This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/GQ6ObhBUWYqzrVA0c8l1LZXNq50.roa File: GQ6ObhBUWYqzrVA0c8l1LZXNq50.roa (raw, json) Hash identifier: tIRtS7K85S4+qU2UY8E4pcC0kA56f4Y5+gJglfefU5Q= Subject key identifier: 19:0E:8E:6E:10:54:59:8A:B3:AD:50:34:73:C9:75:2D:95:CD:AB:9D Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019ADA2150EB0BACDD5FD986214E04030334 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/GQ6ObhBUWYqzrVA0c8l1LZXNq50.roa Signing time: Mon 01 Dec 2025 13:36:47 +0000 ROA not before: Mon 01 Dec 2025 13:36:47 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49111 IP address blocks: 2a0e:9c0::/29 maxlen: 29 2a0e:98c0::/29 maxlen: 29 2a11:6700::/29 maxlen: 29 2a11:8c80::/29 maxlen: 29 2a11:8cc0::/29 maxlen: 29 2a12:1ec0::/29 maxlen: 29 2a12:1f40::/29 maxlen: 29 2a12:3240::/29 maxlen: 29 2a12:4680::/29 maxlen: 29 2a12:4980::/29 maxlen: 29 2a12:6980::/29 maxlen: 29 2a12:7d00::/29 maxlen: 29 2a12:9180::/29 maxlen: 29 2a12:be00::/29 maxlen: 29 2a12:da00::/29 maxlen: 29 2a12:e900::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 05:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:da:21:50:eb:0b:ac:dd:5f:d9:86:21:4e:04:03:03:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Dec 1 13:36:47 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=190e8e6e1054598ab3ad503473c9752d95cdab9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:95:28:eb:18:39:38:77:c9:b6:cb:d3:8c:f8: 97:2e:3b:4c:d0:0e:9e:fa:82:1a:b9:dc:68:97:e5: 9d:e6:13:d4:35:66:43:9b:5c:31:31:29:39:80:a0: 7e:29:3c:ae:82:1e:fa:cd:0f:d8:9c:bc:38:0f:42: 2a:03:c1:95:17:20:93:b5:43:70:35:76:5a:bf:f6: 76:a0:1d:e1:58:d4:32:12:40:1a:2c:93:3e:f8:75: 99:9d:b1:8a:df:90:b6:3d:88:de:d3:c2:43:90:d9: 44:35:c5:b7:1d:9c:8d:8b:0e:75:fb:06:bc:dd:c7: aa:55:a0:03:44:84:81:fc:3c:9e:1e:10:d7:f4:61: bd:d2:84:29:95:60:bd:7c:e7:82:bd:b7:ee:40:24: 00:ac:5f:bf:a5:b1:7e:38:08:00:b2:60:0f:de:88: b4:4d:98:71:f9:99:0e:82:f3:10:07:d5:a5:74:90: f7:3b:14:1e:c8:24:4c:64:47:69:19:ff:14:fb:ae: 2e:bc:29:16:8c:31:44:1a:3b:62:23:08:69:75:5c: cd:07:91:17:66:6e:fa:00:81:84:ae:4d:df:a6:d7: f7:f8:d3:fa:53:4d:91:dd:a1:50:f6:a8:ff:15:2a: e7:0f:93:65:03:fc:3f:11:ee:a8:0d:6b:63:75:c6: 67:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0E:8E:6E:10:54:59:8A:B3:AD:50:34:73:C9:75:2D:95:CD:AB:9D X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/GQ6ObhBUWYqzrVA0c8l1LZXNq50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:9c0::/29 2a0e:98c0::/29 2a11:6700::/29 2a11:8c80::/29 2a11:8cc0::/29 