This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/GsL6G3Qz5ZjpuRYda1-7KFnYc0o.roa File: GsL6G3Qz5ZjpuRYda1-7KFnYc0o.roa (raw, json) Hash identifier: pJa6GuoaHJHw4hKMbDO80uXWDKK7cJe4mwiQpI9C0zU= Subject key identifier: 1A:C2:FA:1B:74:33:E5:98:E9:B9:16:1D:6B:5F:BB:28:59:D8:73:4A Certificate issuer: /CN=d6eea5fb35b512f910094dc62459c1679b583e3f Certificate serial: 019B78352807F17EFDD138347EFB22824294 Authority key identifier: D6:EE:A5:FB:35:B5:12:F9:10:09:4D:C6:24:59:C1:67:9B:58:3E:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/GsL6G3Qz5ZjpuRYda1-7KFnYc0o.roa Signing time: Thu 01 Jan 2026 06:18:28 +0000 ROA not before: Thu 01 Jan 2026 06:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39086 IP address blocks: 195.66.80.0/24 maxlen: 24 2001:678:7c8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:28:07:f1:7e:fd:d1:38:34:7e:fb:22:82:42:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6eea5fb35b512f910094dc62459c1679b583e3f Validity Not Before: Jan 1 06:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ac2fa1b7433e598e9b9161d6b5fbb2859d8734a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:15:a2:0f:ac:ce:41:0e:86:88:19:67:f7:bf: 20:29:31:7f:12:9d:82:9a:0e:38:5b:91:59:b5:6c: fa:92:9c:52:2d:32:98:d8:25:41:cd:99:66:ac:15: 96:19:d0:36:74:49:7f:fc:9d:09:48:f5:21:d8:19: 71:4a:22:7a:d8:a5:00:ca:99:ce:30:39:20:86:09: 32:c5:a8:9d:95:86:30:f0:d5:69:8d:13:ee:fb:63: 64:1f:d7:98:d1:d2:58:82:49:c8:8f:d2:55:2f:52: c6:c5:f0:fb:6c:ff:3b:ec:f9:ed:59:6e:79:54:10: dc:93:42:f3:0b:4f:35:b0:ba:8c:8a:2f:b5:0d:fe: 65:a7:da:4e:05:a9:2b:55:49:95:55:45:ca:ba:c6: 33:11:11:71:2e:1e:14:d6:f6:61:01:04:10:eb:c7: a1:5d:74:b2:d6:7b:13:ef:c5:bc:d1:71:27:d0:61: d4:8a:6d:66:c5:cb:0f:4d:3d:4d:13:5e:ca:ef:60: 00:3a:98:38:da:56:1c:86:f1:88:af:f8:98:9d:b6: 74:f1:f6:ac:cc:0a:2d:3d:86:30:3b:1c:55:e5:5d: c8:fd:31:be:6f:c7:72:e9:6a:a3:08:d8:d0:51:25: ed:05:c8:b7:bb:c8:d8:19:0f:15:b0:a5:ef:aa:9d: 19:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C2:FA:1B:74:33:E5:98:E9:B9:16:1D:6B:5F:BB:28:59:D8:73:4A X509v3 Authority Key Identifier: keyid:D6:EE:A5:FB:35:B5:12:F9:10:09:4D:C6:24:59:C1:67:9B:58:3E:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/GsL6G3Qz5ZjpuRYda1-7KFnYc0o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.66.80.0/24 IPv6: 2001:678:7c8::/48 Signature Algorithm: sha256WithRSAEncryption bb:63:29:aa:96:27:53:2e:28:d1:6e:34:e5:4a:76:80:65:8a: 64:95:5f:5e:54:d5:7c:01:ff:01:0f:80:c4:0e:2c:7d:c6:a5: