This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/gtKo7QAi2WcSoZ12HmBm24qw-r4.roa File: gtKo7QAi2WcSoZ12HmBm24qw-r4.roa (raw, json) Hash identifier: qnaglWaJ+iAOcdqIITkJYy4ZOlNoiaJCiuIcC9Lr3R4= Subject key identifier: 82:D2:A8:ED:00:22:D9:67:12:A1:9D:76:1E:60:66:DB:8A:B0:FA:BE Certificate issuer: /CN=96448e840d272a3e3159192d1df11f100e506f6a Certificate serial: 019B7DCA841A3B7F4352933B617B916CD908 Authority key identifier: 96:44:8E:84:0D:27:2A:3E:31:59:19:2D:1D:F1:1F:10:0E:50:6F:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/gtKo7QAi2WcSoZ12HmBm24qw-r4.roa Signing time: Fri 02 Jan 2026 08:19:42 +0000 ROA not before: Fri 02 Jan 2026 08:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216021 IP address blocks: 2001:67c:634::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.mft rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:84:1a:3b:7f:43:52:93:3b:61:7b:91:6c:d9:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96448e840d272a3e3159192d1df11f100e506f6a Validity Not Before: Jan 2 08:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82d2a8ed0022d96712a19d761e6066db8ab0fabe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:60:82:26:23:42:dd:c0:ce:f3:5b:01:10:5f: 44:8d:64:f0:a7:24:78:56:e5:64:a1:e9:e4:75:64: fe:3a:a4:e9:38:fc:6b:bd:0f:23:96:bf:5a:fc:01: cd:36:82:06:5e:a8:27:66:8e:56:38:1e:e8:1d:67: 1d:21:dc:c4:c8:45:46:fe:20:e3:21:62:6b:4d:bd: d7:4f:d8:75:ea:d6:18:cb:43:69:eb:87:14:89:75: cf:1a:2b:70:90:2c:c1:f3:b7:fb:d9:b9:7f:59:de: 57:ee:0e:87:49:f1:29:d3:78:c1:0b:51:3f:5e:f1: fb:51:9a:17:3f:6f:f9:d7:05:a9:26:2a:dc:bf:d8: 01:2f:0c:8a:09:83:cf:26:c8:19:65:ca:f5:af:b0: e6:1b:87:c9:d0:0c:71:9c:37:4b:3d:7e:e4:68:90: 0a:11:66:94:61:f7:52:dc:2f:1b:87:48:c7:3e:47: b8:43:98:45:aa:7c:36:8f:eb:93:24:a8:aa:62:f4: 37:4b:62:38:e7:a3:0c:1c:0b:7a:c4:5d:66:ce:a7: 76:57:c9:90:6b:03:ae:ec:c2:6a:54:a1:16:d7:b5: c9:d8:ba:94:23:2f:40:c7:3e:18:20:a9:3a:7b:00: 6a:8a:9c:6d:cc:2c:6f:7c:ed:2c:c7:69:9b:29:4e: a8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D2:A8:ED:00:22:D9:67:12:A1:9D:76:1E:60:66:DB:8A:B0:FA:BE X509v3 Authority Key Identifier: keyid:96:44:8E:84:0D:27:2A:3E:31:59:19:2D:1D:F1:1F:10:0E:50:6F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkSOhA0nKj4xWRktHfEfEA5Qb2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/gtKo7QAi2WcSoZ12HmBm24qw-r4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/4ee734-efe8-41a1-80df-16afba987b06/1/lkSOhA0nKj4xWRktHfEfEA5Qb2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:634::/48 Signature