This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/gISB5XKycKPv5hrE5ng7DwaTFZs.roa File: gISB5XKycKPv5hrE5ng7DwaTFZs.roa (raw, json) Hash identifier: sJhtL2wlmJpjXzVIWne8fY+2r1IBnfbZ2BjwXpNs+R8= Subject key identifier: 80:84:81:E5:72:B2:70:A3:EF:E6:1A:C4:E6:78:3B:0F:06:93:15:9B Certificate issuer: /CN=cbb996ff055d6575e01f2e64d9a3b382834702d1 Certificate serial: 019B7D5D1653562A8D28D95E4C8F8D4F1536 Authority key identifier: CB:B9:96:FF:05:5D:65:75:E0:1F:2E:64:D9:A3:B3:82:83:47:02:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/gISB5XKycKPv5hrE5ng7DwaTFZs.roa Signing time: Fri 02 Jan 2026 06:20:11 +0000 ROA not before: Fri 02 Jan 2026 06:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202351 IP address blocks: 2001:67c:ae0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:16:53:56:2a:8d:28:d9:5e:4c:8f:8d:4f:15:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbb996ff055d6575e01f2e64d9a3b382834702d1 Validity Not Before: Jan 2 06:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=808481e572b270a3efe61ac4e6783b0f0693159b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:66:f6:be:d3:3f:ac:01:b1:d2:27:ee:97:b9: b7:34:3d:96:a3:05:ce:d3:03:7d:35:82:14:da:9e: 84:4d:43:04:6e:d5:82:fb:d2:ec:1d:06:34:07:de: 28:fc:10:6f:5a:39:63:ce:77:c3:9b:e7:7c:25:6c: 3d:46:6b:62:71:82:b1:cd:2e:dd:2c:7d:4b:c1:9d: 3b:46:9a:e1:e8:46:4e:d4:8e:dd:7f:b5:25:13:08: 83:9e:24:87:ab:7e:25:7e:96:8e:1a:65:db:02:9a: d7:7b:86:e3:d5:b5:21:d6:d5:28:e6:5c:7c:60:4c: dd:74:56:55:f3:70:9f:95:b3:b8:98:85:8e:e5:68: 19:3c:99:2e:92:7e:68:a2:ac:55:8b:3d:3c:6c:7e: 99:d5:82:c8:64:e7:73:ee:8a:83:61:c0:89:8f:37: c7:08:fb:c1:0f:b8:8f:21:8f:27:b9:6b:cd:fb:5a: 3a:a3:d6:0e:88:52:93:89:8f:01:e5:d6:8f:c5:e0: 16:b9:c8:be:8c:fb:9d:d3:e6:bf:0a:94:83:b2:20: 76:4c:f6:0d:ab:e9:54:2a:6c:a6:ab:63:0d:76:e8: 24:3c:f4:a3:ee:bf:a5:9a:fb:1a:c6:a3:24:20:14: fa:15:d3:7b:97:2d:86:fe:5f:66:68:cb:71:ee:a0: 25:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:84:81:E5:72:B2:70:A3:EF:E6:1A:C4:E6:78:3B:0F:06:93:15:9B X509v3 Authority Key Identifier: keyid:CB:B9:96:FF:05:5D:65:75:E0:1F:2E:64:D9:A3:B3:82:83:47:02:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/gISB5XKycKPv5hrE5ng7DwaTFZs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:ae0::/48 Signature Algorithm: sha256WithRSAEncryption 84:cb:5d:36:f8:cd:f9:27:42:30:19:84:a8:f5:24:f0:04:9c: b5:4a:66:dd:a9:0a:00:53:5d:c3:d5:af:fe:bc:91:ca:64:cb: