This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/GQ7W42EsElCP2Qj0UZVoRC5t9II.roa File: GQ7W42EsElCP2Qj0UZVoRC5t9II.roa (raw, json) Hash identifier: /UuepQO5GWEwYKHxizYeXgs9DYCR+SoHKZBIXXza2Jk= Subject key identifier: 19:0E:D6:E3:61:2C:12:50:8F:D9:08:F4:51:95:68:44:2E:6D:F4:82 Certificate issuer: /CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9 Certificate serial: 019B78A36C30E99024AA616B78C752B1C1F4 Authority key identifier: BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/GQ7W42EsElCP2Qj0UZVoRC5t9II.roa Signing time: Thu 01 Jan 2026 08:18:54 +0000 ROA not before: Thu 01 Jan 2026 08:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42927 IP address blocks: 2a07:a440::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:6c:30:e9:90:24:aa:61:6b:78:c7:52:b1:c1:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9 Validity Not Before: Jan 1 08:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=190ed6e3612c12508fd908f4519568442e6df482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:66:14:af:78:36:e9:d6:58:3c:1f:93:71:fa: ef:6e:56:8c:79:84:69:f8:27:c1:5b:4c:73:15:9d: 0a:36:3a:62:a1:6e:64:fd:cc:48:3e:14:86:23:c4: 48:b6:63:e9:ee:2f:a5:3e:30:c8:82:b2:51:b9:03: e1:da:17:a6:41:93:61:d1:80:77:6f:51:78:21:9d: 29:8d:45:7c:ca:18:71:ef:ee:b4:c6:aa:ce:21:d6: 29:b8:69:cd:c2:9a:9e:c7:ba:7f:dc:d0:f8:b9:51: c2:56:95:22:ea:03:a2:c2:d1:1e:c6:85:47:3b:d7: 3e:fa:05:21:fa:a3:6c:8f:a1:e6:37:5f:d9:d8:8c: 84:af:13:09:c6:c5:c0:09:99:24:71:13:98:d3:5f: af:9a:32:f0:54:9e:a2:34:67:9d:de:2e:d7:47:c6: ba:06:db:0f:b8:a2:24:10:af:a7:f6:a7:97:9f:60: ca:9c:4f:49:69:64:62:a1:ea:60:35:41:df:74:9d: 23:57:24:44:3f:94:42:34:6b:cd:b3:05:ae:42:3a: a5:89:bb:9d:de:44:f9:09:d8:6b:e6:f3:e2:5a:05: 18:ab:dc:db:61:8b:64:b1:19:43:8c:8e:20:4d:27: f1:2a:a5:b3:84:ed:29:77:39:41:9b:b0:5c:03:bc: ae:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0E:D6:E3:61:2C:12:50:8F:D9:08:F4:51:95:68:44:2E:6D:F4:82 X509v3 Authority Key Identifier: keyid:BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/GQ7W42EsElCP2Qj0UZVoRC5t9II.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:a440::/30 Signature Algorithm: sha256WithRSAEncryption 24:11:23:b6:87:df:0a:5e:ff:79:2b:7e:e0:95:ff:fe:fb:c9: 82:f6:b9:ce:87:0c:26:92:12:62:c0:9d:f5:3b:b5:11:94:1a: 50:62:2c:e4:5a:d0:b8:45:d9:3b:de:9f:37:f1:ee:f7:21:3c: 96:a6:bf:4e:a6:1c:57:13:c0:45:6a:76:16:c3:b8:af:ec:a4: d4:02:fc:c6:8c:fe:09:fb:ef:90:8f:22:dc:f3:25:c6:d3:b3: 2c:8d:ba:44:6f:23:56:e5:35:f8:1b:78:e1:b8:b3:1b:bd:75: 92:2b:35:7f:06:53:91:34:1d:cc:16:d2:9a:75:4a:21:75:8e: ef:35:c4:17:31:a5:e5:80:25:db:2b:76:09:03:b3:69:a9:f6: 3f:ae:52:ad:c0:88:bf:07:19:1e:a1:6b:10:d7:71:69:ad:55: d3:c1:e4:5d:a9:f6:ae:dd:68:d7:5f:de:ae:9c:53:8f:67:64: 2c:cf:1a:7a:99:55:a0:89:a4:61:ab:9a:93:58:5a:08:65:5f: b7:d9:93:5d:1d:69:54:49:0b:47:33:96:e0:42:25:3f:8e:0a: 04:11:0d:47:63:35:b2:9b:e0:13:49:d2:05:ea:60:1d:f2:8b: 53:c3:2b:8b:26:a1:9a:f0:ee:72:d2:23:2f:28:95:2a:e1:4c: 6b:48:9d:ec -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4o2ww6ZAkqmFreMdSscH0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYTZlOTZmY2E3YTI3ODNjYjk3MjFlYmI2MmRlMWI1MzZj MTYzYTkwHhcNMjYwMTAxMDgxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTBlZDZlMzYxMmMxMjUwOGZkOTA4ZjQ1MTk1Njg0NDJlNmRmNDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62YUr3g26dZYPB+TcfrvblaMeYRp +CfBW0xzFZ0KNjpioW5k/cxIPhSGI8RItmPp7i+lPjDIgrJRuQPh2hemQZNh0YB3 b1F4IZ0pjUV8yhhx7+60xqrOIdYpuGnNwpqex7p/3ND4uVHCVpUi6gOiwtEexoVH O9c++gUh+qNsj6HmN1/Z2IyErxMJxsXACZkkcROY01+vmjLwVJ6iNGed3i7XR8a6 BtsPuKIkEK+n9qeXn2DKnE9JaWRioepgNUHfdJ0jVyREP5RCNGvNswWuQjqlibud 3kT5Cdhr5vPiWgUYq9zbYYtksRlDjI4gTSfxKqWzhO0pdzlBm7BcA7yu+wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFBkO1uNhLBJQj9kI9FGVaEQubfSCMB8GA1UdIwQY MBaAFL+m6W/KeieDy5ch67Yt4bU2wWOpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjZicGI4cDZKNFBMbHlIcnRpM2h0VGJCWTZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84NTZlYTQtZGU1YS00ZjExLTgyMjgt ODdiZjZmZGJlMTkzLzEvR1E3VzQyRXNFbENQMlFqMFVaVm9SQzV0OUlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi84NTZlYTQtZGU1YS00ZjExLTgyMjgtODdiZjZmZGJlMTkz LzEvdjZicGI4cDZKNFBMbHlIcnRpM2h0VGJCWTZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCKgekQDAN BgkqhkiG9w0BAQsFAAOCAQEAJBEjtoffCl7/eSt+4JX//vvJgva5zocMJpISYsCd 9Tu1EZQaUGIs5FrQuEXZO96fN/Hu9yE8lqa/TqYcVxPARWp2FsO4r+yk1AL8xoz+ CfvvkI8i3PMlxtOzLI26RG8jVuU1+Bt44bizG711kis1fwZTkTQdzBbSmnVKIXWO 7zXEFzGl5YAl2yt2CQOzaan2P65SrcCIvwcZHqFrENdxaa1V08HkXan2rt1o11/e rpxTj2dkLM8aeplVoImkYauak1haCGVft9mTXR1pVEkLRzOW4EIlP44KBBENR2M1 spvgE0nSBepgHfKLU8MriyahmvDuctIjLyiVKuFMa0id7A== -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:06 2026 by rpki-client