This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/GbU7gDNNAsJW92Wrj7Y3BuqAQ98.roa File: GbU7gDNNAsJW92Wrj7Y3BuqAQ98.roa (raw, json) Hash identifier: NF2WC4wXH29VGU25LGCux6trlkTGPq++Fn8sozSj2jc= Subject key identifier: 19:B5:3B:80:33:4D:02:C2:56:F7:65:AB:8F:B6:37:06:EA:80:43:DF Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EAD75AF4C0CA5AF71BF5821B59625 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/GbU7gDNNAsJW92Wrj7Y3BuqAQ98.roa Signing time: Thu 01 Jan 2026 12:18:23 +0000 ROA not before: Thu 01 Jan 2026 12:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208498 IP address blocks: 2a0e:aa01:ab10::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ad:75:af:4c:0c:a5:af:71:bf:58:21:b5:96:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19b53b80334d02c256f765ab8fb63706ea8043df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f3:bf:f8:c5:d3:24:7c:c5:3a:2f:fc:d0:2a: 20:cb:04:e5:c3:44:11:77:34:98:5c:e4:9b:58:44: 07:bf:55:de:b3:34:a7:0c:14:91:2d:94:95:27:65: e7:ff:22:82:dd:3c:ba:86:c4:e9:b4:d5:df:bb:39: ae:cf:a7:33:7f:b4:25:d1:04:da:c7:88:ba:30:a6: df:a8:9f:6f:02:e5:5e:0f:59:61:79:e8:53:28:f4: ed:40:e9:f8:15:d2:12:ef:03:86:2d:70:63:e3:88: 9b:e2:a2:09:d2:46:d4:04:5f:9c:db:3c:f7:b5:ee: 63:84:5f:f5:ea:aa:9b:35:18:7b:58:ab:96:21:5a: a7:27:e8:eb:8f:a9:45:45:c8:30:6a:a8:6f:39:85: 34:b2:30:0c:05:ce:0d:37:5a:a5:78:7e:24:36:b0: 28:c9:1a:a1:4e:77:9b:e9:b4:79:2e:8b:d3:33:1d: 68:f2:6a:8d:a4:d5:ab:84:ee:33:c6:79:70:ec:c8: 7c:0f:7a:5a:b2:6d:64:fc:ee:6b:36:98:9f:c1:6d: a9:60:e2:fe:40:8f:fa:37:b8:1c:1d:0e:3e:05:5d: c7:46:32:73:f0:36:92:4b:16:14:3b:0a:b2:c2:6f: 5f:3f:a2:61:e5:17:aa:a7:90:17:9a:f3:47:5c:90: f6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B5:3B:80:33:4D:02:C2:56:F7:65:AB:8F:B6:37:06:EA:80:43:DF X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/GbU7gDNNAsJW92Wrj7Y3BuqAQ98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa01:ab10::/44 Signature Algorithm: sha256WithRSAEncryption ba:5a:92:f0:ea:d0:e6:0c:36:0e:ff:44:aa:d0:17:55:e3:ec: 0d:fe:8f:99:d3:0f:d3:3d:9e:fd:7f:03:6f:c0:94:c9:ea:01: 89:89:3a:ba:2f:6a:77:9b:ac:b8:3e:4c:0f:51:3f:e3:85:0e: 9f:6c:3c:af:3a:7d:a6:67:ce:c0:6a:25:2f:55:09:67:ba:a7: 51:09:08:5d:6a:a2:d2:54:a3:af:f3:c1:52:a5:8f:06:93:13: fb:bb:e9:b5:17:15:9f:47:4f:a8:a1:7e:c7:4d:60:61:30:07: ef:de:d2:86:b9:94:81:36:23:0d:dd:cb:2a:18:c7:c8:7a:bf: 9f:be:e2:f9:ab:c3:14:9a:97:69:79:cf:b6:92:40:42:73:9e: 96:4e:3e:02:30:11:ab:46:62:7f:5f:9e:15:5c:30:a4:36:07: ae:de:0b:09:65:75:cf:8d:ac:e9:91:00:be:57:e1:0c:22:44: df:93:0d:89:2c:51:11:52:2d:bc:80:5a:61:4f:c0:a8:7e:8f: 8a:b8:8f:d4:b4:cc:70:5d:72:f8:96:fe:8c:cb:32:08:11:d0: ec:f3:21:90:46:41:f4:a3:98:6b:af:04:a3:44:a2:4e:10:45: 39:19:17:6e:8a:50:51:1c:84:4f:6f:90:c1:47:f5:4b:42:66: 1f:31:56:68 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fq11r0wMpa9xv1ghtZYlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWI1M2I4MDMzNGQwMmMyNTZmNzY1YWI4ZmI2MzcwNmVhODA0M2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPO/+MXTJHzFOi/80CogywTlw0QR dzSYXOSbWEQHv1XeszSnDBSRLZSVJ2Xn/yKC3Ty6hsTptNXfuzmuz6czf7Ql0QTa x4i6MKbfqJ9vAuVeD1lheehTKPTtQOn4FdIS7wOGLXBj44ib4qIJ0kbUBF+c2zz3 te5jhF/16qqbNRh7WKuWIVqnJ+jrj6lFRcgwaqhvOYU0sjAMBc4NN1qleH4kNrAo yRqhTneb6bR5LovTMx1o8mqNpNWrhO4zxnlw7Mh8D3pasm1k/O5rNpifwW2pYOL+ QI/6N7gcHQ4+BV3HRjJz8DaSSxYUOwqywm9fP6Jh5Reqp5AXmvNHXJD2TwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBm1O4AzTQLCVvdlq4+2NwbqgEPfMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvR2JVN2dETk5Bc0pXOTJXcmo3WTNCdXFBUTk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qAasQ MA0GCSqGSIb3DQEBCwUAA4IBAQC6WpLw6tDmDDYO/0Sq0BdV4+wN/o+Z0w/TPZ79 fwNvwJTJ6gGJiTq6L2p3m6y4PkwPUT/jhQ6fbDyvOn2mZ87AaiUvVQlnuqdRCQhd aqLSVKOv88FSpY8GkxP7u+m1FxWfR0+ooX7HTWBhMAfv3tKGuZSBNiMN3csqGMfI er+fvuL5q8MUmpdpec+2kkBCc56WTj4CMBGrRmJ/X54VXDCkNgeu3gsJZXXPjazp kQC+V+EMIkTfkw2JLFERUi28gFphT8Cofo+KuI/UtMxwXXL4lv6MyzIIEdDs8yGQ RkH0o5hrrwSjRKJOEEU5GRduilBRHIRPb5DBR/VLQmYfMVZo -----END CERTIFICATE-----Generated at Tue Jan 6 21:32:10 2026 by rpki-client