ce:7b:94:2d:24:c8:4e:c1:90:ac:63:84:fb:16:5d:dd:f9:1f: 57:fc:f1:7b:0e:00:b5:ad:d1:8e:74:f5:3f:91:ce:f5:72:b8: b8:0a:a7:c6:5f:b1:d9:38:92:ae:d3:e0:e6:47:1a:3b:28:fb: dd:f0:63:4c:4f:f3:a3:e4:10:39:3c:7d:f6:99:f2:50:d3:ae: b6:8e:00:da:45:c1:45:06:79:d3:50:d0:e6:a6:ce:37:6d:62: 0c:88:ca:5a:d7:40:ed:5d:e6:0a:50:06:f3:4d:5a:5b:0e:6a: e3:2d:7a:d6:86:b2:18:0d:c7:a6:8b:93:36:4b:a1:bb:ff:7e: 62:88:5a:a4:f5:da:93:03:fb:f2:b9:72:7e:d9:5b:2c:95:24: 99:ce:82:6a:95:14:c7:a9:e0:83:d3:9d:24:6a:da:94:ce:e0: 61:f1:b1:fe:7f:a4:68:c1:ff:0f:9e:db:e5:b7:1e:ba:69:c6: a1:46:29:ec:32:7a:59:5b:31:21:3e:63:0c:ee:61:f4:4b:9f: 68:b7:a9:28:ba:40:cb:db:58:ae:74:73:66:93:57:1a:de:c4: 55:33:c3:0f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XRZTViqNKNleTI+NTxU2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiYjk5NmZmMDU1ZDY1NzVlMDFmMmU2NGQ5YTNiMzgyODM0 NzAyZDEwHhcNMjYwMTAyMDYyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDg0ODFlNTcyYjI3MGEzZWZlNjFhYzRlNjc4M2IwZjA2OTMxNTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Wb2vtM/rAGx0iful7m3ND2WowXO 0wN9NYIU2p6ETUMEbtWC+9LsHQY0B94o/BBvWjljznfDm+d8JWw9RmticYKxzS7d LH1LwZ07Rprh6EZO1I7df7UlEwiDniSHq34lfpaOGmXbAprXe4bj1bUh1tUo5lx8 YEzddFZV83CflbO4mIWO5WgZPJkukn5ooqxViz08bH6Z1YLIZOdz7oqDYcCJjzfH CPvBD7iPIY8nuWvN+1o6o9YOiFKTiY8B5daPxeAWuci+jPud0+a/CpSDsiB2TPYN q+lUKmymq2MNdugkPPSj7r+lmvsaxqMkIBT6FdN7ly2G/l9maMtx7qAl5QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFICEgeVysnCj7+YaxOZ4Ow8GkxWbMB8GA1UdIwQY MBaAFMu5lv8FXWV14B8uZNmjs4KDRwLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTdtV193VmRaWFhnSHk1azJhT3pnb05IQXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81NTcxZjktZDliYi00ZTc4LWJhZDYt MDlkNDIzMWMxYzk5LzEvZ0lTQjVYS3ljS1B2NWhyRTVuZzdEd2FURlpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC81NTcxZjktZDliYi00ZTc4LWJhZDYtMDlkNDIzMWMxYzk5 LzEveTdtV193VmRaWFhnSHk1azJhT3pnb05IQXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfArg MA0GCSqGSIb3DQEBCwUAA4IBAQCEy102+M35J0IwGYSo9STwBJy1SmbdqQoAU13D 1a/+vJHKZMvOe5QtJMhOwZCsY4T7Fl3d+R9X/PF7DgC1rdGOdPU/kc71cri4CqfG X7HZOJKu0+DmRxo7KPvd8GNMT/Oj5BA5PH32mfJQ0662jgDaRcFFBnnTUNDmps43 bWIMiMpa10DtXeYKUAbzTVpbDmrjLXrWhrIYDcemi5M2S6G7/35iiFqk9dqTA/vy uXJ+2VsslSSZzoJqlRTHqeCD050katqUzuBh8bH+f6Rowf8Pntvltx66acahRins MnpZWzEhPmMM7mH0S59ot6koukDL21iudHNmk1ca3sRVM8MP -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:51 2026 by rpki-client