This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/GwUxqLp7veOnLj5C0ToDH9XcEOU.roa File: GwUxqLp7veOnLj5C0ToDH9XcEOU.roa (raw, json) Hash identifier: Vk5TGvgcQ5peQCvTDQAa3KaRhQpWAtydLVPQikLqmso= Subject key identifier: 1B:05:31:A8:BA:7B:BD:E3:A7:2E:3E:42:D1:3A:03:1F:D5:DC:10:E5 Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EB4778BD9502429CF577450A2C134 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/GwUxqLp7veOnLj5C0ToDH9XcEOU.roa Signing time: Thu 01 Jan 2026 12:18:25 +0000 ROA not before: Thu 01 Jan 2026 12:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210903 IP address blocks: 2a0e:aa07:e025::/48 maxlen: 48 2a0e:aa07:e200::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b4:77:8b:d9:50:24:29:cf:57:74:50:a2:c1:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b0531a8ba7bbde3a72e3e42d13a031fd5dc10e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5c:e6:fd:cf:e9:0a:7b:83:5e:f7:6e:36:81: 97:a1:50:64:0a:29:af:be:66:58:9a:c3:4c:5c:93: 83:a5:d0:f7:03:d4:37:bf:ed:bc:6b:b5:cf:c7:12: 04:1e:19:13:48:f6:79:d4:0a:35:55:4d:3d:f6:36: 0e:7a:be:1e:53:19:9c:ff:81:15:06:cd:00:8f:82: 43:4e:42:b3:48:9e:72:dd:90:82:92:0f:d4:81:11: 95:3f:03:fe:15:e6:2b:5e:a3:fd:ee:f3:19:d7:0f: 7b:71:c9:a5:98:3b:b5:65:b0:60:2f:d6:3a:fd:be: e2:5d:be:12:8a:21:de:4c:80:c7:81:cc:cf:4b:b5: 7c:d8:71:5f:74:38:17:8e:88:c2:6a:e6:bd:29:a3: a4:0b:4b:62:38:70:1d:38:51:9b:be:af:da:bb:49: 69:23:ff:05:9d:b3:6b:a2:d1:4c:9e:72:f0:b5:24: b3:d5:78:fb:cc:b8:86:f9:24:86:96:74:03:b8:0c: fc:65:33:4c:0b:4a:e5:c7:d4:68:08:46:21:98:1e: 1a:91:b0:c7:9b:60:86:ed:fb:83:fd:d9:0a:9c:95: bf:42:7a:56:ee:74:f9:fc:07:4a:90:95:ea:d3:f9: 54:96:ba:f3:ad:b5:1e:2d:47:7b:ed:8e:3b:79:f8: 6b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:05:31:A8:BA:7B:BD:E3:A7:2E:3E:42:D1:3A:03:1F:D5:DC:10:E5 X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/GwUxqLp7veOnLj5C0ToDH9XcEOU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e025::/48 2a0e:aa07:e200::/44 Signature Algorithm: sha256WithRSAEncryption 61:70:c5:b5:db:9b:15:da:f0:a2:96:6f:ea:e8:b5:9e:2f:94: f7:f5:32:e9:94:d9:f4:71:dc:2c:d4:3d:1c:81:ca:fe:14:db: 7d:dd:7c:6a:32:cd:f1:bd:ff:88:cd:5b:ae:78:93:e3:eb:c7: 7c:ce:7b:ca:a8:5e:b4:6b:8e:18:a5:9c:c4:e6:d7:23:71:36: c3:8c:f1:51:54:0c:52:72:99:92:49:ae:38:40:0e:ae:15:e4: 3b:ee:59:6c:bc:20:bf:9a:d9:01:03:09:77:59:5e:a4:1d:7d: 36:27:da:ee:ee:dc:62:f2:58:01:9b:54:a4:99:0f:74:77:24: 99:e8:6d:fa:be:65:10:60:8b:5d:c1:ff:5b:b5:0e:ab:da:4b: 76:ad:6a:79:e6:de:9f:23:96:71:66:b2:bd:0d:ef:e4:cf:c3: 66:08:84:12:8f:36:03:0b:07:ea:6a:8d:fd:47:37:27:26:40: 92:8c:09:8e:73:d1:90:ab:be:8b:3d:f9:a4:ea:b9:2e:37:31: 0d:ba:aa:0c:9b:a6:ab:46:97:24:50:32:f3:36:ad:0f:6d:32: 07:d9:b1:e6:78:1a:a2:0c:cd:69:ba:0d:10:af:cf:9c:d5:00: 1a:27:38:60:69:c1:04:b9:10:2f:43:63:1d:84:e6:e2:3d:bf: 69:9b:e2:66 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5frR3i9lQJCnPV3RQosE0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjA1MzFhOGJhN2JiZGUzYTcyZTNlNDJkMTNhMDMxZmQ1ZGMxMGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21zm/c/pCnuDXvduNoGXoVBkCimv vmZYmsNMXJODpdD3A9Q3v+28a7XPxxIEHhkTSPZ51Ao1VU099jYOer4eUxmc/4EV Bs0Aj4JDTkKzSJ5y3ZCCkg/UgRGVPwP+FeYrXqP97vMZ1w97ccmlmDu1ZbBgL9Y6 /b7iXb4SiiHeTIDHgczPS7V82HFfdDgXjojCaua9KaOkC0tiOHAdOFGbvq/au0lp I/8FnbNrotFMnnLwtSSz1Xj7zLiG+SSGlnQDuAz8ZTNMC0rlx9RoCEYhmB4akbDH m2CG7fuD/dkKnJW/QnpW7nT5/AdKkJXq0/lUlrrzrbUeLUd77Y47efhriwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBsFMai6e73jpy4+QtE6Ax/V3BDlMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvR3dVeHFMcDd2ZU9uTGo1QzBUb0RIOVhjRU9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg6qB+Al AwcEKg6qB+IAMA0GCSqGSIb3DQEBCwUAA4IBAQBhcMW125sV2vCilm/q6LWeL5T3 9TLplNn0cdws1D0cgcr+FNt93XxqMs3xvf+IzVuueJPj68d8znvKqF60a44YpZzE 5tcjcTbDjPFRVAxScpmSSa44QA6uFeQ77llsvCC/mtkBAwl3WV6kHX02J9ru7txi 8lgBm1SkmQ90dySZ6G36vmUQYItdwf9btQ6r2kt2rWp55t6fI5ZxZrK9De/kz8Nm CIQSjzYDCwfqao39RzcnJkCSjAmOc9GQq76LPfmk6rkuNzENuqoMm6arRpckUDLz Nq0PbTIH2bHmeBqiDM1pug0Qr8+c1QAaJzhgacEEuRAvQ2MdhObiPb9pm+Jm -----END CERTIFICATE-----Generated at Tue Jan 6 21:31:19 2026 by rpki-client