This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/S-GSVSUNsQXRLLGV7acDr7Du9U8.roa File: S-GSVSUNsQXRLLGV7acDr7Du9U8.roa (raw, json) Hash identifier: 08f9iSNOb+DwAADHclZ0Gz3HX8s6Ev9SIpd6zgDk2gI= Subject key identifier: 4B:E1:92:55:25:0D:B1:05:D1:2C:B1:95:ED:A7:03:AF:B0:EE:F5:4F Certificate issuer: /CN=061bb0916c853801f22ce723bc2cc418869db7d0 Certificate serial: 019B7F83E140B65512A6AA5886FD5D38DBD9 Authority key identifier: 06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/S-GSVSUNsQXRLLGV7acDr7Du9U8.roa Signing time: Fri 02 Jan 2026 16:21:47 +0000 ROA not before: Fri 02 Jan 2026 16:21:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208242 IP address blocks: 2001:678:b04::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:e1:40:b6:55:12:a6:aa:58:86:fd:5d:38:db:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061bb0916c853801f22ce723bc2cc418869db7d0 Validity Not Before: Jan 2 16:21:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4be19255250db105d12cb195eda703afb0eef54f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e1:46:06:b7:5e:0d:e3:e9:1a:5f:36:4a:93: fa:f4:f8:ac:45:bd:16:63:1f:b5:32:1a:ed:9a:08: d3:f2:c2:c7:58:2f:39:bb:fa:53:46:97:01:c5:53: e3:7e:48:d6:c6:68:85:0f:b8:b0:e7:7c:07:03:e4: ce:97:3f:56:35:0c:c2:ed:bc:4d:d3:2d:2f:19:28: 93:0d:13:68:42:5f:57:9a:b4:c1:c2:eb:d4:79:37: 16:ea:e5:b5:c0:cc:09:04:8f:9c:20:17:c6:ed:4d: 4d:ef:71:a7:e9:ef:ae:2a:34:ca:7c:68:50:1a:49: 7a:e6:23:22:41:0f:29:6f:79:49:45:ef:8b:c2:09: 23:21:73:00:e0:a7:fb:fc:ee:6a:be:17:06:df:aa: 93:72:3c:eb:ad:62:97:03:d1:92:da:48:12:c4:be: 72:d7:0a:8a:23:b9:a2:5d:ed:6f:65:22:bb:dd:68: b1:d5:d8:89:83:97:2d:ed:e7:68:13:72:bb:70:93: 0a:18:ec:c5:a4:8b:e3:40:29:ef:07:2b:8c:23:f0: e8:89:32:3c:af:1a:86:59:6a:36:28:2e:88:23:45: 79:d9:d7:1f:b7:43:75:f0:7b:26:7e:d4:93:8a:74: b4:46:0b:50:15:7f:90:cb:77:f7:10:24:30:e1:bb: 04:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E1:92:55:25:0D:B1:05:D1:2C:B1:95:ED:A7:03:AF:B0:EE:F5:4F X509v3 Authority Key Identifier: keyid:06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/S-GSVSUNsQXRLLGV7acDr7Du9U8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:b04::/48 Signature Algorithm: sha256WithRSAEncryption 22:b1:69:cb:ad:94:09:c2:e8:f3:18:c9:b0:e6:f7:2d:21:08: 21:9e:f1:63:de:e3:b2:a8:e7:d2:b1:30:01:45:41:1a:b2:02: cf:9d:c3:9e:27:1e:b0:65:9e:56:d6:22:40:b2:a0:27:7e:fa: 7d:99:b8:fc:97:9b:1c:d8:3f:cc:71:d8:9f:fd:22:3d:19:d0: 12:6e:d0:1f:ef:8f:a2:34:25:25:29:51:bb:79:93:11:97:41: 4c:66:56:18:36:4e:9a:ba:07:8c:a2:c2:a8:4c:c6:dc:db:2f: 10:48:85:94:3b:5e:cb:b2:62:d3:5d:19:3e:bf:f7:28:2f:42: d2:82:65:18:38:c5:b6:06:4a:54:9e:9f:74:a7:cb:d5:d1:ef: 73:94:d0:31:5a:72:f6:1a:c3:ff:84:94:c9:6e:83:4f:04:a5: 0d:c4:3b:3b:d1:81:81:ee:36:a8:9f:af:87:8a:69:eb:dc:d7: b2:c3:d4:38:ff:4f:ad:e7:78:cc:77:45:7f:d9:77:0d:ca:38: ee:86:d1:50:0e:c4:de:3c:f1:e3:f7:f2:65:9d:62:ab:c7:a3: e6:c6:a4:1c:12:fb:53:5d:e1:20:81:10:9c:1f:02:30:d7:51: 17:ca:af:40:c3:65:83:03:62:2d:89:9a:ea:18:4d:bc:9a:22: 01:03:02:f0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/g+FAtlUSpqpYhv1dONvZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MWJiMDkxNmM4NTM4MDFmMjJjZTcyM2JjMmNjNDE4ODY5 ZGI3ZDAwHhcNMjYwMTAyMTYyMTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmUxOTI1NTI1MGRiMTA1ZDEyY2IxOTVlZGE3MDNhZmIwZWVmNTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOFGBrdeDePpGl82SpP69PisRb0W Yx+1MhrtmgjT8sLHWC85u/pTRpcBxVPjfkjWxmiFD7iw53wHA+TOlz9WNQzC7bxN 0y0vGSiTDRNoQl9XmrTBwuvUeTcW6uW1wMwJBI+cIBfG7U1N73Gn6e+uKjTKfGhQ Gkl65iMiQQ8pb3lJRe+LwgkjIXMA4Kf7/O5qvhcG36qTcjzrrWKXA9GS2kgSxL5y 1wqKI7miXe1vZSK73Wix1diJg5ct7edoE3K7cJMKGOzFpIvjQCnvByuMI/DoiTI8 rxqGWWo2KC6II0V52dcft0N18HsmftSTinS0RgtQFX+Qy3f3ECQw4bsEcQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEvhklUlDbEF0Syxle2nA6+w7vVPMB8GA1UdIwQY MBaAFAYbsJFshTgB8iznI7wsxBiGnbfQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmh1d2tXeUZPQUh5TE9janZDekVHSWFkdDlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iYmIxYzYtOWY5MS00MzQ2LWI2MTYt YzJkYzdhMDU4ZTMwLzEvUy1HU1ZTVU5zUVhSTExHVjdhY0RyN0R1OVU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iYmIxYzYtOWY5MS00MzQ2LWI2MTYtYzJkYzdhMDU4ZTMw LzEvQmh1d2tXeUZPQUh5TE9janZDekVHSWFkdDlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAsE MA0GCSqGSIb3DQEBCwUAA4IBAQAisWnLrZQJwujzGMmw5vctIQghnvFj3uOyqOfS sTABRUEasgLPncOeJx6wZZ5W1iJAsqAnfvp9mbj8l5sc2D/Mcdif/SI9GdASbtAf 74+iNCUlKVG7eZMRl0FMZlYYNk6augeMosKoTMbc2y8QSIWUO17LsmLTXRk+v/co L0LSgmUYOMW2BkpUnp90p8vV0e9zlNAxWnL2GsP/hJTJboNPBKUNxDs70YGB7jao n6+Himnr3Neyw9Q4/0+t53jMd0V/2XcNyjjuhtFQDsTePPHj9/JlnWKrx6PmxqQc EvtTXeEggRCcHwIw11EXyq9Aw2WDA2ItiZrqGE28miIBAwLw -----END CERTIFICATE-----Generated at Tue Feb 10 02:54:49 2026 by rpki-client