This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/GcH-WF46-Cx6ySovZfxGMRK-ScA.roa File: GcH-WF46-Cx6ySovZfxGMRK-ScA.roa (raw, json) Hash identifier: vLUhEA8jeh8KPUh1zpLwKiZLSX3eBBb9XYrIml4wnm4= Subject key identifier: 19:C1:FE:58:5E:3A:F8:2C:7A:C9:2A:2F:65:FC:46:31:12:BE:49:C0 Certificate issuer: /CN=2cba355669b4f9b9035f05b1fba211ef8696101d Certificate serial: 019B7DC8B9D2AE361E287D437FB9670393E4 Authority key identifier: 2C:BA:35:56:69:B4:F9:B9:03:5F:05:B1:FB:A2:11:EF:86:96:10:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/GcH-WF46-Cx6ySovZfxGMRK-ScA.roa Signing time: Fri 02 Jan 2026 08:17:45 +0000 ROA not before: Fri 02 Jan 2026 08:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202886 IP address blocks: 2001:678:158::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:b9:d2:ae:36:1e:28:7d:43:7f:b9:67:03:93:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cba355669b4f9b9035f05b1fba211ef8696101d Validity Not Before: Jan 2 08:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19c1fe585e3af82c7ac92a2f65fc463112be49c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:11:18:60:94:bb:e1:c1:a0:ad:1f:59:03:68: 29:dc:13:c5:80:eb:f9:bd:be:3e:ca:fc:1e:96:a2: fc:9a:d4:2f:e4:9d:68:b2:f6:99:92:7b:97:51:a6: a4:a3:55:eb:7d:e5:c0:87:a1:b2:0b:9e:c4:6c:18: b8:f0:eb:ca:34:ea:46:cb:94:07:67:6c:bc:90:c1: e2:ab:b9:0a:34:e2:2a:d6:4d:b4:59:ac:19:89:28: f3:bf:c5:70:1b:08:19:ba:cd:80:e7:cb:7c:13:21: b1:44:a2:45:75:83:43:88:24:a8:1d:42:da:e1:18: f3:f7:27:b4:25:99:99:4b:d5:67:4b:a7:fb:ce:2d: e9:41:26:58:40:0b:a3:40:a4:a7:26:13:c4:5c:93: 43:a9:d0:82:d3:9f:7c:bf:b9:42:a1:74:d6:92:d0: c6:ee:46:f9:f0:d3:1c:0f:68:82:3f:45:4b:b4:06: 57:51:6b:23:91:2d:97:51:ae:ac:e5:fa:2d:01:28: 4a:9d:1a:bf:05:42:1e:58:26:3c:5b:ad:ca:37:b3: ec:c7:e8:73:d1:6c:3f:54:d0:45:47:6a:fe:06:7b: e3:a2:16:e1:43:bc:22:66:2a:1d:81:12:6f:a4:cf: 07:bb:17:62:f4:1d:8a:f3:f3:20:43:d2:1a:56:10: c9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C1:FE:58:5E:3A:F8:2C:7A:C9:2A:2F:65:FC:46:31:12:BE:49:C0 X509v3 Authority Key Identifier: keyid:2C:BA:35:56:69:B4:F9:B9:03:5F:05:B1:FB:A2:11:EF:86:96:10:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/GcH-WF46-Cx6ySovZfxGMRK-ScA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:158::/48 Signature Algorithm: sha256WithRSAEncryption 64:c7:d6:5b:fd:a2:7a:40:59:78:7e:9c:8c:8d:ac:d8:17:22: 70:bf:39:d4:ac:6f:f7:d9:20:7d:46:dd:96:8a:4c:e8:37:cf: 