This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/G424g57xXENY2DHJSLRepGmj98E.roa File: G424g57xXENY2DHJSLRepGmj98E.roa (raw, json) Hash identifier: fxFxeeNbC2BzkjzLduHQdCSo3bpyacMg+qlZ3fSgioQ= Subject key identifier: 1B:8D:B8:83:9E:F1:5C:43:58:D8:31:C9:48:B4:5E:A4:69:A3:F7:C1 Certificate issuer: /CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68 Certificate serial: 019B7EA51B5371670C57B23F52E0A3F3D669 Authority key identifier: C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/G424g57xXENY2DHJSLRepGmj98E.roa Signing time: Fri 02 Jan 2026 12:18:28 +0000 ROA not before: Fri 02 Jan 2026 12:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214258 IP address blocks: 2a13:4380:8010::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:1b:53:71:67:0c:57:b2:3f:52:e0:a3:f3:d6:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68 Validity Not Before: Jan 2 12:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b8db8839ef15c4358d831c948b45ea469a3f7c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:bd:20:08:dd:a9:d6:1b:63:bf:2b:5d:f2:d6: fc:1c:e6:52:83:3c:fe:53:c0:a0:5e:4e:14:ad:b9: 61:52:ac:c5:9d:b9:bf:4e:32:58:fa:93:ac:58:a3: 68:b8:38:d5:36:47:b5:5f:69:91:91:7c:7f:08:69: 7e:d7:b4:c7:35:35:ec:0f:57:ef:01:c4:93:7e:6e: 9c:a7:29:d2:ef:a1:c2:3e:0c:98:a1:6e:94:bc:da: c2:bb:9f:97:92:a0:bb:c0:0a:b6:ef:7b:45:dd:d4: f1:87:53:ae:53:ca:a4:98:84:81:9b:1d:38:59:77: 26:db:fd:43:f8:6f:70:3c:de:2b:31:5c:47:f8:dc: f9:c6:8f:a6:fe:58:b9:58:c7:e6:63:96:3d:85:29: 4c:8e:14:09:fe:c8:68:93:86:ba:3e:48:4d:fc:a4: 1f:cb:f7:98:96:1c:0f:0f:eb:0c:50:f6:c5:ca:56: 95:51:36:e1:f8:44:24:6e:50:f8:a6:5f:44:99:ed: 14:c0:bf:01:0e:dd:27:f9:e9:71:80:97:74:29:6f: 9f:ea:68:8e:e0:f3:c2:a1:af:ab:d6:5a:45:38:f8: 3b:6a:8c:f2:3c:9a:33:42:8c:6f:7c:0c:20:da:62: 49:02:af:eb:19:54:a3:79:7a:0e:1c:11:13:fb:4b: 64:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:8D:B8:83:9E:F1:5C:43:58:D8:31:C9:48:B4:5E:A4:69:A3:F7:C1 X509v3 Authority Key Identifier: keyid:C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/G424g57xXENY2DHJSLRepGmj98E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:4380:8010::/44 Signature Algorithm: sha256WithRSAEncryption 59:6e:80:7a:28:b6:a2:19:45:e6:87:7b:cf:d7:a1:8e:a9:50: 83:a4:60:2e:db:67:2a:17:19:06:f3:c5:61:49:37:bf:26:8f: 45:6e:80:6e:01:df:50:be:ac:50:86:3f:23:ab:fc:97:9b:64: ff:78:b1:bd:36:0b:01:12:cf:29:53:4f:f8:c0:ff:19:ad:9b: 5b:52:36:3d:56:27:d6:ec:d9:cb:72:d5:22:1a:3b:f1:5a:46: 08:e5:93:39:12:e6:08:8b:61:06:7d:93:bd:60:ea:66:c9:79: fb:38:8e:28:e0:23:7e:62:54:63:6b:d2:6d:7b:ec:00:16:4e: e0:6a:61:5f:0c:e3:d7:86:89:ed:1d:ed:da:6f:59:da:58:2a: f3:23:25:52:33:08:76:1c:53:64:5b:9c:e8:ca:ff:92:37:a7: f2:9c:79:77:1d:52:7c:4c:40:02:3b:7e:a7:6c:90:43:6d:2a: 5f:36:33:9e:67:ae:79:ae:ed:28:26:97:dd:66:73:d5:b8:e9: 64:18:7b:77:a2:22:a7:17:c2:bb:1b:0a:b5:ab:b0:24:4a:17: c1:03:c6:1d:f0:7b:45:b1:ea:c7:34:29:79:2b:e3:8e:61:78: 23:c4:cd:1a:25:e5:ed:bc:b2:1a:f6:52:a0:da:3f:ac:20:d7: 25:f2:38:76 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pRtTcWcMV7I/UuCj89ZpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5NDZjNGJlZmUwZmJiZTM2MjRiZDc0ODI5NmI1ZmUyZTdl YzJkNjgwHhcNMjYwMTAyMTIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjhkYjg4MzllZjE1YzQzNThkODMxYzk0OGI0NWVhNDY5YTNmN2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA470gCN2p1htjvytd8tb8HOZSgzz+ U8CgXk4UrblhUqzFnbm/TjJY+pOsWKNouDjVNke1X2mRkXx/CGl+17THNTXsD1fv AcSTfm6cpynS76HCPgyYoW6UvNrCu5+XkqC7wAq273tF3dTxh1OuU8qkmISBmx04 WXcm2/1D+G9wPN4rMVxH+Nz5xo+m/li5WMfmY5Y9hSlMjhQJ/shok4a6PkhN/KQf y/eYlhwPD+sMUPbFylaVUTbh+EQkblD4pl9Eme0UwL8BDt0n+elxgJd0KW+f6miO 4PPCoa+r1lpFOPg7aozyPJozQoxvfAwg2mJJAq/rGVSjeXoOHBET+0tkLQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBuNuIOe8VxDWNgxyUi0XqRpo/fBMB8GA1UdIwQY MBaAFMlGxL7+D7vjYkvXSClrX+Ln7C1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVViRXZ2NFB1LU5pUzlkSUtXdGY0dWZzTFdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9mMmQ5ZTktZWVmZi00NjMzLWExODkt NmJiYjI3MDgxZGUyLzEvRzQyNGc1N3hYRU5ZMkRISlNMUmVwR21qOThFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9mMmQ5ZTktZWVmZi00NjMzLWExODktNmJiYjI3MDgxZGUy LzEveVViRXZ2NFB1LU5pUzlkSUtXdGY0dWZzTFdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhNDgIAQ MA0GCSqGSIb3DQEBCwUAA4IBAQBZboB6KLaiGUXmh3vP16GOqVCDpGAu22cqFxkG 88VhSTe/Jo9FboBuAd9QvqxQhj8jq/yXm2T/eLG9NgsBEs8pU0/4wP8ZrZtbUjY9 VifW7NnLctUiGjvxWkYI5ZM5EuYIi2EGfZO9YOpmyXn7OI4o4CN+YlRja9Jte+wA Fk7gamFfDOPXhontHe3ab1naWCrzIyVSMwh2HFNkW5zoyv+SN6fynHl3HVJ8TEAC O36nbJBDbSpfNjOeZ655ru0oJpfdZnPVuOlkGHt3oiKnF8K7Gwq1q7AkShfBA8Yd 8HtFserHNCl5K+OOYXgjxM0aJeXtvLIa9lKg2j+sINcl8jh2 -----END CERTIFICATE-----Generated at Fri Jan 2 18:19:31 2026 by rpki-client