This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/g_sMt-IMPWFoRArZv0JnssQdxVE.roa File: g_sMt-IMPWFoRArZv0JnssQdxVE.roa (raw, json) Hash identifier: i/F8rrQv+RNHw3Z6W9+3AF4oOHslAP0uqvWz8gg4Un0= Subject key identifier: 83:FB:0C:B7:E2:0C:3D:61:68:44:0A:D9:BF:42:67:B2:C4:1D:C5:51 Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Certificate serial: 019B7E37AD4451560AB8F2D8C3EC9C1396E0 Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/g_sMt-IMPWFoRArZv0JnssQdxVE.roa Signing time: Fri 02 Jan 2026 10:18:56 +0000 ROA not before: Fri 02 Jan 2026 10:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3356 IP address blocks: 2001:4c08:2002::/48 maxlen: 48 2001:4c08:2005::/48 maxlen: 48 2001:4c08:2006::/48 maxlen: 48 2001:4c08:2007::/48 maxlen: 48 2001:4c08:2008::/48 maxlen: 48 2001:4c08:2012::/48 maxlen: 48 2001:4c08:2018::/48 maxlen: 48 2001:4c08:201e::/48 maxlen: 48 2001:4c08:2020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:ad:44:51:56:0a:b8:f2:d8:c3:ec:9c:13:96:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Validity Not Before: Jan 2 10:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83fb0cb7e20c3d6168440ad9bf4267b2c41dc551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:73:17:c9:af:2a:d3:6e:21:92:76:bf:85:08: fe:38:91:a4:a9:65:2a:14:49:40:a5:ef:19:f8:e2: c4:6b:23:0c:ac:82:10:65:05:5e:df:0f:31:a8:f1: 9b:1b:a0:80:a4:75:70:18:3a:3b:25:1b:c5:2c:29: 63:ae:dd:7b:de:94:41:e1:f1:c0:76:4c:34:dd:99: b2:f4:cf:89:a5:41:ab:e0:79:9d:29:7f:38:0a:2f: 09:03:6b:31:1b:01:95:d0:4e:00:5e:85:90:d4:42: 11:b5:49:b5:b4:f8:87:60:03:63:65:c3:00:a5:5d: c8:92:5d:51:dd:ef:0a:cd:03:42:14:9f:92:36:3d: 10:ac:a7:7c:d8:2f:77:c6:cf:b0:a3:98:c8:1c:5b: a8:54:ca:ce:aa:74:97:16:a6:23:c0:c5:2e:14:3e: 2b:51:7c:dd:87:dd:22:ff:2f:a7:88:8b:aa:d4:41: 8b:f1:5f:93:6e:63:48:47:fd:a4:3d:b2:25:76:e0: f7:20:5d:d5:a2:dd:c6:8a:75:63:66:28:c1:db:d5: 35:13:72:64:46:d3:9a:a4:a6:b9:ff:a3:cb:95:38: 3c:14:5e:10:82:0b:72:87:fa:be:fd:5e:80:3b:71: 41:58:da:b3:9b:5c:fa:9a:b5:0e:3d:b2:4c:4f:78: f9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FB:0C:B7:E2:0C:3D:61:68:44:0A:D9:BF:42:67:B2:C4:1D:C5:51 X509v3 Authority Key Identifier: keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/g_sMt-IMPWFoRArZv0JnssQdxVE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:4c08:2002::/48 2001:4c08:2005::-2001:4c08:2008:ffff:ffff:ffff:ffff:ffff 2001:4c08:2012::/48 2001:4c08:2018::/48 2001:4c08:201e::/48 2001:4c08:2020::/48 