76:67:3f:5e:7f:b0:9a:bc:0f:e0:57:c3:86:8e:1d:5f:b6:6f: 8f:fa:ac:50:5f:2a:18:c3:1b:7d:e4:aa:15:c1:9a:2a:4d:10: 5d:a6:0a:92:3e:86:cd:f5:8c:eb:2f:fe:42:0f:38:d2:62:6a: 7c:ed:06:c1:b1:3b:dd:99:35:da:fe:7c:32:9f:89:54:2b:47: 66:02:46:75:2a:94:f7:b6:b4:03:55:5b:72:8d:6c:0c:d5:fd: 02:d4:37:49:c5:b8:c0:e1:09:ec:0d:10:9d:22:e9:51:48:f1: ac:69:58:e1:6f:29:4f:46:b8:f7:3b:0e:c0:f6:17:48:b8:80: 82:c5:da:29:7a:d8:3a:eb:02:15:2e:d6:d5:73:05:db:6a:53: ca:0f:31:a3:be:72:40:cc:03:0e:b2:3a:a1:b5:0d:c4:53:0b: 85:31:d7:83:44:19:d1:49:60:f9:b4:6f:e8:1b:a4:65:00:9c: db:2c:bd:84:18:09:e6:48:9b:7d:9e:d2:20:b2:f8:7f:e4:98: fc:5b:de:e9:72:3b:fe:36:e9:a0:e4:88:8d:8a:1f:a6:ab:ef: 1f:79:ed:12 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9yLnSrjYeKH1Df7lnA5PkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYmEzNTU2NjliNGY5YjkwMzVmMDViMWZiYTIxMWVmODY5 NjEwMWQwHhcNMjYwMTAyMDgxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWMxZmU1ODVlM2FmODJjN2FjOTJhMmY2NWZjNDYzMTEyYmU0OWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxEYYJS74cGgrR9ZA2gp3BPFgOv5 vb4+yvwelqL8mtQv5J1osvaZknuXUaako1XrfeXAh6GyC57EbBi48OvKNOpGy5QH Z2y8kMHiq7kKNOIq1k20WawZiSjzv8VwGwgZus2A58t8EyGxRKJFdYNDiCSoHULa 4Rjz9ye0JZmZS9VnS6f7zi3pQSZYQAujQKSnJhPEXJNDqdCC0598v7lCoXTWktDG 7kb58NMcD2iCP0VLtAZXUWsjkS2XUa6s5fotAShKnRq/BUIeWCY8W63KN7Psx+hz 0Ww/VNBFR2r+BnvjohbhQ7wiZiodgRJvpM8Huxdi9B2K8/MgQ9IaVhDJKQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBnB/lheOvgseskqL2X8RjESvknAMB8GA1UdIwQY MBaAFCy6NVZptPm5A18FsfuiEe+GlhAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTExvMVZtbTAtYmtEWHdXeC02SVI3NGFXRUIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82ZmE2ZDAtZjJjOC00MTJjLTliYzct MzY1YzUxYTVmOWZmLzEvR2NILVdGNDYtQ3g2eVNvdlpmeEdNUkstU2NBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi82ZmE2ZDAtZjJjOC00MTJjLTliYzctMzY1YzUxYTVmOWZm LzEvTExvMVZtbTAtYmtEWHdXeC02SVI3NGFXRUIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAFY MA0GCSqGSIb3DQEBCwUAA4IBAQBkx9Zb/aJ6QFl4fpyMjazYFyJwvznUrG/32SB9 Rt2WikzoN892Zz9ef7CavA/gV8OGjh1ftm+P+qxQXyoYwxt95KoVwZoqTRBdpgqS PobN9YzrL/5CDzjSYmp87QbBsTvdmTXa/nwyn4lUK0dmAkZ1KpT3trQDVVtyjWwM 1f0C1DdJxbjA4QnsDRCdIulRSPGsaVjhbylPRrj3Ow7A9hdIuICCxdopetg66wIV LtbVcwXbalPKDzGjvnJAzAMOsjqhtQ3EUwuFMdeDRBnRSWD5tG/oG6RlAJzbLL2E GAnmSJt9ntIgsvh/5Jj8W97pcjv+Numg5IiNih+mq+8fee0S -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:18 2026 by rpki-client