This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/gaPdTUi6Zv6lDCLDjVNSeOj00TA.roa File: gaPdTUi6Zv6lDCLDjVNSeOj00TA.roa (raw, json) Hash identifier: iddnFzVd2NO0LQ+RrEgnt3+9d3P9fueV4LLcUDR95FU= Subject key identifier: 81:A3:DD:4D:48:BA:66:FE:A5:0C:22:C3:8D:53:52:78:E8:F4:D1:30 Certificate issuer: /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be Certificate serial: 019B7EA70E7E60D9F5DC11B978A5E4F40C67 Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/gaPdTUi6Zv6lDCLDjVNSeOj00TA.roa Signing time: Fri 02 Jan 2026 12:20:36 +0000 ROA not before: Fri 02 Jan 2026 12:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216260 IP address blocks: 2a01:ecc0:680::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:0e:7e:60:d9:f5:dc:11:b9:78:a5:e4:f4:0c:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be Validity Not Before: Jan 2 12:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81a3dd4d48ba66fea50c22c38d535278e8f4d130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:20:ad:b7:ea:f1:b0:6b:37:ee:ec:8f:94:a9: 75:90:36:33:55:23:03:6c:ff:a1:98:cd:93:e2:b6: 30:32:20:86:b0:dd:d4:41:64:7a:18:37:b0:4a:eb: 42:d6:ef:21:a6:50:3e:5d:a9:ef:6a:61:45:3d:33: 60:85:dd:e1:dd:28:f8:c8:4f:b4:7a:85:15:71:94: 93:2b:ef:48:ec:4f:dc:ea:dc:20:0b:48:61:a3:c1: 89:3c:23:cf:fe:b8:01:07:2a:3c:07:df:81:ac:8e: 35:f0:c6:1d:d1:a4:77:e2:cf:01:96:cc:97:c4:bb: 2b:c2:7c:cb:f7:d2:51:43:7d:16:c0:03:5e:40:7f: a6:6c:0d:fe:8a:f2:d2:50:de:59:32:59:fb:dc:62: 8e:78:4e:c0:6c:1b:19:0c:13:25:a1:62:d3:f2:5f: b1:76:a9:a0:67:94:c5:43:39:3c:f1:df:82:34:da: b2:0a:bd:da:7e:43:b1:e8:ea:84:25:40:a3:93:dd: a1:c9:16:85:37:22:98:3c:d3:4c:ba:83:21:89:d1: 45:31:1e:b0:26:7e:b8:05:f3:6a:12:21:b5:11:39: 06:78:21:a8:bd:95:02:a6:fc:c1:ef:51:ce:64:5d: 82:d0:5b:4c:a3:17:04:7b:cd:8a:4b:80:78:36:03: bf:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A3:DD:4D:48:BA:66:FE:A5:0C:22:C3:8D:53:52:78:E8:F4:D1:30 X509v3 Authority Key Identifier: keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/gaPdTUi6Zv6lDCLDjVNSeOj00TA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:ecc0:680::/42 Signature Algorithm: sha256WithRSAEncryption 88:56:bd:4c:24:9c:9f:87:f2:4f:fb:a1:5e:8a:fb:7c:e1:2d: b4:c3:0f:b5:56:23:e9:43:aa:c0:fa:ec:53:6a:38:a9:06:f6: 58:01:a1:01:18:1b:d1:8c:85:ed:21:fd:a7:04:b2:22:f7:12: ff:62:55:0d:12:1c:0e:ca:02:bc:0b:30:9f:ed:39:61:aa:e1: 79:f5:ec:96:6f:e1:69:72:66:d8:44:3f:a4:6e:04:4b:1f:10: a6:46:2b:fa:13:2b:cc:4f:c1:97:fe:25:c1:0e:13:f4:d6:54: d1:7a:2c:cf:f4:88:b2:a8:74:b3:4d:9b:8d:bd:1c:86:57:50: 9a:e6:fc:e9:19:03:38:95:7d:0c:83:41:e8:85:ec:3d:80:ca: a6:d0:a3:52:f8:83:15:fb:f3:48:f0:6d:f0:0b:07:cf:7d:e6: 2d:53:8b:e4:3d:a6:a6:a2:b6:b5:d0:18:fd:e7:57:84:a5:c8: 3d:85:a3:4b:51:27:d8:1d:3a:b7:83:f1:14:a8:42:06:cb:21: 74:f9:e0:22:68:09:23:d0:da:33:ee:02:53:19:07:5a:67:34: ca:9d:39:c7:d5:cc:a5:e6:51:77:4a:92:1d:18:30:17:a3:a4: 05:f0:90:f5:7c:b6:79:4c:05:4e:20:7f:e5:5b:1b:4d:9c:7d: 5e:3e:9f:0f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pw5+YNn13BG5eKXk9AxnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNDNhMjQ4NDU2OWQyMGUzZjUzYzE3YmU3YjlmYjI5YzM0 ZWU1YmUwHhcNMjYwMTAyMTIyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWEzZGQ0ZDQ4YmE2NmZlYTUwYzIyYzM4ZDUzNTI3OGU4ZjRkMTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CCtt+rxsGs37uyPlKl1kDYzVSMD bP+hmM2T4rYwMiCGsN3UQWR6GDewSutC1u8hplA+XanvamFFPTNghd3h3Sj4yE+0 eoUVcZSTK+9I7E/c6twgC0hho8GJPCPP/rgBByo8B9+BrI418MYd0aR34s8BlsyX xLsrwnzL99JRQ30WwANeQH+mbA3+ivLSUN5ZMln73GKOeE7AbBsZDBMloWLT8l+x dqmgZ5TFQzk88d+CNNqyCr3afkOx6OqEJUCjk92hyRaFNyKYPNNMuoMhidFFMR6w Jn64BfNqEiG1ETkGeCGovZUCpvzB71HOZF2C0FtMoxcEe82KS4B4NgO/AQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIGj3U1Iumb+pQwiw41TUnjo9NEwMB8GA1UdIwQY MBaAFB1DokhFadIOP1PBe+e5+ynDTuW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjkt NjM0NTE1NDg5NzlkLzEvZ2FQZFRVaTZadjZsRENMRGpWTlNlT2owMFRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjktNjM0NTE1NDg5Nzlk LzEvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGKgHswAaA MA0GCSqGSIb3DQEBCwUAA4IBAQCIVr1MJJyfh/JP+6Feivt84S20ww+1ViPpQ6rA +uxTajipBvZYAaEBGBvRjIXtIf2nBLIi9xL/YlUNEhwOygK8CzCf7TlhquF59eyW b+FpcmbYRD+kbgRLHxCmRiv6EyvMT8GX/iXBDhP01lTReizP9IiyqHSzTZuNvRyG V1Ca5vzpGQM4lX0Mg0Hohew9gMqm0KNS+IMV+/NI8G3wCwfPfeYtU4vkPaamora1 0Bj951eEpcg9haNLUSfYHTq3g/EUqEIGyyF0+eAiaAkj0Noz7gJTGQdaZzTKnTnH 1cyl5lF3SpIdGDAXo6QF8JD1fLZ5TAVOIH/lWxtNnH1ePp8P -----END CERTIFICATE-----Generated at Sun Jan 25 15:14:02 2026 by rpki-client