This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/gdXy00VXftWIDW180JVG0J7ko64.roa File: gdXy00VXftWIDW180JVG0J7ko64.roa (raw, json) Hash identifier: Mqi2FwypjABIeq2Jh4oC6KTGiPlkVF54aa5+tKkk1yo= Subject key identifier: 81:D5:F2:D3:45:57:7E:D5:88:0D:6D:7C:D0:95:46:D0:9E:E4:A3:AE Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Certificate serial: 019B79ECF998AE62EEF5F10DEA650F646253 Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/gdXy00VXftWIDW180JVG0J7ko64.roa Signing time: Thu 01 Jan 2026 14:18:52 +0000 ROA not before: Thu 01 Jan 2026 14:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206236 IP address blocks: 2001:bf7:fc00::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:f9:98:ae:62:ee:f5:f1:0d:ea:65:0f:64:62:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Validity Not Before: Jan 1 14:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81d5f2d345577ed5880d6d7cd09546d09ee4a3ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9e:14:57:ea:4a:cc:0b:dd:56:7e:9c:7c:3a: b3:54:ac:24:46:69:61:4e:53:dd:97:b0:42:53:a3: 92:24:76:62:ac:21:ef:cd:21:f1:e0:b8:ce:e8:ba: 49:1c:c8:28:0e:27:14:78:3f:2c:b3:3b:65:22:0b: 11:40:1c:ba:7a:93:70:50:11:30:f1:84:f8:99:11: 20:10:72:67:89:9c:08:e6:6b:6c:39:00:36:09:3e: c7:ff:63:92:4b:28:43:61:ce:be:42:30:ba:7d:80: a8:f0:a9:89:ed:09:04:69:63:11:22:88:4d:b2:46: e0:69:f8:bb:ad:07:ec:67:52:4b:2e:dc:10:32:48: 30:56:1a:9b:f1:78:39:d0:c7:be:6c:8a:4e:a9:86: dc:44:79:ef:f0:be:d9:64:74:2d:96:57:a9:b5:21: ec:9a:60:a1:f7:f6:cb:ff:a1:b5:5f:0b:e6:b0:b7: 85:3d:48:99:fb:b0:de:b9:4b:8b:8f:22:fd:1e:a9: d9:80:de:dc:b4:6c:56:34:16:7d:31:aa:97:7e:52: 38:a5:1a:bb:67:48:df:a1:26:a1:5b:b2:72:fd:e3: 9a:dd:1c:a6:99:ee:8a:a2:79:3f:dc:b8:bc:2c:24: 18:9e:41:42:02:2a:d2:15:a1:8e:58:db:1e:e2:e6: 0b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D5:F2:D3:45:57:7E:D5:88:0D:6D:7C:D0:95:46:D0:9E:E4:A3:AE X509v3 Authority Key Identifier: keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/gdXy00VXftWIDW180JVG0J7ko64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:bf7:fc00::/44 Signature Algorithm: sha256WithRSAEncryption 14:93:1e:0c:90:3c:03:7a:c1:37:4e:d9:05:25:b8:87:81:4d: 75:80:e1:70:86:a2:a2:ed:6b:10:23:96:aa:40:63:b6:d6:ce: 96:3c:b7:af:af:0a:bc:9f:35:86:19:05:69:8b:44:04:bf:59: 65:9e:fc:c8:54:97:5c:1a:de:0e:03:7d:f9:44:05:61:e6:f1: 8b:6c:ae:16:2f:85:6d:14:3f:a4:21:c8:d8:50:25:e6:55:87: 14:27:89:f4:ca:9b:27:26:da:09:1e:df:49:40:6c:2d:c1:c5: c6:73:0f:15:5a:18:8d:f3:23:b5:57:f3:e0:90:04:ff:ed:63: e6:83:73:d0:76:c4:93:1b:ff:09:b3:66:56:15:cb:68:90:9d: 81:4f:66:46:5c:79:6a:cf:73:0e:db:9f:c0:0c:fd:7c:2e:18: c6:5c:2e:61:52:75:69:3b:83:de:b8:25:e0:f6:2b:89:ce:c2: 0e:e1:d5:25:a6:da:74:53:b9:32:7f:ae:4e:3a:1b:5c:20:c3: 8f:45:d5:bc:65:9d:48:79:f0:1b:97:37:0c:58:0b:81:81:a0: 18:e6:74:eb:85:f2:ef:19:63:f1:5e:31:c6:ec:d1:6c:a2:60: 1f:87:22:60:c0:f8:c8:96:3e:0b:78:6f:2e:5f:d6:e9:7a:e7: 73:e5:fd:ca -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57PmYrmLu9fEN6mUPZGJTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzE0OTI0NzNhNzhjNmZlOWY1MzlmOWZhN2QyMjUyNTYw YTJiN2UwHhcNMjYwMTAxMTQxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWQ1ZjJkMzQ1NTc3ZWQ1ODgwZDZkN2NkMDk1NDZkMDllZTRhM2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu54UV+pKzAvdVn6cfDqzVKwkRmlh TlPdl7BCU6OSJHZirCHvzSHx4LjO6LpJHMgoDicUeD8ssztlIgsRQBy6epNwUBEw 8YT4mREgEHJniZwI5mtsOQA2CT7H/2OSSyhDYc6+QjC6fYCo8KmJ7QkEaWMRIohN skbgafi7rQfsZ1JLLtwQMkgwVhqb8Xg50Me+bIpOqYbcRHnv8L7ZZHQtlleptSHs mmCh9/bL/6G1XwvmsLeFPUiZ+7DeuUuLjyL9HqnZgN7ctGxWNBZ9MaqXflI4pRq7 Z0jfoSahW7Jy/eOa3Rymme6Konk/3Li8LCQYnkFCAirSFaGOWNse4uYLHwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIHV8tNFV37ViA1tfNCVRtCe5KOuMB8GA1UdIwQY MBaAFP8xSSRzp4xv6fU5+fp9IlJWCit+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDct NzNmZDNiYzE5YWE3LzEvZ2RYeTAwVlhmdFdJRFcxODBKVkcwSjdrbzY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDctNzNmZDNiYzE5YWE3 LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEL9/wA MA0GCSqGSIb3DQEBCwUAA4IBAQAUkx4MkDwDesE3TtkFJbiHgU11gOFwhqKi7WsQ I5aqQGO21s6WPLevrwq8nzWGGQVpi0QEv1llnvzIVJdcGt4OA335RAVh5vGLbK4W L4VtFD+kIcjYUCXmVYcUJ4n0ypsnJtoJHt9JQGwtwcXGcw8VWhiN8yO1V/PgkAT/ 7WPmg3PQdsSTG/8Js2ZWFctokJ2BT2ZGXHlqz3MO25/ADP18LhjGXC5hUnVpO4Pe uCXg9iuJzsIO4dUlptp0U7kyf65OOhtcIMOPRdW8ZZ1IefAblzcMWAuBgaAY5nTr hfLvGWPxXjHG7NFsomAfhyJgwPjIlj4LeG8uX9bpeudz5f3K -----END CERTIFICATE-----Generated at Mon Jan 26 11:29:33 2026 by rpki-client