This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GbUT8XRNrCHPs5LCsXmCu9xleT4.roa File: GbUT8XRNrCHPs5LCsXmCu9xleT4.roa (raw, json) Hash identifier: 0NZMgPQ7E/sb9dDG1bmV9XVtmur5crYw+iQ2r5WsxWE= Subject key identifier: 19:B5:13:F1:74:4D:AC:21:CF:B3:92:C2:B1:79:82:BB:DC:65:79:3E Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A32D89EED6BC15E79949868677D7C9 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GbUT8XRNrCHPs5LCsXmCu9xleT4.roa Signing time: Thu 01 Jan 2026 08:18:38 +0000 ROA not before: Thu 01 Jan 2026 08:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203559 IP address blocks: 2a00:1728:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:2d:89:ee:d6:bc:15:e7:99:49:86:86:77:d7:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19b513f1744dac21cfb392c2b17982bbdc65793e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:0f:40:de:37:2a:78:ab:c1:27:01:4a:a2:dd: b0:76:b4:95:be:74:38:01:8a:e9:28:98:8d:60:59: 4a:83:da:f5:6b:29:a6:89:b2:02:fd:d5:85:fa:f8: 13:9f:b1:13:c0:77:3c:4c:fb:34:2e:fb:f5:1a:3b: 09:53:f1:ef:89:1c:cb:ba:38:4e:be:03:59:02:cc: 16:63:3c:b6:d2:a5:88:aa:60:b8:70:e4:1e:d0:aa: c1:5f:98:d4:0a:6e:f7:10:ee:98:a0:60:ff:94:91: 88:15:b4:78:30:c3:f8:bd:9e:5e:02:20:4c:7f:7c: 1c:e9:d4:4d:cc:66:6f:62:64:59:83:ae:a1:86:64: 23:16:82:c9:fe:ca:be:c8:9e:60:da:7b:4a:e0:6c: b9:ef:27:86:50:d4:b4:bb:9d:ef:df:53:ab:95:a7: f6:ea:45:09:6a:3d:5c:b0:be:97:29:37:33:a1:04: 0e:5f:60:f1:74:5e:7c:22:d9:93:52:bb:af:c7:20: 90:ac:d4:36:f9:27:21:52:5d:a2:88:06:10:4c:4e: b1:07:8c:6e:ed:6b:6b:49:d0:c9:8c:a0:a8:17:11: 77:7b:ef:85:31:15:cd:df:d7:35:3d:33:1c:28:75: e2:6d:9e:37:35:fa:68:a3:a1:f5:cb:d2:e1:e3:66: 32:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B5:13:F1:74:4D:AC:21:CF:B3:92:C2:B1:79:82:BB:DC:65:79:3E X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GbUT8XRNrCHPs5LCsXmCu9xleT4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:1728:9::/48 Signature Algorithm: sha256WithRSAEncryption 8b:c3:bd:40:a8:e2:98:9d:33:97:7e:cf:9e:de:fd:d5:de:4c: fd:eb:33:33:02:f5:f7:53:1c:d9:67:62:12:97:b5:d4:03:03: b5:4d:8f:f3:05:4c:61:66:20:2f:2c:2f:2c:f3:50:92:96:41: 4a:2c:74:3b:ca:5d:39:b5:8b:96:6e:db:e4:80:26:9e:78:c8: 0b:06:f1:1e:a7:38:11:c4:6e:d0:5d:1e:b1:b7:a7:90:b8:53: 13:15:b3:72:0e:c4:df:f8:73:4e:09:c7:4c:45:1b:39:80:46: 3f:f3:0e:ee:c6:f6:fc:32:74:ed:36:e5:e1:72:b1:5e:c8:70: ea:fc:fa:d1:be:b5:cf:82:db:1b:c9:84:30:1e:24:75:0c:3b: 74:f1:2c:43:d0:5d:b3:2d:22:0a:53:f0:b3:b0:33:b6:df:25: 82:7b:82:16:7d:ea:52:24:dd:b7:00:9f:aa:1b:3f:da:85:fa: 32:ab:b6:36:e3:2b:27:90:73:d8:59:44:d9:d6:f3:02:6f:04: 74:bd:f1:5d:6b:79:6a:df:35:3c:dd:c0:ad:e6:9e:55:2e:84: 44:23:78:3b:98:3a:e1:c1:57:19:48:d9:8b:ad:a9:52:90:86: 67:26:15:b8:f5:2f:1f:4a:90:81:78:a8:99:94:b8:25:d7:90: 0b:cc:37:7e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4oy2J7ta8FeeZSYaGd9fJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWI1MTNmMTc0NGRhYzIxY2ZiMzkyYzJiMTc5ODJiYmRjNjU3OTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6g9A3jcqeKvBJwFKot2wdrSVvnQ4 AYrpKJiNYFlKg9r1aymmibIC/dWF+vgTn7ETwHc8TPs0Lvv1GjsJU/HviRzLujhO vgNZAswWYzy20qWIqmC4cOQe0KrBX5jUCm73EO6YoGD/lJGIFbR4MMP4vZ5eAiBM f3wc6dRNzGZvYmRZg66hhmQjFoLJ/sq+yJ5g2ntK4Gy57yeGUNS0u53v31Orlaf2 6kUJaj1csL6XKTczoQQOX2DxdF58ItmTUruvxyCQrNQ2+SchUl2iiAYQTE6xB4xu 7WtrSdDJjKCoFxF3e++FMRXN39c1PTMcKHXibZ43Nfpoo6H1y9Lh42YyFQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBm1E/F0Tawhz7OSwrF5grvcZXk+MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvR2JVVDhYUk5yQ0hQczVMQ3NYbUN1OXhsZVQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgAXKAAJ MA0GCSqGSIb3DQEBCwUAA4IBAQCLw71AqOKYnTOXfs+e3v3V3kz96zMzAvX3UxzZ Z2ISl7XUAwO1TY/zBUxhZiAvLC8s81CSlkFKLHQ7yl05tYuWbtvkgCaeeMgLBvEe pzgRxG7QXR6xt6eQuFMTFbNyDsTf+HNOCcdMRRs5gEY/8w7uxvb8MnTtNuXhcrFe yHDq/PrRvrXPgtsbyYQwHiR1DDt08SxD0F2zLSIKU/CzsDO23yWCe4IWfepSJN23 AJ+qGz/ahfoyq7Y24ysnkHPYWUTZ1vMCbwR0vfFda3lq3zU83cCt5p5VLoREI3g7 mDrhwVcZSNmLralSkIZnJhW49S8fSpCBeKiZlLgl15ALzDd+ -----END CERTIFICATE-----Generated at Fri Jan 2 12:04:45 2026 by rpki-client