This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/GTMLYyQMidOLZRCpyF-7gGja-y0.roa File: GTMLYyQMidOLZRCpyF-7gGja-y0.roa (raw, json) Hash identifier: +ZtZOMaMTsRVooSNXBd3D0jqV261yuuPQK0Ad/U+JAA= Subject key identifier: 19:33:0B:63:24:0C:89:D3:8B:65:10:A9:C8:5F:BB:80:68:DA:FB:2D Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B1D72EF660D53767649426B43F2A16A54 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/GTMLYyQMidOLZRCpyF-7gGja-y0.roa Signing time: Sun 14 Dec 2025 15:20:30 +0000 ROA not before: Sun 14 Dec 2025 15:20:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214304 IP address blocks: 2a0c:9a40:8e20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:72:ef:66:0d:53:76:76:49:42:6b:43:f2:a1:6a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Dec 14 15:20:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=19330b63240c89d38b6510a9c85fbb8068dafb2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2f:24:b9:e5:24:9e:58:1c:d9:4d:ef:e6:12: 13:c2:98:3b:aa:fd:22:12:5a:7c:24:b8:f9:89:51: e9:43:ac:2c:97:49:ea:d7:a3:07:ea:fd:7e:84:d4: ba:e4:25:49:c7:ba:11:6b:3b:04:e3:c9:f9:2e:b0: d6:48:3d:7f:e2:e3:dc:72:c1:a3:07:5c:d2:28:ef: a6:20:55:b1:2e:2e:40:46:88:0d:0d:80:2b:cf:f0: 73:e3:f4:12:7b:bb:54:44:46:66:a4:28:32:d2:0c: 95:cb:13:26:12:5a:60:4b:a9:e1:fa:3e:fb:77:a4: b9:59:fe:6c:6d:89:e4:a5:01:0f:1b:42:1f:79:11: 9c:1d:aa:60:68:90:88:64:8e:dd:82:9d:9f:92:1d: f9:8e:80:9f:a8:45:5d:d7:92:c6:35:ed:90:17:ef: 09:a4:54:d2:f4:30:8d:fc:e8:df:81:06:8d:bd:24: 74:62:a3:5a:a9:18:4f:f9:12:36:7a:a5:38:12:33: c4:67:ff:da:e2:29:12:4d:d1:be:85:23:06:41:56: 2e:f4:97:fa:ba:3d:72:2a:fe:69:69:09:f6:d0:ff: ac:af:fe:66:c5:e9:00:8d:95:00:41:27:2e:73:57: ff:27:0f:27:3c:fc:eb:73:89:3e:aa:04:5d:e3:3e: da:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:33:0B:63:24:0C:89:D3:8B:65:10:A9:C8:5F:BB:80:68:DA:FB:2D X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/GTMLYyQMidOLZRCpyF-7gGja-y0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8e20::/48 Signature Algorithm: sha256WithRSAEncryption bf:61:1d:a7:a8:ab:3d:8e:b4:9d:37:f0:3c:94:54:89:30:c1: dd:d7:76:ca:1c:d2:35:06:cf:96:5d:79:b4:d1:81:31:fb:67: d7:03:2b:46:f3:38:ee:40:1a:e1:8a:74:98:08:df:0d:b1:4c: bb:d7:5a:34:2c:25:52:85:c6:11:1a:45:6b:21:19:a4:47:9e: 70:58:e5:51:17:04:c9:4e:bc:de:d2:f6:70:dc:8f:da:c4:67: 9e:1d:bf:0a:9d:e3:09:8d:b6:74:9d:44:a1:c9:aa:c2:fc:94: 3b:f3:de:87:9b:af:b8:5a:07:ff:e5:0f:94:dc:c0:0d:c8:49: 4e:6e:09:4e:a9:97:25:35:40:61:e1:97:f1:51:9a:ba:77:a6: 45:89:c5:bd:be:ca:b0:12:ef:e0:02:1c:85:02:8c:ea:60:0e: 8f:48:44:b3:76:fa:43:54:88:cd:c3:c8:ea:f3:ff:42:d3:f6: 20:18:c9:02:c3:b2:43:70:c0:91:bc:8c:43:10:a6:39:6e:d7: c1:28:c3:9c:c7:9c:dd:79:e8:76:72:42:29:30:dc:0d:2d:dc: 71:0d:6a:67:c3:fe:5a:4f:2f:cd:59:43:92:68:ee:03:34:72: 44:7c:73:06:61:fb:73:b4:f3:24:ab:76:b6:cd:e7:bb:fd:33: 8c:bb:7b:73 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZsdcu9mDVN2dklCa0PyoWpUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjUxMjE0MTUyMDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTMzMGI2MzI0MGM4OWQzOGI2NTEwYTljODVmYmI4MDY4ZGFmYjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyi8kueUknlgc2U3v5hITwpg7qv0i Elp8JLj5iVHpQ6wsl0nq16MH6v1+hNS65CVJx7oRazsE48n5LrDWSD1/4uPccsGj B1zSKO+mIFWxLi5ARogNDYArz/Bz4/QSe7tUREZmpCgy0gyVyxMmElpgS6nh+j77 d6S5Wf5sbYnkpQEPG0IfeRGcHapgaJCIZI7dgp2fkh35joCfqEVd15LGNe2QF+8J pFTS9DCN/OjfgQaNvSR0YqNaqRhP+RI2eqU4EjPEZ//a4ikSTdG+hSMGQVYu9Jf6 uj1yKv5paQn20P+sr/5mxekAjZUAQScuc1f/Jw8nPPzrc4k+qgRd4z7axQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBkzC2MkDInTi2UQqchfu4Bo2vstMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvR1RNTFl5UU1pZE9MWlJDcHlGLTdnR2phLXkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQI4g MA0GCSqGSIb3DQEBCwUAA4IBAQC/YR2nqKs9jrSdN/A8lFSJMMHd13bKHNI1Bs+W XXm00YEx+2fXAytG8zjuQBrhinSYCN8NsUy711o0LCVShcYRGkVrIRmkR55wWOVR FwTJTrze0vZw3I/axGeeHb8KneMJjbZ0nUShyarC/JQ7896Hm6+4Wgf/5Q+U3MAN yElObglOqZclNUBh4ZfxUZq6d6ZFicW9vsqwEu/gAhyFAozqYA6PSESzdvpDVIjN w8jq8/9C0/YgGMkCw7JDcMCRvIxDEKY5btfBKMOcx5zdeeh2ckIpMNwNLdxxDWpn w/5aTy/NWUOSaO4DNHJEfHMGYftztPMkq3a2zee7/TOMu3tz -----END CERTIFICATE-----Generated at Wed Dec 17 19:40:56 2025 by rpki-client