This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/gQm12kL8qC8G8fld0ndxKWB7Le4.roa File: gQm12kL8qC8G8fld0ndxKWB7Le4.roa (raw, json) Hash identifier: DZyw6qHuuDne2cu+Q2hXVAXkBqKQX9CgYl0ktuHs/9c= Subject key identifier: 81:09:B5:DA:42:FC:A8:2F:06:F1:F9:5D:D2:77:71:29:60:7B:2D:EE Certificate issuer: /CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5 Certificate serial: 019B78A3125C89778F88BF3A17479C3C339E Authority key identifier: 0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/gQm12kL8qC8G8fld0ndxKWB7Le4.roa Signing time: Thu 01 Jan 2026 08:18:31 +0000 ROA not before: Thu 01 Jan 2026 08:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35280 IP address blocks: 132.68.0.0/16 maxlen: 16 132.69.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:12:5c:89:77:8f:88:bf:3a:17:47:9c:3c:33:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5 Validity Not Before: Jan 1 08:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8109b5da42fca82f06f1f95dd2777129607b2dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:81:e8:79:ae:b8:6a:1d:b6:5f:61:a0:02:41: 7d:b0:e8:83:6c:6f:10:de:d3:cc:23:a0:ca:f1:72: f0:3e:85:b7:f7:cf:ad:5e:80:73:7b:38:3f:0c:8d: ee:5b:95:e2:0a:26:9d:fd:31:2e:d1:68:d6:f4:ae: 05:0c:db:28:0f:a6:19:a8:67:97:f8:db:b4:2e:4b: 9d:91:eb:40:6f:ea:b0:97:cc:41:7f:bd:52:51:8c: 3b:94:4c:64:e5:61:39:38:53:10:69:a4:7d:5d:9d: 5d:11:07:50:57:d2:22:09:c9:19:ab:eb:b1:e7:dd: d7:fc:e3:fb:f5:2f:10:5a:69:45:32:79:5e:e2:18: 67:0d:9c:0e:70:95:aa:de:19:a5:24:31:ac:4d:da: 90:07:4e:90:ef:c5:bd:b1:ea:64:08:ee:0b:f5:cf: d8:f8:5c:b0:c5:38:3f:67:00:d9:bc:20:a6:94:17: 93:e9:ca:1f:30:cd:24:47:71:ee:b7:cc:e6:e9:03: 45:ba:0e:17:73:c1:7d:90:a7:a0:db:31:f6:7b:bc: 19:ad:7a:5b:68:45:b2:6d:d0:b0:c6:e3:36:5e:99: 17:19:26:65:81:ff:70:44:ba:e2:86:56:84:0e:c0: 16:4f:4d:d3:9c:99:2d:00:8f:18:80:d2:e7:90:5a: 0e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:09:B5:DA:42:FC:A8:2F:06:F1:F9:5D:D2:77:71:29:60:7B:2D:EE X509v3 Authority Key Identifier: keyid:0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/gQm12kL8qC8G8fld0ndxKWB7Le4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.68.0.0/15 Signature Algorithm: sha256WithRSAEncryption 2f:06:af:31:e2:09:f8:08:7a:bd:3b:8c:74:28:fc:a1:1c:c3: 5b:4f:43:46:d2:83:5f:80:1e:65:46:7e:d9:ac:29:02:82:c5: d1:e1:b5:b6:31:6f:1e:5f:b0:ae:bd:9c:a5:98:5b:f1:e6:bb: 5d:b6:09:38:d4:bb:01:e8:2a:76:ce:d0:07:2b:2d:7c:e6:e2: ee:9a:82:0f:ec:91:74:df:56:18:3b:6c:27:98:92:50:62:75: b5:b7:e0:e8:8b:cf:f4:e0:36:4c:0b:a2:22:2a:f1:6c:95:33: 9f:24:f3:60:1d:f4:bc:63:4c:d3:9d:63:35:72:47:21:b2:6a: c9:64:b7:d8:3b:a3:81:32:00:64:4a:2d:eb:fb:c2:64:4a:80: a6:57:dc:89:5a:55:85:e3:53:3f:f7:4e:01:1c:ee:f2:5e:58: 02:58:a5:aa:a8:5d:f4:9c:ae:63:73:68:e7:48:16:73:ed:63: 19:39:19:b9:91:92:67:a7:ec:d5:fd:87:48:6f:68:b7:37:80: ca:7a:92:2a:15:1e:b2:04:17:b0:eb:5f:66:53:78:f3:cf:32: f2:8f:71:bf:b5:d5:4b:4d:f7:8d:ec:2a:65:a0:5c:18:0e:ee: b9:20:8a:c6:5f:a6:c2:25:ca:71:7d:33:9c:90:03:9d:01:09: 84:f9:31:f8 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt4oxJciXePiL86F0ecPDOeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMjFiNzhjZTk3YjBmNWZiM2Q4OGJmOTVjZmJiMDhiMmZi ZWE4ZTUwHhcNMjYwMTAxMDgxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTA5YjVkYTQyZmNhODJmMDZmMWY5NWRkMjc3NzEyOTYwN2IyZGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YHoea64ah22X2GgAkF9sOiDbG8Q 3tPMI6DK8XLwPoW398+tXoBzezg/DI3uW5XiCiad/TEu0WjW9K4FDNsoD6YZqGeX +Nu0LkudketAb+qwl8xBf71SUYw7lExk5WE5OFMQaaR9XZ1dEQdQV9IiCckZq+ux 593X/OP79S8QWmlFMnle4hhnDZwOcJWq3hmlJDGsTdqQB06Q78W9sepkCO4L9c/Y +FywxTg/ZwDZvCCmlBeT6cofMM0kR3Hut8zm6QNFug4Xc8F9kKeg2zH2e7wZrXpb aEWybdCwxuM2XpkXGSZlgf9wRLrihlaEDsAWT03TnJktAI8YgNLnkFoOKQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFIEJtdpC/KgvBvH5XdJ3cSlgey3uMB8GA1UdIwQY MBaAFA8ht4zpew9fs9iL+Vz7sIsvvqjlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHlHM2pPbDdEMS16Mkl2NVhQdXdpeS0tcU9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8wZjc1OTQtZjA0OC00NzNkLWEzOWEt ZGRiOWU0ZGI5OGM2LzEvZ1FtMTJrTDhxQzhHOGZsZDBuZHhLV0I3TGU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8wZjc1OTQtZjA0OC00NzNkLWEzOWEtZGRiOWU0ZGI5OGM2 LzEvRHlHM2pPbDdEMS16Mkl2NVhQdXdpeS0tcU9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBhEQwDQYJ KoZIhvcNAQELBQADggEBAC8GrzHiCfgIer07jHQo/KEcw1tPQ0bSg1+AHmVGftms KQKCxdHhtbYxbx5fsK69nKWYW/Hmu122CTjUuwHoKnbO0AcrLXzm4u6agg/skXTf Vhg7bCeYklBidbW34OiLz/TgNkwLoiIq8WyVM58k82Ad9LxjTNOdYzVyRyGyaslk t9g7o4EyAGRKLev7wmRKgKZX3IlaVYXjUz/3TgEc7vJeWAJYpaqoXfScrmNzaOdI FnPtYxk5GbmRkmen7NX9h0hvaLc3gMp6kioVHrIEF7DrX2ZTePPPMvKPcb+11UtN 943sKmWgXBgO7rkgisZfpsIlynF9M5yQA50BCYT5Mfg= -----END CERTIFICATE-----Generated at Fri Jan 9 17:24:35 2026 by rpki-client