This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/GxXxtmytTeePZFqMmjKewv0phDk.roa File: GxXxtmytTeePZFqMmjKewv0phDk.roa (raw, json) Hash identifier: DQNMt4Qmq5pWK/m+65wngsoZgA7+I6etgVuEFLBf9P8= Subject key identifier: 1B:15:F1:B6:6C:AD:4D:E7:8F:64:5A:8C:9A:32:9E:C2:FD:29:84:39 Certificate issuer: /CN=d116835d037786620a9e9f7a0e360498bb654127 Certificate serial: 019B7B35C196D68EE77382D5B81142133508 Authority key identifier: D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/GxXxtmytTeePZFqMmjKewv0phDk.roa Signing time: Thu 01 Jan 2026 20:17:58 +0000 ROA not before: Thu 01 Jan 2026 20:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8220 IP address blocks: 2001:678:274::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c1:96:d6:8e:e7:73:82:d5:b8:11:42:13:35:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d116835d037786620a9e9f7a0e360498bb654127 Validity Not Before: Jan 1 20:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b15f1b66cad4de78f645a8c9a329ec2fd298439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e1:ef:f6:7e:8a:34:ac:9b:7d:b2:69:1f:2e: 58:79:6e:f9:de:e9:30:ab:d2:a3:78:5d:5c:b9:6a: c2:fe:b2:f3:b9:bc:a6:b5:16:8f:f3:5f:6e:11:4b: 00:79:1f:88:10:05:36:68:be:76:86:31:8d:5f:a4: b9:ae:f9:f4:ed:05:19:41:93:3b:7c:d5:97:4d:50: 6d:53:2e:2e:1d:2c:a4:f4:2a:c0:ce:39:fd:6d:01: 64:40:86:5d:ab:a6:9a:cb:86:f6:6c:db:59:77:99: 90:85:40:d2:3c:38:6e:2c:f9:66:5a:67:96:db:01: 50:97:c5:73:c9:01:9a:c3:12:fc:93:86:32:b1:f8: e7:69:1c:1d:63:8a:b8:88:7d:06:17:80:dc:bd:85: 1d:74:b6:14:55:aa:2e:cb:0e:03:f2:27:a2:ab:be: 9c:bf:f3:93:30:88:43:bb:59:0f:04:2d:39:e3:17: 2c:64:af:28:8d:87:d4:59:59:c8:5f:46:c5:11:a2: 33:27:4f:1d:61:2d:7b:a4:df:4c:06:96:15:f3:b9: 0b:3d:83:8f:8d:86:b9:a4:ed:e7:6f:fe:2c:21:ce: a6:49:c5:07:37:7f:1e:53:7e:fb:9b:61:42:a1:05: 4f:03:a3:a4:86:4c:94:6f:cb:6a:43:46:de:99:a0: 9f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:15:F1:B6:6C:AD:4D:E7:8F:64:5A:8C:9A:32:9E:C2:FD:29:84:39 X509v3 Authority Key Identifier: keyid:D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/GxXxtmytTeePZFqMmjKewv0phDk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:274::/48 Signature Algorithm: sha256WithRSAEncryption 8f:82:9c:1c:f0:9c:bd:58:a3:61:41:c2:d8:cb:e1:02:e8:e5: 10:3d:08:7b:82:35:f3:4b:1e:ff:0b:32:d6:1c:a3:bf:8b:cd: 15:8c:a5:22:a4:7e:14:4d:93:65:d8:31:51:53:e2:6a:db:66: a8:6c:3d:5e:7b:7b:6b:2a:09:95:00:a5:e3:3e:cb:f6:2f:5f: 6c:99:29:c0:7c:49:5f:75:71:71:81:fa:78:ae:8a:0b:33:43: 42:dc:d8:cc:38:01:33:49:53:4e:f4:98:c2:af:ea:18:76:f2: 2a:50:85:a6:98:67:45:9c:91:ee:43:c7:28:4b:01:cc:6b:d7: 75:1b:7d:2c:5e:44:2e:5e:6e:cf:04:d4:9e:ea:f4:0b:4e:f2: 3d:5e:70:d7:d3:26:17:08:4b:2a:87:27:e9:29:c7:8a:35:a4: c8:cc:d4:c4:d9:ef:2c:c2:a8:f3:5d:8a:c0:d9:b3:a2:99:c2: 2f:4f:d1:68:e8:a5:25:e8:78:90:01:58:60:22:e1:c2:83:57: c6:f8:08:fc:78:ea:00:4d:6c:ce:4b:81:10:f9:15:23:e6:cb: 80:00:04:c8:8c:57:79:23:d5:19:88:e4:0d:5b:05:83:16:56: 09:1c:be:6e:44:1d:8e:a8:3d:97:1a:aa:3e:91:29:24:a7:d9: bf:64:94:cd -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7NcGW1o7nc4LVuBFCEzUIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMTY4MzVkMDM3Nzg2NjIwYTllOWY3YTBlMzYwNDk4YmI2 NTQxMjcwHhcNMjYwMTAxMjAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjE1ZjFiNjZjYWQ0ZGU3OGY2NDVhOGM5YTMyOWVjMmZkMjk4NDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreHv9n6KNKybfbJpHy5YeW753ukw q9KjeF1cuWrC/rLzubymtRaP819uEUsAeR+IEAU2aL52hjGNX6S5rvn07QUZQZM7 fNWXTVBtUy4uHSyk9CrAzjn9bQFkQIZdq6aay4b2bNtZd5mQhUDSPDhuLPlmWmeW 2wFQl8VzyQGawxL8k4YysfjnaRwdY4q4iH0GF4DcvYUddLYUVaouyw4D8ieiq76c v/OTMIhDu1kPBC054xcsZK8ojYfUWVnIX0bFEaIzJ08dYS17pN9MBpYV87kLPYOP jYa5pO3nb/4sIc6mScUHN38eU377m2FCoQVPA6OkhkyUb8tqQ0bemaCflQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBsV8bZsrU3nj2RajJoynsL9KYQ5MB8GA1UdIwQY MBaAFNEWg10Dd4ZiCp6feg42BJi7ZUEnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFJhRFhRTjNobUlLbnA5NkRqWUVtTHRsUVNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9mNTA3Y2ItNzM3MS00YWQxLWI3ZTMt MTZhN2Q2MGQ1YmVhLzEvR3hYeHRteXRUZWVQWkZxTW1qS2V3djBwaERrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9mNTA3Y2ItNzM3MS00YWQxLWI3ZTMtMTZhN2Q2MGQ1YmVh LzEvMFJhRFhRTjNobUlLbnA5NkRqWUVtTHRsUVNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAJ0 MA0GCSqGSIb3DQEBCwUAA4IBAQCPgpwc8Jy9WKNhQcLYy+EC6OUQPQh7gjXzSx7/ CzLWHKO/i80VjKUipH4UTZNl2DFRU+Jq22aobD1ee3trKgmVAKXjPsv2L19smSnA fElfdXFxgfp4rooLM0NC3NjMOAEzSVNO9JjCr+oYdvIqUIWmmGdFnJHuQ8coSwHM a9d1G30sXkQuXm7PBNSe6vQLTvI9XnDX0yYXCEsqhyfpKceKNaTIzNTE2e8swqjz XYrA2bOimcIvT9Fo6KUl6HiQAVhgIuHCg1fG+Aj8eOoATWzOS4EQ+RUj5suAAATI jFd5I9UZiOQNWwWDFlYJHL5uRB2OqD2XGqo+kSkkp9m/ZJTN -----END CERTIFICATE-----Generated at Wed Jan 21 12:20:16 2026 by rpki-client