This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/gDJ4Lp76yXybVk_hOXjmjT2yA0Y.roa File: gDJ4Lp76yXybVk_hOXjmjT2yA0Y.roa (raw, json) Hash identifier: TNUN3ffkTS+jn16rGNGRBs19tZhvUdCtK4/zEyf8nb4= Subject key identifier: 80:32:78:2E:9E:FA:C9:7C:9B:56:4F:E1:39:78:E6:8D:3D:B2:03:46 Certificate issuer: /CN=225cf0d31704b59d7eeb018548202d3a570da932 Certificate serial: 019B7BA4E9BFEE2AC4EEF1C62736DAAA7F4B Authority key identifier: 22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/gDJ4Lp76yXybVk_hOXjmjT2yA0Y.roa Signing time: Thu 01 Jan 2026 22:19:23 +0000 ROA not before: Thu 01 Jan 2026 22:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1836 IP address blocks: 2001:678:810::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.mft rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:e9:bf:ee:2a:c4:ee:f1:c6:27:36:da:aa:7f:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=225cf0d31704b59d7eeb018548202d3a570da932 Validity Not Before: Jan 1 22:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8032782e9efac97c9b564fe13978e68d3db20346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1c:f2:a8:cc:7b:db:28:a7:d7:34:18:2c:2d: 42:55:bf:33:17:be:c7:33:29:c3:15:8d:21:aa:4a: 83:1c:b8:4d:fa:80:41:12:fe:15:58:aa:9d:52:d5: ba:34:35:93:31:2a:56:a3:40:aa:7d:02:7d:a4:91: a5:c6:94:bc:5a:df:5e:40:c0:ab:65:1d:45:8a:8c: 77:73:e8:6c:dc:f6:27:bc:07:2d:39:83:22:e8:63: 13:c4:2f:53:d1:e0:34:ff:af:42:24:e5:d7:04:42: 9c:30:20:02:fa:ba:fd:30:4e:61:9f:dd:a9:a0:3d: 1e:be:4e:c5:b3:81:76:ef:dd:c5:20:40:df:d7:67: af:83:32:c2:10:1b:99:07:2a:aa:4a:0e:99:fb:5d: 06:e0:74:82:17:00:3f:84:bc:45:59:75:09:a8:4d: e7:d2:ca:28:90:c7:91:6e:24:26:c5:53:42:cf:2c: f4:33:35:27:0d:82:53:47:7b:ca:94:7a:ee:59:4e: 54:a6:ce:7a:c2:4a:59:6c:a7:a1:e6:1a:33:f3:82: c6:86:2d:7c:e3:b0:dd:2b:0d:15:8e:99:63:49:b6: b9:65:41:0f:d9:4f:e5:d9:55:ac:5e:62:07:ce:0c: a3:d4:05:d3:35:a8:42:71:0e:90:d3:f7:ec:11:f1: da:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:32:78:2E:9E:FA:C9:7C:9B:56:4F:E1:39:78:E6:8D:3D:B2:03:46 X509v3 Authority Key Identifier: keyid:22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/gDJ4Lp76yXybVk_hOXjmjT2yA0Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:810::/48 Signature Algorithm: sha256WithRSAEncryption 09:bb:d2:59:e3:e8:1b:16:2c:ea:69:6f:0f:a5:2b:8d:ee:71: a5:16:48:0d:ff:76:10:5f:03:7c:44:71:b7:72:4b:a8:20:44: 