This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/g-q-xyU0r6niX_HcUqMnHfOWVQg.roa File: g-q-xyU0r6niX_HcUqMnHfOWVQg.roa (raw, json) Hash identifier: 3EYAH+TPHIG5maEa02mmMDsDD6AUBoN3T8wtoxwbwEg= Subject key identifier: 83:EA:BE:C7:25:34:AF:A9:E2:5F:F1:DC:52:A3:27:1D:F3:96:55:08 Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2 Certificate serial: 019B7EA6AE014FC3D63EEE2A620D0AFF92CE Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/g-q-xyU0r6niX_HcUqMnHfOWVQg.roa Signing time: Fri 02 Jan 2026 12:20:11 +0000 ROA not before: Fri 02 Jan 2026 12:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3209 IP address blocks: 2a01:800::/24 maxlen: 24 2a01:860::/32 maxlen: 32 2a01:860:1::/48 maxlen: 48 2a01:860:2::/48 maxlen: 48 2a01:860:3::/48 maxlen: 48 2a01:860:4::/48 maxlen: 48 2a01:860:5::/48 maxlen: 48 2a01:860:6::/48 maxlen: 48 2a01:860:7::/48 maxlen: 48 2a01:860:8::/48 maxlen: 48 2a01:860:9::/48 maxlen: 48 2a01:860:a::/48 maxlen: 48 2a01:867::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ae:01:4f:c3:d6:3e:ee:2a:62:0d:0a:ff:92:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2 Validity Not Before: Jan 2 12:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83eabec72534afa9e25ff1dc52a3271df3965508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:08:d2:96:53:49:2b:a5:89:80:50:4c:4b:89: 00:16:c7:54:46:0e:3c:b0:66:49:4a:ee:4e:ab:30: 81:aa:78:72:c4:58:26:7d:95:16:76:12:a9:13:63: d6:a9:f6:5d:15:0b:e2:0b:8b:c2:89:1d:b5:d4:34: f3:af:24:6f:9a:93:4d:b7:3c:ca:8f:df:fa:21:f7: 32:45:bd:29:6c:f6:d1:85:03:d7:9c:9c:ea:d1:00: bf:9f:0a:ec:af:d9:58:87:68:2f:7a:bb:0a:88:b9: d4:1c:0e:6f:fc:15:b9:03:4a:36:6d:ff:c7:a1:77: 8e:58:55:67:64:15:a0:f2:06:23:a4:23:19:39:18: 33:21:c1:c3:dd:fb:67:bc:40:84:aa:9b:8c:7d:e9: 4a:4c:a3:86:dc:44:6e:0d:e3:90:2f:13:f3:82:e6: 18:3c:78:51:9d:02:0d:45:2b:a3:e2:42:18:09:ad: 54:e6:27:b2:13:4e:0c:bd:57:11:0e:11:ae:ec:ff: 17:24:d2:cb:2d:2c:44:d1:f2:cc:72:78:c1:e9:44: 5a:c5:56:bb:76:b2:45:e5:09:e2:2f:0a:44:e9:f4: 36:bd:0b:8a:5b:46:9c:c6:a4:f7:26:16:6b:80:fb: 09:0d:c2:d6:7f:b4:f4:9e:f4:2c:77:24:45:7a:42: c7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:EA:BE:C7:25:34:AF:A9:E2:5F:F1:DC:52:A3:27:1D:F3:96:55:08 X509v3 Authority Key Identifier: keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/g-q-xyU0r6niX_HcUqMnHfOWVQg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:800::/24 