This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/GDQQ0FqYT9AvbB4OzpV_W08txF4.roa File: GDQQ0FqYT9AvbB4OzpV_W08txF4.roa (raw, json) Hash identifier: +7D1/7LzTXBfcdD4Y5uzQNgYSY1go2hv/v2LnVgCR1Y= Subject key identifier: 18:34:10:D0:5A:98:4F:D0:2F:6C:1E:0E:CE:95:7F:5B:4F:2D:C4:5E Certificate issuer: /CN=6ae4aa771fd0a578ea3aac4b4d3ec83d8946463d Certificate serial: 019BA33ABB15463E471444CF0289A4ABC3A8 Authority key identifier: 6A:E4:AA:77:1F:D0:A5:78:EA:3A:AC:4B:4D:3E:C8:3D:89:46:46:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/auSqdx_QpXjqOqxLTT7IPYlGRj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/GDQQ0FqYT9AvbB4OzpV_W08txF4.roa Signing time: Fri 09 Jan 2026 14:48:13 +0000 ROA not before: Fri 09 Jan 2026 14:48:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213565 IP address blocks: 2001:678:119c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.crl rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.mft rsync://rpki.ripe.net/repository/DEFAULT/auSqdx_QpXjqOqxLTT7IPYlGRj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a3:3a:bb:15:46:3e:47:14:44:cf:02:89:a4:ab:c3:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ae4aa771fd0a578ea3aac4b4d3ec83d8946463d Validity Not Before: Jan 9 14:48:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=183410d05a984fd02f6c1e0ece957f5b4f2dc45e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9c:b5:54:28:f6:09:09:d1:91:d3:fb:b9:1f: 10:1c:5b:c6:00:b9:c7:2e:bc:bc:36:f7:52:b6:45: 8f:25:de:29:ab:b9:bb:f6:52:ad:d6:b6:24:ea:85: e5:ef:e5:c7:19:a1:1e:04:7a:91:3f:51:78:c9:ee: f9:6f:5a:cc:2c:e7:da:f8:97:a5:46:23:06:31:71: 63:1c:24:f7:94:25:ef:72:dd:ad:ef:6e:ad:06:74: eb:2d:94:20:29:7b:0a:fa:23:b4:32:a7:d5:a3:4d: 5f:9c:dd:44:d6:fc:5b:56:f2:5f:30:a0:6b:05:38: 88:93:fe:bb:f1:5a:5a:28:dd:a6:1b:8e:41:4e:17: 69:24:a4:a8:5a:8c:58:33:3a:09:42:9f:69:d6:32: 9b:42:36:6b:8d:ae:08:ea:a2:71:1d:bf:3a:25:ac: 90:0f:7d:12:4c:69:95:0b:be:90:43:a4:63:ce:c2: e2:0a:1f:d5:b2:22:45:2f:96:95:7f:02:37:fd:b6: 8c:0e:79:e4:90:11:5b:99:0a:50:2f:f5:24:90:c6: 02:2b:6b:35:be:ee:16:f3:92:4f:dd:9a:2f:0c:9d: e3:e5:7f:ac:fd:2e:42:ba:39:eb:92:c7:1e:bb:61: bb:fd:44:29:4c:ff:75:e6:df:24:32:9a:91:f4:bd: 1d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:34:10:D0:5A:98:4F:D0:2F:6C:1E:0E:CE:95:7F:5B:4F:2D:C4:5E X509v3 Authority Key Identifier: keyid:6A:E4:AA:77:1F:D0:A5:78:EA:3A:AC:4B:4D:3E:C8:3D:89:46:46:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/auSqdx_QpXjqOqxLTT7IPYlGRj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/GDQQ0FqYT9AvbB4OzpV_W08txF4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:119c::/48 