This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/gv1ky8ZxTFush3i_FGJUh4XqMGo.roa File: gv1ky8ZxTFush3i_FGJUh4XqMGo.roa (raw, json) Hash identifier: G5Fcf0W4EHdGyoNfqRUGdJnCSL6R2FkHVSNjIkW8KP4= Subject key identifier: 82:FD:64:CB:C6:71:4C:5B:AC:87:78:BF:14:62:54:87:85:EA:30:6A Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910A5110373CF1209CC945B694AC0E0 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/gv1ky8ZxTFush3i_FGJUh4XqMGo.roa Signing time: Thu 01 Jan 2026 10:18:12 +0000 ROA not before: Thu 01 Jan 2026 10:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209414 IP address blocks: 2a12:bec4:19d0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a5:11:03:73:cf:12:09:cc:94:5b:69:4a:c0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82fd64cbc6714c5bac8778bf1462548785ea306a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:02:da:96:11:e6:7d:3b:fa:c8:4c:43:97:f1: 21:34:6f:89:4a:c0:88:be:42:ab:71:79:0b:1b:c2: ea:0e:c6:5d:50:7f:9f:4a:19:11:aa:10:c2:49:b1: 60:88:24:cf:61:a1:64:47:ef:ee:19:4e:0a:95:3d: 38:84:96:69:3d:ac:3f:31:1d:14:db:cc:0d:cd:3c: b0:8a:76:93:51:bd:97:81:cb:f5:14:70:b4:d1:4f: ef:49:9e:9c:c4:d4:00:84:1b:52:9a:53:c7:f9:47: ed:9a:c6:72:77:33:55:9c:3f:70:28:d0:67:22:53: 08:c3:5b:3b:09:9d:cd:ae:a5:ef:3f:83:16:fc:1b: a7:95:ce:c0:cb:b8:89:ce:58:89:86:8f:03:18:ea: 68:84:81:6e:74:1c:6a:7b:00:30:e8:b2:08:19:0e: 4a:df:94:88:c6:bb:3b:38:56:b8:f9:d5:f1:3a:12: 2e:a0:0a:85:0f:84:62:0d:5b:41:11:70:e4:b6:96: e9:7b:d7:71:8a:66:5d:85:1a:96:08:2f:66:3e:b2: 44:26:c5:46:e0:77:70:08:00:90:20:11:08:41:a8: 2f:ce:94:22:a1:a0:50:0d:97:e0:8f:e5:82:af:ef: 8e:b2:66:1b:1c:5f:a9:89:fa:2b:26:dc:b6:13:5a: 12:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FD:64:CB:C6:71:4C:5B:AC:87:78:BF:14:62:54:87:85:EA:30:6A X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/gv1ky8ZxTFush3i_FGJUh4XqMGo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:19d0::/44 Signature Algorithm: sha256WithRSAEncryption c3:21:b8:c1:06:57:0c:1f:02:3d:53:10:11:2a:c0:48:ea:ee: 69:fb:3a:ce:5c:da:d7:c0:ec:1e:6e:d4:fe:c9:be:a4:e2:92: d7:69:5f:ba:44:ab:a7:0b:33:27:44:e6:ab:18:16:dc:a3:c7: 91:56:eb:5d:2f:a0:53:29:cc:f1:bb:a3:8b:fc:e5:24:7e:80: 72:06:70:a0:5b:b8:08:c8:9b:10:65:14:85:5e:6d:98:54:d6: 5c:30:86:0d:aa:e4:42:e7:bb:72:96:af:eb:d1:e1:a7:56:c3: 2f:ce:28:e9:08:a6:c3:f1:84:85:75:24:d8:4a:26:9a:f1:e3: 67:1c:25:d2:9c:89:68:e6:b6:be:29:ea:c5:aa:ed:b8:0b:3d: f0:46:ff:bd:7f:c7:db:13:be:82:2a:46:db:6c:8b:06:2c:64: c2:90:4e:bb:a5:ce:09:c1:27:96:ba:50:7c:e9:7b:82:f3:47: 23:16:82:7d:d2:a9:5c:7a:3a:dd:e5:8d:67:1b:d8:ec:ea:3e: 6e:40:d9:08:19:0f:ba:00:32:ed:76:33:cd:a2:24:7d:76:d5: 73:9e:a4:ad:74:f0:b2:5b:51:58:a5:58:d3:50:c1:57:d3:15: 3b:db:a2:b3:af:87:75:7e:6e:09:a8:66:3f:28:8a:d7:b8:ab: 29:4f:a2:7b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EKURA3PPEgnMlFtpSsDgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmZkNjRjYmM2NzE0YzViYWM4Nzc4YmYxNDYyNTQ4Nzg1ZWEzMDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsALalhHmfTv6yExDl/EhNG+JSsCI vkKrcXkLG8LqDsZdUH+fShkRqhDCSbFgiCTPYaFkR+/uGU4KlT04hJZpPaw/MR0U 28wNzTywinaTUb2Xgcv1FHC00U/vSZ6cxNQAhBtSmlPH+UftmsZydzNVnD9wKNBn IlMIw1s7CZ3NrqXvP4MW/Bunlc7Ay7iJzliJho8DGOpohIFudBxqewAw6LIIGQ5K 35SIxrs7OFa4+dXxOhIuoAqFD4RiDVtBEXDktpbpe9dximZdhRqWCC9mPrJEJsVG 4HdwCACQIBEIQagvzpQioaBQDZfgj+WCr++OsmYbHF+piforJty2E1oSOwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIL9ZMvGcUxbrId4vxRiVIeF6jBqMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvZ3Yxa3k4WnhURnVzaDNpX0ZHSlVoNFhxTUdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+xBnQ MA0GCSqGSIb3DQEBCwUAA4IBAQDDIbjBBlcMHwI9UxARKsBI6u5p+zrOXNrXwOwe btT+yb6k4pLXaV+6RKunCzMnROarGBbco8eRVutdL6BTKczxu6OL/OUkfoByBnCg W7gIyJsQZRSFXm2YVNZcMIYNquRC57tylq/r0eGnVsMvzijpCKbD8YSFdSTYSiaa 8eNnHCXSnIlo5ra+KerFqu24Cz3wRv+9f8fbE76CKkbbbIsGLGTCkE67pc4JwSeW ulB86XuC80cjFoJ90qlcejrd5Y1nG9js6j5uQNkIGQ+6ADLtdjPNoiR9dtVznqSt dPCyW1FYpVjTUMFX0xU726Kzr4d1fm4JqGY/KIrXuKspT6J7 -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:59 2026 by rpki-client