This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/GGK7gC2Rb7_ldMAB3T3vSilrGuw.roa File: GGK7gC2Rb7_ldMAB3T3vSilrGuw.roa (raw, json) Hash identifier: 3Lkr3jjmSNfu4xmvpJepQZV62v8KdzELhqGFYD46GB4= Subject key identifier: 18:62:BB:80:2D:91:6F:BF:E5:74:C0:01:DD:3D:EF:4A:29:6B:1A:EC Certificate issuer: /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139 Certificate serial: 019B7CEE5DA9985CA2162C7490C586E95E33 Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/GGK7gC2Rb7_ldMAB3T3vSilrGuw.roa Signing time: Fri 02 Jan 2026 04:19:14 +0000 ROA not before: Fri 02 Jan 2026 04:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206785 IP address blocks: 2a00:c40:8095::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 00:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:5d:a9:98:5c:a2:16:2c:74:90:c5:86:e9:5e:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139 Validity Not Before: Jan 2 04:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1862bb802d916fbfe574c001dd3def4a296b1aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7c:b4:33:a9:48:53:ff:6d:40:bd:31:6d:96: 3a:ee:14:97:2c:91:fd:e0:63:3e:10:96:83:f8:ad: b2:ba:8a:93:8a:8e:07:23:d3:18:7f:81:00:9d:4a: b2:4e:21:af:7c:26:f2:c8:43:dd:a8:7e:bb:ac:8a: b0:d0:ba:2b:c2:86:38:e3:94:02:70:4f:df:8f:c2: 68:ad:5a:80:4b:f2:97:65:72:a4:19:e6:89:72:cc: 6a:a2:e6:d3:a3:d8:19:12:6a:0a:b3:3b:7e:09:08: 69:1c:17:02:17:c4:95:b6:f4:f0:63:3b:ab:57:48: 9e:22:11:b8:b4:18:67:65:c1:f6:ea:21:9a:21:f1: c5:b6:e0:92:0d:31:b1:84:e5:8f:c1:09:86:d8:7f: 96:7c:ec:79:3f:50:f0:ad:ce:10:44:d8:9d:6a:d4: 8d:c6:60:58:48:5d:34:cd:01:98:98:c0:46:0e:13: ad:66:a7:5f:35:3d:a3:53:e6:a4:06:aa:40:f4:2e: 9b:93:1a:c2:a1:40:29:f0:69:31:e0:0b:46:67:e8: da:3f:cb:05:7a:1b:6c:6a:d6:30:8f:75:40:e7:6d: 24:ae:cc:fe:24:79:17:43:b2:6c:c0:96:05:87:b6: 32:bb:c0:f3:7c:0b:a8:7e:43:00:0c:cc:7e:26:18: 9a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:62:BB:80:2D:91:6F:BF:E5:74:C0:01:DD:3D:EF:4A:29:6B:1A:EC X509v3 Authority Key Identifier: keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/GGK7gC2Rb7_ldMAB3T3vSilrGuw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:c40:8095::/48 Signature Algorithm: sha256WithRSAEncryption 22:16:e2:50:df:7a:68:2d:ea:05:aa:62:f6:2b:c6:2b:a0:11: a8:a9:12:54:db:e9:c9:f1:75:c8:04:fa:b5:44:9b:51:a9:91: 93:13:0c:8b:3c:b9:49:f7:1e:9b:a4:28:96:de:17:1b:19:ac: 10:df:a0:30:4f:8d:93:d6:f2:62:c8:e7:f5:7c:bf:86:92:51: 18:a7:27:76:ac:dd:15:79:cf:02:8a:2d:70:ed:ec:bb:70:7c: ce:0a:34:c8:27:2b:72:d6:7f:7b:fd:2e:e3:93:d0:dd:94:89: a1:5c:11:09:a4:14:b8:07:3d:f7:1b:e9:64:e9:bc:01:e5:8e: 5b:e7:7e:bd:38:eb:94:64:26:6e:bd:51:5c:e5:c9:23:be:59: d4:d1:9b:c5:2f:a6:9b:76:cb:6c:0e:e1:a2:d2:4f:d5:1f:97: 6d:69:a7:27:05:6d:16:15:d3:24:2c:e2:d9:2e:03:c8:2b:af: de:fc:ec:be:be:4e:8a:1c:87:6c:20:dc:38:e6:ac:62:27:35: da:bc:4d:7a:5a:c9:62:f3:6b:2d:76:1a:16:83:48:4f:75:cd: 51:35:c4:3d:06:b1:e1:cf:af:9f:66:f9:11:57:b6:eb:1f:96: dc:80:5d:a3:9b:00:d1:16:fe:af:16:dd:3b:99:b6:03:39:11: 3e:d4:5a:28 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87l2pmFyiFix0kMWG6V4zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyOTM1MmE4ZDJkZDcwYzkxZmZjZWM4ZTMyM2ZlNjlmMWU5 YTQxMzkwHhcNMjYwMTAyMDQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODYyYmI4MDJkOTE2ZmJmZTU3NGMwMDFkZDNkZWY0YTI5NmIxYWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHy0M6lIU/9tQL0xbZY67hSXLJH9 4GM+EJaD+K2yuoqTio4HI9MYf4EAnUqyTiGvfCbyyEPdqH67rIqw0LorwoY445QC cE/fj8JorVqAS/KXZXKkGeaJcsxqoubTo9gZEmoKszt+CQhpHBcCF8SVtvTwYzur V0ieIhG4tBhnZcH26iGaIfHFtuCSDTGxhOWPwQmG2H+WfOx5P1Dwrc4QRNidatSN xmBYSF00zQGYmMBGDhOtZqdfNT2jU+akBqpA9C6bkxrCoUAp8Gkx4AtGZ+jaP8sF ehtsatYwj3VA520krsz+JHkXQ7JswJYFh7Yyu8DzfAuofkMADMx+JhiaUQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBhiu4AtkW+/5XTAAd0970opaxrsMB8GA1UdIwQY MBaAFJKTUqjS3XDJH/zsjjI/5p8emkE5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3BOU3FOTGRjTWtmX095T01qX21ueDZhUVRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83YjZlZGMtYWQyMy00ZDczLWFiNTYt MGExYTM1ODk3ZjEwLzEvR0dLN2dDMlJiN19sZE1BQjNUM3ZTaWxyR3V3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi83YjZlZGMtYWQyMy00ZDczLWFiNTYtMGExYTM1ODk3ZjEw LzEva3BOU3FOTGRjTWtmX095T01qX21ueDZhUVRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgAMQICV MA0GCSqGSIb3DQEBCwUAA4IBAQAiFuJQ33poLeoFqmL2K8YroBGoqRJU2+nJ8XXI BPq1RJtRqZGTEwyLPLlJ9x6bpCiW3hcbGawQ36AwT42T1vJiyOf1fL+GklEYpyd2 rN0Vec8Cii1w7ey7cHzOCjTIJyty1n97/S7jk9DdlImhXBEJpBS4Bz33G+lk6bwB 5Y5b5369OOuUZCZuvVFc5ckjvlnU0ZvFL6abdstsDuGi0k/VH5dtaacnBW0WFdMk LOLZLgPIK6/e/Oy+vk6KHIdsINw45qxiJzXavE16Wsli82stdhoWg0hPdc1RNcQ9 BrHhz6+fZvkRV7brH5bcgF2jmwDRFv6vFt07mbYDORE+1Foo -----END CERTIFICATE-----Generated at Mon Feb 2 09:53:06 2026 by rpki-client