This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/G39nMRFlOgx0uzYl4UL3EQXfT3g.roa File: G39nMRFlOgx0uzYl4UL3EQXfT3g.roa (raw, json) Hash identifier: Q/LCuIjLRBmlSClFChl6nexkZzkyeI3jhCJFJWlP4E8= Subject key identifier: 1B:7F:67:31:11:65:3A:0C:74:BB:36:25:E1:42:F7:11:05:DF:4F:78 Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019B78A376D71E43B2D1F0F94410AD8BD9A1 Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/G39nMRFlOgx0uzYl4UL3EQXfT3g.roa Signing time: Thu 01 Jan 2026 08:18:57 +0000 ROA not before: Thu 01 Jan 2026 08:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60781 IP address blocks: 2a03:f85:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:76:d7:1e:43:b2:d1:f0:f9:44:10:ad:8b:d9:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Jan 1 08:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b7f673111653a0c74bb3625e142f71105df4f78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:25:31:78:13:70:6c:bf:fc:57:53:c9:a1:fb: 38:dc:fd:57:05:1a:b4:8f:28:d1:2d:f8:08:31:5e: 63:19:e9:02:6e:7b:d6:e8:58:d0:39:17:96:ae:f1: 17:0a:bc:45:70:1b:cc:e1:b4:47:f6:d3:31:b2:8f: c7:bd:76:c7:40:6b:60:6c:4c:a8:cc:43:44:b6:42: 27:2d:e9:f6:7f:72:6b:42:c5:0f:62:90:d0:0b:e3: 93:8e:39:e9:9d:c7:f4:52:13:13:06:24:2a:88:5a: 3b:20:cc:97:31:88:de:e0:ce:d7:2e:84:5f:b3:b6: a7:db:a0:47:a1:f0:70:7b:47:e2:50:45:b8:fd:f2: 8a:48:0c:96:d3:14:44:84:e2:41:ae:ef:f8:2a:c7: bc:49:87:9a:91:1a:de:72:9b:e0:a8:4b:f8:c7:fa: 55:28:f4:1b:f5:51:ab:36:82:be:ee:67:29:95:9a: 24:19:b0:dc:9c:e3:1c:0f:93:35:71:f3:dc:d0:71: 61:3d:db:5d:fb:b5:f3:29:00:a6:21:40:9b:d1:31: a7:e4:ac:13:88:d3:23:0a:3b:15:74:f4:62:43:3c: ee:dc:d3:16:7c:ac:38:e8:df:51:b1:5f:6d:61:b7: 0d:4f:18:0e:3f:cd:9a:cd:54:4f:14:54:ca:bc:77: 6d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7F:67:31:11:65:3A:0C:74:BB:36:25:E1:42:F7:11:05:DF:4F:78 X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/G39nMRFlOgx0uzYl4UL3EQXfT3g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:f85:2::/48 Signature Algorithm: sha256WithRSAEncryption 3a:e7:57:32:5e:79:c9:67:8c:dd:a8:50:93:92:68:63:0e:8e: 27:c7:97:09:6d:f3:9b:de:06:4c:87:ba:e8:aa:00:85:87:30: e7:61:57:3c:cb:06:1b:a4:ca:3f:42:ab:9b:0c:f9:e0:c4:8c: f4:9d:c0:6b:52:24:58:14:6d:57:a5:61:e7:2e:d2:6f:ea:dc: a5:45:6c:13:92:32:bf:7e:5b:30:20:bb:c5:bc:50:92:0b:82: f2:d5:78:36:e2:c0:7a:8c:e4:cc:ac:18:8f:ab:e7:e5:58:2b: 53:85:6f:a7:c7:18:c0:f5:ff:e3:13:94:1b:9a:ca:a8:5e:63: 97:a5:7d:06:f6:03:7c:fb:cf:88:9e:62:17:11:d4:42:cd:f2: 50:81:ad:da:d3:57:e8:cf:4a:51:72:22:c5:e3:36:14:ac:09: 2c:46:84:3f:39:4a:63:80:87:ff:a3:8f:5a:ec:a5:29:01:fe: 08:70:8f:80:f9:b1:22:b0:0c:ed:85:4a:bb:31:87:d8:ed:78: 35:18:8e:85:d7:ae:4d:d7:ca:87:b8:e8:07:8a:6b:da:01:5d: 47:3b:6b:25:bb:55:fb:19:63:91:f2:a8:84:8d:46:0b:87:df: 66:0b:5b:74:c9:b5:85:44:1f:ae:94:48:a1:60:eb:ff:cd:8c: 80:30:03:c9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4o3bXHkOy0fD5RBCti9mhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjYwMTAxMDgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjdmNjczMTExNjUzYTBjNzRiYjM2MjVlMTQyZjcxMTA1ZGY0Zjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCUxeBNwbL/8V1PJofs43P1XBRq0 jyjRLfgIMV5jGekCbnvW6FjQOReWrvEXCrxFcBvM4bRH9tMxso/HvXbHQGtgbEyo zENEtkInLen2f3JrQsUPYpDQC+OTjjnpncf0UhMTBiQqiFo7IMyXMYje4M7XLoRf s7an26BHofBwe0fiUEW4/fKKSAyW0xREhOJBru/4Kse8SYeakRrecpvgqEv4x/pV KPQb9VGrNoK+7mcplZokGbDcnOMcD5M1cfPc0HFhPdtd+7XzKQCmIUCb0TGn5KwT iNMjCjsVdPRiQzzu3NMWfKw46N9RsV9tYbcNTxgOP82azVRPFFTKvHdtawIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBt/ZzERZToMdLs2JeFC9xEF3094MB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvRzM5bk1SRmxPZ3gwdXpZbDRVTDNFUVhmVDNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgMPhQAC MA0GCSqGSIb3DQEBCwUAA4IBAQA651cyXnnJZ4zdqFCTkmhjDo4nx5cJbfOb3gZM h7roqgCFhzDnYVc8ywYbpMo/QqubDPngxIz0ncBrUiRYFG1XpWHnLtJv6tylRWwT kjK/flswILvFvFCSC4Ly1Xg24sB6jOTMrBiPq+flWCtThW+nxxjA9f/jE5Qbmsqo XmOXpX0G9gN8+8+InmIXEdRCzfJQga3a01foz0pRciLF4zYUrAksRoQ/OUpjgIf/ o49a7KUpAf4IcI+A+bEisAzthUq7MYfY7Xg1GI6F165N18qHuOgHimvaAV1HO2sl u1X7GWOR8qiEjUYLh99mC1t0ybWFRB+ulEihYOv/zYyAMAPJ -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:25 2026 by rpki-client