This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/gs8em47DaB3LrlDmXLkgpxaB21Q.roa File: gs8em47DaB3LrlDmXLkgpxaB21Q.roa (raw, json) Hash identifier: cb+0Kb2KZEjJwHjkLW7WFeSKNJZu/ACiHcXkWiE0wNU= Subject key identifier: 82:CF:1E:9B:8E:C3:68:1D:CB:AE:50:E6:5C:B9:20:A7:16:81:DB:54 Certificate issuer: /CN=72ebf817e1a92f3cd7f49df6a31c265ffe478008 Certificate serial: 019B7758C66085C119B99F75A8ACB328BB43 Authority key identifier: 72:EB:F8:17:E1:A9:2F:3C:D7:F4:9D:F6:A3:1C:26:5F:FE:47:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/gs8em47DaB3LrlDmXLkgpxaB21Q.roa Signing time: Thu 01 Jan 2026 02:17:45 +0000 ROA not before: Thu 01 Jan 2026 02:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 2a05:7640:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c6:60:85:c1:19:b9:9f:75:a8:ac:b3:28:bb:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ebf817e1a92f3cd7f49df6a31c265ffe478008 Validity Not Before: Jan 1 02:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82cf1e9b8ec3681dcbae50e65cb920a71681db54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d1:25:22:95:c1:51:8d:fe:86:57:01:8c:d1: b9:75:8b:f5:3b:0f:47:ca:7a:78:aa:7f:3e:e7:50: fe:91:bc:2f:3e:f5:c1:36:10:21:7d:4c:cc:19:45: b8:00:c0:13:80:db:c5:3b:d0:05:1b:89:17:99:d7: ce:f6:e5:d6:f5:61:08:7d:24:9f:57:51:f0:2b:c0: 0b:4f:d2:4f:1d:db:ab:24:48:f9:30:b0:6a:c3:86: 18:00:90:b0:9c:ce:5e:6a:6e:9b:e9:c1:77:41:e1: 17:02:b8:38:44:89:4a:34:cd:c2:26:58:e3:7d:d8: 63:ce:ce:39:62:3f:00:92:7b:6e:8c:98:72:1f:db: 52:3f:fa:08:44:ab:98:d3:db:56:54:32:6a:e5:83: c7:86:4d:ea:74:cd:bc:7d:ef:bd:ef:0b:32:72:1a: 4e:3c:66:26:8e:f0:c2:75:de:c1:08:2a:85:14:ca: c3:f4:09:1a:b1:3d:92:1c:8e:a1:4a:b8:ec:68:bf: 01:4d:51:e9:bf:9a:25:8e:1b:ee:c2:90:d4:b1:51: e1:42:11:8d:89:2c:77:d2:47:be:26:16:38:d6:6f: 21:22:ef:d4:da:61:77:c1:c2:25:7b:de:03:19:85: db:7d:c6:9b:a2:c7:1b:09:55:8d:0d:23:59:74:ce: c0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:CF:1E:9B:8E:C3:68:1D:CB:AE:50:E6:5C:B9:20:A7:16:81:DB:54 X509v3 Authority Key Identifier: keyid:72:EB:F8:17:E1:A9:2F:3C:D7:F4:9D:F6:A3:1C:26:5F:FE:47:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/gs8em47DaB3LrlDmXLkgpxaB21Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:7640:1000::/36 Signature Algorithm: sha256WithRSAEncryption 88:5a:bd:0f:a2:a1:53:4f:36:36:b8:fd:26:03:63:74:d3:d1: 5c:df:ae:00:d2:3c:f8:e9:4e:6c:63:e2:e9:b4:3f:95:31:cc: