This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/G8JA-ggiNrSizOdXAcWG0Z-rkCA.roa File: G8JA-ggiNrSizOdXAcWG0Z-rkCA.roa (raw, json) Hash identifier: BoZMKbe2gNt+SThHadDDP1VDOAUZvl65eWh4BEsCrsw= Subject key identifier: 1B:C2:40:FA:08:22:36:B4:A2:CC:E7:57:01:C5:86:D1:9F:AB:90:20 Certificate issuer: /CN=d66df7599e243b462864126a8c241078a2e2b045 Certificate serial: 019B09F9E136ECC6ABB6937B6878A4383E86 Authority key identifier: D6:6D:F7:59:9E:24:3B:46:28:64:12:6A:8C:24:10:78:A2:E2:B0:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m33WZ4kO0YoZBJqjCQQeKLisEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/G8JA-ggiNrSizOdXAcWG0Z-rkCA.roa Signing time: Wed 10 Dec 2025 20:35:29 +0000 ROA not before: Wed 10 Dec 2025 20:35:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209539 IP address blocks: 2a07:3580:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.crl rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.mft rsync://rpki.ripe.net/repository/DEFAULT/1m33WZ4kO0YoZBJqjCQQeKLisEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:09:f9:e1:36:ec:c6:ab:b6:93:7b:68:78:a4:38:3e:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d66df7599e243b462864126a8c241078a2e2b045 Validity Not Before: Dec 10 20:35:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1bc240fa082236b4a2cce75701c586d19fab9020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9e:31:54:2c:cf:87:cd:a4:b3:69:1f:2f:c1: f5:07:3b:d9:ee:43:b8:6d:05:b6:80:02:db:02:54: 0d:92:bd:db:fd:58:85:64:f2:8b:d4:80:15:ff:4d: 31:96:a0:5e:94:75:dd:48:e0:c9:d2:f3:3b:9c:e7: 14:2f:04:c0:6f:0a:ac:68:a1:c1:51:a5:5f:5d:ee: 4d:f4:2b:0a:de:97:bd:f0:e1:06:52:5f:71:16:f5: 2a:95:79:b4:9b:3a:e5:74:8f:0a:59:73:a2:5a:e6: d6:c8:3f:bd:63:a2:a1:77:b6:28:b1:6d:35:30:c3: 4d:bb:fb:bf:47:fe:18:5b:bf:c3:d0:bd:46:17:ae: f6:5b:fc:da:bc:38:b1:65:13:54:e3:16:0b:f9:cf: 67:23:5a:32:ac:f5:55:30:e6:20:81:42:2c:91:51: ab:08:34:76:87:b2:c5:5e:c9:19:b4:aa:d4:08:79: 96:78:de:50:a2:7d:2d:8d:ec:b7:88:3b:6a:a4:f8: 8b:a0:c5:eb:6b:a4:df:d0:b6:c5:56:de:8c:1e:a0: 0e:7c:a1:ab:56:c1:f2:c0:e6:23:d9:89:c8:63:3e: 81:dd:fa:be:6f:e4:9b:19:1a:12:4d:32:0f:f2:3d: 7c:e4:a1:1e:47:a4:8a:84:14:c9:7e:5f:7e:2c:80: d1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C2:40:FA:08:22:36:B4:A2:CC:E7:57:01:C5:86:D1:9F:AB:90:20 X509v3 Authority Key Identifier: keyid:D6:6D:F7:59:9E:24:3B:46:28:64:12:6A:8C:24:10:78:A2:E2:B0:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m33WZ4kO0YoZBJqjCQQeKLisEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/G8JA-ggiNrSizOdXAcWG0Z-rkCA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:3580:11::/48 