This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GAzQrZ9DXVka3CAqpqLpkKc5sHk.roa File: GAzQrZ9DXVka3CAqpqLpkKc5sHk.roa (raw, json) Hash identifier: Rym5WtHVxy9PORQxWu8PkDHZ++J4I5gmd6jTUTKOzyE= Subject key identifier: 18:0C:D0:AD:9F:43:5D:59:1A:DC:20:2A:A6:A2:E9:90:A7:39:B0:79 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1CC6B29D1D9DCAE5C1CFAAE1F0DA3 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GAzQrZ9DXVka3CAqpqLpkKc5sHk.roa Signing time: Fri 02 Jan 2026 18:21:51 +0000 ROA not before: Fri 02 Jan 2026 18:21:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213505 IP address blocks: 2a0a:2d02::/32 maxlen: 32 2a13:540::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:cc:6b:29:d1:d9:dc:ae:5c:1c:fa:ae:1f:0d:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=180cd0ad9f435d591adc202aa6a2e990a739b079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:16:ac:af:89:3f:fc:79:2b:87:58:12:dd:17: d6:f6:6a:68:ac:e4:16:d2:c4:0c:77:f8:32:99:de: ef:8f:db:4c:41:ef:1c:fc:10:69:4d:87:1c:4b:d6: 1a:95:3d:ec:f8:bc:76:d6:3a:02:4d:85:dd:7e:a8: e9:b5:0d:90:71:d0:36:c7:b1:ba:8f:32:07:dd:65: c6:38:e3:24:bd:9c:8a:e2:5c:37:d8:69:16:66:de: 17:2e:9a:ff:29:8c:29:25:36:76:9c:df:68:ae:d7: 56:84:49:3d:01:f3:e0:8d:bc:98:16:4f:d6:8d:c8: e8:a4:ff:08:39:71:1d:8f:2b:03:ee:b2:2e:08:17: fa:0f:48:bc:39:8b:37:f0:07:be:fb:eb:3c:c3:e0: e9:07:6d:f7:8f:a0:f6:6c:09:70:6e:9e:5e:43:3e: 64:9a:4f:60:d0:b8:cb:fd:7d:ca:3f:d1:e6:3d:13: d7:35:7b:7c:4f:e7:a2:b4:22:b2:48:60:0e:58:d1: 03:e4:db:2a:de:17:aa:b5:c1:72:30:23:8e:75:e0: 33:c9:11:1b:f6:54:f8:63:41:ab:37:36:5a:c7:d0: 12:20:04:11:13:b6:8f:3d:2d:59:d2:fb:56:ef:e9: ef:22:e8:e1:3b:8d:60:aa:25:2a:23:0b:8e:33:48: f7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:0C:D0:AD:9F:43:5D:59:1A:DC:20:2A:A6:A2:E9:90:A7:39:B0:79 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GAzQrZ9DXVka3CAqpqLpkKc5sHk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:2d02::/32 2a13:540::/29 Signature Algorithm: sha256WithRSAEncryption 1d:f8:32:8a:30:68:b9:5d:a5:31:df:e0:d4:10:ef:50:e4:2b: 4f:b2:2c:c9:7f:1c:7a:dd:06:83:dc:79:ba:38:d0:e8:7e:d6: fc:96:99:ff:a5:87:ad:7f:56:30:ce:bf:3d:31:94:c8:49:9d: 71:3b:c0:8e:f7:a7:2c:74:1a:ff:85:73:a8:ed:8a:1b:d9:08: c8:1a:69:2a:b0:ec:34:33:e6:12:b8:31:f2:d5:d6:ec:ac:53: 7b:93:e0:cd:2b:bc:af:48:36:60:4f:4d:d9:d9:70:56:9e:13: 0f:ef:cd:ae:16:3c:99:2b:3e:c2:19:06:53:49:d7:f2:ab:ff: d8:5d:10:8f:60:56:9f:8b:44:1e:28:ea:4c:cf:ab:f1:65:61: 2c:7e:fe:6b:a6:4d:83:16:7e:1d:39:4e:fa:86:05:65:0d:21: 2f:e7:4f:da:45:57:1a:a7:f9:c5:93:e9:64:d1:e1:5a:de:fd: 28:ac:81:39:a0:49:b0:76:4a:65:c0:f8:00:21:0d:27:51:5c: 3b:cb:94:34:c8:d7:e4:18:7a:9b:6a:57:0c:07:04:c7:10:11: da:e6:52:c5:07:df:96:80:ec:29:9e:43:82:fa:74:92:65:51: 4a:d8:20:8c:96:b0:8c:b8:5c:42:e0:62:9f:6c:1b:19:4d:d5: 63:c3:42:82 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/8cxrKdHZ3K5cHPquHw2jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODBjZDBhZDlmNDM1ZDU5MWFkYzIwMmFhNmEyZTk5MGE3MzliMDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Rasr4k//Hkrh1gS3RfW9mporOQW 0sQMd/gymd7vj9tMQe8c/BBpTYccS9YalT3s+Lx21joCTYXdfqjptQ2QcdA2x7G6 jzIH3WXGOOMkvZyK4lw32GkWZt4XLpr/KYwpJTZ2nN9ortdWhEk9AfPgjbyYFk/W jcjopP8IOXEdjysD7rIuCBf6D0i8OYs38Ae+++s8w+DpB233j6D2bAlwbp5eQz5k mk9g0LjL/X3KP9HmPRPXNXt8T+eitCKySGAOWNED5Nsq3heqtcFyMCOOdeAzyREb 9lT4Y0GrNzZax9ASIAQRE7aPPS1Z0vtW7+nvIujhO41gqiUqIwuOM0j33wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFBgM0K2fQ11ZGtwgKqai6ZCnObB5MB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvR0F6UXJaOURYVmthM0NBcXBxTHBrS2M1c0hrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKgotAgMF AyoTBUAwDQYJKoZIhvcNAQELBQADggEBAB34MoowaLldpTHf4NQQ71DkK0+yLMl/ HHrdBoPcebo40Oh+1vyWmf+lh61/VjDOvz0xlMhJnXE7wI73pyx0Gv+Fc6jtihvZ CMgaaSqw7DQz5hK4MfLV1uysU3uT4M0rvK9INmBPTdnZcFaeEw/vza4WPJkrPsIZ BlNJ1/Kr/9hdEI9gVp+LRB4o6kzPq/FlYSx+/mumTYMWfh05TvqGBWUNIS/nT9pF Vxqn+cWT6WTR4Vre/SisgTmgSbB2SmXA+AAhDSdRXDvLlDTI1+QYeptqVwwHBMcQ EdrmUsUH35aA7CmeQ4L6dJJlUUrYIIyWsIy4XELgYp9sGxlN1WPDQoI= -----END CERTIFICATE-----Generated at Tue Jan 20 09:07:47 2026 by rpki-client