Algorithm: sha256WithRSAEncryption 18:22:bc:2d:10:47:84:5c:00:24:dd:d2:0d:6c:62:b8:2c:d6: 0d:10:32:64:2d:61:02:71:fa:8b:42:a1:a6:99:19:98:eb:d0: ac:ce:c6:90:26:e7:31:87:33:19:04:8d:be:d1:5a:b2:42:96: 1b:15:0d:07:2f:7d:31:20:c6:0f:cb:8a:da:b6:1b:0f:4a:72: 62:94:4a:88:4f:9d:83:e3:49:52:21:6a:27:01:c7:74:e8:3e: ab:37:1c:6b:09:8a:6d:e4:1f:92:82:9a:fd:4e:bc:5e:c4:3a: 61:41:d3:37:04:e0:e8:51:46:98:98:41:e6:b5:69:8f:aa:cf: 0d:93:62:85:c2:d5:96:56:61:27:f5:21:3d:2d:30:19:5c:35: db:9e:89:1a:84:c5:46:fc:36:7e:a2:89:20:a4:5b:5f:40:ea: 5e:c6:9a:4c:cd:c2:93:2f:14:ca:d9:88:7a:fc:c3:a4:af:3b: ef:7f:23:1f:75:81:c6:f6:f3:23:c3:48:da:50:58:c0:8f:30: 22:6a:39:0f:10:9b:18:0d:12:6b:9b:30:49:35:e0:a6:52:3c: d0:a6:43:26:98:c5:cc:fc:ea:4e:82:f8:8e:3f:41:07:2a:13: ca:96:12:ce:5c:f7:70:97:6c:d5:ec:80:c4:2d:9c:e7:c1:cf: 71:b4:bd:9a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9yoQaO39DUpM7YXuRbNkIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2NDQ4ZTg0MGQyNzJhM2UzMTU5MTkyZDFkZjExZjEwMGU1 MDZmNmEwHhcNMjYwMTAyMDgxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmQyYThlZDAwMjJkOTY3MTJhMTlkNzYxZTYwNjZkYjhhYjBmYWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGCCJiNC3cDO81sBEF9EjWTwpyR4 VuVkoenkdWT+OqTpOPxrvQ8jlr9a/AHNNoIGXqgnZo5WOB7oHWcdIdzEyEVG/iDj IWJrTb3XT9h16tYYy0Np64cUiXXPGitwkCzB87f72bl/Wd5X7g6HSfEp03jBC1E/ XvH7UZoXP2/51wWpJircv9gBLwyKCYPPJsgZZcr1r7DmG4fJ0AxxnDdLPX7kaJAK EWaUYfdS3C8bh0jHPke4Q5hFqnw2j+uTJKiqYvQ3S2I456MMHAt6xF1mzqd2V8mQ awOu7MJqVKEW17XJ2LqUIy9Axz4YIKk6ewBqipxtzCxvfO0sx2mbKU6o5wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFILSqO0AItlnEqGddh5gZtuKsPq+MB8GA1UdIwQY MBaAFJZEjoQNJyo+MVkZLR3xHxAOUG9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGtTT2hBMG5LajR4V1JrdEhmRWZFQTVRYjJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy80ZWU3MzQtZWZlOC00MWExLTgwZGYt MTZhZmJhOTg3YjA2LzEvZ3RLbzdRQWkyV2NTb1oxMkhtQm0yNHF3LXI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy80ZWU3MzQtZWZlOC00MWExLTgwZGYtMTZhZmJhOTg3YjA2 LzEvbGtTT2hBMG5LajR4V1JrdEhmRWZFQTVRYjJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAY0 MA0GCSqGSIb3DQEBCwUAA4IBAQAYIrwtEEeEXAAk3dINbGK4LNYNEDJkLWECcfqL QqGmmRmY69CszsaQJucxhzMZBI2+0VqyQpYbFQ0HL30xIMYPy4rathsPSnJilEqI T52D40lSIWonAcd06D6rNxxrCYpt5B+Sgpr9TrxexDphQdM3BODoUUaYmEHmtWmP qs8Nk2KFwtWWVmEn9SE9LTAZXDXbnokahMVG/DZ+ookgpFtfQOpexppMzcKTLxTK 2Yh6/MOkrzvvfyMfdYHG9vMjw0jaUFjAjzAiajkPEJsYDRJrmzBJNeCmUjzQpkMm mMXM/OpOgviOP0EHKhPKlhLOXPdwl2zV7IDELZznwc9xtL2a -----END CERTIFICATE-----Generated at Mon Feb 9 20:10:20 2026 by rpki-client