This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/gahY2AwMV2dT0-Rml8PSy5NNRwU.roa File: gahY2AwMV2dT0-Rml8PSy5NNRwU.roa (raw, json) Hash identifier: YqOJQ01+Og7TwNTW8gpVjpEoYoqEByjHecFHs9UvJNo= Subject key identifier: 81:A8:58:D8:0C:0C:57:67:53:D3:E4:66:97:C3:D2:CB:93:4D:47:05 Certificate issuer: /CN=bea649ef6030fc80848fdfe21d4321ac8011fd10 Certificate serial: 019B7F832EABAD6F35642E28778AB8B32E3D Authority key identifier: BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/gahY2AwMV2dT0-Rml8PSy5NNRwU.roa Signing time: Fri 02 Jan 2026 16:21:01 +0000 ROA not before: Fri 02 Jan 2026 16:21:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208505 IP address blocks: 2a0e:f43:10::/44 maxlen: 47 2a0e:f43:1f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:2e:ab:ad:6f:35:64:2e:28:77:8a:b8:b3:2e:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bea649ef6030fc80848fdfe21d4321ac8011fd10 Validity Not Before: Jan 2 16:21:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81a858d80c0c576753d3e46697c3d2cb934d4705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5e:69:4f:1b:a5:c6:4a:16:72:e2:81:69:59: 4e:ca:cf:c6:9a:b6:7b:d9:85:20:dc:9d:e6:e8:aa: 32:d1:05:0e:a9:76:de:a9:5e:c0:14:2e:5c:db:41: 0f:2e:ae:f8:bb:4f:22:03:f8:a3:c8:af:0e:3e:73: 6b:09:b3:df:43:e5:ab:a3:4d:46:ff:ce:9f:eb:04: 92:2d:45:d4:95:45:07:97:93:6b:f1:0d:b6:76:29: 68:a2:6d:ea:5e:9d:70:18:00:4d:45:97:cc:85:7f: 67:08:40:49:eb:ab:a4:2b:7d:f7:1c:b4:36:b1:34: 4a:30:8c:a7:a8:cc:11:97:57:ad:61:a3:29:bd:23: 0b:22:24:1e:08:eb:19:dc:da:1f:01:84:ff:3a:95: bc:7f:d9:e3:6c:55:4a:8d:cf:e9:de:e5:15:19:b6: e7:f0:b0:f6:f7:2f:bb:4c:42:b2:a8:cb:2f:9d:57: 4c:fc:fa:b4:ff:22:49:b4:09:69:d0:74:f8:74:91: 1a:67:8b:a8:67:62:ab:37:3a:54:8d:86:17:a7:2e: 7e:d7:e3:ee:c9:1b:d0:a7:cf:a2:da:02:f0:7a:2c: 67:32:e8:26:4b:98:b2:84:e6:b1:79:07:ed:a7:1d: 64:88:15:ba:4f:b1:2b:19:9c:03:73:88:c2:d2:19: 9a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A8:58:D8:0C:0C:57:67:53:D3:E4:66:97:C3:D2:CB:93:4D:47:05 X509v3 Authority Key Identifier: keyid:BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/gahY2AwMV2dT0-Rml8PSy5NNRwU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:f43:10::/44 Signature Algorithm: sha256WithRSAEncryption 94:2b:4b:8e:76:2d:31:28:d7:b1:09:0f:23:b8:70:d6:90:34: b1:fb:2a:31:e8:03:2a:61:f6:ef:fb:d0:b7:18:09:2e:b5:35: b5:6a:62:8d:b2:ed:5a:71:8b:bc:e2:63:e5:03:1a:8a:ad:70: 