This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/gL5k2DS2jun3rDmSAFmyHUd90rY.roa File: gL5k2DS2jun3rDmSAFmyHUd90rY.roa (raw, json) Hash identifier: ktbtdzg5OrIig6DPwxBSpYymgHZnpLgHQbuyYtdVI84= Subject key identifier: 80:BE:64:D8:34:B6:8E:E9:F7:AC:39:92:00:59:B2:1D:47:7D:D2:B6 Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 019B7AC93EE260BB94D400D3056EF04752D5 Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/gL5k2DS2jun3rDmSAFmyHUd90rY.roa Signing time: Thu 01 Jan 2026 18:19:27 +0000 ROA not before: Thu 01 Jan 2026 18:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 2a04:5b81:2120::/44 maxlen: 48 2a04:5b82:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:3e:e2:60:bb:94:d4:00:d3:05:6e:f0:47:52:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: Jan 1 18:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80be64d834b68ee9f7ac39920059b21d477dd2b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cb:45:dc:60:0c:41:17:4e:1e:f7:01:97:d8: 0e:c5:54:3f:43:ce:4e:22:b0:fc:a7:bf:74:3f:ed: 4f:a3:e3:53:f0:d4:63:e5:1d:6b:79:a5:44:c0:0a: 19:22:53:ea:27:6a:11:23:3b:1c:2e:5d:2c:a9:f1: 80:3c:65:d0:18:e1:91:33:f2:b4:87:85:2c:f2:3f: 23:37:1a:a4:3f:84:5b:3a:e1:2c:cb:95:75:9f:2a: 44:5a:17:b9:6b:31:d0:43:8c:ad:bc:f1:bf:80:eb: 8c:0d:b9:9c:dc:b2:24:35:58:a9:7f:8f:49:36:40: 72:d0:3b:76:23:dc:52:4c:c0:75:15:52:55:44:2c: 39:8c:ed:d6:ac:9b:25:c0:00:9e:41:f3:4a:1d:07: f6:4d:15:40:20:cf:e9:8a:54:9e:e6:2c:a8:9c:ff: d4:5a:46:4c:ea:c3:2f:f4:04:05:ad:a5:03:b7:9a: 5d:19:a7:ca:53:e0:3f:ca:9b:3a:4f:ef:dc:55:8a: aa:c4:c1:26:05:b5:1a:29:0c:95:e5:80:1b:63:ab: 5a:67:62:de:e0:42:71:92:a9:31:b3:e2:16:93:d3: ef:60:5b:13:97:ac:6c:5f:a3:aa:99:5e:44:7d:9b: 5d:c3:9d:5a:8a:05:83:32:e4:9a:fb:0a:80:44:06: 24:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BE:64:D8:34:B6:8E:E9:F7:AC:39:92:00:59:B2:1D:47:7D:D2:B6 X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/gL5k2DS2jun3rDmSAFmyHUd90rY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:5b81:2120::/44 2a04:5b82:2000::/48 Signature Algorithm: sha256WithRSAEncryption 48:be:7d:e5:20:84:20:81:8b:11:a9:1b:66:88:8e:e5:ae:44: 05:5a:c3:6d:1c:8a:71:79:26:2c:6f:da:1c:66:d5:7d:46:83: a6:e0:8c:e6:c9:2a:53:85:cd:8d:b5:1d:b6:34:e8:19:b9:9d: af:2e:9e:37:7a:7d:fb:e9:9e:3d:7e:2f:a9:ae:b4:7c:8c:fe: 89:5d:1b:d6:4f:a6:ab:d5:51:af:19:01:70:d0:2d:c8:84:de: 2a:89:18:a9:6e:48:ce:96:2d:92:3f:bf:91:59:90:fc:c0:04: aa:9a:a6:9a:8d:40:21:3b:94:5a:f5:ef:b7:a4:74:09:85:b6: 92:6a:ff:b2:b8:a2:fd:c9:cf:b4:b7:d4:da:1f:78:24:45:f3: f0:0f:14:3e:76:35:59:df:c5:91:63:91:14:74:45:5e:07:6a: 21:a2:e0:7c:88:6d:6b:1a:8b:18:eb:41:3f:2d:d2:c1:e8:59: 5a:0a:7d:15:8c:4c:1f:2f:47:53:ab:9e:ab:78:52:d7:d6:6b: bb:54:b2:89:a9:44:24:53:71:33:d4:84:41:9d:65:3e:89:fa: 2d:4e:7c:39:9d:c9:a3:a6:97:5f:13:43:3c:89:d1:45:e4:7b: a0:e1:72:f8:6b:96:46:ed:e2:6b:dc:8f:55:37:79:36:14:0e: 9b:31:31:7c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6yT7iYLuU1ADTBW7wR1LVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjYwMTAxMTgxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGJlNjRkODM0YjY4ZWU5ZjdhYzM5OTIwMDU5YjIxZDQ3N2RkMmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAustF3GAMQRdOHvcBl9gOxVQ/Q85O IrD8p790P+1Po+NT8NRj5R1reaVEwAoZIlPqJ2oRIzscLl0sqfGAPGXQGOGRM/K0 h4Us8j8jNxqkP4RbOuEsy5V1nypEWhe5azHQQ4ytvPG/gOuMDbmc3LIkNVipf49J NkBy0Dt2I9xSTMB1FVJVRCw5jO3WrJslwACeQfNKHQf2TRVAIM/pilSe5iyonP/U WkZM6sMv9AQFraUDt5pdGafKU+A/yps6T+/cVYqqxMEmBbUaKQyV5YAbY6taZ2Le 4EJxkqkxs+IWk9PvYFsTl6xsX6OqmV5EfZtdw51aigWDMuSa+wqARAYkDwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIC+ZNg0to7p96w5kgBZsh1HfdK2MB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvZ0w1azJEUzJqdW4zckRtU0FGbXlIVWQ5MHJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgRbgSEg AwcAKgRbgiAAMA0GCSqGSIb3DQEBCwUAA4IBAQBIvn3lIIQggYsRqRtmiI7lrkQF WsNtHIpxeSYsb9ocZtV9RoOm4IzmySpThc2NtR22NOgZuZ2vLp43en376Z49fi+p rrR8jP6JXRvWT6ar1VGvGQFw0C3IhN4qiRipbkjOli2SP7+RWZD8wASqmqaajUAh O5Ra9e+3pHQJhbaSav+yuKL9yc+0t9TaH3gkRfPwDxQ+djVZ38WRY5EUdEVeB2oh ouB8iG1rGosY60E/LdLB6FlaCn0VjEwfL0dTq56reFLX1mu7VLKJqUQkU3Ez1IRB nWU+ifotTnw5ncmjppdfE0M8idFF5Hug4XL4a5ZG7eJr3I9VN3k2FA6bMTF8 -----END CERTIFICATE-----Generated at Fri Jan 9 00:57:54 2026 by rpki-client