Signature Algorithm: sha256WithRSAEncryption 4c:a9:6c:fb:57:e7:d9:1a:73:4e:51:16:fe:84:fe:61:72:dd: e2:80:17:e4:0c:2e:4d:13:94:57:89:64:f0:94:82:5b:93:56: 07:e6:0d:b5:c1:5b:26:7b:66:b4:ee:0b:9d:f8:c4:3d:dd:12: 6a:9b:04:ee:20:6d:3f:91:37:f8:45:be:fd:b8:28:f7:e7:c5: 28:be:af:be:6a:d5:df:60:85:e6:c8:ef:55:7f:32:19:9a:6f: 55:af:86:1f:67:8e:4c:24:89:c6:5e:71:a7:4f:96:02:e7:0d: 1b:f9:ba:88:86:a1:c1:8f:44:0c:e5:17:c2:5d:48:15:ff:42: d8:6f:96:05:aa:c1:e9:7a:d8:67:f0:bf:73:3c:c5:41:3e:40: 5b:e9:a4:d1:43:78:15:29:9a:ae:e5:ef:47:28:4a:08:86:35: f2:60:f8:ce:6b:40:fc:dd:16:dc:8a:08:d5:5d:37:bc:d3:87: 41:5d:bd:8f:a1:a9:3f:06:80:c3:75:c8:b7:41:1a:98:f0:d2: d0:5e:ce:67:e6:7a:d3:4e:3c:cb:79:7e:0c:a6:cd:60:20:d2: 56:df:1e:c5:73:d6:9a:69:93:1c:11:4d:db:81:1a:b4:7b:b7: 28:81:07:a8:88:3b:ca:22:b3:9e:8d:9e:16:3f:63:9b:a3:ac: 0f:72:05:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pq4BT8PWPu4qYg0K/5LOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYTVkOTk4NjNkYjJlNDliNDRmNmMzMjRlYjA0Mzg4ZmM3 NTE1ZDIwHhcNMjYwMTAyMTIyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2VhYmVjNzI1MzRhZmE5ZTI1ZmYxZGM1MmEzMjcxZGYzOTY1NTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAjSllNJK6WJgFBMS4kAFsdURg48 sGZJSu5OqzCBqnhyxFgmfZUWdhKpE2PWqfZdFQviC4vCiR211DTzryRvmpNNtzzK j9/6IfcyRb0pbPbRhQPXnJzq0QC/nwrsr9lYh2gversKiLnUHA5v/BW5A0o2bf/H oXeOWFVnZBWg8gYjpCMZORgzIcHD3ftnvECEqpuMfelKTKOG3ERuDeOQLxPzguYY PHhRnQINRSuj4kIYCa1U5ieyE04MvVcRDhGu7P8XJNLLLSxE0fLMcnjB6URaxVa7 drJF5QniLwpE6fQ2vQuKW0acxqT3JhZrgPsJDcLWf7T0nvQsdyRFekLHawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIPqvsclNK+p4l/x3FKjJx3zllUIMB8GA1UdIwQY MBaAFLOl2Zhj2y5JtE9sMk6wQ4j8dRXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAt ZWVjNWQ1MGVmYTk0LzEvZy1xLXh5VTByNm5pWF9IY1VxTW5IZk9XVlFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAtZWVjNWQ1MGVmYTk0 LzEvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAAjAGAwQAKgEIMA0G CSqGSIb3DQEBCwUAA4IBAQBMqWz7V+fZGnNOURb+hP5hct3igBfkDC5NE5RXiWTw lIJbk1YH5g21wVsme2a07gud+MQ93RJqmwTuIG0/kTf4Rb79uCj358Uovq++atXf YIXmyO9VfzIZmm9Vr4YfZ45MJInGXnGnT5YC5w0b+bqIhqHBj0QM5RfCXUgV/0LY b5YFqsHpethn8L9zPMVBPkBb6aTRQ3gVKZqu5e9HKEoIhjXyYPjOa0D83RbcigjV XTe804dBXb2Poak/BoDDdci3QRqY8NLQXs5n5nrTTjzLeX4Mps1gINJW3x7Fc9aa aZMcEU3bgRq0e7cogQeoiDvKIrOejZ4WP2Obo6wPcgW4 -----END CERTIFICATE-----Generated at Sun Jan 25 21:06:47 2026 by rpki-client