This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/GItA89gTg0p-mLBeGLPJPcYa2v0.roa File: GItA89gTg0p-mLBeGLPJPcYa2v0.roa (raw, json) Hash identifier: EpM8bV8r7JZ4MZME62WBG/o48GsiiOJyISRSLG6lvvA= Subject key identifier: 18:8B:40:F3:D8:13:83:4A:7E:98:B0:5E:18:B3:C9:3D:C6:1A:DA:FD Certificate issuer: /CN=ed21a3f312a49f3e9d8c6c44c9de133a9ed877ea Certificate serial: 019AEB1EE714DC23774BD1B212CC2F9DB17A Authority key identifier: ED:21:A3:F3:12:A4:9F:3E:9D:8C:6C:44:C9:DE:13:3A:9E:D8:77:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7SGj8xKknz6djGxEyd4TOp7Yd-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/GItA89gTg0p-mLBeGLPJPcYa2v0.roa Signing time: Thu 04 Dec 2025 20:47:42 +0000 ROA not before: Thu 04 Dec 2025 20:47:42 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203860 IP address blocks: 2001:67c:a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.mft rsync://rpki.ripe.net/repository/DEFAULT/7SGj8xKknz6djGxEyd4TOp7Yd-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:eb:1e:e7:14:dc:23:77:4b:d1:b2:12:cc:2f:9d:b1:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed21a3f312a49f3e9d8c6c44c9de133a9ed877ea Validity Not Before: Dec 4 20:47:42 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=188b40f3d813834a7e98b05e18b3c93dc61adafd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c9:ba:34:44:1b:bd:0b:3a:71:e5:e8:19:71: a4:15:6f:ca:24:8b:cc:34:87:82:81:58:c6:54:d5: fa:45:fa:52:76:ab:cd:e1:a6:ab:9e:d2:90:61:58: e7:ea:c1:86:87:e9:a1:1d:ad:c3:0b:41:b1:b4:03: 12:9a:67:38:0a:81:06:5f:fe:45:d5:48:58:76:9d: 9d:c2:e5:b5:f2:c1:51:0c:8f:b8:10:7a:8c:93:36: 49:34:df:54:7c:7d:30:d4:69:fe:8b:9b:e6:44:da: a9:96:8d:65:22:04:ab:7f:28:2a:1c:cc:95:df:74: c1:fc:0a:79:c4:1a:a0:52:b3:4d:33:2b:75:3e:e4: ba:b1:f2:38:06:85:1a:67:24:ab:16:47:84:e5:b9: 56:00:06:1d:7e:3e:c4:e9:70:68:a5:68:cd:55:35: 27:01:3a:42:c8:5b:01:86:1d:e2:80:85:30:16:d0: 80:c1:15:79:8e:50:a5:9b:27:f1:34:2f:08:6b:8d: c9:71:22:bb:1d:db:9f:ad:c4:31:9c:40:cd:3b:55: 74:fa:0e:d2:9c:af:d5:12:5b:28:1c:98:85:b3:18: 1f:3a:4d:09:0a:57:80:09:eb:a1:c3:62:ea:4a:19: 90:20:50:0f:16:ea:78:15:e9:9e:d9:f3:8a:32:f7: 10:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:8B:40:F3:D8:13:83:4A:7E:98:B0:5E:18:B3:C9:3D:C6:1A:DA:FD X509v3 Authority Key Identifier: keyid:ED:21:A3:F3:12:A4:9F:3E:9D:8C:6C:44:C9:DE:13:3A:9E:D8:77:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7SGj8xKknz6djGxEyd4TOp7Yd-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/GItA89gTg0p-mLBeGLPJPcYa2v0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:a0::/48 