This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/grSCYxr48GkiiLbXBFVvfPRGYDo.roa File: grSCYxr48GkiiLbXBFVvfPRGYDo.roa (raw, json) Hash identifier: ORzXiCXEzDF1CBNSnKaHZkAM6lGFJh0djBj0NrfV6eg= Subject key identifier: 82:B4:82:63:1A:F8:F0:69:22:88:B6:D7:04:55:6F:7C:F4:46:60:3A Certificate issuer: /CN=651bad95276947c7be536af4c870a3721f0b7761 Certificate serial: 019B76EB75FCEC94AE6B41311A26F5B44FD9 Authority key identifier: 65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/grSCYxr48GkiiLbXBFVvfPRGYDo.roa Signing time: Thu 01 Jan 2026 00:18:21 +0000 ROA not before: Thu 01 Jan 2026 00:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208394 IP address blocks: 2a09:3a00:6000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:75:fc:ec:94:ae:6b:41:31:1a:26:f5:b4:4f:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=651bad95276947c7be536af4c870a3721f0b7761 Validity Not Before: Jan 1 00:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82b482631af8f0692288b6d704556f7cf446603a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:95:e6:19:e5:0f:ee:9a:5a:c4:96:81:ca:26: 7b:9f:d7:8b:51:ca:ec:2e:50:8a:01:7d:2c:56:e1: 4b:e7:94:49:75:67:47:c3:97:4f:96:fb:45:8d:ab: 32:b9:d9:61:e1:12:c6:13:f1:7e:8f:43:ab:82:59: 8b:1d:02:c4:ba:e5:85:25:68:7e:3a:23:3a:0a:6a: 80:ef:fc:67:2b:44:4a:57:74:85:1a:b3:14:56:b8: db:39:6a:9d:dc:6e:00:03:30:20:9d:b1:ab:d5:76: 81:85:90:72:51:f6:95:f2:0e:7d:27:d6:46:9d:80: 84:11:40:e1:b9:aa:6e:61:ab:c3:e2:f2:4d:8e:7c: bb:ab:d0:a0:e8:33:4d:83:26:20:28:ab:46:55:5b: 62:ad:99:2c:c4:c1:5c:fe:e6:b2:62:61:b2:dd:43: 41:a3:b6:bc:af:ef:d0:f3:df:af:f0:e9:d3:91:c8: f7:32:e9:01:6d:f4:9d:0f:ca:f9:f7:ae:bb:f4:75: cd:6c:49:05:24:58:d5:11:83:d4:c1:51:b7:09:3e: c3:a6:08:a9:79:c4:ab:82:ff:75:01:3d:55:98:41: ef:64:bb:ae:df:b6:2a:49:c0:6d:d8:e1:b7:a6:4f: 99:53:cd:c0:74:b0:fd:8d:19:14:c6:50:88:52:09: 44:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B4:82:63:1A:F8:F0:69:22:88:B6:D7:04:55:6F:7C:F4:46:60:3A X509v3 Authority Key Identifier: keyid:65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/grSCYxr48GkiiLbXBFVvfPRGYDo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:3a00:6000::/48 Signature Algorithm: sha256WithRSAEncryption 0d:f2:09:e7:e1:3f:31:c4:df:bb:2d:e2:6f:a0:c0:12:9e:7b: 79:b0:33:52:4f:ab:4a:7a:03:5a:f4:1b:8e:32:bd:f1:b4:46: 6c:2a:aa:3a:ac:38:99:2e:66:56:6e:0a:81:96:4e:c9:49:53: