This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/GKyDs47a7BqJFaT8Ozcx1DPKrA4.roa File: GKyDs47a7BqJFaT8Ozcx1DPKrA4.roa (raw, json) Hash identifier: IeQFtuvzwY+Djd9V29XWo6xDkNMsoIv44LxRAtukIHg= Subject key identifier: 18:AC:83:B3:8E:DA:EC:1A:89:15:A4:FC:3B:37:31:D4:33:CA:AC:0E Certificate issuer: /CN=f5314c1f9e1193c2025cb672b523573978d254d9 Certificate serial: 019B79ED440C62B35309B3492B5853970CA6 Authority key identifier: F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/GKyDs47a7BqJFaT8Ozcx1DPKrA4.roa Signing time: Thu 01 Jan 2026 14:19:11 +0000 ROA not before: Thu 01 Jan 2026 14:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20626 IP address blocks: 2001:67c:2524::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:44:0c:62:b3:53:09:b3:49:2b:58:53:97:0c:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5314c1f9e1193c2025cb672b523573978d254d9 Validity Not Before: Jan 1 14:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18ac83b38edaec1a8915a4fc3b3731d433caac0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:39:f3:61:e9:fa:75:be:7f:f3:06:09:30:f4: 48:5a:35:28:18:60:f4:0c:98:e4:95:7c:77:13:53: 3a:ea:1e:be:fa:42:db:11:33:ff:01:e1:67:2a:36: 68:29:88:ac:82:04:42:58:ba:a5:fe:f0:c1:f0:c1: 58:ad:04:ec:73:f7:1e:02:53:c6:fe:e5:53:6d:e4: b7:5a:47:26:83:3b:e4:ea:91:8f:ed:c3:e0:cd:46: ac:b6:5a:65:2c:87:19:59:b0:85:0a:f8:93:bb:8c: 79:69:52:16:2d:73:a7:b9:c5:96:37:fb:8f:97:af: c4:94:0e:fe:7f:15:3b:6a:f6:5b:1b:18:35:4f:28: 04:27:1c:6b:1b:de:9e:d5:cc:7f:77:7e:8c:06:2a: 1d:ef:24:0d:76:f3:a6:7b:a2:61:62:1f:81:48:9c: fb:c0:eb:91:73:3c:a2:63:a2:28:1d:cb:ed:ed:ac: e8:0b:19:3c:0e:a8:c4:dd:69:ce:a7:98:44:70:4a: 71:aa:c1:62:3a:b0:79:64:fd:48:df:4a:f1:1a:6c: 34:b0:67:57:b3:66:c2:1b:51:4e:4b:02:82:ed:8b: 43:af:17:66:ce:f6:0a:40:41:40:14:02:70:3b:14: 39:60:81:ca:c1:ab:75:0e:71:83:d6:fc:01:8c:3e: 0c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:AC:83:B3:8E:DA:EC:1A:89:15:A4:FC:3B:37:31:D4:33:CA:AC:0E X509v3 Authority Key Identifier: keyid:F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/GKyDs47a7BqJFaT8Ozcx1DPKrA4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2524::/48 Signature Algorithm: sha256WithRSAEncryption 6a:1d:29:03:5f:64:3d:eb:8b:09:bc:06:2d:cf:cf:0b:e6:80: 2d:41:56:af:9e:dc:90:dc:18:7b:82:7a:49:80:d9:12:dc:2c: 0d:80:70:b0:2f:f0:12:1a:52:4d:e3:d4:67:ff:58:1c:a6:31: 02:73:11:f6:57:d4:50:0c:8c:d3:bb:d4:81:3c:c7:a1:95:03: bc:91:8c:f6:d8:e8:3a:6d:d1:ba:0a:bc:5b:07:5b:58:65:68: 2e:ae:c5:8e:f0:8a:b8:c5:a9:cc:90:97:78:cc:ad:34:ab:b1: 5f:52:90:bb:e7:98:93:d2:0d:dd:fe:e5:ad:cd:26:40:4b:52: 5f:17:16:29:e7:9b:04:29:54:ad:c2:11:7d:d8:b0:0d:a9:cb: 68:96:54:78:9e:a7:3e:d1:29:ed:54:2a:bf:37:b9:9e:79:ab: c3:fa:ea:67:e6:fb:ef:8a:de:94:e6:a3:94:08:08:10:2b:73: 83:a9:d1:52:6d:aa:aa:01:08:01:30:ae:8d:14:e5:00:6c:b0: 15:c2:76:ff:66:f6:79:08:7d:ee:77:ce:56:9b:26:e3:53:1f: e7:e4:77:38:ab:6a:6b:f1:44:ca:1a:a5:c6:b6:20:0f:ea:0d: 26:46:4d:89:6d:8e:0c:7c:36:0c:39:1e:23:08:3e:bc:2a:1c: b3:05:bf:34 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57UQMYrNTCbNJK1hTlwymMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MzE0YzFmOWUxMTkzYzIwMjVjYjY3MmI1MjM1NzM5Nzhk MjU0ZDkwHhcNMjYwMTAxMTQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGFjODNiMzhlZGFlYzFhODkxNWE0ZmMzYjM3MzFkNDMzY2FhYzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjnzYen6db5/8wYJMPRIWjUoGGD0 DJjklXx3E1M66h6++kLbETP/AeFnKjZoKYisggRCWLql/vDB8MFYrQTsc/ceAlPG /uVTbeS3Wkcmgzvk6pGP7cPgzUastlplLIcZWbCFCviTu4x5aVIWLXOnucWWN/uP l6/ElA7+fxU7avZbGxg1TygEJxxrG96e1cx/d36MBiod7yQNdvOme6JhYh+BSJz7 wOuRczyiY6IoHcvt7azoCxk8DqjE3WnOp5hEcEpxqsFiOrB5ZP1I30rxGmw0sGdX s2bCG1FOSwKC7YtDrxdmzvYKQEFAFAJwOxQ5YIHKwat1DnGD1vwBjD4MTQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBisg7OO2uwaiRWk/Ds3MdQzyqwOMB8GA1UdIwQY MBaAFPUxTB+eEZPCAly2crUjVzl40lTZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVRGTUg1NFJrOElDWExaeXRTTlhPWGpTVk5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8xZDA5ZTYtYWU3Yi00MzRjLTk5ZWMt NzM4Yzc0OTJmNzY4LzEvR0t5RHM0N2E3QnFKRmFUOE96Y3gxRFBLckE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8xZDA5ZTYtYWU3Yi00MzRjLTk5ZWMtNzM4Yzc0OTJmNzY4 LzEvOVRGTUg1NFJrOElDWExaeXRTTlhPWGpTVk5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCUk MA0GCSqGSIb3DQEBCwUAA4IBAQBqHSkDX2Q964sJvAYtz88L5oAtQVavntyQ3Bh7 gnpJgNkS3CwNgHCwL/ASGlJN49Rn/1gcpjECcxH2V9RQDIzTu9SBPMehlQO8kYz2 2Og6bdG6CrxbB1tYZWgursWO8Iq4xanMkJd4zK00q7FfUpC755iT0g3d/uWtzSZA S1JfFxYp55sEKVStwhF92LANqctollR4nqc+0SntVCq/N7meeavD+upn5vvvit6U 5qOUCAgQK3ODqdFSbaqqAQgBMK6NFOUAbLAVwnb/ZvZ5CH3ud85WmybjUx/n5Hc4 q2pr8UTKGqXGtiAP6g0mRk2JbY4MfDYMOR4jCD68KhyzBb80 -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:26 2026 by rpki-client