Signature Algorithm: sha256WithRSAEncryption 1c:95:ea:62:de:6a:6a:9a:69:ed:38:2a:ce:ed:6a:0a:c6:c8: bb:c3:2c:60:52:27:b2:86:70:83:1b:e7:84:55:0b:f0:19:05: 66:5a:e3:ae:10:21:a1:1c:6d:5b:58:09:db:d9:f3:b5:50:d0: d9:8a:57:2f:88:ce:03:c6:e0:bd:ed:53:58:7b:8d:2a:a7:ad: 8c:24:f5:b7:a8:6e:8b:a3:50:04:38:36:e2:2a:f1:18:29:b6: c8:23:a6:86:7b:1e:96:c0:01:3f:46:0e:74:f5:b2:42:75:52: f4:9b:af:c9:3c:f8:c6:56:bf:b2:72:fb:9d:3b:d1:70:e6:fd: 6f:f5:fe:e7:16:24:35:ab:68:98:06:1f:55:1a:36:13:9a:f5: f5:d4:71:12:24:43:01:9f:fe:1e:c7:b4:93:2b:d7:b8:87:c2: 31:ba:d1:f0:06:39:d6:4e:21:5c:f3:c0:c0:3d:05:a7:08:e9: d1:fc:e7:bd:1a:3d:a8:f9:fa:bf:b4:f5:91:3f:f0:a4:78:c8: 28:ec:1f:f9:59:c3:19:31:dd:65:ed:51:a2:df:06:cc:f4:50: fd:91:e1:e9:59:d0:1f:3a:88:4f:2c:db:ba:10:af:df:96:18: 87:13:1d:38:4c:35:9b:77:ec:18:6d:7c:83:a9:b3:73:49:2a: 9f:a9:cc:35 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZrrHucU3CN3S9GyEswvnbF6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMjFhM2YzMTJhNDlmM2U5ZDhjNmM0NGM5ZGUxMzNhOWVk ODc3ZWEwHhcNMjUxMjA0MjA0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODhiNDBmM2Q4MTM4MzRhN2U5OGIwNWUxOGIzYzkzZGM2MWFkYWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8m6NEQbvQs6ceXoGXGkFW/KJIvM NIeCgVjGVNX6RfpSdqvN4aarntKQYVjn6sGGh+mhHa3DC0GxtAMSmmc4CoEGX/5F 1UhYdp2dwuW18sFRDI+4EHqMkzZJNN9UfH0w1Gn+i5vmRNqplo1lIgSrfygqHMyV 33TB/Ap5xBqgUrNNMyt1PuS6sfI4BoUaZySrFkeE5blWAAYdfj7E6XBopWjNVTUn ATpCyFsBhh3igIUwFtCAwRV5jlClmyfxNC8Ia43JcSK7HdufrcQxnEDNO1V0+g7S nK/VElsoHJiFsxgfOk0JCleACeuhw2LqShmQIFAPFup4Feme2fOKMvcQuQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBiLQPPYE4NKfpiwXhizyT3GGtr9MB8GA1UdIwQY MBaAFO0ho/MSpJ8+nYxsRMneEzqe2HfqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1NHajh4S2tuejZkakd4RXlkNFRPcDdZZC1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9jYjM1MGEtN2Y3NC00YTZiLWJhNTct ZGYxMzRmMmEyZTZjLzEvR0l0QTg5Z1RnMHAtbUxCZUdMUEpQY1lhMnYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9jYjM1MGEtN2Y3NC00YTZiLWJhNTctZGYxMzRmMmEyZTZj LzEvN1NHajh4S2tuejZkakd4RXlkNFRPcDdZZC1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfACg MA0GCSqGSIb3DQEBCwUAA4IBAQAclepi3mpqmmntOCrO7WoKxsi7wyxgUieyhnCD G+eEVQvwGQVmWuOuECGhHG1bWAnb2fO1UNDZilcviM4DxuC97VNYe40qp62MJPW3 qG6Lo1AEODbiKvEYKbbII6aGex6WwAE/Rg509bJCdVL0m6/JPPjGVr+ycvudO9Fw 5v1v9f7nFiQ1q2iYBh9VGjYTmvX11HESJEMBn/4ex7STK9e4h8IxutHwBjnWTiFc 88DAPQWnCOnR/Oe9Gj2o+fq/tPWRP/CkeMgo7B/5WcMZMd1l7VGi3wbM9FD9keHp WdAfOohPLNu6EK/flhiHEx04TDWbd+wYbXyDqbNzSSqfqcw1 -----END CERTIFICATE-----Generated at Sat Dec 6 12:54:19 2025 by rpki-client