:bb:b3:03:
1b:49:6c:bf:cf:3b:75:98:61:90:ec:8b:5c:48:31:87:74:fc:
c5:2a:32:d8:8c:d9:29:10:db:16:61:49:79:08:ab:7e:85:d8:
92:cb:93:69:e5:14:66:23:b2:c5:27:0a:3b:98:2b:c1:f4:88:
b5:d9:04:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:37:10 2025 by rpki-client