26:02:a8:a2:33:b8:f3:4e:ca:0e:93:1d:58:40:89:4a:8d:45: 09:b5:e7:c0:01:b6:52:7b:fc:85:c5:9c:6d:28:41:c0:eb:c6: db:06:63:c1:72:8a:e3:c2:e6:ed:88:74:2a:19:87:62:3a:da: 02:b4:9e:63:dc:25:d9:2e:5c:3c:ea:c3:00:d5:b7:a5:c8:48: 16:af:47:0f:92:a0:49:c6:91:9d:03:99:0f:26:2d:ff:14:86: d8:97:8c:ed:e8:c1:ea:2a:1b:61:49:79:ab:cd:d2:33:14:4e: 4e:01:13:08:55:41:b7:bf:72:99:a3:47:0e:dc:af:03:c4:7f: 84:e6:8f:be:cc:e9:7c:53:6c:03:2c:07:47:34:5a:5e:c0:4d: e7:58:7f:8b:12:ad:d6:bc:0c:f0:d4:0d:e6:b4:dc:f5:6e:58: 19:cc:7d:6a:e6:9b:b7:46:09:90:d7:c4:16:58:ba:11:83:22: 7c:20:f4:41:65:ff:d4:22:97:c9:a3:43:10:e5:80:8f:a1:4b: c9:16:17:24 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/gy6rrW81ZC4od4q4sy49MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYTY0OWVmNjAzMGZjODA4NDhmZGZlMjFkNDMyMWFjODAx MWZkMTAwHhcNMjYwMTAyMTYyMTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWE4NThkODBjMGM1NzY3NTNkM2U0NjY5N2MzZDJjYjkzNGQ0NzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt15pTxulxkoWcuKBaVlOys/GmrZ7 2YUg3J3m6Koy0QUOqXbeqV7AFC5c20EPLq74u08iA/ijyK8OPnNrCbPfQ+Wro01G /86f6wSSLUXUlUUHl5Nr8Q22diloom3qXp1wGABNRZfMhX9nCEBJ66ukK333HLQ2 sTRKMIynqMwRl1etYaMpvSMLIiQeCOsZ3NofAYT/OpW8f9njbFVKjc/p3uUVGbbn 8LD29y+7TEKyqMsvnVdM/Pq0/yJJtAlp0HT4dJEaZ4uoZ2KrNzpUjYYXpy5+1+Pu yRvQp8+i2gLweixnMugmS5iyhOaxeQftpx1kiBW6T7ErGZwDc4jC0hmanwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIGoWNgMDFdnU9PkZpfD0suTTUcFMB8GA1UdIwQY MBaAFL6mSe9gMPyAhI/f4h1DIayAEf0QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnFaSjcyQXdfSUNFajlfaUhVTWhySUFSX1JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xOTQ1NWItZDJjZi00ZTVmLWJmNTgt MjFkZjU1YmE5ZWJmLzEvZ2FoWTJBd01WMmRUMC1SbWw4UFN5NU5OUndVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8xOTQ1NWItZDJjZi00ZTVmLWJmNTgtMjFkZjU1YmE5ZWJm LzEvdnFaSjcyQXdfSUNFajlfaUhVTWhySUFSX1JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg4PQwAQ MA0GCSqGSIb3DQEBCwUAA4IBAQCUK0uOdi0xKNexCQ8juHDWkDSx+yox6AMqYfbv +9C3GAkutTW1amKNsu1acYu84mPlAxqKrXAmAqiiM7jzTsoOkx1YQIlKjUUJtefA AbZSe/yFxZxtKEHA68bbBmPBcorjwubtiHQqGYdiOtoCtJ5j3CXZLlw86sMA1bel yEgWr0cPkqBJxpGdA5kPJi3/FIbYl4zt6MHqKhthSXmrzdIzFE5OARMIVUG3v3KZ o0cO3K8DxH+E5o++zOl8U2wDLAdHNFpewE3nWH+LEq3WvAzw1A3mtNz1blgZzH1q 5pu3RgmQ18QWWLoRgyJ8IPRBZf/UIpfJo0MQ5YCPoUvJFhck -----END CERTIFICATE-----Generated at Wed Jan 21 10:34:14 2026 by rpki-client