Signature Algorithm: sha256WithRSAEncryption 5e:1d:b9:0a:3e:68:9f:68:aa:66:0f:73:9e:67:24:cb:d5:a5: a1:ff:5a:44:df:7f:a7:16:f1:4c:75:96:06:1d:46:ce:13:6f: 0f:e2:f0:1b:90:15:40:1e:12:d6:9a:8b:93:f7:6b:23:54:e1: 74:14:00:02:ad:1e:7e:c7:c6:13:fc:5c:4d:47:1b:e0:52:fd: a3:66:19:6b:54:30:f0:55:c0:47:90:44:53:f9:bd:d1:5c:82: c1:61:46:55:a5:c0:c0:11:f9:c0:47:e8:67:99:6a:c3:dd:1a: d4:63:9d:aa:c9:99:1a:fb:36:ce:d1:24:46:4c:a2:be:d1:99: c1:79:66:c3:fe:e7:f9:7c:5f:56:6d:7e:c5:59:eb:94:62:c3: 9e:b3:60:3a:f3:dc:9d:8a:ee:a5:54:0e:27:aa:aa:9d:18:34: 4b:c1:50:5e:d7:df:bf:d9:d2:83:5c:3b:c1:54:1a:73:61:fc: bc:4d:15:75:76:0a:eb:80:e5:d2:40:9a:0d:0a:02:a3:5a:da: 89:6f:27:f8:ee:6e:df:98:fb:4f:f5:03:d6:a9:ef:5d:ad:f3: 1e:54:fe:9b:4c:81:90:be:af:0c:30:55:02:15:2a:6c:99:47: 43:f0:6e:e6:c0:ef:63:26:1f:52:11:cf:78:81:ef:76:78:9a: 78:e1:3e:b6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZujOrsVRj5HFETPAomkq8OoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhZTRhYTc3MWZkMGE1NzhlYTNhYWM0YjRkM2VjODNkODk0 NjQ2M2QwHhcNMjYwMTA5MTQ0ODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODM0MTBkMDVhOTg0ZmQwMmY2YzFlMGVjZTk1N2Y1YjRmMmRjNDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppy1VCj2CQnRkdP7uR8QHFvGALnH Lry8NvdStkWPJd4pq7m79lKt1rYk6oXl7+XHGaEeBHqRP1F4ye75b1rMLOfa+Jel RiMGMXFjHCT3lCXvct2t726tBnTrLZQgKXsK+iO0MqfVo01fnN1E1vxbVvJfMKBr BTiIk/678VpaKN2mG45BThdpJKSoWoxYMzoJQp9p1jKbQjZrja4I6qJxHb86JayQ D30STGmVC76QQ6RjzsLiCh/VsiJFL5aVfwI3/baMDnnkkBFbmQpQL/UkkMYCK2s1 vu4W85JP3ZovDJ3j5X+s/S5Cujnrksceu2G7/UQpTP915t8kMpqR9L0d7wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBg0ENBamE/QL2weDs6Vf1tPLcReMB8GA1UdIwQY MBaAFGrkqncf0KV46jqsS00+yD2JRkY9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXVTcWR4X1FwWGpxT3F4TFRUN0lQWWxHUmowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84NWE5ZmYtZjVjMi00MzYxLTkwMWUt MDM4ZDI0MDcxYThhLzEvR0RRUTBGcVlUOUF2YkI0T3pwVl9XMDh0eEY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84NWE5ZmYtZjVjMi00MzYxLTkwMWUtMDM4ZDI0MDcxYThh LzEvYXVTcWR4X1FwWGpxT3F4TFRUN0lQWWxHUmowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBGc MA0GCSqGSIb3DQEBCwUAA4IBAQBeHbkKPmifaKpmD3OeZyTL1aWh/1pE33+nFvFM dZYGHUbOE28P4vAbkBVAHhLWmouT92sjVOF0FAACrR5+x8YT/FxNRxvgUv2jZhlr VDDwVcBHkERT+b3RXILBYUZVpcDAEfnAR+hnmWrD3RrUY52qyZka+zbO0SRGTKK+ 0ZnBeWbD/uf5fF9WbX7FWeuUYsOes2A689ydiu6lVA4nqqqdGDRLwVBe19+/2dKD XDvBVBpzYfy8TRV1dgrrgOXSQJoNCgKjWtqJbyf47m7fmPtP9QPWqe9drfMeVP6b TIGQvq8MMFUCFSpsmUdD8G7mwO9jJh9SEc94ge92eJp44T62 -----END CERTIFICATE-----Generated at Sun Jan 25 21:58:06 2026 by rpki-client