This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/gNhszUNFjUvnmp6uYZywKw0VK4Q.roa File: gNhszUNFjUvnmp6uYZywKw0VK4Q.roa (raw, json) Hash identifier: OoYbjhXKEH09k93nIljEgaEwB00MnQM3qMLjic/Ifxg= Subject key identifier: 80:D8:6C:CD:43:45:8D:4B:E7:9A:9E:AE:61:9C:B0:2B:0D:15:2B:84 Certificate issuer: /CN=68f063ed2e0a2674bc471010189fc77adb31c17f Certificate serial: 019B7C806366BCB59B1728A43008A9D80A44 Authority key identifier: 68:F0:63:ED:2E:0A:26:74:BC:47:10:10:18:9F:C7:7A:DB:31:C1:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/gNhszUNFjUvnmp6uYZywKw0VK4Q.roa Signing time: Fri 02 Jan 2026 02:19:07 +0000 ROA not before: Fri 02 Jan 2026 02:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213204 IP address blocks: 2001:678:d50::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:63:66:bc:b5:9b:17:28:a4:30:08:a9:d8:0a:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68f063ed2e0a2674bc471010189fc77adb31c17f Validity Not Before: Jan 2 02:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80d86ccd43458d4be79a9eae619cb02b0d152b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:76:f4:43:e9:e0:96:b4:36:b5:f6:0d:b7:2c: ca:d9:61:f6:83:8a:ed:7e:bc:e5:e7:45:7e:9f:fd: e5:cc:37:60:fe:1c:98:5f:c5:6f:59:ad:73:59:c5: 63:fe:60:6e:12:89:41:62:65:94:7b:f4:10:a3:9f: ac:ab:fa:ca:6b:6e:34:f8:e1:2e:74:65:fa:4c:f8: 2e:03:27:95:5a:8f:21:38:27:77:12:41:15:22:99: 94:a9:3d:c0:0c:f7:4b:55:c0:64:22:eb:36:18:97: b6:9c:08:fa:ad:bc:c6:c3:b0:ab:4c:43:1f:7d:91: 47:3f:e5:7d:cc:c7:ae:0c:b5:9d:cf:ea:98:62:bb: ba:24:25:67:47:1c:f7:46:51:fe:bd:ce:ca:c6:a4: e1:5e:fa:05:18:11:ed:2b:20:a1:20:fe:6e:fa:8f: 8c:20:b4:47:3e:2f:1d:0f:b6:e8:46:db:50:f6:b9: cd:90:7c:7c:1b:7e:30:2a:68:89:c6:14:f0:6b:fb: af:17:de:93:38:47:3f:51:13:20:ed:e6:6d:7c:2f: 0e:55:db:47:c6:01:d5:c5:48:33:78:69:66:42:d3: 88:fd:1b:0b:72:ec:2a:0b:ec:5f:62:d7:96:cb:dc: 92:64:b8:1c:01:3c:b3:82:61:37:48:ef:a1:d7:44: 4e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D8:6C:CD:43:45:8D:4B:E7:9A:9E:AE:61:9C:B0:2B:0D:15:2B:84 X509v3 Authority Key Identifier: keyid:68:F0:63:ED:2E:0A:26:74:BC:47:10:10:18:9F:C7:7A:DB:31:C1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/gNhszUNFjUvnmp6uYZywKw0VK4Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:d50::/48 Signature Algorithm: sha256WithRSAEncryption 90:1e:e6:52:7e:db:e8:60:8a:00:13:b4:c5:7c:b6:99:b9:37: d5:e7:d2:18:c0:17:4f:98:2f:7d:fa:58:61:f4:ef:54:61:ff: 