71:e3:c5:a8:90:5a:e5:ab:d2:47:82:d6:1d:3d:82:9c:d4:4e: d1:41:4a:76:bb:5d:37:3a:c8:f8:88:d0:32:b7:43:43:d9:e6: 60:3a:f0:63:5b:4d:64:25:26:a1:d9:70:2c:b2:10:27:ff:02: 27:79:26:c8:9f:20:e9:4a:1c:da:c5:3a:7c:1b:ee:88:38:fb: 30:7f:f4:23:67:40:2c:38:ad:dc:f4:5e:e8:fe:2b:82:01:e3: cb:c6:61:c9:ad:99:46:37:1c:c3:ff:4c:bd:90:d3:ce:c7:8b: f8:c0:81:5e:c2:a0:76:87:1b:bb:97:eb:c8:4e:ba:cf:84:a2: 28:95:4c:59:42:71:f6:a6:0d:5b:49:45:ef:66:7f:9b:05:99: c2:5c:bf:d4:fe:3c:ed:5a:9a:21:bb:52:dc:11:8f:dd:a8:02: 31:e3:cb:25:ad:4c:a2:7a:0c:55:93:84:43:6f:fb:9a:6a:20: 20:ad:81:42:2e:87:95:65:f3:44:74:7e:83:61:b8:27:54:cd: a3:6e:a7:93:4d:a1:57:ff:45:c5:e3:bb:bb:74:c0:47:0b:21: ff:a4:73:89 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7pOm/7irE7vHGJzbaqn9LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyNWNmMGQzMTcwNGI1OWQ3ZWViMDE4NTQ4MjAyZDNhNTcw ZGE5MzIwHhcNMjYwMTAxMjIxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDMyNzgyZTllZmFjOTdjOWI1NjRmZTEzOTc4ZTY4ZDNkYjIwMzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBzyqMx72yin1zQYLC1CVb8zF77H MynDFY0hqkqDHLhN+oBBEv4VWKqdUtW6NDWTMSpWo0CqfQJ9pJGlxpS8Wt9eQMCr ZR1Fiox3c+hs3PYnvActOYMi6GMTxC9T0eA0/69CJOXXBEKcMCAC+rr9ME5hn92p oD0evk7Fs4F2793FIEDf12evgzLCEBuZByqqSg6Z+10G4HSCFwA/hLxFWXUJqE3n 0sookMeRbiQmxVNCzyz0MzUnDYJTR3vKlHruWU5Ups56wkpZbKeh5hoz84LGhi18 47DdKw0VjpljSba5ZUEP2U/l2VWsXmIHzgyj1AXTNahCcQ6Q0/fsEfHa/QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIAyeC6e+sl8m1ZP4Tl45o09sgNGMB8GA1UdIwQY MBaAFCJc8NMXBLWdfusBhUggLTpXDakyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWx6dzB4Y0V0WjEtNndHRlNDQXRPbGNOcVRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80ZGY0MjktZjc3Ni00ZmQzLThkZTQt MDBiYzkwM2QyNjIxLzEvZ0RKNExwNzZ5WHliVmtfaE9Yam1qVDJ5QTBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS80ZGY0MjktZjc3Ni00ZmQzLThkZTQtMDBiYzkwM2QyNjIx LzEvSWx6dzB4Y0V0WjEtNndHRlNDQXRPbGNOcVRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAgQ MA0GCSqGSIb3DQEBCwUAA4IBAQAJu9JZ4+gbFizqaW8PpSuN7nGlFkgN/3YQXwN8 RHG3ckuoIERx48WokFrlq9JHgtYdPYKc1E7RQUp2u103Osj4iNAyt0ND2eZgOvBj W01kJSah2XAsshAn/wIneSbInyDpShzaxTp8G+6IOPswf/QjZ0AsOK3c9F7o/iuC AePLxmHJrZlGNxzD/0y9kNPOx4v4wIFewqB2hxu7l+vITrrPhKIolUxZQnH2pg1b SUXvZn+bBZnCXL/U/jztWpohu1LcEY/dqAIx48slrUyiegxVk4RDb/uaaiAgrYFC LoeVZfNEdH6DYbgnVM2jbqeTTaFX/0XF47u7dMBHCyH/pHOJ -----END CERTIFICATE-----Generated at Sat Jan 3 03:54:53 2026 by rpki-client