This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/gcN7yS93t2HKXJyOUMDxPp8DdjA.roa File: gcN7yS93t2HKXJyOUMDxPp8DdjA.roa (raw, json) Hash identifier: DpOel+7rcXHeqLAzR65McC8S1GNmilo4XJs58vkTcEY= Subject key identifier: 81:C3:7B:C9:2F:77:B7:61:CA:5C:9C:8E:50:C0:F1:3E:9F:03:76:30 Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 019B7AC93F7B60266551401E6551D9624724 Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/gcN7yS93t2HKXJyOUMDxPp8DdjA.roa Signing time: Thu 01 Jan 2026 18:19:27 +0000 ROA not before: Thu 01 Jan 2026 18:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 2a04:5b81:2120::/44 maxlen: 48 2a04:5b82:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:3f:7b:60:26:65:51:40:1e:65:51:d9:62:47:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: Jan 1 18:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81c37bc92f77b761ca5c9c8e50c0f13e9f037630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d0:a0:12:0b:34:0f:15:b4:2e:35:09:91:06: 73:4c:d2:cf:77:69:42:64:90:90:8d:c9:08:3c:ff: 91:0d:df:be:1c:03:e8:40:63:62:f0:57:4a:75:ea: a8:53:4e:1d:26:0f:f8:4b:d9:ea:31:da:e5:0f:38: b8:40:db:20:0e:aa:91:f7:61:64:78:45:10:44:cb: 82:59:16:7d:88:68:4d:d2:eb:fc:af:89:18:0e:2d: 2f:ac:b8:3e:d9:61:da:3e:2e:2e:85:cd:88:dd:85: af:f0:57:43:87:d4:15:84:13:2d:44:ad:6e:22:a8: c4:5f:f1:0c:73:5a:d1:14:be:d2:30:62:e7:ab:5b: 4a:64:a4:74:f2:62:86:c5:98:c3:c1:29:3d:bf:22: ec:a7:20:85:df:02:2c:93:a1:25:68:da:c8:f4:35: 94:6f:4f:25:e0:3e:d1:a9:eb:d0:c2:c3:c4:ad:b6: 74:80:97:d5:f5:b6:d2:41:20:57:6e:a5:26:d8:8d: 5f:4d:1c:0c:5f:7c:dd:be:35:df:67:21:fc:6c:5b: e3:4a:23:04:d9:53:c0:ae:2d:85:31:b8:21:97:84: f0:2e:98:3a:57:52:47:e2:30:e5:cb:83:f4:a2:41: 90:53:e2:e2:e8:c4:5e:bf:10:1c:2e:83:26:87:7e: 51:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C3:7B:C9:2F:77:B7:61:CA:5C:9C:8E:50:C0:F1:3E:9F:03:76:30 X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/gcN7yS93t2HKXJyOUMDxPp8DdjA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:5b81:2120::/44 2a04:5b82:2000::/48 Signature Algorithm: sha256WithRSAEncryption 47:5a:24:14:10:b9:c0:20:03:a0:3f:c5:24:cb:4e:99:af:b8: cd:06:24:f1:7b:ae:2e:05:dd:b1:2b:bd:6c:3c:be:85:ee:67: 1a:d7:fc:83:d6:f0:39:74:92:a6:5f:55:a7:cd:89:ec:3a:c3: b9:da:4d:f7:61:82:5e:1d:13:10:30:0e:79:6a:63:00:1a:94: 9b:77:f3:9a:60:8c:df:10:07:99:dc:66:d4:00:9a:4a:9c:22: 35:a3:43:3e:b1:ca:07:78:4d:f2:12:87:8d:c2:3d:03:9d:c9: d1:08:99:0a:e9:04:39:4f:01:62:ac:5d:28:9b:b9:d2:b5:25: 42:db:d7:b8:3b:f6:57:65:05:65:3d:de:63:84:47:b0:08:30: ed:ae:22:d0:9b:d5:fb:12:ed:27:ce:5d:65:7c:25:89:ba:51: 76:54:f8:13:27:c8:91:57:71:29:ce:f7:4e:28:6c:f2:f0:6c: d5:0c:6e:c2:3d:6a:ab:ba:3f:a8:98:d1:04:c7:fd:2a:d5:cd: 94:f1:e5:95:e1:2c:57:a5:e4:c9:c1:b1:cd:df:fb:f5:43:00: 55:cf:4c:f4:4d:62:6b:93:ae:b5:f5:f4:c2:1b:9c:09:52:c6: 7b:25:53:08:42:81:bd:bb:38:70:c1:72:e8:97:95:e4:ba:aa: fd:fb:74:a2 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6yT97YCZlUUAeZVHZYkckMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjYwMTAxMTgxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWMzN2JjOTJmNzdiNzYxY2E1YzljOGU1MGMwZjEzZTlmMDM3NjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitCgEgs0DxW0LjUJkQZzTNLPd2lC ZJCQjckIPP+RDd++HAPoQGNi8FdKdeqoU04dJg/4S9nqMdrlDzi4QNsgDqqR92Fk eEUQRMuCWRZ9iGhN0uv8r4kYDi0vrLg+2WHaPi4uhc2I3YWv8FdDh9QVhBMtRK1u IqjEX/EMc1rRFL7SMGLnq1tKZKR08mKGxZjDwSk9vyLspyCF3wIsk6ElaNrI9DWU b08l4D7RqevQwsPErbZ0gJfV9bbSQSBXbqUm2I1fTRwMX3zdvjXfZyH8bFvjSiME 2VPAri2FMbghl4TwLpg6V1JH4jDly4P0okGQU+Li6MRevxAcLoMmh35RnQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIHDe8kvd7dhylycjlDA8T6fA3YwMB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvZ2NON3lTOTN0MkhLWEp5T1VNRHhQcDhEZGpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgRbgSEg AwcAKgRbgiAAMA0GCSqGSIb3DQEBCwUAA4IBAQBHWiQUELnAIAOgP8Uky06Zr7jN BiTxe64uBd2xK71sPL6F7mca1/yD1vA5dJKmX1WnzYnsOsO52k33YYJeHRMQMA55 amMAGpSbd/OaYIzfEAeZ3GbUAJpKnCI1o0M+scoHeE3yEoeNwj0DncnRCJkK6QQ5 TwFirF0om7nStSVC29e4O/ZXZQVlPd5jhEewCDDtriLQm9X7Eu0nzl1lfCWJulF2 VPgTJ8iRV3EpzvdOKGzy8GzVDG7CPWqruj+omNEEx/0q1c2U8eWV4SxXpeTJwbHN 3/v1QwBVz0z0TWJrk6619fTCG5wJUsZ7JVMIQoG9uzhwwXLol5Xkuqr9+3Si -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:11 2026 by rpki-client