This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ghGcgCTYiu8KZEE29sAMc3oXHZ4.roa File: ghGcgCTYiu8KZEE29sAMc3oXHZ4.roa (raw, json) Hash identifier: 8sZKHKmyMR4GIeyFX1/7XRED0FesNWrYtt5sZRFkfoo= Subject key identifier: 82:11:9C:80:24:D8:8A:EF:0A:64:41:36:F6:C0:0C:73:7A:17:1D:9E Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EB1D183BFC4626D05630D3A47BC08 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ghGcgCTYiu8KZEE29sAMc3oXHZ4.roa Signing time: Thu 01 Jan 2026 12:18:24 +0000 ROA not before: Thu 01 Jan 2026 12:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209391 IP address blocks: 2a0e:aa07:e031::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b1:d1:83:bf:c4:62:6d:05:63:0d:3a:47:bc:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82119c8024d88aef0a644136f6c00c737a171d9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:70:76:91:bd:8b:72:40:41:5c:c4:b4:19:0a: 6e:8e:95:9e:46:28:7f:36:1a:2e:8c:31:5e:f1:2e: f6:09:15:7a:4e:15:a1:3b:e0:3d:4b:d2:36:c9:83: c0:23:47:eb:e5:32:b6:70:91:de:34:ee:ce:fa:45: 74:be:99:1b:2c:64:78:79:46:b2:f5:09:13:a8:af: ab:c4:74:7e:cf:9e:42:f5:0b:2b:05:0a:6a:3d:ed: 1d:ca:a6:6e:ee:a0:c9:91:9b:e4:c0:3a:1d:2e:d0: 25:1a:21:0d:96:70:8d:99:25:bf:92:30:5f:d5:a2: 87:4f:31:37:dd:ef:64:ef:b7:58:db:11:d4:5e:e4: 72:85:c1:82:d5:5d:52:4c:56:06:18:a6:73:30:95: 11:2c:a9:13:07:2b:af:9e:8d:42:c1:c2:1a:55:5e: 21:f3:54:fc:a4:c1:ac:eb:10:3c:7b:94:2b:5f:0c: a9:28:f5:c7:fb:ec:d7:1f:2f:d1:d1:92:58:e2:3b: 27:d8:11:0c:3b:ba:9e:49:8b:2d:57:cd:85:af:cc: 63:2c:b4:c9:9e:16:03:ad:2e:a7:4f:a7:6d:cd:d3: e4:27:70:f0:35:40:44:08:7a:5c:71:18:0b:ae:9f: d4:2b:b7:68:e4:8b:a1:4e:db:db:a3:90:ca:79:54: b1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:11:9C:80:24:D8:8A:EF:0A:64:41:36:F6:C0:0C:73:7A:17:1D:9E X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ghGcgCTYiu8KZEE29sAMc3oXHZ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e031::/48 Signature Algorithm: sha256WithRSAEncryption ba:e0:cf:81:ec:db:1b:e2:0e:65:45:ac:b2:04:8d:20:95:c8: c7:22:9e:b8:55:18:25:b8:41:d3:9e:f0:72:9a:3a:d3:df:61: d0:c9:a3:26:d0:48:04:8d:14:0f:2b:6b:f1:6e:64:6f:9d:07: d1:bb:64:a1:4f:f9:84:81:53:d0:35:b2:c0:79:4a:9e:09:ca: 01:dd:03:d4:80:dc:a4:ab:f1:9d:32:f3:2f:66:db:62:9f:84: 72:7d:5d:8f:92:50:87:22:ee:f1:79:39:ac:10:8f:d5:e2:fe: 11:54:25:f9:5d:7f:13:3c:07:f9:2a:0e:38:14:27:8e:0b:08: 6b:5c:81:ab:98:77:2e:09:d7:e3:68:19:8e:78:99:8d:5b:04: 7c:87:ba:83:94:78:7b:91:31:7c:17:ec:56:ad:b9:af:89:c2: f9:d5:de:5c:96:83:12:ac:7f:ae:32:4f:a6:09:02:29:b5:a1: cc:00:9e:7c:ac:11:89:3c:a9:0c:47:c7:9e:3e:fd:27:a0:d7: 6e:a5:2b:af:24:ba:89:94:4a:e9:37:10:9e:e1:26:58:cd:1e: be:c9:eb:f0:d4:0d:e0:07:21:24:05:84:b1:05:94:3a:b3:38: e6:7e:fc:eb:11:f2:ba:be:60:e5:b7:d7:74:25:f5:a4:a3:f9: 0c:fe:31:f4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5frHRg7/EYm0FYw06R7wIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjExOWM4MDI0ZDg4YWVmMGE2NDQxMzZmNmMwMGM3MzdhMTcxZDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9HB2kb2LckBBXMS0GQpujpWeRih/ NhoujDFe8S72CRV6ThWhO+A9S9I2yYPAI0fr5TK2cJHeNO7O+kV0vpkbLGR4eUay 9QkTqK+rxHR+z55C9QsrBQpqPe0dyqZu7qDJkZvkwDodLtAlGiENlnCNmSW/kjBf 1aKHTzE33e9k77dY2xHUXuRyhcGC1V1STFYGGKZzMJURLKkTByuvno1CwcIaVV4h 81T8pMGs6xA8e5QrXwypKPXH++zXHy/R0ZJY4jsn2BEMO7qeSYstV82Fr8xjLLTJ nhYDrS6nT6dtzdPkJ3DwNUBECHpccRgLrp/UK7do5IuhTtvbo5DKeVSxfQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIIRnIAk2IrvCmRBNvbADHN6Fx2eMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvZ2hHY2dDVFlpdThLWkVFMjlzQU1jM29YSFo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+Ax MA0GCSqGSIb3DQEBCwUAA4IBAQC64M+B7Nsb4g5lRayyBI0glcjHIp64VRgluEHT nvBymjrT32HQyaMm0EgEjRQPK2vxbmRvnQfRu2ShT/mEgVPQNbLAeUqeCcoB3QPU gNykq/GdMvMvZttin4RyfV2PklCHIu7xeTmsEI/V4v4RVCX5XX8TPAf5Kg44FCeO CwhrXIGrmHcuCdfjaBmOeJmNWwR8h7qDlHh7kTF8F+xWrbmvicL51d5cloMSrH+u Mk+mCQIptaHMAJ58rBGJPKkMR8eePv0noNdupSuvJLqJlErpNxCe4SZYzR6+yevw 1A3gByEkBYSxBZQ6szjmfvzrEfK6vmDlt9d0JfWko/kM/jH0 -----END CERTIFICATE-----Generated at Tue Jan 6 21:30:59 2026 by rpki-client