This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/RGHcOdYtOUdSExreO5fQjQEm1IY.roa File: RGHcOdYtOUdSExreO5fQjQEm1IY.roa (raw, json) Hash identifier: ea7dio6/Ea9LAzifs1hgYKHIsXsHurYaSE1dKE2ni0Y= Subject key identifier: 44:61:DC:39:D6:2D:39:47:52:13:1A:DE:3B:97:D0:8D:01:26:D4:86 Certificate issuer: /CN=f2807f280da99569eca24346babe9dc85ac13240 Certificate serial: 019B7758D7912D6B09AC12FAFFEDDB9EAD22 Authority key identifier: F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/RGHcOdYtOUdSExreO5fQjQEm1IY.roa Signing time: Thu 01 Jan 2026 02:17:49 +0000 ROA not before: Thu 01 Jan 2026 02:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 18622 IP address blocks: 2a02:e38:4100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d7:91:2d:6b:09:ac:12:fa:ff:ed:db:9e:ad:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2807f280da99569eca24346babe9dc85ac13240 Validity Not Before: Jan 1 02:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4461dc39d62d394752131ade3b97d08d0126d486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:76:4c:3c:01:88:33:38:12:64:f3:61:ff:07: 19:d7:9a:aa:d7:cc:b3:66:3d:40:d3:76:4f:e8:a1: c7:64:97:f3:94:3d:d6:06:56:25:86:34:25:38:2a: 63:4f:81:53:5d:0f:27:41:10:0d:8b:13:38:cc:72: 27:01:63:7f:e6:82:7c:35:17:7d:72:1c:ba:5b:bd: 96:63:81:8d:07:8b:c1:9e:11:34:4e:60:a3:ed:9e: cb:65:c2:36:55:52:9a:01:c4:a6:d0:79:64:c2:9b: 9b:6a:16:0d:83:ce:72:66:83:9f:47:9c:e5:44:1c: b9:6f:26:e6:de:67:f2:d0:3f:a2:c8:a4:b2:93:87: 48:aa:4d:70:3d:ae:a9:f4:50:0f:d2:5a:60:e9:0e: 76:e9:06:e8:be:bb:97:d2:af:5a:b0:35:a2:f9:64: ec:be:3e:ea:3c:73:7f:08:4a:40:7a:8d:c3:6e:c7: 55:0d:ab:e9:8b:07:0b:48:2d:cd:e0:46:99:7e:5c: ff:b7:8a:07:75:7b:8b:4f:6e:38:37:0f:9c:dd:bd: 4e:4b:47:73:6a:c1:1b:52:1f:3f:2e:35:5d:37:85: 52:9a:6d:92:9d:ad:f5:26:63:cd:d7:fd:13:f2:98: 32:39:04:e4:93:b3:8f:a8:41:85:01:03:41:31:88: b3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:61:DC:39:D6:2D:39:47:52:13:1A:DE:3B:97:D0:8D:01:26:D4:86 X509v3 Authority Key Identifier: keyid:F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/RGHcOdYtOUdSExreO5fQjQEm1IY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:e38:4100::/40 Signature Algorithm: sha256WithRSAEncryption 33:88:59:d4:e6:d7:70:f1:c2:bf:b5:61:37:4c:b1:ba:07:6f: cf:9b:27:8c:1d:e6:80:7a:c6:05:0f:f5:41:3c:f6:9f:b1:a1: 15:5b:ce:cb:c3:cb:8f:6d:8a:c0:be:c1:c8:5e:79:30:61:ad: 2a:83:f6:34:a4:88:d0:c1:c5:d8:d2:62:ac:bc:4b:e4:9f:54: 23:47:9c:55:1c:06:4e:e5:3e:a1:75:2e:e7:8b:d0:9c:95:74: 63:53:dd:a3:d4:ba:cc:c0:5a:f2:e8:b8:e3:4c:ac:66:98:e2: 79:0d:73:6b:e5:d6:d0:b6:3a:d6:eb:68:d0:04:3e:6d:54:02: e6:1b:ce:e3:b0:54:dd:6b:54:54:c1:a5:80:86:13:59:a7:8c: 5b:bf:09:a9:af:6f:47:d4:66:62:2e:fe:8c:ce:c7:ce:29:a3: ce:8b:5e:d4:a6:58:d0:06:18:c4:49:97:8a:e6:9a:46:75:16: d9:6a:fb:a7:21:f7:77:ab:f5:3e:0d:49:96:2e:6d:50:83:c1: d4:64:b8:b3:d7:89:64:6f:cd:ff:09:0a:0f:7d:16:00:be:7d: 8c:d1:eb:3d:57:fe:47:61:f2:1b:5b:79:2c:98:3f:ad:3c:da: bb:cf:a5:32:3c:01:92:48:52:20:fb:61:4e:54:b5:8f:38:b5: 82:f0:5f:ae -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WNeRLWsJrBL6/+3bnq0iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyODA3ZjI4MGRhOTk1NjllY2EyNDM0NmJhYmU5ZGM4NWFj MTMyNDAwHhcNMjYwMTAxMDIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDYxZGMzOWQ2MmQzOTQ3NTIxMzFhZGUzYjk3ZDA4ZDAxMjZkNDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXZMPAGIMzgSZPNh/wcZ15qq18yz Zj1A03ZP6KHHZJfzlD3WBlYlhjQlOCpjT4FTXQ8nQRANixM4zHInAWN/5oJ8NRd9 chy6W72WY4GNB4vBnhE0TmCj7Z7LZcI2VVKaAcSm0HlkwpubahYNg85yZoOfR5zl RBy5bybm3mfy0D+iyKSyk4dIqk1wPa6p9FAP0lpg6Q526QbovruX0q9asDWi+WTs vj7qPHN/CEpAeo3DbsdVDavpiwcLSC3N4EaZflz/t4oHdXuLT244Nw+c3b1OS0dz asEbUh8/LjVdN4VSmm2Sna31JmPN1/0T8pgyOQTkk7OPqEGFAQNBMYizywIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFERh3DnWLTlHUhMa3juX0I0BJtSGMB8GA1UdIwQY MBaAFPKAfygNqZVp7KJDRrq+nchawTJAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG9CX0tBMnBsV25zb2tOR3VyNmR5RnJCTWtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy83YjBhODUtOTY3Ny00ZDAzLWFmYjYt YTlmYWY2YTI2NDI2LzEvUkdIY09kWXRPVWRTRXhyZU81ZlFqUUVtMUlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy83YjBhODUtOTY3Ny00ZDAzLWFmYjYtYTlmYWY2YTI2NDI2 LzEvOG9CX0tBMnBsV25zb2tOR3VyNmR5RnJCTWtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgIOOEEw DQYJKoZIhvcNAQELBQADggEBADOIWdTm13Dxwr+1YTdMsboHb8+bJ4wd5oB6xgUP 9UE89p+xoRVbzsvDy49tisC+wcheeTBhrSqD9jSkiNDBxdjSYqy8S+SfVCNHnFUc Bk7lPqF1LueL0JyVdGNT3aPUuszAWvLouONMrGaY4nkNc2vl1tC2OtbraNAEPm1U AuYbzuOwVN1rVFTBpYCGE1mnjFu/Camvb0fUZmIu/ozOx84po86LXtSmWNAGGMRJ l4rmmkZ1Ftlq+6ch93er9T4NSZYubVCDwdRkuLPXiWRvzf8JCg99FgC+fYzR6z1X /kdh8htbeSyYP6082rvPpTI8AZJIUiD7YU5UtY84tYLwX64= -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:17 2026 by rpki-client