This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/GyqUfMO0Omp9MapGvwm3OQxHuzY.roa File: GyqUfMO0Omp9MapGvwm3OQxHuzY.roa (raw, json) Hash identifier: eLOF15igrreolUrbJjNbYGfrAHmsABhFJ5BXUuXuCaI= Subject key identifier: 1B:2A:94:7C:C3:B4:3A:6A:7D:31:AA:46:BF:09:B7:39:0C:47:BB:36 Certificate issuer: /CN=8e556b52b8e4e709fa569b5ae372c6e28266f232 Certificate serial: 019B76EB9D62C5A67D323029A1AEDF7AEDED Authority key identifier: 8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/GyqUfMO0Omp9MapGvwm3OQxHuzY.roa Signing time: Thu 01 Jan 2026 00:18:31 +0000 ROA not before: Thu 01 Jan 2026 00:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48149 IP address blocks: 2001:678:1bc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.crl rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:9d:62:c5:a6:7d:32:30:29:a1:ae:df:7a:ed:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e556b52b8e4e709fa569b5ae372c6e28266f232 Validity Not Before: Jan 1 00:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b2a947cc3b43a6a7d31aa46bf09b7390c47bb36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f3:5d:09:d2:84:34:62:50:b5:98:5b:50:a5: 58:55:23:24:87:33:26:40:bc:c0:db:00:7b:fa:c1: e9:69:78:3c:fc:ac:e7:10:b3:2d:11:37:3f:21:8f: 13:9b:20:a2:98:49:7f:1d:23:3e:85:46:fd:a9:56: 79:39:ef:b1:dd:49:e3:7c:42:63:23:1a:40:8a:a4: 9a:f0:a9:5e:8a:56:5f:20:dd:b5:a2:2a:4a:08:b6: 3d:d2:e2:d5:ae:41:00:0f:cb:dd:80:f1:8e:5a:7a: 31:56:49:ad:a7:45:e3:4e:14:61:bb:31:b8:51:9b: 6b:67:ba:be:12:d8:a7:c8:d2:0a:a8:a6:61:03:ab: 21:3c:df:66:ca:51:cd:f6:e8:5a:82:98:9f:c5:d7: 18:80:86:9a:2e:a3:69:6f:7a:57:47:f4:c2:55:38: 43:be:cc:31:18:bf:eb:32:1e:57:a6:20:ff:0b:f0: a6:d0:89:0d:0a:a7:ef:f5:47:ed:e2:9b:1c:fe:11: 0b:82:42:99:97:f0:db:3e:94:56:04:7b:e2:37:05: c3:a1:93:e5:f0:81:35:cf:c8:4b:0e:74:a2:68:e1: 2a:08:f3:92:51:50:54:14:a7:59:16:e8:13:e9:96: 1b:a9:e2:ee:eb:8f:b9:f2:42:0c:81:12:cf:b0:5b: 9b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2A:94:7C:C3:B4:3A:6A:7D:31:AA:46:BF:09:B7:39:0C:47:BB:36 X509v3 Authority Key Identifier: keyid:8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/GyqUfMO0Omp9MapGvwm3OQxHuzY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:1bc::/48 Signature Algorithm: sha256WithRSAEncryption 65:31:2b:50:48:bf:7c:aa:8d:26:aa:a7:3d:68:3f:62:92:02: 51:42:14:8c:75:62:f0:9b:1d:83:a7:93:0a:76:41:95:90:5b: 3f:e8:ca:15:f3:33:4b:70:17:85:66:ad:59:f1:cd:0c:df:4d: 1a:db:85:e8:e5:d4:8e:78:64:b3:ea:4e:58:ba:a8:1c:dc:a9: 96:a6:5a:8d:55:a3:6f:7f:00:5f:c1:19:a6:d8:46:11:d1:0e: 97:fa:63:3d:59:2d:03:e1:30:39:b6:17:64:f0:43:78:da:94: f0:71:41:ac:f3:b9:43:55:cf:97:1e:9f:28:89:e9:05:d2:17: a0:c3:ac:a2:6f:5d:1a:d2:57:e2:f7:2a:fe:94:8d:a7:18:3b: b8:d0:c1:f0:55:a9:f9:43:00:6e:0d:c7:5d:e8:97:22:30:9c: 31:6d:fd:43:1e:59:2b:f1:37:16:49:67:8a:f0:1f:51:13:5b: 83:69:a8:54:e2:d0:35:95:ff:cc:6f:cb:95:23:0a:94:37:27: b8:ad:d6:83:e9:52:f3:96:57:ab:c4:a9:42:42:a5:66:5f:15: 39:2a:8b:ec:e1:b9:4b:78:bf:4a:88:09:98:98:b5:a7:f6:95: ff:20:23:94:22:d1:d5:42:46:86:42:a8:c6:c8:86:b4:32:a0: b9:67:06:f2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt2651ixaZ9MjApoa7feu3tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNTU2YjUyYjhlNGU3MDlmYTU2OWI1YWUzNzJjNmUyODI2 NmYyMzIwHhcNMjYwMTAxMDAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjJhOTQ3Y2MzYjQzYTZhN2QzMWFhNDZiZjA5YjczOTBjNDdiYjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPNdCdKENGJQtZhbUKVYVSMkhzMm QLzA2wB7+sHpaXg8/KznELMtETc/IY8TmyCimEl/HSM+hUb9qVZ5Oe+x3UnjfEJj IxpAiqSa8KleilZfIN21oipKCLY90uLVrkEAD8vdgPGOWnoxVkmtp0XjThRhuzG4 UZtrZ7q+EtinyNIKqKZhA6shPN9mylHN9uhagpifxdcYgIaaLqNpb3pXR/TCVThD vswxGL/rMh5XpiD/C/Cm0IkNCqfv9Uft4psc/hELgkKZl/DbPpRWBHviNwXDoZPl 8IE1z8hLDnSiaOEqCPOSUVBUFKdZFugT6ZYbqeLu64+58kIMgRLPsFubNQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBsqlHzDtDpqfTGqRr8JtzkMR7s2MB8GA1UdIwQY MBaAFI5Va1K45OcJ+labWuNyxuKCZvIyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamxWclVyams1d242VnB0YTQzTEc0b0ptOGpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84OGYyYTUtMjdlOC00NjcxLWE4ZDMt Y2RlNzAyYzBlYzhiLzEvR3lxVWZNTzBPbXA5TWFwR3Z3bTNPUXhIdXpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi84OGYyYTUtMjdlOC00NjcxLWE4ZDMtY2RlNzAyYzBlYzhi LzEvamxWclVyams1d242VnB0YTQzTEc0b0ptOGpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAG8 MA0GCSqGSIb3DQEBCwUAA4IBAQBlMStQSL98qo0mqqc9aD9ikgJRQhSMdWLwmx2D p5MKdkGVkFs/6MoV8zNLcBeFZq1Z8c0M300a24Xo5dSOeGSz6k5Yuqgc3KmWplqN VaNvfwBfwRmm2EYR0Q6X+mM9WS0D4TA5thdk8EN42pTwcUGs87lDVc+XHp8oiekF 0hegw6yib10a0lfi9yr+lI2nGDu40MHwVan5QwBuDcdd6JciMJwxbf1DHlkr8TcW SWeK8B9RE1uDaahU4tA1lf/Mb8uVIwqUNye4rdaD6VLzllerxKlCQqVmXxU5Kovs 4blLeL9KiAmYmLWn9pX/ICOUItHVQkaGQqjGyIa0MqC5Zwby -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:30 2026 by rpki-client