2a12:1ec0::/29 2a12:1f40::/29 2a12:3240::/29 2a12:4680::/29 2a12:4980::/29 2a12:6980::/29 2a12:7d00::/29 2a12:9180::/29 2a12:be00::/29 2a12:da00::/29 2a12:e900::/29 Signature Algorithm: sha256WithRSAEncryption 64:2d:09:72:a4:c5:57:ac:d3:62:67:96:8d:b7:1f:c8:f3:d7: d3:0b:94:23:7c:db:d4:f8:8f:3c:e6:af:4a:65:17:73:5d:e4: 8d:86:96:52:6e:02:83:f8:c7:4a:c5:6e:b7:b7:15:29:5d:1a: 71:cb:69:d4:a7:20:71:77:b2:94:d4:ef:34:3a:c8:93:42:ea: dc:e9:a4:f1:d0:80:36:7e:1f:a5:8f:12:30:36:d0:f8:34:6c: 68:bc:3e:cd:3d:84:e6:9a:e6:8c:2b:5c:3a:70:96:d8:22:5c: 2e:32:d0:c7:ff:40:35:f5:4b:15:80:9f:be:87:53:11:9d:a1: 34:1c:bd:0d:48:81:93:86:90:3d:9f:61:8b:03:5b:6a:0a:3c: 1e:11:32:34:4c:94:be:0a:e5:de:d5:0c:77:e7:c7:f2:3a:93: 8c:a4:d7:24:5f:91:41:49:b9:5d:4c:8f:59:52:27:ee:0f:66: f9:0a:04:71:f8:79:74:50:50:0d:e2:a3:ff:7c:c5:7d:4c:7d: 37:c7:e4:96:be:1d:a9:46:f6:4d:70:43:56:8c:43:f4:1e:f5: 8e:51:19:1b:f7:42:1c:c0:60:d3:ac:44:38:ac:5b:27:81:2b: 47:f1:0b:87:53:6b:62:dc:ea:69:f5:86:bf:fa:a7:ba:5e:95: a2:b8:8f:20 -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgISAZraIVDrC6zdX9mGIU4EAwM0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjUxMjAxMTMzNjQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTBlOGU2ZTEwNTQ1OThhYjNhZDUwMzQ3M2M5NzUyZDk1Y2RhYjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pUo6xg5OHfJtsvTjPiXLjtM0A6e +oIaudxol+Wd5hPUNWZDm1wxMSk5gKB+KTyugh76zQ/YnLw4D0IqA8GVFyCTtUNw NXZav/Z2oB3hWNQyEkAaLJM++HWZnbGK35C2PYje08JDkNlENcW3HZyNiw51+wa8 3ceqVaADRISB/DyeHhDX9GG90oQplWC9fOeCvbfuQCQArF+/pbF+OAgAsmAP3oi0 TZhx+ZkOgvMQB9WldJD3OxQeyCRMZEdpGf8U+64uvCkWjDFEGjtiIwhpdVzNB5EX Zm76AIGErk3fptf3+NP6U02R3aFQ9qj/FSrnD5NlA/w/Ee6oDWtjdcZnkQIDAQAB o4ICdDCCAnAwHQYDVR0OBBYEFBkOjm4QVFmKs61QNHPJdS2VzaudMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvR1E2T2JoQlVXWXF6clZBMGM4bDFMWlhOcTUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGJBggrBgEFBQcBBwEB/wR6MHgwdgQCAAIwcAMFAyoOCcAD BQMqDpjAAwUDKhFnAAMFAyoRjIADBQMqEYzAAwUDKhIewAMFAyoSH0ADBQMqEjJA AwUDKhJGgAMFAyoSSYADBQMqEmmAAwUDKhJ9AAMFAyoSkYADBQMqEr4AAwUDKhLa AAMFAyoS6QAwDQYJKoZIhvcNAQELBQADggEBAGQtCXKkxVes02Jnlo23H8jz19ML lCN829T4jzzmr0plF3Nd5I2GllJuAoP4x0rFbre3FSldGnHLadSnIHF3spTU7zQ6 yJNC6tzppPHQgDZ+H6WPEjA20Pg0bGi8Ps09hOaa5owrXDpwltgiXC4y0Mf/QDX1 SxWAn76HUxGdoTQcvQ1IgZOGkD2fYYsDW2oKPB4RMjRMlL4K5d7VDHfnx/I6k4yk 1yRfkUFJuV1Mj1lSJ+4PZvkKBHH4eXRQUA3io/98xX1MfTfH5Ja+HalG9k1wQ1aM Q/Qe9Y5RGRv3QhzAYNOsRDisWyeBK0fxC4dTa2Lc6mn1hr/6p7pelaK4jyA= -----END CERTIFICATE-----Generated at Thu Dec 4 11:38:06 2025 by rpki-client