This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/gTyFz4o7qq-mz7kkyhI4YQAE3F8.roa File: gTyFz4o7qq-mz7kkyhI4YQAE3F8.roa (raw, json) Hash identifier: ql1a+n9u4sT8twi+Ey5tWWvsl/zO/3fN4L8B2DWoXrk= Subject key identifier: 81:3C:85:CF:8A:3B:AA:AF:A6:CF:B9:24:CA:12:38:61:00:04:DC:5F Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Certificate serial: 019B7834F6F968979447E65CBEE0ECFF4891 Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/gTyFz4o7qq-mz7kkyhI4YQAE3F8.roa Signing time: Thu 01 Jan 2026 06:18:15 +0000 ROA not before: Thu 01 Jan 2026 06:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34936 IP address blocks: 2001:4ba7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f6:f9:68:97:94:47:e6:5c:be:e0:ec:ff:48:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Validity Not Before: Jan 1 06:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=813c85cf8a3baaafa6cfb924ca1238610004dc5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8e:d0:ce:7d:b7:50:af:2b:07:91:a6:16:2b: 54:c7:a5:7a:5e:98:ef:61:48:c5:4e:5c:c3:b2:28: 5a:87:93:da:de:a8:7b:7d:2e:75:de:4b:5d:26:ae: 90:38:6d:e9:da:bd:00:ea:41:a1:5a:6d:43:6b:c1: 9c:3e:2b:66:cf:ed:7e:00:b0:40:58:1c:cf:bc:aa: 8f:8f:7d:7c:30:5c:02:0e:a9:64:bb:c0:3b:07:06: d5:44:30:13:aa:70:0c:6e:71:55:19:fc:ab:cc:aa: 1f:89:3d:e4:b3:96:e0:d8:24:7c:92:19:6e:91:f0: a2:1d:80:4e:4e:3b:d8:45:d0:dc:e7:61:14:20:3f: 67:79:b5:b8:c7:4a:c2:5d:1a:d0:a1:d4:52:63:63: ed:1e:92:7c:4f:59:8c:d1:fe:48:3f:35:7f:7c:0c: 05:cd:c8:be:61:d5:50:e7:f5:b6:25:d3:3b:00:36: fd:b9:bd:5d:c9:aa:2c:57:35:2b:92:ad:01:5c:69: e3:71:02:50:18:e9:ff:d4:e7:cc:40:3b:44:f4:87: 4d:3a:9c:e9:e3:47:95:e6:47:eb:60:3a:90:d4:3f: ef:34:09:7b:cf:da:9f:15:32:0a:54:8f:fc:91:c4: 1e:af:33:c6:31:1d:58:1d:0d:e2:5b:70:f6:fd:8e: 28:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:3C:85:CF:8A:3B:AA:AF:A6:CF:B9:24:CA:12:38:61:00:04:DC:5F X509v3 Authority Key Identifier: keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/gTyFz4o7qq-mz7kkyhI4YQAE3F8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:4ba7::/48 Signature Algorithm: sha256WithRSAEncryption 3b:d9:a2:51:cb:98:64:cc:bb:66:05:c8:b8:97:b6:f4:37:55: cb:46:eb:fe:40:d9:7d:73:87:2f:ce:a0:7a:6d:a9:cb:d6:69: a9:34:31:ff:b5:09:28:ff:f9:15:ef:99:8e:f2:b9:e7:8e:dd: 79:c4:fa:80:dd:87:5d:a8:c7:ab:f4:9b:3f:c7:3b:aa:e0:d4: 47:4b:7c:8b:cd:a0:0a:36:26:5d:a2:ab:e7:cc:e1:41:45:f8: 3f:6e:39:4d:6f:d1:03:7c:44:e0:d0:50:24:e7:54:a2:f0:bb: 4a:6e:d5:24:5d:db:44:fd:ae:5d:0c:98:68:43:b8:69:ca:4b: d9:aa:82:4c:56:dc:d1:bc:2f:ba:35:fb:75:0a:fc:43:f3:c3: 96:30:da:23:b0:80:70:0f:de:b6:f5:ad:ed:b1:d8:cc:33:ce: d2:44:84:0f:cf:97:e9:62:72:07:9d:20:16:02:c2:91:fd:35: 76:ff:8e:dc:e3:77:a4:5c:6f:10:f7:a3:40:23:9d:18:ee:24: 6e:4a:92:a4:2c:85:c2:22:53:9e:20:a4:29:1f:d9:c3:00:1b: 98:c5:f6:ac:b5:42:6a:e3:2b:61:c5:64:fa:9d:2f:69:9a:07: 80:96:73:88:fe:74:41:43:ba:78:03:91:00:e6:be:83:80:16: 24:b3:e8:48 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4NPb5aJeUR+ZcvuDs/0iRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNmI0MjAyMTg4NmQ4ZWVkYmFlOTBkOWU2YWIxZGU1MzNj NTBkMjAwHhcNMjYwMTAxMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTNjODVjZjhhM2JhYWFmYTZjZmI5MjRjYTEyMzg2MTAwMDRkYzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI7Qzn23UK8rB5GmFitUx6V6Xpjv YUjFTlzDsihah5Pa3qh7fS513ktdJq6QOG3p2r0A6kGhWm1Da8GcPitmz+1+ALBA WBzPvKqPj318MFwCDqlku8A7BwbVRDATqnAMbnFVGfyrzKofiT3ks5bg2CR8khlu kfCiHYBOTjvYRdDc52EUID9nebW4x0rCXRrQodRSY2PtHpJ8T1mM0f5IPzV/fAwF zci+YdVQ5/W2JdM7ADb9ub1dyaosVzUrkq0BXGnjcQJQGOn/1OfMQDtE9IdNOpzp 40eV5kfrYDqQ1D/vNAl7z9qfFTIKVI/8kcQerzPGMR1YHQ3iW3D2/Y4oNwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIE8hc+KO6qvps+5JMoSOGEABNxfMB8GA1UdIwQY MBaAFOxrQgIYhtju266Q2earHeUzxQ0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQt YTY4NzNiMzc0ZTI2LzEvZ1R5Rno0bzdxcS1tejdra3loSTRZUUFFM0Y4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQtYTY4NzNiMzc0ZTI2 LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFLpwAA MA0GCSqGSIb3DQEBCwUAA4IBAQA72aJRy5hkzLtmBci4l7b0N1XLRuv+QNl9c4cv zqB6banL1mmpNDH/tQko//kV75mO8rnnjt15xPqA3YddqMer9Js/xzuq4NRHS3yL zaAKNiZdoqvnzOFBRfg/bjlNb9EDfETg0FAk51Si8LtKbtUkXdtE/a5dDJhoQ7hp ykvZqoJMVtzRvC+6Nft1CvxD88OWMNojsIBwD9629a3tsdjMM87SRIQPz5fpYnIH nSAWAsKR/TV2/47c43ekXG8Q96NAI50Y7iRuSpKkLIXCIlOeIKQpH9nDABuYxfas tUJq4ythxWT6nS9pmgeAlnOI/nRBQ7p4A5EA5r6DgBYks+hI -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:42 2026 by rpki-client