This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/gS3iiGFApTHDCIfFhx1EtF8qVC8.roa File: gS3iiGFApTHDCIfFhx1EtF8qVC8.roa (raw, json) Hash identifier: AM6jnqVpEm+WYY4ZOUaeap/f8QliHSoQXDrak2F6D9w= Subject key identifier: 81:2D:E2:88:61:40:A5:31:C3:08:87:C5:87:1D:44:B4:5F:2A:54:2F Certificate issuer: /CN=88b2cb04932060569c9720687ded891c34ebb6d5 Certificate serial: 019B7A59FB32CF1CEDA360D6D8BAF6762735 Authority key identifier: 88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/gS3iiGFApTHDCIfFhx1EtF8qVC8.roa Signing time: Thu 01 Jan 2026 16:17:55 +0000 ROA not before: Thu 01 Jan 2026 16:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203415 IP address blocks: 2001:67c:228c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:fb:32:cf:1c:ed:a3:60:d6:d8:ba:f6:76:27:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88b2cb04932060569c9720687ded891c34ebb6d5 Validity Not Before: Jan 1 16:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=812de2886140a531c30887c5871d44b45f2a542f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:25:94:f1:fd:92:5b:ef:e1:1e:ae:08:28:ee: d3:2a:18:b3:94:14:db:97:4f:2c:8e:9b:29:24:0e: be:ee:66:a0:10:51:72:ac:a5:3d:a1:6e:b3:c2:9e: 53:65:04:df:f9:f9:1c:a4:ea:9c:36:d0:96:4e:9b: 2d:4f:7a:e1:f9:30:83:ab:17:57:93:e3:93:48:43: 6f:bd:04:3a:9d:fe:a6:6c:46:67:0c:43:f7:19:3e: 69:ad:5f:90:83:0d:15:3a:08:90:87:c5:b8:6e:56: e6:a8:4d:cf:af:92:94:5d:88:44:e0:2b:65:9b:c3: 39:93:86:72:18:43:41:60:52:2d:29:43:a8:fc:10: 3e:51:9c:e6:ce:7a:8d:1d:89:38:03:e5:0d:10:d7: c6:87:a9:d2:14:35:52:ff:82:05:c4:90:49:e8:4a: df:3a:20:71:ba:dc:cf:58:d0:d0:ae:f7:e1:18:80: 91:f7:e6:40:f6:92:9c:c5:1c:9e:3b:75:78:7c:13: cd:f0:1f:7a:05:54:22:64:32:5b:56:d4:82:14:a2: 36:2b:e6:ac:24:cc:1a:e1:2f:88:2c:4c:2a:fb:86: 3f:8c:55:38:8c:59:af:9d:17:fc:c6:ed:5a:72:b3: bc:e3:94:30:d1:6c:56:29:da:ac:7b:4e:8c:a4:1b: cb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:2D:E2:88:61:40:A5:31:C3:08:87:C5:87:1D:44:B4:5F:2A:54:2F X509v3 Authority Key Identifier: keyid:88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/gS3iiGFApTHDCIfFhx1EtF8qVC8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:228c::/48 Signature Algorithm: sha256WithRSAEncryption 8f:dc:ba:2a:c7:52:d9:fa:d7:8e:96:25:14:1e:53:db:88:cd: 8a:99:d0:8e:a7:ec:78:8b:fd:64:cb:69:a3:3a:f2:9b:41:1e: b2:3b:2d:60:52:a3:3f:e6:87:8f:61:4f:c0:b5:5f:e3:52:53: 4e:df:89:bc:71:24:22:b9:7e:60:ad:d2:74:aa:27:5d:15:1b: 75:6a:45:23:c8:87:d3:6e:98:94:a7:d8:98:17:16:52:89:d4: ff:01:5d:e1:33:91:e3:f3:97:05:be:b8:de:e8:34:09:12:69: 31:1c:c6:89:28:80:43:3b:8f:2f:db:a1:7b:f2:14:01:03:2b: 79:b1:d3:a7:98:e4:4c:1c:4f:48:75:a2:1b:a6:5c:ea:cf:86: 30:92:69:12:a2:45:d4:b2:00:3f:3d:3d:e5:d8:79:2f:72:9d: 23:8c:54:4f:7f:7a:3e:8e:41:d1:9f:a4:55:9f:de:cb:cc:58: 64:0a:d8:cd:53:40:3f:2f:70:91:9c:b7:52:3b:e5:b4:70:d0: 4d:a2:4d:3f:85:6c:88:14:e1:57:67:3e:40:32:57:5e:ee:87: a2:8f:69:c8:1c:a1:af:9d:1b:5e:79:56:34:4c:4e:76:9c:22: b6:22:b0:44:86:19:4f:39:46:20:8f:3e:05:f5:b7:77:7d:26: 4e:6c:20:18 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6Wfsyzxzto2DW2Lr2dic1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YjJjYjA0OTMyMDYwNTY5Yzk3MjA2ODdkZWQ4OTFjMzRl YmI2ZDUwHhcNMjYwMTAxMTYxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTJkZTI4ODYxNDBhNTMxYzMwODg3YzU4NzFkNDRiNDVmMmE1NDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSWU8f2SW+/hHq4IKO7TKhizlBTb l08sjpspJA6+7magEFFyrKU9oW6zwp5TZQTf+fkcpOqcNtCWTpstT3rh+TCDqxdX k+OTSENvvQQ6nf6mbEZnDEP3GT5prV+Qgw0VOgiQh8W4blbmqE3Pr5KUXYhE4Ctl m8M5k4ZyGENBYFItKUOo/BA+UZzmznqNHYk4A+UNENfGh6nSFDVS/4IFxJBJ6Erf OiBxutzPWNDQrvfhGICR9+ZA9pKcxRyeO3V4fBPN8B96BVQiZDJbVtSCFKI2K+as JMwa4S+ILEwq+4Y/jFU4jFmvnRf8xu1acrO845Qw0WxWKdqse06MpBvLDQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIEt4ohhQKUxwwiHxYcdRLRfKlQvMB8GA1UdIwQY MBaAFIiyywSTIGBWnJcgaH3tiRw067bVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUxMTEJKTWdZRmFjbHlCb2ZlMkpIRFRydHRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iYTU1OWQtZTFiYy00NzI3LTgyZGMt NGFkOGRhNDdjOWE2LzEvZ1MzaWlHRkFwVEhEQ0lmRmh4MUV0RjhxVkM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9iYTU1OWQtZTFiYy00NzI3LTgyZGMtNGFkOGRhNDdjOWE2 LzEvaUxMTEJKTWdZRmFjbHlCb2ZlMkpIRFRydHRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCKM MA0GCSqGSIb3DQEBCwUAA4IBAQCP3Loqx1LZ+teOliUUHlPbiM2KmdCOp+x4i/1k y2mjOvKbQR6yOy1gUqM/5oePYU/AtV/jUlNO34m8cSQiuX5grdJ0qiddFRt1akUj yIfTbpiUp9iYFxZSidT/AV3hM5Hj85cFvrje6DQJEmkxHMaJKIBDO48v26F78hQB Ayt5sdOnmORMHE9IdaIbplzqz4YwkmkSokXUsgA/PT3l2Hkvcp0jjFRPf3o+jkHR n6RVn97LzFhkCtjNU0A/L3CRnLdSO+W0cNBNok0/hWyIFOFXZz5AMlde7oeij2nI HKGvnRteeVY0TE52nCK2IrBEhhlPOUYgjz4F9bd3fSZObCAY -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:17 2026 by rpki-client