This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/GaVpbRG7JkPv6FHAyl4y87I62dk.roa File: GaVpbRG7JkPv6FHAyl4y87I62dk.roa (raw, json) Hash identifier: QxfS+qYKtB89dUwGL8TsBPgUXmthvb+OYqcRFJIcbIs= Subject key identifier: 19:A5:69:6D:11:BB:26:43:EF:E8:51:C0:CA:5E:32:F3:B2:3A:D9:D9 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EA5112BDA9EFB67A3AB95C3F6AB97 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/GaVpbRG7JkPv6FHAyl4y87I62dk.roa Signing time: Thu 01 Jan 2026 12:18:21 +0000 ROA not before: Thu 01 Jan 2026 12:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198304 IP address blocks: 2a0e:aa07:e0b0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a5:11:2b:da:9e:fb:67:a3:ab:95:c3:f6:ab:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19a5696d11bb2643efe851c0ca5e32f3b23ad9d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:eb:7c:47:5a:4b:31:80:c9:a0:03:de:c6:09: b6:49:8d:bf:52:ca:43:28:c6:78:4d:d2:d6:71:23: a3:d9:a4:68:ba:e2:cc:d0:b5:8a:33:58:87:71:59: 21:64:23:70:36:11:b4:ff:ef:7a:27:20:74:ab:a9: 73:30:ab:6a:0d:63:2f:21:39:97:72:20:6f:65:af: 75:9b:5a:54:60:34:20:e6:ef:90:8c:91:43:fe:9a: 2b:e2:3c:77:a7:19:fa:ca:d6:2e:8b:89:09:ad:08: a3:0f:59:d0:ab:c4:d4:12:ac:e6:bc:d8:b9:ae:f8: 3b:a0:17:4d:19:2b:c9:47:d1:74:85:e4:69:25:98: ce:6c:8b:f9:28:9a:b1:b3:ec:d1:da:49:e5:29:58: e0:c0:f1:ca:84:c1:27:9b:9e:2b:ab:27:c7:b8:f5: 17:6b:b5:68:70:47:fc:7c:c5:55:b0:ea:24:ee:e3: 33:28:a9:b7:e9:5d:db:b3:2f:02:b1:0e:56:fa:10: 7f:17:71:84:f9:2e:f4:20:80:b7:6f:21:97:6d:b5: 3c:68:58:04:d6:b8:bd:b5:05:b7:ff:c0:07:00:27: c2:77:f6:80:c1:4b:d1:b1:14:57:b7:9c:6c:23:26: 8d:5a:89:ae:65:fb:c3:d1:02:a7:0e:e8:8d:ff:c9: 74:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A5:69:6D:11:BB:26:43:EF:E8:51:C0:CA:5E:32:F3:B2:3A:D9:D9 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/GaVpbRG7JkPv6FHAyl4y87I62dk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e0b0::/44 Signature Algorithm: sha256WithRSAEncryption c5:3c:3d:96:11:90:4d:4c:5d:7e:1c:19:ca:3a:f4:47:8d:7a: eb:f0:b3:67:85:68:97:ba:47:70:b3:26:e5:5c:5f:17:9e:51: cb:8b:cf:e0:e5:08:54:46:15:34:c3:04:22:33:78:93:bc:1b: 2f:4b:a7:4d:fd:37:9d:0c:61:7d:66:6d:27:93:fe:84:d6:36: f3:44:e5:c7:13:df:7f:26:90:7d:75:53:44:3c:be:0b:8d:28: af:84:b3:cf:56:05:ec:aa:32:a8:bc:c4:07:46:a8:96:e9:64: 6a:a9:83:75:25:2a:45:dc:a7:e0:57:3c:08:2b:0c:52:8e:be: 04:20:14:d9:7e:05:8d:dd:ee:b0:25:97:f4:aa:cf:24:63:bc: 76:58:1c:af:4d:86:db:31:de:4c:81:e3:27:40:6b:51:14:ae: cc:ce:7e:4e:4d:87:56:5b:39:93:68:0b:2e:b4:d7:2d:7b:67: 17:6a:ea:30:78:2e:a8:32:00:71:f0:13:a1:54:99:0d:0b:3c: 42:d4:06:d1:b0:45:de:8f:64:57:bf:b3:77:60:39:2f:18:f2: 72:6f:c6:f6:36:08:5e:4e:26:0e:a1:93:26:44:2a:7d:b6:47: ac:a3:30:eb:7f:9c:d5:fa:7b:0d:1e:aa:41:00:96:f5:ef:fc: d3:5b:4e:fb -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fqURK9qe+2ejq5XD9quXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWE1Njk2ZDExYmIyNjQzZWZlODUxYzBjYTVlMzJmM2IyM2FkOWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAout8R1pLMYDJoAPexgm2SY2/UspD KMZ4TdLWcSOj2aRouuLM0LWKM1iHcVkhZCNwNhG0/+96JyB0q6lzMKtqDWMvITmX ciBvZa91m1pUYDQg5u+QjJFD/por4jx3pxn6ytYui4kJrQijD1nQq8TUEqzmvNi5 rvg7oBdNGSvJR9F0heRpJZjObIv5KJqxs+zR2knlKVjgwPHKhMEnm54rqyfHuPUX a7VocEf8fMVVsOok7uMzKKm36V3bsy8CsQ5W+hB/F3GE+S70IIC3byGXbbU8aFgE 1ri9tQW3/8AHACfCd/aAwUvRsRRXt5xsIyaNWomuZfvD0QKnDuiN/8l0qQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBmlaW0RuyZD7+hRwMpeMvOyOtnZMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvR2FWcGJSRzdKa1B2NkZIQXlsNHk4N0k2MmRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qB+Cw MA0GCSqGSIb3DQEBCwUAA4IBAQDFPD2WEZBNTF1+HBnKOvRHjXrr8LNnhWiXukdw syblXF8XnlHLi8/g5QhURhU0wwQiM3iTvBsvS6dN/TedDGF9Zm0nk/6E1jbzROXH E99/JpB9dVNEPL4LjSivhLPPVgXsqjKovMQHRqiW6WRqqYN1JSpF3KfgVzwIKwxS jr4EIBTZfgWN3e6wJZf0qs8kY7x2WByvTYbbMd5MgeMnQGtRFK7Mzn5OTYdWWzmT aAsutNcte2cXauoweC6oMgBx8BOhVJkNCzxC1AbRsEXej2RXv7N3YDkvGPJyb8b2 NgheTiYOoZMmRCp9tkesozDrf5zV+nsNHqpBAJb17/zTW077 -----END CERTIFICATE-----Generated at Tue Jan 6 21:30:42 2026 by rpki-client