This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/gW0xjhGwO52k8keB4kfHLXmO_W0.roa File: gW0xjhGwO52k8keB4kfHLXmO_W0.roa (raw, json) Hash identifier: NQO1AqzZ/Ydg/8Ec102bht2VXztLiyF4TijBJ7siSJ4= Subject key identifier: 81:6D:31:8E:11:B0:3B:9D:A4:F2:47:81:E2:47:C7:2D:79:8E:FD:6D Certificate issuer: /CN=79a304ba34b61a15e3797ffd4d1ae8c218c1c7bf Certificate serial: 019B7A5AEC9EA378C2A50F10BC9610E4571F Authority key identifier: 79:A3:04:BA:34:B6:1A:15:E3:79:7F:FD:4D:1A:E8:C2:18:C1:C7:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/gW0xjhGwO52k8keB4kfHLXmO_W0.roa Signing time: Thu 01 Jan 2026 16:18:57 +0000 ROA not before: Thu 01 Jan 2026 16:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47951 IP address blocks: 2a12:c040::/30 maxlen: 30 2a12:c044::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.crl rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ec:9e:a3:78:c2:a5:0f:10:bc:96:10:e4:57:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79a304ba34b61a15e3797ffd4d1ae8c218c1c7bf Validity Not Before: Jan 1 16:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=816d318e11b03b9da4f24781e247c72d798efd6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:60:23:bc:fa:ec:12:ab:9c:d7:01:52:89:bd: ce:b0:c9:ef:f4:e7:1e:07:21:ca:06:23:b5:07:fa: bf:fd:12:02:c8:47:d1:23:f3:51:ea:75:b5:98:9a: ac:3e:47:56:04:9f:1b:24:53:31:b2:20:e9:fd:8c: 4b:f2:7c:ed:ed:00:80:1e:ca:20:3f:cc:99:cb:d3: 23:b9:ab:e3:c2:45:db:36:1b:b9:9a:41:f4:cd:40: 60:1a:8b:1b:18:82:58:6a:47:0b:1f:f9:5b:22:15: 7e:89:78:26:d7:ec:76:26:92:83:dc:cc:03:9f:2f: da:15:c6:73:b0:5b:ea:1f:30:3c:c8:fb:92:00:fe: cb:96:53:eb:3f:89:f9:b4:96:aa:48:d2:99:03:c8: 92:5b:d6:9f:c9:29:71:99:84:b9:75:bf:93:97:60: c5:fc:a1:fe:61:4b:45:2e:0e:3d:ad:25:6c:b6:62: d3:ac:d5:62:07:ea:1f:75:13:38:1f:d6:f3:cb:52: b1:0a:23:80:7c:5f:75:d8:49:f3:0d:72:78:0c:61: ab:0c:f5:6a:fc:99:4f:c7:55:d3:f0:0f:76:7f:2b: ff:58:b9:85:8f:3b:90:fb:16:a2:2b:b8:30:f6:ac: dd:c2:f8:6c:61:a0:6c:f7:2e:83:d2:b8:92:53:eb: a3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:6D:31:8E:11:B0:3B:9D:A4:F2:47:81:E2:47:C7:2D:79:8E:FD:6D X509v3 Authority Key Identifier: keyid:79:A3:04:BA:34:B6:1A:15:E3:79:7F:FD:4D:1A:E8:C2:18:C1:C7:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/gW0xjhGwO52k8keB4kfHLXmO_W0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:c040::/29 Signature Algorithm: sha256WithRSAEncryption 34:b5:18:e2:ed:9a:78:13:20:82:e4:a9:b5:6b:12:ab:63:d3: 