This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/G3AePD2W8by_05untDFoas2wVbw.roa File: G3AePD2W8by_05untDFoas2wVbw.roa (raw, json) Hash identifier: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M= Subject key identifier: 1B:70:1E:3C:3D:96:F1:BC:BF:D3:9B:A7:B4:31:68:6A:CD:B0:55:BC Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051 Certificate serial: 019B7BA526474045F79A78514A5079410132 Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/G3AePD2W8by_05untDFoas2wVbw.roa Signing time: Thu 01 Jan 2026 22:19:39 +0000 ROA not before: Thu 01 Jan 2026 22:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204010 IP address blocks: 2a05:907:5000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 19:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:26:47:40:45:f7:9a:78:51:4a:50:79:41:01:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051 Validity Not Before: Jan 1 22:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b701e3c3d96f1bcbfd39ba7b431686acdb055bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f2:ee:35:58:d3:e6:c1:f0:00:e3:34:5e:ee: 06:81:93:c2:cf:12:a7:d1:2c:07:f4:1c:18:1b:b6: f9:6e:81:67:59:a8:11:66:5f:0a:1d:a3:b2:97:27: 67:a6:22:3e:33:7a:d7:e1:4c:88:12:da:78:c3:8e: 54:e8:da:11:d9:23:0e:16:82:b0:c4:2d:9d:bc:b1: 3a:f9:f3:5d:17:5a:3e:8c:ba:1a:68:fb:0e:a4:84: 32:5a:78:98:f0:95:6f:76:5b:bd:b3:9b:f9:8a:ee: a8:aa:02:fb:de:17:d5:0b:bb:92:5a:45:af:3f:c2: c6:71:5f:da:ae:ec:48:82:1e:d9:68:19:14:60:b8: 86:40:13:18:fc:44:1d:31:4a:e7:28:5b:64:88:16: ce:84:44:dd:61:9c:14:45:2a:d5:4f:88:72:c5:90: 49:76:00:f2:e3:9c:4f:3f:df:9d:9d:ac:33:c7:a0: 9e:c9:4c:57:7c:12:26:66:4c:7d:57:e7:e6:7c:8f: 54:84:d3:91:9e:a7:23:9c:89:37:9e:66:d5:e1:4d: 2f:55:d9:0f:23:e4:c6:b5:b5:db:a4:d3:f9:b4:e2: 33:78:35:65:63:3f:e3:5a:d3:76:60:b5:2a:86:18: 04:54:54:bf:d6:b7:a6:34:12:2c:e0:51:75:e5:62: 00:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:70:1E:3C:3D:96:F1:BC:BF:D3:9B:A7:B4:31:68:6A:CD:B0:55:BC X509v3 Authority Key Identifier: keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/G3AePD2W8by_05untDFoas2wVbw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:907:5000::/36 Signature Algorithm: sha256WithRSAEncryption b1:36:2e:e2:4a:bc:5c:b5:48:b3:10:53:76:5b:d5:73:67:f6: f8:37:9d:d6:61:8d:34:fb:95:42:bf:1d:aa:80:5f:2a:60:94: e2:6f:c8:16:62:05:55:f5:51:6c:21:95:ea:67:d6:99:c1:f0: a9:33:5b:ba:dd:ed:4c:c7:16:26:63:f1:72:a1:87:3d:1d:25: 83:19:6a:a2:15:d9:45:d0:9e:71:fc:31:e6:ec:76:08:7f:aa: 66:b8:9c:2f:cf:09:b3:f8:ce:cd:53:31:8d:1f:88:02:cb:25: 09:e4:59:fe:7f:ed:78:33:10:8e:79:e9:ef:e6:c0:8f:d6:91: 1c:7a:d7:5f:0d:6b:4c:52:1b:6f:e8:03:9b:35:35:7b:69:0f: 0d:a2:73:e2:92:00:37:ae:fc:84:be:10:8e:2c:14:6b:84:3d: 61:0a:06:be:cb:48:ab:7c:e4:cb:5b:25:6c:91:f5:45:da:db: 5c:ad:9b:45:b4:b3:96:c9:02:0b:38:4f:c8:ac:1e:10:88:90: 02:58:05:61:a0:f9:95:32:3a:a4:42:35:79:41:3b:0d:67:38: 51:1e:3c:78:91:6e:55:b5:aa:14:af:5a:05:ce:be:68:92:c2: cb:e8:41:dd:d1:fc:62:e5:7d:67:8f:32:bd:0f:6b:3c:ca:cb: f0:3b:50:49 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt7pSZHQEX3mnhRSlB5QQEyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYzMzZTQzZWY1NjUyN2ExNjlkNmFjNmQ3ZTYyYzYzZDE5 NzMwNTEwHhcNMjYwMTAxMjIxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjcwMWUzYzNkOTZmMWJjYmZkMzliYTdiNDMxNjg2YWNkYjA1NWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/LuNVjT5sHwAOM0Xu4GgZPCzxKn 0SwH9BwYG7b5boFnWagRZl8KHaOylydnpiI+M3rX4UyIEtp4w45U6NoR2SMOFoKw xC2dvLE6+fNdF1o+jLoaaPsOpIQyWniY8JVvdlu9s5v5iu6oqgL73hfVC7uSWkWv P8LGcV/aruxIgh7ZaBkUYLiGQBMY/EQdMUrnKFtkiBbOhETdYZwURSrVT4hyxZBJ dgDy45xPP9+dnawzx6CeyUxXfBImZkx9V+fmfI9UhNORnqcjnIk3nmbV4U0vVdkP I+TGtbXbpNP5tOIzeDVlYz/jWtN2YLUqhhgEVFS/1remNBIs4FF15WIAywIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFBtwHjw9lvG8v9Obp7QxaGrNsFW8MB8GA1UdIwQY MBaAFAPDPkPvVlJ6Fp1qxtfmLGPRlzBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUt YTNhM2ViODc5ZjJiLzEvRzNBZVBEMlc4YnlfMDV1bnRERm9hczJ3VmJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUtYTNhM2ViODc5ZjJi LzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgUJB1Aw DQYJKoZIhvcNAQELBQADggEBALE2LuJKvFy1SLMQU3Zb1XNn9vg3ndZhjTT7lUK/ HaqAXypglOJvyBZiBVX1UWwhlepn1pnB8KkzW7rd7UzHFiZj8XKhhz0dJYMZaqIV 2UXQnnH8Mebsdgh/qma4nC/PCbP4zs1TMY0fiALLJQnkWf5/7XgzEI556e/mwI/W kRx6118Na0xSG2/oA5s1NXtpDw2ic+KSADeu/IS+EI4sFGuEPWEKBr7LSKt85Mtb JWyR9UXa21ytm0W0s5bJAgs4T8isHhCIkAJYBWGg+ZUyOqRCNXlBOw1nOFEePHiR blW1qhSvWgXOvmiSwsvoQd3R/GLlfWePMr0PazzKy/A7UEk= -----END CERTIFICATE-----Generated at Wed Jan 7 00:58:12 2026 by rpki-client