This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/guibBNdYNmYjs3BhZ4d37Us7C4k.roa File: guibBNdYNmYjs3BhZ4d37Us7C4k.roa (raw, json) Hash identifier: ERVCfgK3qCQAc++yH8oVuuxPI5EAT0LJxo2iXgCuAbw= Subject key identifier: 82:E8:9B:04:D7:58:36:66:23:B3:70:61:67:87:77:ED:4B:3B:0B:89 Certificate issuer: /CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48 Certificate serial: 019B7DCB3ED4265E0434737DD475FCEBA528 Authority key identifier: EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/guibBNdYNmYjs3BhZ4d37Us7C4k.roa Signing time: Fri 02 Jan 2026 08:20:30 +0000 ROA not before: Fri 02 Jan 2026 08:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204911 IP address blocks: 2001:678:a40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:3e:d4:26:5e:04:34:73:7d:d4:75:fc:eb:a5:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48 Validity Not Before: Jan 2 08:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82e89b04d758366623b37061678777ed4b3b0b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:15:43:a6:ba:81:3f:18:07:ec:56:bd:9d:e7: 45:25:96:7c:cd:f7:f0:31:a9:82:fb:31:b5:c9:7a: a6:88:df:d0:bc:04:6c:7e:31:88:b6:73:49:cc:21: 79:ad:71:03:ff:f2:d6:66:cc:7d:d7:69:ae:ca:be: d1:25:65:a5:2f:8e:a1:bb:78:64:ec:7c:0b:70:e6: ac:e3:b6:36:0a:c4:22:58:1a:81:53:63:d4:bd:25: 2f:8c:b5:0e:2a:29:38:db:77:6c:9d:fa:40:11:5f: f6:08:8b:b3:a7:30:a2:7f:e0:8c:54:5d:6f:cd:08: f6:03:b9:fd:16:55:11:d9:dd:19:e8:41:91:ba:b2: 22:f4:24:47:a8:55:c0:0d:a2:83:dd:49:27:4c:bc: 4b:34:f0:35:a0:0b:ad:21:e1:4c:7c:fb:5e:94:d6: 0c:9a:3e:4a:6c:04:63:39:31:41:7e:84:05:3d:c8: dc:47:d8:5c:3f:d8:4c:ca:3a:3b:e3:46:c0:a8:73: fb:17:ad:5d:68:ff:36:cf:c3:9c:45:63:b3:87:a5: 4a:00:4e:cf:fa:ae:49:1e:8a:1d:08:78:90:70:6a: 25:61:5b:04:95:1b:cb:75:54:22:34:21:fa:3e:1d: 14:42:fe:26:18:6a:32:ab:4d:e8:da:b9:33:b7:dc: 8b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E8:9B:04:D7:58:36:66:23:B3:70:61:67:87:77:ED:4B:3B:0B:89 X509v3 Authority Key Identifier: keyid:EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/guibBNdYNmYjs3BhZ4d37Us7C4k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:a40::/48 Signature Algorithm: sha256WithRSAEncryption 78:e5:b9:2a:c9:dc:9f:5c:56:45:d4:2c:39:92:e5:45:7a:12: 7b:49:80:b9:5e:7b:ba:a7:ab:b6:72:9d:02:d6:26:6c:7a:d8: fc:3d:a3:fa:51:2a:4b:f2:6a:24:3e:f5:b6:c9:f0:a8:cd:85: 8b:f1:20:0a:be:1d:f6:0a:2d:41:6c:b4:d4:c2:3c:25:be:61: ed:d7:f8:aa:72:55:01:fd:84:68:47:52:f1:4d:9a:a5:3a:24: 47:a1:f6:ae:7e:38:8d:61:52:85:c9:c9:c8:77:42:b8:c2:c4: 21:81:3b:b6:02:1f:0b:87:7c:78:0e:29:3a:89:1b:83:55:ba: 28:a5:96:de:81:c2:1c:0d:f5:20:4a:7f:33:64:04:40:39:fb: 6d:5a:6f:bb:ec:bf:80:55:c7:0e:c5:d5:d6:40:92:1c:17:b7: 92:48:cf:fd:1a:5a:60:6d:c8:b9:06:92:e9:0f:34:c5:7d:8f: bb:13:99:e2:d4:39:82:80:2a:e7:1a:d1:bc:21:85:33:93:98: be:e1:a5:8e:d6:86:3c:21:76:19:0e:b6:f0:3d:f4:7c:74:4c: f5:ea:08:35:f1:5d:49:4f:52:e8:88:52:ad:a4:ef:c3:29:8f: d5:50:16:63:82:af:33:dc:ed:48:aa:38:f1:36:d3:7e:68:0e: e9:d4:06:16 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9yz7UJl4ENHN91HX866UoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmI0YzBiNGFmNjE1Yzg1YTNjZGNkZWQ0YjdlYmI2NjYz MTFiNDgwHhcNMjYwMTAyMDgyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmU4OWIwNGQ3NTgzNjY2MjNiMzcwNjE2Nzg3NzdlZDRiM2IwYjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9xVDprqBPxgH7Fa9nedFJZZ8zffw MamC+zG1yXqmiN/QvARsfjGItnNJzCF5rXED//LWZsx912muyr7RJWWlL46hu3hk 7HwLcOas47Y2CsQiWBqBU2PUvSUvjLUOKik423dsnfpAEV/2CIuzpzCif+CMVF1v zQj2A7n9FlUR2d0Z6EGRurIi9CRHqFXADaKD3UknTLxLNPA1oAutIeFMfPtelNYM mj5KbARjOTFBfoQFPcjcR9hcP9hMyjo740bAqHP7F61daP82z8OcRWOzh6VKAE7P +q5JHoodCHiQcGolYVsElRvLdVQiNCH6Ph0UQv4mGGoyq03o2rkzt9yLWQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFILomwTXWDZmI7NwYWeHd+1LOwuJMB8GA1UdIwQY MBaAFO67TAtK9hXIWjzc3tS367ZmMRtIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J0TUMwcjJGY2hhUE56ZTFMZnJ0bVl4RzBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lZDFiODQtYjhjNS00NzY2LTg4MmQt MThlODRlNzQ3ZDIyLzEvZ3VpYkJOZFlObVlqczNCaFo0ZDM3VXM3QzRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9lZDFiODQtYjhjNS00NzY2LTg4MmQtMThlODRlNzQ3ZDIy LzEvN3J0TUMwcjJGY2hhUE56ZTFMZnJ0bVl4RzBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeApA MA0GCSqGSIb3DQEBCwUAA4IBAQB45bkqydyfXFZF1Cw5kuVFehJ7SYC5Xnu6p6u2 cp0C1iZsetj8PaP6USpL8mokPvW2yfCozYWL8SAKvh32Ci1BbLTUwjwlvmHt1/iq clUB/YRoR1LxTZqlOiRHofaufjiNYVKFycnId0K4wsQhgTu2Ah8Lh3x4Dik6iRuD VboopZbegcIcDfUgSn8zZARAOfttWm+77L+AVccOxdXWQJIcF7eSSM/9Glpgbci5 BpLpDzTFfY+7E5ni1DmCgCrnGtG8IYUzk5i+4aWO1oY8IXYZDrbwPfR8dEz16gg1 8V1JT1LoiFKtpO/DKY/VUBZjgq8z3O1IqjjxNtN+aA7p1AYW -----END CERTIFICATE-----Generated at Mon Feb 2 08:07:44 2026 by rpki-client