1f:11:5f:a5:6a:c6:78:15:31:1a:f5:65:57:6e:ba:4a:b2:90: cd:0a:2f:ae:d1:09:e6:03:8e:47:65:1c:39:4b:c5:ee:87:25: 1d:e0:eb:37:58:ed:78:8a:2f:6b:7b:da:94:b7:47:e6:60:50: 8d:34:2c:c0:aa:73:a1:03:1c:19:77:15:b6:85:91:19:8a:a4: 94:29:d0:62:71:57:7e:47:2e:8d:c7:a6:76:2e:d1:6b:2a:d5: ea:b7:87:4c:5b:ce:4d:67:84:fb:4e:4e:c4:f9:0d:f6:e7:a1: a3:30:c4:ca:c1:54:a7:79:32:8f:73:38:70:16:f7:d4:df:43: 35:0a:95:60:a5:b8:af:94:c6:b0:51:26:0c:73:7e:e1:53:03: 1c:79:fb:86:5e:00:55:3b:93:f6:58:66:bc:10:47:9c:2f:9d: 3e:f2:c8:62:a3:c4:b4:0c:9f:60:54:8f:d1:79:eb:7d:63:68: 14:97:09:9c:83:3a:cb:c1:15:a7:0c:91:eb:60:d6:f4:e1:6c: 71:78:f3:e1:fe:79:8e:b6:f3:e3:5c:0e:94:69:bb:21:67:47: 5a:1e:8c:22:d3:8a:9f:95:40:74:ad:02:49:f1:53:f2:8f:54: cc:43:4c:f2 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6Wuyeo3jCpQ8QvJYQ5FcfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YTMwNGJhMzRiNjFhMTVlMzc5N2ZmZDRkMWFlOGMyMThj MWM3YmYwHhcNMjYwMTAxMTYxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTZkMzE4ZTExYjAzYjlkYTRmMjQ3ODFlMjQ3YzcyZDc5OGVmZDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGAjvPrsEquc1wFSib3OsMnv9Oce ByHKBiO1B/q//RICyEfRI/NR6nW1mJqsPkdWBJ8bJFMxsiDp/YxL8nzt7QCAHsog P8yZy9MjuavjwkXbNhu5mkH0zUBgGosbGIJYakcLH/lbIhV+iXgm1+x2JpKD3MwD ny/aFcZzsFvqHzA8yPuSAP7LllPrP4n5tJaqSNKZA8iSW9afySlxmYS5db+Tl2DF /KH+YUtFLg49rSVstmLTrNViB+ofdRM4H9bzy1KxCiOAfF912EnzDXJ4DGGrDPVq /JlPx1XT8A92fyv/WLmFjzuQ+xaiK7gw9qzdwvhsYaBs9y6D0riSU+ujuQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFIFtMY4RsDudpPJHgeJHxy15jv1tMB8GA1UdIwQY MBaAFHmjBLo0thoV43l//U0a6MIYwce/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWFNRXVqUzJHaFhqZVhfOVRScm93aGpCeDc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lNjAxMDctMTlmMy00MTk0LWJjMmYt OTlhMGQyOWJhNTYzLzEvZ1cweGpoR3dPNTJrOGtlQjRrZkhMWG1PX1cwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9lNjAxMDctMTlmMy00MTk0LWJjMmYtOTlhMGQyOWJhNTYz LzEvZWFNRXVqUzJHaFhqZVhfOVRScm93aGpCeDc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhLAQDAN BgkqhkiG9w0BAQsFAAOCAQEANLUY4u2aeBMgguSptWsSq2PTHxFfpWrGeBUxGvVl V266SrKQzQovrtEJ5gOOR2UcOUvF7oclHeDrN1jteIova3valLdH5mBQjTQswKpz oQMcGXcVtoWRGYqklCnQYnFXfkcujcemdi7RayrV6reHTFvOTWeE+05OxPkN9ueh ozDEysFUp3kyj3M4cBb31N9DNQqVYKW4r5TGsFEmDHN+4VMDHHn7hl4AVTuT9lhm vBBHnC+dPvLIYqPEtAyfYFSP0XnrfWNoFJcJnIM6y8EVpwyR62DW9OFscXjz4f55 jrbz41wOlGm7IWdHWh6MItOKn5VAdK0CSfFT8o9UzENM8g== -----END CERTIFICATE-----Generated at Mon Jan 26 09:43:17 2026 by rpki-client