This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/GFN0Xfo0hQlgS0ud4l1upE2EzNg.roa File: GFN0Xfo0hQlgS0ud4l1upE2EzNg.roa (raw, json) Hash identifier: y777qRGEhPwlWpAtzq0goRcn8bZ+BbeZhZ9OTAaKg5I= Subject key identifier: 18:53:74:5D:FA:34:85:09:60:4B:4B:9D:E2:5D:6E:A4:4D:84:CC:D8 Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Certificate serial: 019B7DCB5F3A8B8FBD14FB290897B9861AF3 Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/GFN0Xfo0hQlgS0ud4l1upE2EzNg.roa Signing time: Fri 02 Jan 2026 08:20:38 +0000 ROA not before: Fri 02 Jan 2026 08:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211088 IP address blocks: 2a12:4946:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5f:3a:8b:8f:bd:14:fb:29:08:97:b9:86:1a:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Validity Not Before: Jan 2 08:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1853745dfa348509604b4b9de25d6ea44d84ccd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f5:de:b8:33:24:5e:30:24:66:4f:14:93:b9: 48:d5:22:bf:7c:53:34:f4:4e:5e:30:7b:f3:31:31: 82:26:cd:2c:e7:00:db:29:53:5c:04:08:20:77:68: 5e:ce:88:66:ee:fd:19:d4:f7:8c:df:8a:b4:fe:6e: 90:e9:5d:f2:31:52:2f:24:3b:a1:c1:a6:24:2a:b7: 81:53:ee:15:7f:48:0b:15:c1:12:eb:fb:7d:78:9d: 80:67:b6:82:3a:a8:ee:d4:81:25:45:62:dd:9d:33: f7:81:1b:3e:2a:28:0b:ce:9e:49:f4:43:5e:14:97: ba:ca:37:e2:9c:aa:ff:27:d0:72:ac:4b:53:6e:3a: 9f:27:a4:7c:8a:1d:f4:08:d2:f0:93:3c:f1:ee:fc: 38:00:16:75:15:3d:dd:3c:7c:f7:19:a2:88:b2:cd: b8:05:7c:d3:3d:e8:43:6f:32:7e:59:94:99:f0:6a: 0c:d7:e3:66:9e:c3:a0:65:03:94:e9:e4:eb:48:26: dc:8b:ce:4d:b2:3f:13:3e:35:d4:4f:f5:d7:4c:37: a2:f7:3a:89:bd:ec:a4:87:f2:60:44:e9:96:f9:14: fb:76:20:ba:88:b8:cd:f9:f2:07:4e:b8:58:2c:dd: f8:0a:65:06:40:d7:f5:05:4a:9f:f0:05:27:26:33: 5f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:53:74:5D:FA:34:85:09:60:4B:4B:9D:E2:5D:6E:A4:4D:84:CC:D8 X509v3 Authority Key Identifier: keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/GFN0Xfo0hQlgS0ud4l1upE2EzNg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:4946:a000::/40 Signature Algorithm: sha256WithRSAEncryption 6d:4f:bb:8d:f8:91:1e:d1:7d:a0:f1:f5:b8:76:74:c0:0b:98: 51:03:e2:ae:08:b1:b5:37:03:97:c9:37:8e:e6:c0:05:ac:69: 1f:c1:9c:19:be:9f:10:b5:3d:c0:6b:ad:0a:13:4c:0e:d8:43: 2e:f8:7e:be:87:13:bf:5a:ea:fb:50:72:92:9c:14:a9:63:29: 64:3c:a2:e0:b4:a3:e6:59:34:3d:a8:21:3a:40:c1:37:ef:19: 4d:c8:24:05:da:ea:41:d7:ec:9e:75:9d:83:f6:04:44:87:6c: 28:22:e0:5f:dd:62:de:d8:c2:8e:c1:10:69:13:35:99:b5:ef: ab:61:cd:74:0d:e2:85:90:6c:bb:35:2b:d1:2e:40:e3:0a:62: f7:cb:29:fd:00:88:78:c4:3b:9a:8e:86:99:9f:12:a0:18:3d: 90:a4:d7:1f:e0:03:20:23:8f:93:42:89:97:0c:1f:b7:4f:c2: 51:91:fe:ed:6c:bc:e8:06:e3:65:4d:2d:7f:4d:70:8c:ff:57: 1c:3a:98:92:2c:23:91:00:de:03:13:e8:f5:6e:ae:d2:7b:77: 22:53:15:95:8b:c1:c1:f4:ba:d1:c1:7b:f8:ba:32:4e:9c:a8: a9:4c:78:ad:27:8c:82:89:44:57:7c:20:04:ac:95:b0:cc:b0: fb:66:e9:47 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt9y186i4+9FPspCJe5hhrzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM5NWMxMjY3MmFkOTU4OTIxYjYyYjlkYzliMmJjZDhh NjhhOWYwHhcNMjYwMTAyMDgyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODUzNzQ1ZGZhMzQ4NTA5NjA0YjRiOWRlMjVkNmVhNDRkODRjY2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovXeuDMkXjAkZk8Uk7lI1SK/fFM0 9E5eMHvzMTGCJs0s5wDbKVNcBAggd2hezohm7v0Z1PeM34q0/m6Q6V3yMVIvJDuh waYkKreBU+4Vf0gLFcES6/t9eJ2AZ7aCOqju1IElRWLdnTP3gRs+KigLzp5J9ENe FJe6yjfinKr/J9ByrEtTbjqfJ6R8ih30CNLwkzzx7vw4ABZ1FT3dPHz3GaKIss24 BXzTPehDbzJ+WZSZ8GoM1+NmnsOgZQOU6eTrSCbci85Nsj8TPjXUT/XXTDei9zqJ veykh/JgROmW+RT7diC6iLjN+fIHTrhYLN34CmUGQNf1BUqf8AUnJjNfuQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFBhTdF36NIUJYEtLneJdbqRNhMzYMB8GA1UdIwQY MBaAFHRjlcEmcq2ViSG2K53JsrzYpoqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMt ZmI3NzRhYmRmYWMyLzEvR0ZOMFhmbzBoUWxnUzB1ZDRsMXVwRTJFek5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMtZmI3NzRhYmRmYWMy LzEvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhJJRqAw DQYJKoZIhvcNAQELBQADggEBAG1Pu434kR7RfaDx9bh2dMALmFED4q4IsbU3A5fJ N47mwAWsaR/BnBm+nxC1PcBrrQoTTA7YQy74fr6HE79a6vtQcpKcFKljKWQ8ouC0 o+ZZND2oITpAwTfvGU3IJAXa6kHX7J51nYP2BESHbCgi4F/dYt7Ywo7BEGkTNZm1 76thzXQN4oWQbLs1K9EuQOMKYvfLKf0AiHjEO5qOhpmfEqAYPZCk1x/gAyAjj5NC iZcMH7dPwlGR/u1svOgG42VNLX9NcIz/Vxw6mJIsI5EA3gMT6PVurtJ7dyJTFZWL wcH0utHBe/i6Mk6cqKlMeK0njIKJRFd8IASslbDMsPtm6Uc= -----END CERTIFICATE-----Generated at Mon Jan 26 02:24:17 2026 by rpki-client