This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/Gy-LFbASJWTVYACt4LtWc2cmLuw.roa File: Gy-LFbASJWTVYACt4LtWc2cmLuw.roa (raw, json) Hash identifier: ujJsb5LhZ8X8O1ISoHR/MP5k+2QVAPis3/2ApXdZZ3g= Subject key identifier: 1B:2F:8B:15:B0:12:25:64:D5:60:00:AD:E0:BB:56:73:67:26:2E:EC Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c Certificate serial: 019B7AC94F8E728B1F583F709E477AF56B19 Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/Gy-LFbASJWTVYACt4LtWc2cmLuw.roa Signing time: Thu 01 Jan 2026 18:19:31 +0000 ROA not before: Thu 01 Jan 2026 18:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34224 IP address blocks: 2a01:3e0:2004::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:4f:8e:72:8b:1f:58:3f:70:9e:47:7a:f5:6b:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c Validity Not Before: Jan 1 18:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b2f8b15b0122564d56000ade0bb567367262eec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:06:c7:b7:d6:9d:f3:49:d9:00:46:90:76:60: 2b:ac:f5:1d:1d:42:3e:27:7e:64:e8:bf:0b:64:37: 65:d0:f8:9b:ad:ee:bb:c5:2d:a6:43:b4:b3:e6:5c: 3c:9d:79:66:bc:72:d8:dc:e5:b8:c9:b8:07:7d:d0: ad:c2:3f:95:a6:61:f1:14:43:e1:a3:78:bd:c0:be: fa:cc:91:cb:ca:74:a1:6f:89:c2:b9:bb:4c:71:40: 24:ad:f2:93:a9:40:2a:18:6d:48:e0:3b:cc:bb:7e: 23:6f:3c:f2:f8:52:ac:a5:98:7a:69:02:49:e6:c7: bb:f2:4c:1a:ab:c1:f4:35:e2:db:9e:e6:df:a2:03: ed:02:db:e5:62:2e:74:af:20:3b:f8:b1:b4:36:af: b8:1c:93:f3:02:6e:2f:a2:e6:6d:d8:9d:48:46:c9: 22:b4:a9:35:1c:c0:92:19:21:91:4b:0e:5d:3d:93: c6:5c:ae:02:67:8e:fa:b8:b4:e2:f5:12:c4:7f:ba: 86:9c:60:c0:0d:82:7e:eb:33:0c:99:3d:c9:32:74: ef:76:05:6f:03:95:f9:53:3d:4a:fc:9d:8a:b9:6d: b0:4d:65:31:6c:d2:d1:4a:03:7b:7a:01:d2:a7:53: 92:7f:55:ad:3e:34:b0:24:43:61:77:4e:db:29:f8: d6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2F:8B:15:B0:12:25:64:D5:60:00:AD:E0:BB:56:73:67:26:2E:EC X509v3 Authority Key Identifier: keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/Gy-LFbASJWTVYACt4LtWc2cmLuw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:3e0:2004::/48 Signature Algorithm: sha256WithRSAEncryption 77:d7:6d:ff:83:05:8b:4c:8c:18:bb:67:9b:6f:50:62:85:a9: 19:8c:49:5f:ac:3f:24:7c:e3:28:41:8b:8e:bd:3a:b1:64:e5: d6:68:63:f7:7f:6d:86:45:2b:ec:fb:c9:31:e7:b0:01:6c:a3: 42:c6:fb:1c:b6:2b:cd:6b:bc:ac:87:01:73:20:73:ec:54:b5: 71:16:63:06:ed:38:c5:6c:db:1f:2e:50:ba:35:11:cd:2e:ec: cb:c8:31:c2:33:03:c5:9c:5f:0c:14:e7:42:85:66:87:06:a9: 22:39:a5:6e:3b:13:b7:d9:7c:17:34:24:4f:d7:bb:ab:e7:11: e1:c0:5c:c4:b6:75:a0:29:d4:6f:66:4e:4e:07:5d:3e:8d:9c: 46:62:9f:0d:77:1a:29:e6:73:fb:3e:b9:51:9f:0a:50:f7:d8: 37:eb:ea:5e:3f:77:a9:18:05:40:a1:17:71:85:c6:1a:95:e7: 4e:db:3f:d9:b7:c9:33:05:0d:d8:f3:0f:ee:36:02:42:37:23: ac:0c:e0:cb:8a:b0:89:9d:a6:43:60:6d:05:e4:83:2b:47:89: 44:0b:3d:0f:e1:61:51:ee:00:86:7a:d7:31:6c:76:2a:0c:1f: 87:b0:97:66:12:5a:ba:94:19:b8:b4:3d:9a:ce:6d:a2:66:4a: c9:58:e9:aa -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6yU+OcosfWD9wnkd69WsZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDFiMjU4NzQ5MGFkMDYxY2IyMDcxNzZiZGVlYzgxYTUz MTU4OGMwHhcNMjYwMTAxMTgxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjJmOGIxNWIwMTIyNTY0ZDU2MDAwYWRlMGJiNTY3MzY3MjYyZWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAbHt9ad80nZAEaQdmArrPUdHUI+ J35k6L8LZDdl0Pibre67xS2mQ7Sz5lw8nXlmvHLY3OW4ybgHfdCtwj+VpmHxFEPh o3i9wL76zJHLynShb4nCubtMcUAkrfKTqUAqGG1I4DvMu34jbzzy+FKspZh6aQJJ 5se78kwaq8H0NeLbnubfogPtAtvlYi50ryA7+LG0Nq+4HJPzAm4vouZt2J1IRski tKk1HMCSGSGRSw5dPZPGXK4CZ476uLTi9RLEf7qGnGDADYJ+6zMMmT3JMnTvdgVv A5X5Uz1K/J2KuW2wTWUxbNLRSgN7egHSp1OSf1WtPjSwJENhd07bKfjW3wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBsvixWwEiVk1WAAreC7VnNnJi7sMB8GA1UdIwQY MBaAFE3Rslh0kK0GHLIHF2ve7IGlMViMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUt ZGI0NjNjNWZiMGI0LzEvR3ktTEZiQVNKV1RWWUFDdDRMdFdjMmNtTHV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUtZGI0NjNjNWZiMGI0 LzEvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgED4CAE MA0GCSqGSIb3DQEBCwUAA4IBAQB3123/gwWLTIwYu2ebb1BihakZjElfrD8kfOMo QYuOvTqxZOXWaGP3f22GRSvs+8kx57ABbKNCxvsctivNa7yshwFzIHPsVLVxFmMG 7TjFbNsfLlC6NRHNLuzLyDHCMwPFnF8MFOdChWaHBqkiOaVuOxO32XwXNCRP17ur 5xHhwFzEtnWgKdRvZk5OB10+jZxGYp8Ndxop5nP7PrlRnwpQ99g36+peP3epGAVA oRdxhcYaledO2z/Zt8kzBQ3Y8w/uNgJCNyOsDODLirCJnaZDYG0F5IMrR4lECz0P 4WFR7gCGetcxbHYqDB+HsJdmElq6lBm4tD2azm2iZkrJWOmq -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:25 2026 by rpki-client