This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/GewGtFJxLuOQFxyuDd0bsQGd5-Q.roa File: GewGtFJxLuOQFxyuDd0bsQGd5-Q.roa (raw, json) Hash identifier: 16Wv7Gf3pu0lOd8EBIdDsq9yVMp3UNzck1o0pQUhay0= Subject key identifier: 19:EC:06:B4:52:71:2E:E3:90:17:1C:AE:0D:DD:1B:B1:01:9D:E7:E4 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910CAFFB10FA14206564532B39FDA0D Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/GewGtFJxLuOQFxyuDd0bsQGd5-Q.roa Signing time: Thu 01 Jan 2026 10:18:22 +0000 ROA not before: Thu 01 Jan 2026 10:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216382 IP address blocks: 2a12:bec4:12a3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ca:ff:b1:0f:a1:42:06:56:45:32:b3:9f:da:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19ec06b452712ee390171cae0ddd1bb1019de7e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:24:5a:5f:d8:20:9e:2d:27:92:d0:52:20:97: 3a:38:b4:9e:02:c7:1d:7e:12:6f:32:0b:46:52:46: ca:d0:a9:50:28:f4:f8:b1:70:31:0d:e7:05:c4:c9: b4:cd:56:52:91:4e:4f:51:7e:c2:2a:7b:2a:4e:fa: 47:2c:07:98:25:45:f8:26:c1:96:00:d9:f2:d0:0d: 8c:44:7b:da:58:60:fc:c8:08:fb:09:87:89:16:ee: a6:23:30:33:0c:8c:77:ab:5d:74:51:1a:5d:eb:e2: 21:10:0d:eb:3e:22:47:02:f1:69:8a:84:af:44:1f: 46:b6:f0:aa:d5:3b:65:c9:46:85:59:ec:36:ea:19: 49:ea:ef:67:8a:76:c5:b0:50:4e:77:b3:a7:33:b4: ea:9f:9e:51:3c:04:b4:06:7c:a9:5a:04:0e:14:5c: 12:43:65:5f:3f:d7:dd:39:dd:36:0a:84:a2:f4:70: 0d:86:05:d8:e6:3d:6c:8c:0e:07:8f:e1:3c:63:ba: 23:bd:bf:c7:65:25:8b:3f:51:86:b1:4e:5b:16:19: 28:0c:16:f1:6b:a1:c2:bf:3d:c3:0a:4f:0f:63:77: f6:d1:4b:b6:62:af:75:ef:61:35:12:da:d1:c5:a5: 1b:58:6f:e9:d7:e0:44:9c:aa:11:f4:bf:37:0a:7d: 67:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:EC:06:B4:52:71:2E:E3:90:17:1C:AE:0D:DD:1B:B1:01:9D:E7:E4 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/GewGtFJxLuOQFxyuDd0bsQGd5-Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:12a3::/48 Signature Algorithm: sha256WithRSAEncryption 8d:26:63:7a:47:e6:ab:b3:b0:ca:b1:ac:be:4f:a7:dc:3b:1b: 9b:14:c3:0a:10:ea:41:8e:8e:8e:da:0b:7c:a8:25:5f:ae:67: e0:ea:cb:9c:e1:26:e7:b0:b7:b0:c8:d8:45:45:35:b2:51:8a: 0a:94:7a:c3:7c:35:24:20:39:e4:3b:78:bc:55:1c:d1:38:dc: 0b:39:6d:0a:05:bb:8a:3f:25:a1:a9:5d:14:f3:96:72:42:de: d4:42:f1:16:69:17:26:1e:96:4b:4d:17:11:56:18:c0:d8:a6: 23:82:06:3a:79:a7:2b:68:a7:c1:0e:91:4c:38:ce:80:ec:e5: fa:a8:29:dd:52:47:aa:07:63:81:34:d5:37:ea:d1:51:18:ad: 2a:e7:ff:8a:52:6c:2f:b8:db:f5:ec:50:f2:5d:fc:88:b0:a7: 3f:2b:5e:bb:63:5e:40:21:a5:18:c0:bf:c2:0f:f0:2b:f7:94: 81:94:a3:6e:da:7e:c4:f2:a6:c4:98:d5:7e:8e:11:25:91:c4: 81:51:cf:69:34:2f:80:97:90:29:99:09:be:53:92:63:0e:e4: e4:5f:8f:21:ed:20:fc:82:66:7b:db:5f:bf:8e:dd:a8:da:4c: 81:4e:00:9c:85:fc:f4:4f:6e:3c:f1:4d:78:0a:a7:9e:f0:db: b5:d0:34:b5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EMr/sQ+hQgZWRTKzn9oNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWVjMDZiNDUyNzEyZWUzOTAxNzFjYWUwZGRkMWJiMTAxOWRlN2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SRaX9ggni0nktBSIJc6OLSeAscd fhJvMgtGUkbK0KlQKPT4sXAxDecFxMm0zVZSkU5PUX7CKnsqTvpHLAeYJUX4JsGW ANny0A2MRHvaWGD8yAj7CYeJFu6mIzAzDIx3q110URpd6+IhEA3rPiJHAvFpioSv RB9GtvCq1TtlyUaFWew26hlJ6u9ninbFsFBOd7OnM7Tqn55RPAS0BnypWgQOFFwS Q2VfP9fdOd02CoSi9HANhgXY5j1sjA4Hj+E8Y7ojvb/HZSWLP1GGsU5bFhkoDBbx a6HCvz3DCk8PY3f20Uu2Yq9172E1EtrRxaUbWG/p1+BEnKoR9L83Cn1nFwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBnsBrRScS7jkBccrg3dG7EBnefkMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvR2V3R3RGSnhMdU9RRnh5dURkMGJzUUdkNS1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhK+xBKj MA0GCSqGSIb3DQEBCwUAA4IBAQCNJmN6R+ars7DKsay+T6fcOxubFMMKEOpBjo6O 2gt8qCVfrmfg6suc4SbnsLewyNhFRTWyUYoKlHrDfDUkIDnkO3i8VRzRONwLOW0K BbuKPyWhqV0U85ZyQt7UQvEWaRcmHpZLTRcRVhjA2KYjggY6eacraKfBDpFMOM6A 7OX6qCndUkeqB2OBNNU36tFRGK0q5/+KUmwvuNv17FDyXfyIsKc/K167Y15AIaUY wL/CD/Ar95SBlKNu2n7E8qbEmNV+jhElkcSBUc9pNC+Al5ApmQm+U5JjDuTkX48h 7SD8gmZ721+/jt2o2kyBTgCchfz0T2488U14Cqee8Nu10DS1 -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:03 2026 by rpki-client