This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/gn4_joE3Kg7Iuvtn8_CsNV3N_rY.roa File: gn4_joE3Kg7Iuvtn8_CsNV3N_rY.roa (raw, json) Hash identifier: inZ7mhN1iTFUjJSaH+6rFZpFzgOqpsU8gKqes5JxewU= Subject key identifier: 82:7E:3F:8E:81:37:2A:0E:C8:BA:FB:67:F3:F0:AC:35:5D:CD:FE:B6 Certificate issuer: /CN=b51841cdc9f63594dddc2ba59a40133182b579fa Certificate serial: 019B7CEE5BB4A88B4A44331483FB32D7B33A Authority key identifier: B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/gn4_joE3Kg7Iuvtn8_CsNV3N_rY.roa Signing time: Fri 02 Jan 2026 04:19:14 +0000 ROA not before: Fri 02 Jan 2026 04:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31027 IP address blocks: 2001:67c:16a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:5b:b4:a8:8b:4a:44:33:14:83:fb:32:d7:b3:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b51841cdc9f63594dddc2ba59a40133182b579fa Validity Not Before: Jan 2 04:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=827e3f8e81372a0ec8bafb67f3f0ac355dcdfeb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b2:9a:d8:5c:b7:be:52:6a:a1:33:ca:41:46: 6b:ed:91:3d:36:41:e3:63:c3:e8:1f:a3:6f:84:6a: c9:0e:7c:63:ff:15:a6:73:72:0e:a2:d9:dd:03:2d: 98:ac:9a:08:8a:e9:8b:7e:31:f7:63:89:70:f4:5d: a0:ca:d3:f8:6e:e5:82:b4:e4:1f:99:59:87:ae:bd: 3b:bc:19:af:01:4f:ae:64:6b:3b:39:79:de:e1:6c: ba:d9:24:bf:9e:a0:f1:33:ce:8a:8f:de:3f:c5:00: 77:7d:61:7e:dd:e4:0b:bb:ce:20:5c:65:2b:40:27: e4:19:01:e9:23:c1:81:82:02:35:82:7b:33:c8:79: ab:40:56:5b:28:97:92:16:a9:c9:94:a9:de:9f:6e: ab:4b:45:31:7d:38:e0:bc:51:ee:f7:14:15:10:bf: c4:fa:3c:9b:f7:8c:e6:a7:07:ce:8a:17:62:0c:72: 1c:60:26:16:e0:fd:fc:cf:4c:11:26:f3:f4:bb:d0: a9:f1:15:6e:a5:e8:53:cc:55:aa:86:d3:6a:b5:d5: 15:46:14:58:dc:31:92:3e:df:3e:ea:93:6a:8b:c2: 18:06:0c:57:f6:02:96:88:6e:f1:6a:cf:0b:f9:16: dd:7a:a2:6e:e0:cf:6e:71:b2:c5:b0:a7:68:08:ff: f7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:7E:3F:8E:81:37:2A:0E:C8:BA:FB:67:F3:F0:AC:35:5D:CD:FE:B6 X509v3 Authority Key Identifier: keyid:B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/gn4_joE3Kg7Iuvtn8_CsNV3N_rY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:16a0::/48 Signature Algorithm: sha256WithRSAEncryption 49:eb:89:9c:bb:d6:9d:4c:88:cb:dd:ed:0c:0b:5f:76:e2:84: 64:96:08:22:7a:2c:15:7f:dd:15:bf:f2:b4:da:19:60:d3:d1: f0:1a:8c:db:37:1d:5b:d7:cd:f7:90:5d:d3:9a:42:e5:61:52: