This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/ghUobayfx6qd_3s7xBJ-VWhtgg0.roa File: ghUobayfx6qd_3s7xBJ-VWhtgg0.roa (raw, json) Hash identifier: RCb69pi3SlQ1XiQCycaKTDLsQ2poFQYqUlsqFLWQ34I= Subject key identifier: 82:15:28:6D:AC:9F:C7:AA:9D:FF:7B:3B:C4:12:7E:55:68:6D:82:0D Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019A6D7F1A38072B9BB17C69CC8992999744 Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/ghUobayfx6qd_3s7xBJ-VWhtgg0.roa Signing time: Mon 10 Nov 2025 11:20:37 +0000 ROA not before: Mon 10 Nov 2025 11:20:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25159 IP address blocks: 2a13:93c1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6d:7f:1a:38:07:2b:9b:b1:7c:69:cc:89:92:99:97:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Nov 10 11:20:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8215286dac9fc7aa9dff7b3bc4127e55686d820d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:96:fa:79:97:2c:27:99:9b:08:55:a4:c3:2a: 0b:37:72:0b:c8:4b:0a:d5:31:c3:f7:57:b1:64:d5: b2:1e:d9:5f:47:15:c5:08:cd:97:14:e4:7e:e2:6d: 50:84:4e:79:41:2d:75:d2:77:bb:f4:86:94:d7:38: d2:d2:37:60:4d:99:34:75:c2:a6:da:b5:c8:03:0e: e8:e2:34:5c:ee:e7:66:7e:ae:6e:01:4f:ef:be:6b: 64:65:3f:e0:1f:0e:cf:de:79:05:a0:15:c6:2d:0e: 93:77:51:ee:67:fc:76:78:e7:03:e3:2f:04:20:6c: 41:1d:16:e1:c5:42:90:b1:e1:12:25:d8:7a:56:96: 58:70:72:29:ce:59:d1:ce:bd:01:e0:48:04:ec:8b: a4:d9:15:b0:41:d4:6b:47:92:b6:7d:12:ba:01:e6: 6d:54:16:e6:2a:b3:b5:a9:36:4c:fc:35:01:83:e0: c4:bc:c0:01:49:b1:eb:9d:1e:4e:ad:a7:ce:02:33: aa:64:c4:50:02:58:b5:d6:7a:c4:d0:4d:c3:c2:bd: a3:35:e2:02:9d:be:f1:9c:e9:3c:60:7a:2c:3c:4e: b8:12:ac:d5:a9:01:8a:cb:25:d6:d6:1e:c9:05:26: 31:ca:42:5b:75:81:ea:14:a6:aa:49:6e:0a:72:5d: d6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:15:28:6D:AC:9F:C7:AA:9D:FF:7B:3B:C4:12:7E:55:68:6D:82:0D X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/ghUobayfx6qd_3s7xBJ-VWhtgg0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:93c1::/32 Signature Algorithm: sha256WithRSAEncryption 0d:26:44:9d:1e:09:c1:14:2d:83:86:09:35:ad:c4:3d:9f:3f: 3f:90:09:61:9b:17:93:cf:e1:77:fa:51:96:a6:6a:f7:d2:1b: c2:2c:9f:aa:a6:f5:01:84:aa:cb:b2:a9:0a:6d:2e:43:8f:67: d9:c3:02:8b:0c:98:8b:ec:12:4d:fb:41:40:11:8d:9c:2d:7e: 41:08:f6:cb:94:27:2d:20:74:ac:cd:97:3a:e5:1b:46:a1:5d: cc:90:e8:07:50:ca:25:a5:03:53:03:73:13:51:15:88:9d:14: fd:3b:e1:9b:7b:47:a8:1a:f5:b1:30:e2:10:41:9c:b6:24:5a: ec:c8:50:ac:4d:f9:e3:29:01:95:0b:13:c7:59:5f:05:7a:7b: 56:8f:94:30:ac:62:13:7f:da:f4:66:08:04:3d:ee:e9:88:09: 27:5b:d6:19:bb:30:40:43:90:09:5d:2c:30:65:d5:57:89:c6: 7c:35:d4:d1:68:4e:6b:67:1b:a5:4f:31:99:a5:65:08:9b:f8: 59:72:07:b1:05:5d:d9:22:05:28:aa:74:21:26:78:e0:34:51: 08:48:3c:a7:3c:01:20:1a:b6:fe:e6:34:fc:8a:05:d2:48:4d: 4a:c7:91:30:7f:a5:f6:7f:27:ee:09:68:ed:36:02:37:8e:c9: a8:68:2f:f6 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZptfxo4ByubsXxpzImSmZdEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjUxMTEwMTEyMDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjE1Mjg2ZGFjOWZjN2FhOWRmZjdiM2JjNDEyN2U1NTY4NmQ4MjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupb6eZcsJ5mbCFWkwyoLN3ILyEsK 1THD91exZNWyHtlfRxXFCM2XFOR+4m1QhE55QS110ne79IaU1zjS0jdgTZk0dcKm 2rXIAw7o4jRc7udmfq5uAU/vvmtkZT/gHw7P3nkFoBXGLQ6Td1HuZ/x2eOcD4y8E IGxBHRbhxUKQseESJdh6VpZYcHIpzlnRzr0B4EgE7Iuk2RWwQdRrR5K2fRK6AeZt VBbmKrO1qTZM/DUBg+DEvMABSbHrnR5OrafOAjOqZMRQAli11nrE0E3Dwr2jNeIC nb7xnOk8YHosPE64EqzVqQGKyyXW1h7JBSYxykJbdYHqFKaqSW4Kcl3WmQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFIIVKG2sn8eqnf97O8QSflVobYINMB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvZ2hVb2JheWZ4NnFkXzNzN3hCSi1WV2h0Z2cwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhOTwTAN BgkqhkiG9w0BAQsFAAOCAQEADSZEnR4JwRQtg4YJNa3EPZ8/P5AJYZsXk8/hd/pR lqZq99Ibwiyfqqb1AYSqy7KpCm0uQ49n2cMCiwyYi+wSTftBQBGNnC1+QQj2y5Qn LSB0rM2XOuUbRqFdzJDoB1DKJaUDUwNzE1EViJ0U/Tvhm3tHqBr1sTDiEEGctiRa 7MhQrE354ykBlQsTx1lfBXp7Vo+UMKxiE3/a9GYIBD3u6YgJJ1vWGbswQEOQCV0s MGXVV4nGfDXU0WhOa2cbpU8xmaVlCJv4WXIHsQVd2SIFKKp0ISZ44DRRCEg8pzwB IBq2/uY0/IoF0khNSseRMH+l9n8n7glo7TYCN47JqGgv9g== -----END CERTIFICATE-----Generated at Fri Dec 5 08:36:45 2025 by rpki-client