This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/gvFUo50Dlwc6xvsAIWdw_BYSv28.roa File: gvFUo50Dlwc6xvsAIWdw_BYSv28.roa (raw, json) Hash identifier: G9P6EG+W81Y70CTT+pnDMtfZlZb/zs9YfjJuFo2H9Do= Subject key identifier: 82:F1:54:A3:9D:03:97:07:3A:C6:FB:00:21:67:70:FC:16:12:BF:6F Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA716C6487563DD93AA3BE07388D0FF Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/gvFUo50Dlwc6xvsAIWdw_BYSv28.roa Signing time: Fri 02 Jan 2026 12:20:38 +0000 ROA not before: Fri 02 Jan 2026 12:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215750 IP address blocks: 2a0c:9a40:89c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:16:c6:48:75:63:dd:93:aa:3b:e0:73:88:d0:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82f154a39d0397073ac6fb00216770fc1612bf6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fd:60:c3:46:91:01:fa:f5:ce:74:da:62:0d: 1e:46:7e:6f:42:f6:16:ae:90:2c:05:31:1f:24:6d: 23:79:a0:b3:42:61:4c:86:67:0f:2c:9d:ae:1f:d1: 13:f0:88:03:ad:f2:05:44:e5:e0:95:d4:e1:ef:b0: 61:ba:35:ab:04:ce:ea:ab:a3:d5:72:59:ba:a3:18: 71:06:dd:0b:8c:a8:dd:b9:83:17:fb:33:52:bf:99: 88:85:d7:01:dc:f5:2c:00:b6:bc:7d:d3:bb:c9:d3: 27:d6:d0:e6:f6:52:48:b0:d9:77:91:48:cf:f8:18: c7:8e:f0:56:91:95:d9:73:31:c4:36:0b:e1:fb:e8: a8:83:1d:48:d3:a9:5e:02:ac:d1:f8:80:1b:74:3d: 79:a5:70:78:94:6c:b9:5d:80:b0:06:55:ba:94:93: 61:47:99:7c:e6:d5:79:a5:01:a1:fa:f5:0d:14:c1: 8d:06:d3:f0:fb:67:2e:71:39:87:15:3e:7f:c4:eb: 1d:eb:6d:ee:a9:cc:60:d0:37:97:28:86:93:32:78: a8:1d:4c:c3:e6:0c:a1:b2:d2:b9:99:81:22:d4:7a: d4:7e:8e:3f:15:18:4e:f9:fd:f5:85:18:a9:1c:f0: df:62:c1:f6:94:eb:47:3d:82:36:0d:7d:c4:85:c0: 0f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F1:54:A3:9D:03:97:07:3A:C6:FB:00:21:67:70:FC:16:12:BF:6F X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/gvFUo50Dlwc6xvsAIWdw_BYSv28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:89c0::/48 Signature Algorithm: sha256WithRSAEncryption a6:4b:ed:e2:9a:52:6a:73:1d:73:fe:8f:f9:90:d2:e3:a5:40: ae:33:c3:39:05:d5:97:7b:39:d1:9a:77:77:54:43:e0:dc:79: 44:92:35:77:22:18:59:c0:1d:9d:58:8f:f4:40:49:fd:2c:99: 37:85:64:2e:a5:f6:b8:ae:16:19:c5:44:3e:f3:6e:1c:d2:c8: c0:44:5e:94:5d:92:04:70:eb:44:4e:56:a3:38:8d:32:d3:f6: d2:95:3f:cf:e2:dd:14:ab:16:69:34:08:2a:f0:08:74:4f:9c: 0f:34:2c:0d:04:55:93:99:60:36:0a:84:65:21:5d:cb:f7:b9: 86:27:8b:56:cd:8e:b4:e7:3f:2c:7c:7c:bf:a2:c4:69:60:30: 00:e6:b2:99:f5:94:6c:b2:03:ca:bd:74:10:52:ea:83:7e:d1: 28:96:c7:bc:cf:50:5c:fd:57:df:01:e7:22:23:29:99:91:c0: 5f:5d:b6:2e:f3:38:f9:67:e0:a6:21:8a:9b:37:6d:7d:a8:82: c5:11:1e:1d:af:a7:50:0c:09:82:e9:e1:7a:ea:3d:ac:ff:07: 77:ab:7e:5f:da:5e:2a:8f:08:1a:ef:b5:31:6c:3a:49:b3:a6: e1:26:a0:8e:29:78:f9:ac:43:2f:58:19:d2:62:40:a6:24:f2: 34:83:85:f2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pxbGSHVj3ZOqO+BziND/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmYxNTRhMzlkMDM5NzA3M2FjNmZiMDAyMTY3NzBmYzE2MTJiZjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP1gw0aRAfr1znTaYg0eRn5vQvYW rpAsBTEfJG0jeaCzQmFMhmcPLJ2uH9ET8IgDrfIFROXgldTh77BhujWrBM7qq6PV clm6oxhxBt0LjKjduYMX+zNSv5mIhdcB3PUsALa8fdO7ydMn1tDm9lJIsNl3kUjP +BjHjvBWkZXZczHENgvh++iogx1I06leAqzR+IAbdD15pXB4lGy5XYCwBlW6lJNh R5l85tV5pQGh+vUNFMGNBtPw+2cucTmHFT5/xOsd623uqcxg0DeXKIaTMnioHUzD 5gyhstK5mYEi1HrUfo4/FRhO+f31hRipHPDfYsH2lOtHPYI2DX3EhcAP8wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFILxVKOdA5cHOsb7ACFncPwWEr9vMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvZ3ZGVW81MERsd2M2eHZzQUlXZHdfQllTdjI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQInA MA0GCSqGSIb3DQEBCwUAA4IBAQCmS+3imlJqcx1z/o/5kNLjpUCuM8M5BdWXeznR mnd3VEPg3HlEkjV3IhhZwB2dWI/0QEn9LJk3hWQupfa4rhYZxUQ+824c0sjARF6U XZIEcOtETlajOI0y0/bSlT/P4t0UqxZpNAgq8Ah0T5wPNCwNBFWTmWA2CoRlIV3L 97mGJ4tWzY605z8sfHy/osRpYDAA5rKZ9ZRssgPKvXQQUuqDftEolse8z1Bc/Vff AeciIymZkcBfXbYu8zj5Z+CmIYqbN219qILFER4dr6dQDAmC6eF66j2s/wd3q35f 2l4qjwga77UxbDpJs6bhJqCOKXj5rEMvWBnSYkCmJPI0g4Xy -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:39 2026 by rpki-client