fa:fa:0b:88:0e:6c:05:73:d0:3b:d1:a5:d0:d9:9c:2f:57:a5: 13:f7:ca:ff:ba:3f:2e:b2:b5:fc:d5:48:f3:e3:00:02:47:5d: a0:54:69:c5:6b:63:16:4e:e9:71:1a:8a:0f:f9:05:2f:ee:8e: 4e:cf:53:70:81:fc:28:a0:98:ef:ff:a0:58:61:39:7f:84:2b: 7f:55:ae:e4:c6:e0:e7:65:44:10:91:3a:7c:9f:32:78:aa:a0: a3:7b:b6:e3:36:7e:3c:6f:3c:aa:c8:9c:15:1f:69:19:14:42: e8:1f:9a:3f:e0:13:8c:e1:31:bb:c8:c9:b2:1d:78:f9:e7:f8: 07:77:49:ed:3a:d2:ea:c9:2e:ea:34:90:57:1a:b5:e8:76:00: 70:97:d2:53:48:7e:bf:d0:d0:57:4c:9d:77:b9:df:86:0b:19: 01:d8:4d:62:41:cf:b6:2c:ec:ca:6a:25:57:ea:37:f9:f2:0f: 03:0a:5d:43:90:5c:6e:89:34:a9:6e:18:c9:ed:00:7b:76:4c: 8e:57:f6:d5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87lu0qItKRDMUg/sy17M6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MTg0MWNkYzlmNjM1OTRkZGRjMmJhNTlhNDAxMzMxODJi NTc5ZmEwHhcNMjYwMTAyMDQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjdlM2Y4ZTgxMzcyYTBlYzhiYWZiNjdmM2YwYWMzNTVkY2RmZWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67Ka2Fy3vlJqoTPKQUZr7ZE9NkHj Y8PoH6NvhGrJDnxj/xWmc3IOotndAy2YrJoIiumLfjH3Y4lw9F2gytP4buWCtOQf mVmHrr07vBmvAU+uZGs7OXne4Wy62SS/nqDxM86Kj94/xQB3fWF+3eQLu84gXGUr QCfkGQHpI8GBggI1gnszyHmrQFZbKJeSFqnJlKnen26rS0UxfTjgvFHu9xQVEL/E +jyb94zmpwfOihdiDHIcYCYW4P38z0wRJvP0u9Cp8RVupehTzFWqhtNqtdUVRhRY 3DGSPt8+6pNqi8IYBgxX9gKWiG7xas8L+RbdeqJu4M9ucbLFsKdoCP/3owIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIJ+P46BNyoOyLr7Z/PwrDVdzf62MB8GA1UdIwQY MBaAFLUYQc3J9jWU3dwrpZpAEzGCtXn6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFJoQnpjbjJOWlRkM0N1bG1rQVRNWUsxZWZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9mMGFmNjEtOGNjYy00YTNiLTkwMTAt NjkxMGYzOTlkMzhmLzEvZ240X2pvRTNLZzdJdXZ0bjhfQ3NOVjNOX3JZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9mMGFmNjEtOGNjYy00YTNiLTkwMTAtNjkxMGYzOTlkMzhm LzEvdFJoQnpjbjJOWlRkM0N1bG1rQVRNWUsxZWZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBag MA0GCSqGSIb3DQEBCwUAA4IBAQBJ64mcu9adTIjL3e0MC1924oRklggieiwVf90V v/K02hlg09HwGozbNx1b1833kF3TmkLlYVL6+guIDmwFc9A70aXQ2ZwvV6UT98r/ uj8usrX81Ujz4wACR12gVGnFa2MWTulxGooP+QUv7o5Oz1NwgfwooJjv/6BYYTl/ hCt/Va7kxuDnZUQQkTp8nzJ4qqCje7bjNn48bzyqyJwVH2kZFELoH5o/4BOM4TG7 yMmyHXj55/gHd0ntOtLqyS7qNJBXGrXodgBwl9JTSH6/0NBXTJ13ud+GCxkB2E1i Qc+2LOzKaiVX6jf58g8DCl1DkFxuiTSpbhjJ7QB7dkyOV/bV -----END CERTIFICATE-----Generated at Mon Jan 26 01:49:24 2026 by rpki-client