This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/gg1YmyWgwwkTapnmNENrk7DrS1U.roa File: gg1YmyWgwwkTapnmNENrk7DrS1U.roa (raw, json) Hash identifier: x7FuB0RU54Bhq3bH1MH2fHjP+CUqgHp4jaNgyJleel4= Subject key identifier: 82:0D:58:9B:25:A0:C3:09:13:6A:99:E6:34:43:6B:93:B0:EB:4B:55 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019BDAB1ADA8B298F2F2E6921E8F3425D747 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/gg1YmyWgwwkTapnmNENrk7DrS1U.roa Signing time: Tue 20 Jan 2026 09:17:15 +0000 ROA not before: Tue 20 Jan 2026 09:17:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213605 IP address blocks: 2a14:67c1:a020::/44 maxlen: 48 2a14:67c1:a066::/48 maxlen: 48 2a14:67c1:b000::/48 maxlen: 48 2a14:67c1:b100::/40 maxlen: 48 2a14:67c1:b100::/48 maxlen: 48 2a14:67c1:b582::/48 maxlen: 48 2a14:67c3:360::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:b1:ad:a8:b2:98:f2:f2:e6:92:1e:8f:34:25:d7:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 20 09:17:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=820d589b25a0c309136a99e634436b93b0eb4b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:32:8e:ef:41:20:ec:7e:cc:18:64:79:3a:43: 4e:db:e4:50:2e:cc:a3:db:4e:3c:48:67:f0:c5:c6: fe:51:11:e3:7b:e1:2b:30:a3:84:12:e8:7e:4f:86: bd:11:a5:03:08:30:7b:0d:86:16:2d:a8:a5:4a:e5: c4:cb:9d:62:de:18:10:18:7c:63:96:70:c5:2f:ce: 2f:1f:20:6f:67:9c:1f:12:58:b5:1d:73:ee:bb:4f: 33:58:8e:b7:71:b3:b0:d4:58:24:2c:ab:95:28:ad: a2:ed:52:06:f2:7c:9b:fe:1b:10:c9:e4:05:33:ab: 3b:3f:78:f9:d0:52:f2:dd:9d:8b:8a:c7:04:3d:d4: 54:2e:47:a8:3a:c0:03:90:c8:17:9c:6c:4f:89:c1: fd:b3:da:1f:26:ed:6b:c4:c0:dc:0a:36:f3:da:4f: 61:a7:6e:97:d3:30:7f:01:65:cf:c9:d2:8e:4b:43: dc:c9:ba:ce:a3:68:dc:d1:bb:40:70:bb:cf:58:c3: a3:2b:2b:13:af:8b:1e:79:70:15:98:17:19:a0:fb: a1:eb:82:5f:25:81:81:56:22:bf:d9:d5:d1:2e:20: 30:90:a1:eb:6d:78:2d:d9:2d:de:4e:6f:08:26:ad: 9c:6a:4c:9b:7e:2f:cd:40:48:8e:b0:2f:a6:bb:c4: 9f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:0D:58:9B:25:A0:C3:09:13:6A:99:E6:34:43:6B:93:B0:EB:4B:55 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/gg1YmyWgwwkTapnmNENrk7DrS1U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c1:a020::/44 2a14:67c1:a066::/48 2a14:67c1:b000::/48 2a14:67c1:b100::/40 2a14:67c1:b582::/48 2a14:67c3:360::/44 Signature Algorithm: sha256WithRSAEncryption 7c:4c:e0:a0:8a:7c:2d:49:88:93:05:5d:17:b7:dc:91:36:4b: 58:19:d3:5e:95:cb:a6:2e:2f:7e:34:d8:f7:dd:3e:4f:9d:39: 63:a0:41:d5:4a:db:63:34:c0:76:98:ae:c2:e4:0d:a5:d5:36: 70:fa:df:3b:32:20:03:ab:64:c3:29:20:98:6e:0c:e6:5a:23: 1a:35:31:c9:3b:f2:cb:98:d3:a1:37:b8:33:93:66:66:93:5c: dc:7d:2f:61:c0:6c:4a:6e:1f:07:36:a5:d0:3b:fa:d6:45:7e: 3e:b9:a7:ef:5f:84:9b:65:c3:90:ab:61:32:d3:08:8c:2f:d9: cc:7b:21:dd:a1:1a:f8:58:27:cf:07:cd:e8:65:35:bb:63:dd: 96:08:64:52:68:06:9d:6f:40:67:47:9d:75:a7:f4:4a:f4:8c: fd:0d:d3:e3:76:4e:2b:65:8c:96:95:29:17:db:87:ff:01:e2: 17:29:b8:ae:f8:c6:d2:d3:71:90:f4:f5:5f:91:26:57:d0:84: d7:45:91:cf:6e:d5:04:ae:51:ac:cd:d8:a8:ab:b7:31:35:4d: d5:ef:e4:55:ec:82:03:35:23:9a:34:91:0b:37:e6:d7:f3:85: fa:3c:b5:01:73:8b:71:51:0d:b6:43:63:c3:d0:9a:78:67:6a: 52:4b:c1:73 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZvasa2ospjy8uaSHo80JddHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTIwMDkxNzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjBkNTg5YjI1YTBjMzA5MTM2YTk5ZTYzNDQzNmI5M2IwZWI0YjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzKO70Eg7H7MGGR5OkNO2+RQLsyj 2048SGfwxcb+URHje+ErMKOEEuh+T4a9EaUDCDB7DYYWLailSuXEy51i3hgQGHxj lnDFL84vHyBvZ5wfEli1HXPuu08zWI63cbOw1FgkLKuVKK2i7VIG8nyb/hsQyeQF M6s7P3j50FLy3Z2LiscEPdRULkeoOsADkMgXnGxPicH9s9ofJu1rxMDcCjbz2k9h p26X0zB/AWXPydKOS0PcybrOo2jc0btAcLvPWMOjKysTr4seeXAVmBcZoPuh64Jf JYGBViK/2dXRLiAwkKHrbXgt2S3eTm8IJq2cakybfi/NQEiOsC+mu8SfbwIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFIINWJsloMMJE2qZ5jRDa5Ow60tVMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvZ2cxWW15V2d3d2tUYXBubU5FTnJrN0RyUzFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTA7BAIAAjA1AwcEKhRnwaAg AwcAKhRnwaBmAwcAKhRnwbAAAwYAKhRnwbEDBwAqFGfBtYIDBwQqFGfDA2AwDQYJ KoZIhvcNAQELBQADggEBAHxM4KCKfC1JiJMFXRe33JE2S1gZ016Vy6YuL3402Pfd Pk+dOWOgQdVK22M0wHaYrsLkDaXVNnD63zsyIAOrZMMpIJhuDOZaIxo1Mck78suY 06E3uDOTZmaTXNx9L2HAbEpuHwc2pdA7+tZFfj65p+9fhJtlw5CrYTLTCIwv2cx7 Id2hGvhYJ88HzehlNbtj3ZYIZFJoBp1vQGdHnXWn9Er0jP0N0+N2TitljJaVKRfb h/8B4hcpuK74xtLTcZD09V+RJlfQhNdFkc9u1QSuUazN2KirtzE1TdXv5FXsggM1 I5o0kQs35tfzhfo8tQFzi3FRDbZDY8PQmnhnalJLwXM= -----END CERTIFICATE-----Generated at Sun Jan 25 11:48:12 2026 by rpki-client