This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/Gf4Y2IXrfbYCUuna8-5oBQzErx8.roa File: Gf4Y2IXrfbYCUuna8-5oBQzErx8.roa (raw, json) Hash identifier: CBRZQkgyapVEnN+KlGzYptdXDl00PSWBvuMGdvm4uCg= Subject key identifier: 19:FE:18:D8:85:EB:7D:B6:02:52:E9:DA:F3:EE:68:05:0C:C4:AF:1F Certificate issuer: /CN=f497673c78efae5f6bd80a25ace3d3c37193e789 Certificate serial: 019B77595340B176BEBBBAF1AD8FAB749A04 Authority key identifier: F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/Gf4Y2IXrfbYCUuna8-5oBQzErx8.roa Signing time: Thu 01 Jan 2026 02:18:21 +0000 ROA not before: Thu 01 Jan 2026 02:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30969 IP address blocks: 2a01:410:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:53:40:b1:76:be:bb:ba:f1:ad:8f:ab:74:9a:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f497673c78efae5f6bd80a25ace3d3c37193e789 Validity Not Before: Jan 1 02:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19fe18d885eb7db60252e9daf3ee68050cc4af1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:67:d0:d0:cd:0a:ff:5e:55:98:43:80:6c:ba: 09:59:51:3e:f2:9d:48:f4:b6:7f:cf:f7:d5:d6:09: af:d0:a7:31:6c:01:99:99:31:79:fa:a8:dc:a4:05: 16:ba:d8:4e:91:3b:27:2a:92:95:9c:ab:02:78:40: ae:f6:72:7c:c1:b4:26:79:cb:0c:2d:81:ef:7b:97: 5b:62:95:18:8d:56:bb:3f:8d:f5:98:53:3b:b8:46: b2:42:f5:32:3e:02:96:64:28:39:b6:23:4d:25:59: 30:f6:7c:ef:42:c9:c6:82:b8:2a:c5:12:54:06:12: fb:a4:69:dd:3a:9c:5a:5c:95:1e:f7:86:26:40:93: da:ed:77:d9:75:e6:24:22:04:06:8a:48:14:7e:4c: 2f:01:2e:6e:d1:5f:fa:fe:c8:53:12:6c:e4:56:84: 3a:3b:50:88:6b:5b:95:0d:ff:bc:44:00:2d:d6:2c: f1:fc:3c:ee:d9:88:4f:6c:fa:ad:fe:13:9e:34:2a: 15:eb:8e:ee:be:0c:e3:b2:d4:73:8f:f9:16:42:e8: 0d:20:05:81:d0:7b:50:2b:e8:b3:31:4a:f0:45:c9: 5b:fc:c8:62:0f:b3:ea:53:50:da:2e:c2:57:88:58: f2:ab:92:cb:17:4c:4b:f9:df:4c:f0:d7:3d:a8:60: 31:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:FE:18:D8:85:EB:7D:B6:02:52:E9:DA:F3:EE:68:05:0C:C4:AF:1F X509v3 Authority Key Identifier: keyid:F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/Gf4Y2IXrfbYCUuna8-5oBQzErx8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:410:100::/40 Signature Algorithm: sha256WithRSAEncryption 90:fb:8d:b4:e0:4d:b7:55:08:6c:71:a6:77:88:54:cc:f0:41: e5:65:4f:b2:da:90:c5:9d:15:3b:4d:a9:a4:bc:08:72:13:2d: 0e:c8:6a:1d:7c:c6:a1:af:4f:77:66:d1:ae:d6:17:0b:be:3a: c9:75:8b:49:9d:ce:66:2b:92:16:f9:c4:cc:9b:6e:f3:6e:6e: b5:11:34:f2:79:9b:09:e2:e9:c1:91:b1:bd:7f:87:8e:3a:41: 47:a0:d0:de:ef:e7:f4:4b:a7:ca:33:96:83:38:28:a2:4d:0a: d8:29:60:b2:84:de:a3:7f:fd:53:c2:5c:c3:d3:1c:97:16:d6: 20:9f:a3:fc:cf:fe:4b:88:d1:25:cd:bc:c4:af:58:23:b9:63: 8c:fa:75:0d:80:d2:d6:99:1e:46:78:22:d7:e7:9f:44:e3:4f: 89:9f:cc:84:cc:64:38:07:e7:5d:a0:4e:48:5a:0e:91:3c:0c: 53:ce:a0:c9:4d:3a:85:f1:86:06:c3:cd:40:aa:82:66:54:8a: 09:c1:98:c5:f6:94:ba:df:9b:f5:2d:27:3a:4a:e3:a0:f4:df: 5b:93:44:34:18:19:f7:35:74:7b:25:18:48:57:7f:4c:2e:14: 74:d1:99:8b:1b:59:88:1f:9e:8d:d3:28:19:ad:f4:f6:74:d3: e8:53:ff:23 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WVNAsXa+u7rxrY+rdJoEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0OTc2NzNjNzhlZmFlNWY2YmQ4MGEyNWFjZTNkM2MzNzE5 M2U3ODkwHhcNMjYwMTAxMDIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWZlMThkODg1ZWI3ZGI2MDI1MmU5ZGFmM2VlNjgwNTBjYzRhZjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+WfQ0M0K/15VmEOAbLoJWVE+8p1I 9LZ/z/fV1gmv0KcxbAGZmTF5+qjcpAUWuthOkTsnKpKVnKsCeECu9nJ8wbQmecsM LYHve5dbYpUYjVa7P431mFM7uEayQvUyPgKWZCg5tiNNJVkw9nzvQsnGgrgqxRJU BhL7pGndOpxaXJUe94YmQJPa7XfZdeYkIgQGikgUfkwvAS5u0V/6/shTEmzkVoQ6 O1CIa1uVDf+8RAAt1izx/Dzu2YhPbPqt/hOeNCoV647uvgzjstRzj/kWQugNIAWB 0HtQK+izMUrwRclb/MhiD7PqU1DaLsJXiFjyq5LLF0xL+d9M8Nc9qGAx3QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFBn+GNiF6322AlLp2vPuaAUMxK8fMB8GA1UdIwQY MBaAFPSXZzx4765fa9gKJazj08Nxk+eJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUpkblBIanZybDlyMkFvbHJPUFR3M0dUNTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kMTM2NTgtYWY3ZS00ZDZlLTgyZWYt NmUwNjk2ZmVlOGU2LzEvR2Y0WTJJWHJmYllDVXVuYTgtNW9CUXpFcng4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9kMTM2NTgtYWY3ZS00ZDZlLTgyZWYtNmUwNjk2ZmVlOGU2 LzEvOUpkblBIanZybDlyMkFvbHJPUFR3M0dUNTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgEEEAEw DQYJKoZIhvcNAQELBQADggEBAJD7jbTgTbdVCGxxpneIVMzwQeVlT7LakMWdFTtN qaS8CHITLQ7Iah18xqGvT3dm0a7WFwu+Osl1i0mdzmYrkhb5xMybbvNubrURNPJ5 mwni6cGRsb1/h446QUeg0N7v5/RLp8ozloM4KKJNCtgpYLKE3qN//VPCXMPTHJcW 1iCfo/zP/kuI0SXNvMSvWCO5Y4z6dQ2A0taZHkZ4Itfnn0TjT4mfzITMZDgH512g TkhaDpE8DFPOoMlNOoXxhgbDzUCqgmZUignBmMX2lLrfm/UtJzpK46D031uTRDQY Gfc1dHslGEhXf0wuFHTRmYsbWYgfno3TKBmt9PZ00+hT/yM= -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:36 2026 by rpki-client