b0:50:83:b9:fb:c1:bd:68:50:5d:61:7b:2c:2f:85:3e:50:cc: 08:e4:56:da:6b:bb:b9:12:c1:ea:f2:a0:b5:44:70:e9:01:b7: 39:31:4b:3a:14:e4:d0:92:2f:fc:e9:89:87:47:75:5a:76:3d: 22:2a:ff:e6:2c:0c:42:34:d3:73:bd:87:f4:ad:d6:84:e6:99: c3:ca:d7:2d:c2:92:46:c2:bf:ac:b4:c6:44:84:25:b0:67:80: 7d:c5:68:10:db:1c:57:5a:df:2d:5b:19:c8:bd:30:97:cf:5a: 29:0f:1f:cf:10:a9:02:f9:0b:80:aa:b3:2f:39:ea:62:71:5b: 8b:ef:ee:44:cd:2c:2f:a4:8f:b4:ad:32:80:ba:6e:99:7f:43: 24:dc:e8:33:5e:27:4b:1a:58:ca:d5:4d:af:56:ea:8f:a2:92: 06:19:ca:9d:a6:40:41:36:ab:00:c6:fb:9d:b1:d6:84:50:cd: 08:21:17:81:62:1e:dc:25:6f:77:0d:0f:42:93:d3:50:32:9b: f8:32:eb:a2:eb:f8:8c:a0:69:0e:2c:77:e7:c8:e4:7b:8f:23: ff:6a:da:f6 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4NSgH8X790Tg0fvsigkKUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZWVhNWZiMzViNTEyZjkxMDA5NGRjNjI0NTljMTY3OWI1 ODNlM2YwHhcNMjYwMTAxMDYxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWMyZmExYjc0MzNlNTk4ZTliOTE2MWQ2YjVmYmIyODU5ZDg3MzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BWiD6zOQQ6GiBln978gKTF/Ep2C mg44W5FZtWz6kpxSLTKY2CVBzZlmrBWWGdA2dEl//J0JSPUh2BlxSiJ62KUAypnO MDkghgkyxaidlYYw8NVpjRPu+2NkH9eY0dJYgknIj9JVL1LGxfD7bP877PntWW55 VBDck0LzC081sLqMii+1Df5lp9pOBakrVUmVVUXKusYzERFxLh4U1vZhAQQQ68eh XXSy1nsT78W80XEn0GHUim1mxcsPTT1NE17K72AAOpg42lYchvGIr/iYnbZ08fas zAotPYYwOxxV5V3I/TG+b8dy6WqjCNjQUSXtBci3u8jYGQ8VsKXvqp0ZewIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBrC+ht0M+WY6bkWHWtfuyhZ2HNKMB8GA1UdIwQY MBaAFNbupfs1tRL5EAlNxiRZwWebWD4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXU2bC16VzFFdmtRQ1UzR0pGbkJaNXRZUGo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hMjM1NjItMzRkZi00OWQ1LTliZjQt NThmYzk0ZDBkNDE0LzEvR3NMNkczUXo1WmpwdVJZZGExLTdLRm5ZYzBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hMjM1NjItMzRkZi00OWQ1LTliZjQtNThmYzk0ZDBkNDE0 LzEvMXU2bC16VzFFdmtRQ1UzR0pGbkJaNXRZUGo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAw0JQMA8E AgACMAkDBwAgAQZ4B8gwDQYJKoZIhvcNAQELBQADggEBALtjKaqWJ1MuKNFuNOVK doBlimSVX15U1XwB/wEPgMQOLH3GpbBQg7n7wb1oUF1heywvhT5QzAjkVtpru7kS weryoLVEcOkBtzkxSzoU5NCSL/zpiYdHdVp2PSIq/+YsDEI003O9h/St1oTmmcPK 1y3CkkbCv6y0xkSEJbBngH3FaBDbHFda3y1bGci9MJfPWikPH88QqQL5C4Cqsy85 6mJxW4vv7kTNLC+kj7StMoC6bpl/QyTc6DNeJ0saWMrVTa9W6o+ikgYZyp2mQEE2 qwDG+52x1oRQzQghF4FiHtwlb3cND0KT01Aym/gy66Lr+IygaQ4sd+fI5HuPI/9q 2vY= -----END CERTIFICATE-----Generated at Thu Jan 1 17:28:22 2026 by rpki-client