This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/G4MUFbucUIms7rHXgsRVB_ST3ZQ.roa File: G4MUFbucUIms7rHXgsRVB_ST3ZQ.roa (raw, json) Hash identifier: zEDXYZO9XY++7/WUleQ0Avw+T/4vsxl8mRRdoVR5Mk8= Subject key identifier: 1B:83:14:15:BB:9C:50:89:AC:EE:B1:D7:82:C4:55:07:F4:93:DD:94 Certificate issuer: /CN=493469544203082d2c3c1ddf0f0bbd90bdc56941 Certificate serial: 019B797DE362C9805408403D92C975470378 Authority key identifier: 49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/G4MUFbucUIms7rHXgsRVB_ST3ZQ.roa Signing time: Thu 01 Jan 2026 12:17:31 +0000 ROA not before: Thu 01 Jan 2026 12:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206884 IP address blocks: 2001:678:8f8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:e3:62:c9:80:54:08:40:3d:92:c9:75:47:03:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=493469544203082d2c3c1ddf0f0bbd90bdc56941 Validity Not Before: Jan 1 12:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b831415bb9c5089aceeb1d782c45507f493dd94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:67:fa:2f:b5:8b:23:92:1d:e8:25:47:9a:84: d4:a2:f2:72:9c:34:d0:71:92:53:89:c1:4e:c7:6c: 77:b5:9f:99:37:47:17:16:f8:a5:97:ec:48:e9:41: d7:c6:19:cb:f5:0a:b7:c5:f0:a8:85:64:f0:f4:01: a6:7f:db:11:a3:91:bc:4c:63:80:5b:f5:c4:ae:ed: 61:6f:52:c8:3d:dd:65:35:96:95:10:ee:cd:7d:04: b0:b1:79:db:f2:be:39:24:6c:10:ae:db:8f:28:fa: 4b:dc:23:94:ff:c5:a2:e4:d0:c3:ff:c5:18:74:40: 42:4e:49:f7:90:21:2d:83:c2:f2:04:60:4b:c9:f3: 8b:46:2c:4a:08:94:73:7c:e0:d7:43:37:21:0b:0b: 96:66:0b:55:cf:ab:01:d9:19:5f:84:28:46:9a:b3: f8:1e:45:ba:c0:27:86:0b:6c:ec:fe:e7:b4:5b:61: cf:b9:8b:2b:fa:80:86:fe:cf:0f:3c:54:ae:72:b5: 7c:08:59:a9:81:5c:8b:57:39:f7:5a:d4:06:a1:3d: ec:2b:5d:3c:b9:5d:8e:f1:b0:86:91:13:28:5c:3b: 3c:3e:3b:f9:f5:c3:46:97:ed:50:37:e1:66:48:85: 77:b3:49:7d:44:f2:84:fc:b8:72:11:7e:5d:93:e9: 19:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:83:14:15:BB:9C:50:89:AC:EE:B1:D7:82:C4:55:07:F4:93:DD:94 X509v3 Authority Key Identifier: keyid:49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/G4MUFbucUIms7rHXgsRVB_ST3ZQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:8f8::/48 Signature Algorithm: sha256WithRSAEncryption 07:b5:73:20:b3:c9:af:f0:6c:0a:38:92:16:5d:13:e6:c6:72: 9b:d6:0a:d9:b1:87:0e:4d:1f:24:61:70:8b:b7:f0:22:bf:92: d3:41:01:ce:28:15:fa:54:52:e9:5c:cd:0d:fd:be:7e:e4:c6: b5:dd:03:47:08:7e:2f:27:72:39:6f:63:74:79:dd:95:54:3e: 59:bd:66:fd:f4:76:c7:b0:d5:ef:fc:f4:75:93:25:de:35:24: a8:26:9f:9e:60:ba:8b:d6:47:8a:f5:9b:39:46:c6:2b:41:c2: 30:fa:cc:a0:15:0a:f7:f4:2f:c6:0f:6d:cb:4f:b0:4b:70:07: f8:6f:ea:0e:27:72:0f:1d:b0:09:cb:e4:52:6b:59:d5:cd:d1: 0d:f0:57:25:5e:f4:7b:f9:ed:ac:41:fb:87:e5:0d:54:eb:a2: 47:ef:b5:24:39:90:e1:d3:19:47:e7:41:01:02:96:cd:5f:af: ac:3c:0b:dc:11:11:cb:a3:d8:66:50:00:49:22:3f:fc:69:a6: 24:f9:67:96:b3:ee:b2:63:6e:bd:b3:c9:7a:d2:9a:96:a3:e2: 74:67:c7:21:59:ce:1d:e6:1a:1b:32:be:10:02:85:3a:03:43: 09:f6:c8:7d:8e:74:42:c5:65:dc:81:97:1b:c0:a1:50:2e:90: dc:93:82:ba -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5feNiyYBUCEA9ksl1RwN4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MzQ2OTU0NDIwMzA4MmQyYzNjMWRkZjBmMGJiZDkwYmRj NTY5NDEwHhcNMjYwMTAxMTIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjgzMTQxNWJiOWM1MDg5YWNlZWIxZDc4MmM0NTUwN2Y0OTNkZDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGf6L7WLI5Id6CVHmoTUovJynDTQ cZJTicFOx2x3tZ+ZN0cXFvill+xI6UHXxhnL9Qq3xfCohWTw9AGmf9sRo5G8TGOA W/XEru1hb1LIPd1lNZaVEO7NfQSwsXnb8r45JGwQrtuPKPpL3COU/8Wi5NDD/8UY dEBCTkn3kCEtg8LyBGBLyfOLRixKCJRzfODXQzchCwuWZgtVz6sB2RlfhChGmrP4 HkW6wCeGC2zs/ue0W2HPuYsr+oCG/s8PPFSucrV8CFmpgVyLVzn3WtQGoT3sK108 uV2O8bCGkRMoXDs8Pjv59cNGl+1QN+FmSIV3s0l9RPKE/LhyEX5dk+kZrQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBuDFBW7nFCJrO6x14LEVQf0k92UMB8GA1UdIwQY MBaAFEk0aVRCAwgtLDwd3w8LvZC9xWlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1RScFZFSURDQzBzUEIzZkR3dTlrTDNGYVVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9kMjk3MzAtNTE1YS00YmZiLWFkNTUt ZTAzOGQ4MWIzZjk3LzEvRzRNVUZidWNVSW1zN3JIWGdzUlZCX1NUM1pRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9kMjk3MzAtNTE1YS00YmZiLWFkNTUtZTAzOGQ4MWIzZjk3 LzEvU1RScFZFSURDQzBzUEIzZkR3dTlrTDNGYVVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAj4 MA0GCSqGSIb3DQEBCwUAA4IBAQAHtXMgs8mv8GwKOJIWXRPmxnKb1grZsYcOTR8k YXCLt/Aiv5LTQQHOKBX6VFLpXM0N/b5+5Ma13QNHCH4vJ3I5b2N0ed2VVD5ZvWb9 9HbHsNXv/PR1kyXeNSSoJp+eYLqL1keK9Zs5RsYrQcIw+sygFQr39C/GD23LT7BL cAf4b+oOJ3IPHbAJy+RSa1nVzdEN8FclXvR7+e2sQfuH5Q1U66JH77UkOZDh0xlH 50EBApbNX6+sPAvcERHLo9hmUABJIj/8aaYk+WeWs+6yY269s8l60pqWo+J0Z8ch Wc4d5hobMr4QAoU6A0MJ9sh9jnRCxWXcgZcbwKFQLpDck4K6 -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:55 2026 by rpki-client