Signature Algorithm: sha256WithRSAEncryption c2:f8:3b:f1:6b:c3:e2:b0:e3:00:db:fa:b6:46:b9:bf:ab:4a: d7:f5:1d:90:f9:e4:ba:2e:80:a5:5f:7a:31:c4:c3:5b:4b:5e: 8d:07:5b:df:b9:34:f0:97:c0:44:0f:f7:40:46:01:b4:80:93: 18:91:56:74:e1:bc:59:30:68:2c:0c:bf:e0:6d:95:58:22:e6: f7:df:97:f6:d1:79:03:f2:f5:95:08:51:16:6f:56:fe:69:3f: 78:49:59:80:cb:79:34:ee:c9:4b:a1:70:69:a4:a1:77:3c:e1: 21:99:d3:e3:3a:ef:b5:fe:d2:77:0c:9c:34:81:76:82:29:61: e6:ac:49:a9:ee:d3:86:21:59:f0:be:b1:cf:c7:2d:46:72:b0: a0:f1:9e:fc:cd:94:e1:ac:bd:8a:f4:dd:33:2c:0c:38:0b:56: 4e:61:90:03:54:1e:5c:95:7b:12:21:11:28:85:d7:fa:19:4c: d7:19:88:02:76:8a:fd:8d:97:38:54:c4:6e:a4:21:a3:d9:1a: e3:1e:f4:ad:eb:02:fa:6f:34:e6:6d:46:38:ab:36:15:26:b6: c9:a7:20:6a:49:c1:9c:86:50:b1:8a:49:e4:56:b5:8c:c8:c1: bf:6a:d3:05:54:93:47:8c:a9:47:45:10:2b:7b:05:31:b0:e7: 65:61:3f:f8 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgISAZt+N61EUVYKuPLYw+ycE5bgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMzJhNGJmYjc3OTY0MDVhNTU2Yjc1OWYxZDE5M2U0YzRk MzcxMjkwHhcNMjYwMTAyMTAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2ZiMGNiN2UyMGMzZDYxNjg0NDBhZDliZjQyNjdiMmM0MWRjNTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnMXya8q024hkna/hQj+OJGkqWUq FElApe8Z+OLEayMMrIIQZQVe3w8xqPGbG6CApHVwGDo7JRvFLCljrt173pRB4fHA dkw03Zmy9M+JpUGr4HmdKX84Ci8JA2sxGwGV0E4AXoWQ1EIRtUm1tPiHYANjZcMA pV3Ikl1R3e8KzQNCFJ+SNj0QrKd82C93xs+wo5jIHFuoVMrOqnSXFqYjwMUuFD4r UXzdh90i/y+niIuq1EGL8V+TbmNIR/2kPbIlduD3IF3Vot3GinVjZijB29U1E3Jk RtOapKa5/6PLlTg8FF4Qggtyh/q+/V6AO3FBWNqzm1z6mrUOPbJMT3j5gwIDAQAB o4ICRDCCAkAwHQYDVR0OBBYEFIP7DLfiDD1haEQK2b9CZ7LEHcVRMB8GA1UdIwQY MBaAFAIypL+3eWQFpVa3WfHRk+TE03EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEt M2JiNGQ2MjAwNTE4LzEvZ19zTXQtSU1QV0ZvUkFyWnYwSm5zc1FkeFZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEtM2JiNGQ2MjAwNTE4 LzEvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTBHBAIAAjBBAwcAIAFMCCAC MBIDBwAgAUwIIAUDBwAgAUwIIAgDBwAgAUwIIBIDBwAgAUwIIBgDBwAgAUwIIB4D BwAgAUwIICAwDQYJKoZIhvcNAQELBQADggEBAML4O/Frw+Kw4wDb+rZGub+rStf1 HZD55LougKVfejHEw1tLXo0HW9+5NPCXwEQP90BGAbSAkxiRVnThvFkwaCwMv+Bt lVgi5vffl/bReQPy9ZUIURZvVv5pP3hJWYDLeTTuyUuhcGmkoXc84SGZ0+M677X+ 0ncMnDSBdoIpYeasSanu04YhWfC+sc/HLUZysKDxnvzNlOGsvYr03TMsDDgLVk5h kANUHlyVexIhESiF1/oZTNcZiAJ2iv2NlzhUxG6kIaPZGuMe9K3rAvpvNOZtRjir NhUmtsmnIGpJwZyGULGKSeRWtYzIwb9q0wVUk0eMqUdFECt7BTGw52VhP/g= -----END CERTIFICATE-----Generated at Fri Jan 23 16:03:17 2026 by rpki-client