This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/GDHsmxtHVdYa1bZaIWOH1_OImP0.roa File: GDHsmxtHVdYa1bZaIWOH1_OImP0.roa (raw, json) Hash identifier: 7pk8LdfcytaksybidRQnrYPauwLqusCRjPdg0+T84EQ= Subject key identifier: 18:31:EC:9B:1B:47:55:D6:1A:D5:B6:5A:21:63:87:D7:F3:88:98:FD Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Certificate serial: 019B7E38F65066D29A41CB9A4C322754BBAC Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/GDHsmxtHVdYa1bZaIWOH1_OImP0.roa Signing time: Fri 02 Jan 2026 10:20:20 +0000 ROA not before: Fri 02 Jan 2026 10:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210732 IP address blocks: 2a12:5845::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f6:50:66:d2:9a:41:cb:9a:4c:32:27:54:bb:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Validity Not Before: Jan 2 10:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1831ec9b1b4755d61ad5b65a216387d7f38898fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:eb:34:76:f9:0b:eb:8e:ee:78:2e:f1:82:c7: c2:55:8a:74:24:19:24:fc:5e:86:3e:14:22:e3:70: a0:38:cd:db:1e:e7:58:87:65:88:0a:2c:a1:2d:6c: e0:77:a2:7c:92:40:7c:5f:d3:e4:de:58:44:0f:fd: bd:5e:fd:f6:85:cb:81:a6:ae:82:f4:e4:60:d7:74: 00:18:1e:14:b2:2a:2b:23:2d:c9:6b:b6:a8:dc:ff: fb:d2:6c:2f:a7:c0:07:0a:5f:c9:64:4e:77:f0:f7: 0a:09:a5:26:b3:ba:12:39:d4:32:49:20:9f:fc:41: 6d:77:d7:0e:2a:e0:55:1a:2e:90:74:6d:f9:eb:03: bd:89:37:7f:8f:d6:81:a0:13:cb:c4:c6:3d:87:38: 48:5a:6a:bc:0f:4f:f4:12:c0:91:4e:ca:57:06:fb: b2:90:a2:4f:ce:b5:58:0e:0c:4a:8e:1d:2b:0b:fd: 51:f0:45:97:df:a3:08:a3:f6:5f:fa:58:c5:af:c1: 85:8b:d5:0f:aa:30:61:07:08:4d:a7:34:96:3c:d7: 46:9d:95:1e:57:06:d3:a9:6f:79:e3:48:17:50:06: 90:45:30:7d:34:22:3e:1b:ce:3e:54:19:df:53:31: a4:e1:3c:dc:d7:88:27:29:84:d7:00:6b:98:33:ec: 8a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:31:EC:9B:1B:47:55:D6:1A:D5:B6:5A:21:63:87:D7:F3:88:98:FD X509v3 Authority Key Identifier: keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/GDHsmxtHVdYa1bZaIWOH1_OImP0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:5845::/32 Signature Algorithm: sha256WithRSAEncryption 9f:ac:f3:33:7e:e0:33:a0:8d:fc:ee:13:01:1d:dd:83:04:fe: 53:ce:ef:7a:95:6a:54:38:96:cb:20:03:70:3c:e0:8c:b5:e1: 1e:29:86:45:ec:cd:94:b5:95:b4:b0:30:ae:75:0d:f5:2f:25: c9:27:49:a7:52:1f:65:e8:ae:41:db:3c:51:5a:8f:20:b2:5b: 0a:56:a4:8b:9c:82:6c:b1:47:0a:da:4a:5b:0a:52:ac:4f:67: 96:f4:36:de:32:14:16:2f:b6:98:23:53:79:fd:f5:fd:ca:2f: 4e:69:be:63:ae:96:e8:1b:cc:19:b3:fd:7c:ea:40:b9:f0:c6: ee:9d:87:05:aa:94:a9:d0:9a:d9:7f:8e:40:fb:3a:41:ce:87: a6:78:46:ec:7a:a4:3a:eb:81:73:59:82:1a:ce:01:2f:0c:3f: 35:49:48:57:a4:e6:ea:97:c6:5f:55:92:a6:44:e7:ee:4a:94: 63:f6:6e:3f:2d:2f:eb:43:3d:bd:42:fb:d1:4c:66:38:cc:f2: 71:b2:ed:46:48:eb:16:21:72:1f:d4:78:00:68:c9:cd:ab:4a: 78:1f:50:22:5d:a7:5a:4a:bf:c3:7a:fa:c5:04:da:ef:81:2c: 41:c0:a7:d7:b5:f5:01:20:86:c4:c0:3a:7a:48:3a:8e:d8:b0: 79:5c:49:7c -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+OPZQZtKaQcuaTDInVLusMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YzNlMDI3ZDJkMWMyZDM2ZDdjOTU0ODY3MjI2YzgzYjY1 ZWI1NmYwHhcNMjYwMTAyMTAyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODMxZWM5YjFiNDc1NWQ2MWFkNWI2NWEyMTYzODdkN2YzODg5OGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+s0dvkL647ueC7xgsfCVYp0JBkk /F6GPhQi43CgOM3bHudYh2WICiyhLWzgd6J8kkB8X9Pk3lhED/29Xv32hcuBpq6C 9ORg13QAGB4UsiorIy3Ja7ao3P/70mwvp8AHCl/JZE538PcKCaUms7oSOdQySSCf /EFtd9cOKuBVGi6QdG356wO9iTd/j9aBoBPLxMY9hzhIWmq8D0/0EsCRTspXBvuy kKJPzrVYDgxKjh0rC/1R8EWX36MIo/Zf+ljFr8GFi9UPqjBhBwhNpzSWPNdGnZUe VwbTqW9540gXUAaQRTB9NCI+G84+VBnfUzGk4Tzc14gnKYTXAGuYM+yKjQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFBgx7JsbR1XWGtW2WiFjh9fziJj9MB8GA1UdIwQY MBaAFPbD4CfS0cLTbXyVSGcibIO2XrVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUt MzU2YzRkN2JiNDUyLzEvR0RIc214dEhWZFlhMWJaYUlXT0gxX09JbVAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUtMzU2YzRkN2JiNDUy LzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhJYRTAN BgkqhkiG9w0BAQsFAAOCAQEAn6zzM37gM6CN/O4TAR3dgwT+U87vepVqVDiWyyAD cDzgjLXhHimGRezNlLWVtLAwrnUN9S8lySdJp1IfZeiuQds8UVqPILJbClaki5yC bLFHCtpKWwpSrE9nlvQ23jIUFi+2mCNTef31/covTmm+Y66W6BvMGbP9fOpAufDG 7p2HBaqUqdCa2X+OQPs6Qc6HpnhG7HqkOuuBc1mCGs4BLww/NUlIV6Tm6pfGX1WS pkTn7kqUY/ZuPy0v60M9vUL70UxmOMzycbLtRkjrFiFyH9R4AGjJzatKeB9QIl2n Wkq/w3r6xQTa74EsQcCn17X1ASCGxMA6ekg6jtiweVxJfA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:00:19 2026 by rpki-client