Signature Algorithm: sha256WithRSAEncryption 48:aa:b3:de:21:1e:20:4c:fe:d6:86:6e:00:f1:89:e1:fc:1c: d3:17:41:fc:50:9d:52:35:27:68:34:e9:6b:f0:92:0e:31:50: 64:d2:58:e7:51:e6:5e:26:7f:89:6d:40:c1:38:8e:03:57:91: c6:45:66:8b:b0:dd:16:ab:03:50:f1:01:94:12:5d:be:b0:62: 9a:3f:c1:fa:e8:a6:9a:11:22:79:81:c5:e1:32:91:7d:23:46: b3:f7:3a:63:ff:21:e6:e6:fe:4b:62:d8:42:7f:06:4d:85:11: e1:24:85:a7:12:82:f3:13:45:7e:8f:ce:f5:43:c0:12:22:a6: 50:e3:5d:c6:d7:fd:16:3d:da:e7:13:6c:dc:76:7f:fe:7e:79: 70:ee:28:e5:68:6a:75:aa:c6:92:f4:2b:d3:2c:1c:d0:d3:41: 2c:d9:3e:e1:7f:54:ea:89:cb:bb:2c:eb:21:80:53:82:86:8b: 7b:da:6d:9a:dc:9d:70:fa:c0:e4:5d:d7:c0:7a:64:d2:2e:88: 7e:f8:00:56:28:cc:60:f9:4a:35:71:ce:08:21:0f:e8:db:aa: e7:2c:90:6e:96:b1:8c:50:a0:be:93:fc:3a:7c:93:f1:a9:a0: 43:94:90:60:54:55:a4:5f:79:73:80:3a:52:0d:3a:c9:ee:dc: 5c:81:e3:cc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZsJ+eE27MartpN7aHikOD6GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NmRmNzU5OWUyNDNiNDYyODY0MTI2YThjMjQxMDc4YTJl MmIwNDUwHhcNMjUxMjEwMjAzNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmMyNDBmYTA4MjIzNmI0YTJjY2U3NTcwMWM1ODZkMTlmYWI5MDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp4xVCzPh82ks2kfL8H1BzvZ7kO4 bQW2gALbAlQNkr3b/ViFZPKL1IAV/00xlqBelHXdSODJ0vM7nOcULwTAbwqsaKHB UaVfXe5N9CsK3pe98OEGUl9xFvUqlXm0mzrldI8KWXOiWubWyD+9Y6Khd7YosW01 MMNNu/u/R/4YW7/D0L1GF672W/zavDixZRNU4xYL+c9nI1oyrPVVMOYggUIskVGr CDR2h7LFXskZtKrUCHmWeN5Qon0tjey3iDtqpPiLoMXra6Tf0LbFVt6MHqAOfKGr VsHywOYj2YnIYz6B3fq+b+SbGRoSTTIP8j185KEeR6SKhBTJfl9+LIDRKwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBvCQPoIIja0osznVwHFhtGfq5AgMB8GA1UdIwQY MBaAFNZt91meJDtGKGQSaowkEHii4rBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW0zM1daNGtPMFlvWkJKcWpDUVFlS0xpc0VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84MDM1ZTItMWYyMC00N2U3LWFkNjQt MDcxNDM3NjVmZmZlLzEvRzhKQS1nZ2lOclNpek9kWEFjV0cwWi1ya0NBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS84MDM1ZTItMWYyMC00N2U3LWFkNjQtMDcxNDM3NjVmZmZl LzEvMW0zM1daNGtPMFlvWkJKcWpDUVFlS0xpc0VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgc1gAAR MA0GCSqGSIb3DQEBCwUAA4IBAQBIqrPeIR4gTP7Whm4A8Ynh/BzTF0H8UJ1SNSdo NOlr8JIOMVBk0ljnUeZeJn+JbUDBOI4DV5HGRWaLsN0WqwNQ8QGUEl2+sGKaP8H6 6KaaESJ5gcXhMpF9I0az9zpj/yHm5v5LYthCfwZNhRHhJIWnEoLzE0V+j871Q8AS IqZQ413G1/0WPdrnE2zcdn/+fnlw7ijlaGp1qsaS9CvTLBzQ00Es2T7hf1Tqicu7 LOshgFOChot72m2a3J1w+sDkXdfAemTSLoh++ABWKMxg+Uo1cc4IIQ/o26rnLJBu lrGMUKC+k/w6fJPxqaBDlJBgVFWkX3lzgDpSDTrJ7txcgePM -----END CERTIFICATE-----Generated at Fri Dec 26 17:24:50 2025 by rpki-client