3b:97:30:53:87:e7:80:38:52:cd:c8:2e:86:17:4a:d1:7c:4e: d1:c2:31:9f:88:1b:55:28:63:ee:76:e1:af:5f:1f:32:24:18: 92:86:83:b3:3d:c7:4a:3a:5f:88:70:08:a5:b5:93:88:ed:1a: a4:da:be:f1:c9:d5:69:f1:ca:17:7e:f7:4a:b2:f0:93:97:b7: 1a:7d:fd:aa:f5:a8:15:63:b3:a5:bb:4c:b2:0c:3a:9f:7a:f1: 28:f5:df:57:f5:fe:84:7c:5f:2f:6b:58:2d:95:e7:99:ad:08: fe:82:4d:3d:73:86:8c:78:6a:c3:11:97:57:de:99:37:fc:51: e5:5c:a3:07:e1:94:34:14:57:74:36:3d:bd:59:c0:f1:60:36: f2:89:82:bd:8f:ba:19:88:0c:12:88:b8:84:39:e6:cd:b0:ff: 4c:00:a7:c4:93:6d:bb:27:23:b7:08:a3:c6:4d:d2:78:ba:c0: fb:20:b2:d4:86:e0:a4:c4:60:94:ec:4f:28:75:d5:0a:c0:c6: 37:2e:3c:1d:ed:34:fb:98:48:c1:a3:67:fd:75:d3:28:a8:55: 0d:d9:19:96 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8gGNmvLWbFyikMAip2ApEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZjA2M2VkMmUwYTI2NzRiYzQ3MTAxMDE4OWZjNzdhZGIz MWMxN2YwHhcNMjYwMTAyMDIxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGQ4NmNjZDQzNDU4ZDRiZTc5YTllYWU2MTljYjAyYjBkMTUyYjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXb0Q+nglrQ2tfYNtyzK2WH2g4rt frzl50V+n/3lzDdg/hyYX8VvWa1zWcVj/mBuEolBYmWUe/QQo5+sq/rKa240+OEu dGX6TPguAyeVWo8hOCd3EkEVIpmUqT3ADPdLVcBkIus2GJe2nAj6rbzGw7CrTEMf fZFHP+V9zMeuDLWdz+qYYru6JCVnRxz3RlH+vc7KxqThXvoFGBHtKyChIP5u+o+M ILRHPi8dD7boRttQ9rnNkHx8G34wKmiJxhTwa/uvF96TOEc/URMg7eZtfC8OVdtH xgHVxUgzeGlmQtOI/RsLcuwqC+xfYteWy9ySZLgcATyzgmE3SO+h10ROUQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIDYbM1DRY1L55qermGcsCsNFSuEMB8GA1UdIwQY MBaAFGjwY+0uCiZ0vEcQEBifx3rbMcF/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVBCajdTNEtKblM4UnhBUUdKX0hldHN4d1g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82MWI3M2ItZjI2NS00M2Q0LWI1YjMt OTQ2ZmRhZmUyZWM2LzEvZ05oc3pVTkZqVXZubXA2dVlaeXdLdzBWSzRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy82MWI3M2ItZjI2NS00M2Q0LWI1YjMtOTQ2ZmRhZmUyZWM2 LzEvYVBCajdTNEtKblM4UnhBUUdKX0hldHN4d1g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA1Q MA0GCSqGSIb3DQEBCwUAA4IBAQCQHuZSftvoYIoAE7TFfLaZuTfV59IYwBdPmC99 +lhh9O9UYf87lzBTh+eAOFLNyC6GF0rRfE7RwjGfiBtVKGPuduGvXx8yJBiShoOz PcdKOl+IcAiltZOI7Rqk2r7xydVp8coXfvdKsvCTl7caff2q9agVY7Olu0yyDDqf evEo9d9X9f6EfF8va1gtleeZrQj+gk09c4aMeGrDEZdX3pk3/FHlXKMH4ZQ0FFd0 Nj29WcDxYDbyiYK9j7oZiAwSiLiEOebNsP9MAKfEk227JyO3CKPGTdJ4usD7ILLU huCkxGCU7E8oddUKwMY3Ljwd7TT7mEjBo2f9ddMoqFUN2RmW -----END CERTIFICATE-----Generated at Sun Jan 11 08:36:08 2026 by rpki-client