fd:f1:92:95:e9:b1:5b:3d:dd:86:77:89:01:32:0d:92:e4:51: 68:0d:98:31:3e:5f:9f:da:3d:cb:14:b9:67:94:69:52:c5:48: 0b:8f:08:91:bb:d4:9d:e9:a0:0c:b3:44:38:92:ea:34:40:cc: 38:9b:13:96:b3:f1:a6:2e:f1:69:34:4a:2b:0a:97:90:a9:62: cd:43:02:33:4b:bb:d7:95:3b:3c:bc:fd:ce:eb:44:cf:a4:bf: 92:2e:0f:58:5b:af:44:2f:42:e7:78:00:d2:41:1f:ab:77:08: d1:3f:83:fe:f9:2a:15:e6:77:3f:12:5d:7e:fb:5d:77:c7:52: f3:a3:d8:65:a5:97:44:bb:06:86:18:dc:69:1d:59:57:ed:0c: 39:ab:cb:cc:71:24:f5:ce:15:f1:5c:e4:55:d2:24:b5:d1:88: 11:0a:74:1c:81:f7:e9:b7:5e:4c:d8:da:4c:a2:0e:e5:4a:43: 25:99:58:85:7b:d4:7b:7e:62:7a:a0:f2:a1:12:de:bf:27:f7: d4:91:c5:8e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt263X87JSua0ExGib1tE/ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MWJhZDk1Mjc2OTQ3YzdiZTUzNmFmNGM4NzBhMzcyMWYw Yjc3NjEwHhcNMjYwMTAxMDAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmI0ODI2MzFhZjhmMDY5MjI4OGI2ZDcwNDU1NmY3Y2Y0NDY2MDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5XmGeUP7ppaxJaByiZ7n9eLUcrs LlCKAX0sVuFL55RJdWdHw5dPlvtFjasyudlh4RLGE/F+j0OrglmLHQLEuuWFJWh+ OiM6CmqA7/xnK0RKV3SFGrMUVrjbOWqd3G4AAzAgnbGr1XaBhZByUfaV8g59J9ZG nYCEEUDhuapuYavD4vJNjny7q9Cg6DNNgyYgKKtGVVtirZksxMFc/uayYmGy3UNB o7a8r+/Q89+v8OnTkcj3MukBbfSdD8r596679HXNbEkFJFjVEYPUwVG3CT7Dpgip ecSrgv91AT1VmEHvZLuu37YqScBt2OG3pk+ZU83AdLD9jRkUxlCIUglEYQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIK0gmMa+PBpIoi21wRVb3z0RmA6MB8GA1UdIwQY MBaAFGUbrZUnaUfHvlNq9Mhwo3IfC3dhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlJ1dGxTZHBSOGUtVTJyMHlIQ2pjaDhMZDJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xZGJkNmItMzVjYy00ZjA5LWI5MmUt MTk4YjZhNjFjZTg1LzEvZ3JTQ1l4cjQ4R2tpaUxiWEJGVnZmUFJHWURvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8xZGJkNmItMzVjYy00ZjA5LWI5MmUtMTk4YjZhNjFjZTg1 LzEvWlJ1dGxTZHBSOGUtVTJyMHlIQ2pjaDhMZDJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgk6AGAA MA0GCSqGSIb3DQEBCwUAA4IBAQAN8gnn4T8xxN+7LeJvoMASnnt5sDNST6tKegNa 9BuOMr3xtEZsKqo6rDiZLmZWbgqBlk7JSVP98ZKV6bFbPd2Gd4kBMg2S5FFoDZgx Pl+f2j3LFLlnlGlSxUgLjwiRu9Sd6aAMs0Q4kuo0QMw4mxOWs/GmLvFpNEorCpeQ qWLNQwIzS7vXlTs8vP3O60TPpL+SLg9YW69EL0LneADSQR+rdwjRP4P++SoV5nc/ El1++113x1Lzo9hlpZdEuwaGGNxpHVlX7Qw5q8vMcST1zhXxXORV0iS10YgRCnQc gffpt15M2NpMog7lSkMlmViFe9R7fmJ6oPKhEt6/J/fUkcWO -----END CERTIFICATE-----Generated at Mon Jan 26 05:30:53 2026 by rpki-client