a4:c6:c4:c7:5d:3e:1c:13:40:e7:f4:5a:64:05:f4:5c:e5:29: 9f:c6:98:d9:34:cf:17:01:a1:04:ff:33:bb:fc:33:c3:f2:7d: 8a:9c:73:5a:47:9e:78:89:74:74:f8:28:9a:76:61:3c:92:26: 20:fc:19:07:32:f1:a6:36:e8:0a:92:a3:cf:0b:8e:55:ac:68: ec:3d:94:28:23:19:d5:12:32:e8:01:5d:6d:85:32:1c:d1:68: ab:e1:5b:c7:0b:89:9c:0d:3b:12:0a:07:80:5c:54:ce:7c:33: ab:71:ca:51:8d:e2:d1:8c:cc:e5:33:9c:f2:b3:4c:86:e9:44: 7e:58:ca:8d:25:bf:29:4d:36:10:74:7a:1a:f5:47:30:1d:35: 4a:3e:89:c5:e2:2d:88:b1:07:2e:11:37:ae:0c:d0:9d:c1:1c: b7:6d:0c:af:aa:cb:ae:6e:bc:13:1d:dd:27:77:f0:e0:ee:ad: 1f:49:ca:9a:27:3f:f3:c4:d0:79:ca:ab:ab:75:5a:45:bc:72: ee:30:23:93:07:fd:f6:29:a2:ce:29:21:e3:87:d1:25:b9:c3: 63:75:ce:c2 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WMZghcEZuZ91qKyzKLtDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZWJmODE3ZTFhOTJmM2NkN2Y0OWRmNmEzMWMyNjVmZmU0 NzgwMDgwHhcNMjYwMTAxMDIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmNmMWU5YjhlYzM2ODFkY2JhZTUwZTY1Y2I5MjBhNzE2ODFkYjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdElIpXBUY3+hlcBjNG5dYv1Ow9H ynp4qn8+51D+kbwvPvXBNhAhfUzMGUW4AMATgNvFO9AFG4kXmdfO9uXW9WEIfSSf V1HwK8ALT9JPHdurJEj5MLBqw4YYAJCwnM5eam6b6cF3QeEXArg4RIlKNM3CJljj fdhjzs45Yj8AkntujJhyH9tSP/oIRKuY09tWVDJq5YPHhk3qdM28fe+97wsychpO PGYmjvDCdd7BCCqFFMrD9AkasT2SHI6hSrjsaL8BTVHpv5oljhvuwpDUsVHhQhGN iSx30ke+JhY41m8hIu/U2mF3wcIle94DGYXbfcaboscbCVWNDSNZdM7AFQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFILPHpuOw2gdy65Q5ly5IKcWgdtUMB8GA1UdIwQY MBaAFHLr+BfhqS881/Sd9qMcJl/+R4AIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3V2NEYtR3BMenpYOUozMm94d21YXzVIZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC80MzRlZmQtZWU1NC00YmNkLTgxNDEt YzlmN2MwZTdhY2M2LzEvZ3M4ZW00N0RhQjNMcmxEbVhMa2dweGFCMjFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC80MzRlZmQtZWU1NC00YmNkLTgxNDEtYzlmN2MwZTdhY2M2 LzEvY3V2NEYtR3BMenpYOUozMm94d21YXzVIZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgV2QBAw DQYJKoZIhvcNAQELBQADggEBAIhavQ+ioVNPNja4/SYDY3TT0VzfrgDSPPjpTmxj 4um0P5UxzKTGxMddPhwTQOf0WmQF9FzlKZ/GmNk0zxcBoQT/M7v8M8PyfYqcc1pH nniJdHT4KJp2YTySJiD8GQcy8aY26AqSo88LjlWsaOw9lCgjGdUSMugBXW2FMhzR aKvhW8cLiZwNOxIKB4BcVM58M6txylGN4tGMzOUznPKzTIbpRH5Yyo0lvylNNhB0 ehr1RzAdNUo+icXiLYixBy4RN64M0J3BHLdtDK+qy65uvBMd3Sd38ODurR9Jypon P/PE0HnKq6t1WkW8cu4wI5MH/fYpos4pIeOH0SW5w2N1zsI= -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:16 2026 by rpki-client