This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/G0kBNcjhGFcxChx46aWWaNpRXhY.roa File: G0kBNcjhGFcxChx46aWWaNpRXhY.roa (raw, json) Hash identifier: VJoqFME0N6dK/qBA61hfvkkTq2MVQMZWW93hxUvsK8Q= Subject key identifier: 1B:49:01:35:C8:E1:18:57:31:0A:1C:78:E9:A5:96:68:DA:51:5E:16 Certificate issuer: /CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6 Certificate serial: 019B7FF074F62E3B8CCB8C2A702A97011D01 Authority key identifier: 7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/G0kBNcjhGFcxChx46aWWaNpRXhY.roa Signing time: Fri 02 Jan 2026 18:20:23 +0000 ROA not before: Fri 02 Jan 2026 18:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51582 IP address blocks: 2a06:9686:a00::/39 maxlen: 39 2a06:9686:c00::/39 maxlen: 39 2a06:9686:e00::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f0:74:f6:2e:3b:8c:cb:8c:2a:70:2a:97:01:1d:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6 Validity Not Before: Jan 2 18:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b490135c8e11857310a1c78e9a59668da515e16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7e:a4:b7:a1:72:59:0d:15:ea:fe:f9:7f:cf: c9:7d:f2:24:dd:f0:fc:c7:91:55:b7:c0:1b:9d:25: 43:02:f2:7d:4f:71:73:be:3c:21:bc:fc:ce:f6:be: f9:dc:6c:46:aa:39:82:9f:fd:03:0f:2e:f6:1c:d4: 14:e3:d0:cf:4a:f6:91:75:d7:f9:ba:3b:75:16:86: 49:82:fe:75:39:f2:b8:13:85:db:fc:88:48:3e:4f: dc:e2:31:8c:19:33:a9:09:c6:b7:9a:08:e3:3f:37: 90:55:f7:17:70:e1:c0:82:b6:cd:e9:a1:ec:a8:ae: 6a:21:cd:b0:61:78:39:82:69:46:0f:e3:20:91:dd: d9:73:c1:de:23:4d:e5:e1:d3:6f:10:26:b1:24:cb: 01:4a:53:a5:68:c7:28:e1:c4:a5:5a:0a:83:2e:36: 2e:7a:7b:46:fd:aa:c9:26:0f:72:8c:a0:96:15:a8: ad:06:8d:ff:68:ba:99:cd:45:49:f1:82:4b:d6:3a: 57:0f:22:f2:fd:33:f3:47:59:8b:e6:9e:92:e2:72: 0a:28:d4:7f:ab:56:8a:0e:e0:2b:ef:0a:5f:f9:6c: 45:30:19:bf:6f:35:36:08:95:46:43:ae:fa:2b:f2: a5:94:13:2e:23:18:ef:d1:fd:fb:bb:76:ef:45:5c: 06:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:49:01:35:C8:E1:18:57:31:0A:1C:78:E9:A5:96:68:DA:51:5E:16 X509v3 Authority Key Identifier: keyid:7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/G0kBNcjhGFcxChx46aWWaNpRXhY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9686:a00::-2a06:9686:fff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 4d:1c:dc:15:9d:98:e4:e8:f6:c1:f3:c1:da:0c:4f:29:9b:a8: 95:11:d5:e6:78:db:b2:a7:86:47:a4:f4:d5:ce:ac:98:b3:1a: b4:2e:0f:33:3f:da:eb:65:07:27:70:d6:4d:2b:57:fe:59:24: 08:b6:49:76:85:60:b7:f0:7e:04:6d:3d:a7:53:95:d2:29:81: 54:97:dd:ae:10:35:dd:c9:e9:3d:bd:3d:19:9d:28:9d:f8:71: 4d:40:91:4a:f5:6d:e2:f1:f1:d3:55:71:df:62:b7:8e:25:08: c6:63:a8:16:f0:47:16:f0:0e:85:d2:15:57:e8:a0:58:68:61: 81:7b:b8:c5:19:fb:7a:7d:74:35:20:15:8a:7c:94:47:87:19: 77:0a:da:3d:9f:fd:16:7f:24:ea:2d:97:56:06:9b:08:8a:24: 26:4d:99:a2:96:ad:23:ea:0a:82:d0:f3:b6:5f:4e:8a:8d:f5: 74:ab:1b:56:84:4a:7a:18:04:5a:ca:e4:74:c2:2a:7b:7d:5c: 3e:b2:bc:4d:66:91:2f:67:ed:23:0a:92:93:66:54:af:84:5e: 1f:04:03:3b:1f:6c:64:5a:e7:9f:91:e8:27:2e:3d:39:75:8b: 14:1b:16:28:69:10:2e:d9:d8:bf:7c:fc:8f:c5:3c:92:21:4a: be:cc:de:4a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/8HT2LjuMy4wqcCqXAR0BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2I4ODc3ZTFhMTMwZmU1MDM4NmM2MTBkNmVhZDU2NDFi OTdiYTYwHhcNMjYwMTAyMTgyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjQ5MDEzNWM4ZTExODU3MzEwYTFjNzhlOWE1OTY2OGRhNTE1ZTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo36kt6FyWQ0V6v75f8/JffIk3fD8 x5FVt8AbnSVDAvJ9T3FzvjwhvPzO9r753GxGqjmCn/0DDy72HNQU49DPSvaRddf5 ujt1FoZJgv51OfK4E4Xb/IhIPk/c4jGMGTOpCca3mgjjPzeQVfcXcOHAgrbN6aHs qK5qIc2wYXg5gmlGD+Mgkd3Zc8HeI03l4dNvECaxJMsBSlOlaMco4cSlWgqDLjYu entG/arJJg9yjKCWFaitBo3/aLqZzUVJ8YJL1jpXDyLy/TPzR1mL5p6S4nIKKNR/ q1aKDuAr7wpf+WxFMBm/bzU2CJVGQ676K/KllBMuIxjv0f37u3bvRVwGaQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBtJATXI4RhXMQoceOmllmjaUV4WMB8GA1UdIwQY MBaAFHw7iHfhoTD+UDhsYQ1urVZBuXumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xN2E3MTItNGU1YS00MGM1LWEzYTIt MTIwMjVjNTRmNDg0LzEvRzBrQk5jamhHRmN4Q2h4NDZhV1dhTnBSWGhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8xN2E3MTItNGU1YS00MGM1LWEzYTItMTIwMjVjNTRmNDg0 LzEvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASMBADBgEqBpaG CgMGBCoGloYAMA0GCSqGSIb3DQEBCwUAA4IBAQBNHNwVnZjk6PbB88HaDE8pm6iV EdXmeNuyp4ZHpPTVzqyYsxq0Lg8zP9rrZQcncNZNK1f+WSQItkl2hWC38H4EbT2n U5XSKYFUl92uEDXdyek9vT0ZnSid+HFNQJFK9W3i8fHTVXHfYreOJQjGY6gW8EcW 8A6F0hVX6KBYaGGBe7jFGft6fXQ1IBWKfJRHhxl3Cto9n/0WfyTqLZdWBpsIiiQm TZmilq0j6gqC0PO2X06KjfV0qxtWhEp6GARayuR0wip7fVw+srxNZpEvZ+0jCpKT ZlSvhF4fBAM7H2xkWuefkegnLj05dYsUGxYoaRAu2di/fPyPxTySIUq+zN5K -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:32 2026 by rpki-client