This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/GQ8G8-7vI6X_9ipMuVEkqHZe5E4.roa File: GQ8G8-7vI6X_9ipMuVEkqHZe5E4.roa (raw, json) Hash identifier: Q4GuX3aVEvIlMgK5veVPusvhLwaRKg/Xs093or8mHOo= Subject key identifier: 19:0F:06:F3:EE:EF:23:A5:FF:F6:2A:4C:B9:51:24:A8:76:5E:E4:4E Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Certificate serial: 019B7AC88226ED92D01008B9B2106CCE8B7D Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/GQ8G8-7vI6X_9ipMuVEkqHZe5E4.roa Signing time: Thu 01 Jan 2026 18:18:39 +0000 ROA not before: Thu 01 Jan 2026 18:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215881 IP address blocks: 2a0d:d940:60::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:82:26:ed:92:d0:10:08:b9:b2:10:6c:ce:8b:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Validity Not Before: Jan 1 18:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=190f06f3eeef23a5fff62a4cb95124a8765ee44e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:89:fd:cf:49:9a:5b:ec:66:34:1b:ce:63:ab: fb:c5:19:c4:ce:2a:6f:70:4c:d0:e3:b1:58:54:91: 3d:f1:63:4c:4e:b2:32:98:80:42:0e:5a:db:e6:46: 4d:73:3b:4b:38:17:ff:8c:0a:f2:65:b7:e6:97:32: 59:77:83:77:20:86:21:42:60:07:42:c9:fe:b9:8c: d5:2d:f8:79:a4:1d:f8:a5:13:dd:99:c0:51:fe:49: cd:a9:49:6c:be:a9:62:8f:5c:75:52:ff:58:a0:5a: 3d:ff:83:30:1b:02:ea:d6:79:fc:38:dc:f4:52:96: 31:c6:6c:8d:1c:e0:0a:48:4a:dd:55:16:a0:75:7b: 78:81:eb:76:64:81:1e:e0:ee:48:11:3f:d9:ef:9a: 8a:44:c9:7e:a6:05:f8:9b:02:3a:dd:18:78:85:b8: 42:43:36:3d:a2:31:a6:d7:a1:c3:15:95:fb:52:ab: e5:62:7d:1f:90:90:f4:be:8b:7d:3d:d0:0f:47:b8: f3:00:38:4b:bf:4e:da:0a:5d:86:fe:31:a5:7a:bf: b1:ba:70:d3:92:96:24:04:94:a3:54:99:67:e6:2b: 43:3c:71:a2:f7:1a:e0:06:b2:21:d6:fe:f7:7f:0e: 09:69:ae:13:d2:64:15:c4:76:58:d1:10:c3:32:ba: 9b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0F:06:F3:EE:EF:23:A5:FF:F6:2A:4C:B9:51:24:A8:76:5E:E4:4E X509v3 Authority Key Identifier: keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/GQ8G8-7vI6X_9ipMuVEkqHZe5E4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:d940:60::/44 Signature Algorithm: sha256WithRSAEncryption 89:26:20:92:6e:7f:d6:3e:93:9b:b3:97:b5:53:2f:05:1b:5c: 1e:90:c7:a7:2e:e2:02:3c:07:06:a7:76:ec:8a:db:86:fa:b4: 69:97:89:52:dc:14:b9:a2:0c:b9:74:de:9d:7a:18:f6:29:3b: e7:de:27:7d:79:7a:77:c4:e9:69:1c:eb:d0:85:fa:02:69:28: 67:af:3f:f4:ca:2d:7f:fe:cf:e4:89:82:06:ac:2d:f4:c0:af: 39:50:28:0b:df:d0:76:cd:4c:c6:48:36:1a:b0:af:a3:aa:ad: c0:0a:bb:fa:50:e0:aa:4d:8f:cb:4d:52:b1:20:5a:69:59:f9: 81:76:17:19:8a:46:e9:bc:d7:f2:ab:20:34:bf:61:c7:93:ac: 40:d4:14:43:59:0d:d8:6c:65:ec:ac:14:a5:4f:95:50:0f:5c: af:e1:92:71:f5:0e:53:96:81:7b:13:2c:00:72:03:46:8e:55: 7e:fa:63:63:6d:da:c8:6c:5f:54:a3:89:3a:fd:6c:a8:46:49: 8c:fa:f9:00:01:a0:9d:15:51:8d:d1:12:ce:eb:cf:d9:70:3f: 37:f4:90:f0:90:da:f0:0b:c0:b5:47:05:d7:81:ec:20:d4:f5: 41:86:42:a2:4e:53:6b:e4:d3:9e:47:c4:24:fe:18:b9:94:84: f1:f5:a8:30 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6yIIm7ZLQEAi5shBszot9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj YmJjNzQwHhcNMjYwMTAxMTgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTBmMDZmM2VlZWYyM2E1ZmZmNjJhNGNiOTUxMjRhODc2NWVlNDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Yn9z0maW+xmNBvOY6v7xRnEzipv cEzQ47FYVJE98WNMTrIymIBCDlrb5kZNcztLOBf/jAryZbfmlzJZd4N3IIYhQmAH Qsn+uYzVLfh5pB34pRPdmcBR/knNqUlsvqlij1x1Uv9YoFo9/4MwGwLq1nn8ONz0 UpYxxmyNHOAKSErdVRagdXt4get2ZIEe4O5IET/Z75qKRMl+pgX4mwI63Rh4hbhC QzY9ojGm16HDFZX7UqvlYn0fkJD0vot9PdAPR7jzADhLv07aCl2G/jGler+xunDT kpYkBJSjVJln5itDPHGi9xrgBrIh1v73fw4Jaa4T0mQVxHZY0RDDMrqbVwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBkPBvPu7yOl//YqTLlRJKh2XuROMB8GA1UdIwQY MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt MTRkMjM4NTI3ODM1LzEvR1E4RzgtN3ZJNlhfOWlwTXVWRWtxSFplNUU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1 LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg3ZQABg MA0GCSqGSIb3DQEBCwUAA4IBAQCJJiCSbn/WPpObs5e1Uy8FG1wekMenLuICPAcG p3bsituG+rRpl4lS3BS5ogy5dN6dehj2KTvn3id9eXp3xOlpHOvQhfoCaShnrz/0 yi1//s/kiYIGrC30wK85UCgL39B2zUzGSDYasK+jqq3ACrv6UOCqTY/LTVKxIFpp WfmBdhcZikbpvNfyqyA0v2HHk6xA1BRDWQ3YbGXsrBSlT5VQD1yv4ZJx9Q5TloF7 EywAcgNGjlV++mNjbdrIbF9Uo4k6/WyoRkmM+vkAAaCdFVGN0RLO68/ZcD839JDw kNrwC8C1RwXXgewg1PVBhkKiTlNr5NOeR8Qk/hi5lITx9agw -----END CERTIFICATE-----Generated at Wed Jan 21 16:59:19 2026 by rpki-client