This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/G9jujcQZlUdVMOptG1eSDU2YY8I.roa File: G9jujcQZlUdVMOptG1eSDU2YY8I.roa (raw, json) Hash identifier: EJGVSoBSNBmuI6zXcVl26rucMI4v4bwSguQQOZP/asw= Subject key identifier: 1B:D8:EE:8D:C4:19:95:47:55:30:EA:6D:1B:57:92:0D:4D:98:63:C2 Certificate issuer: /CN=1c028171c1e52c8acad4db29b92d216b332f0320 Certificate serial: 019B7F1532AAEEA068D551B9EFFE09E60070 Authority key identifier: 1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/G9jujcQZlUdVMOptG1eSDU2YY8I.roa Signing time: Fri 02 Jan 2026 14:20:54 +0000 ROA not before: Fri 02 Jan 2026 14:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210814 IP address blocks: 2a05:3a80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:32:aa:ee:a0:68:d5:51:b9:ef:fe:09:e6:00:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c028171c1e52c8acad4db29b92d216b332f0320 Validity Not Before: Jan 2 14:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1bd8ee8dc41995475530ea6d1b57920d4d9863c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b4:b1:35:7a:13:de:a2:45:31:5d:1b:8f:11: 77:74:77:e5:3e:a1:ae:31:fd:1e:71:98:97:be:be: 2d:e5:f0:bc:15:8d:b8:9c:52:68:b6:52:16:a5:fb: 57:56:9f:87:62:d4:fc:94:9c:55:2f:6d:e0:84:51: 28:06:a5:2e:79:78:dd:34:28:3d:4c:f2:49:ff:a7: 1a:57:74:d8:7c:a5:8a:80:38:f9:b3:9a:77:93:7a: b6:1e:93:69:ff:8f:45:48:06:90:98:2e:d9:40:4a: f5:90:27:ca:51:56:d6:8f:90:2e:5c:0c:48:c3:c6: 47:2e:f2:c4:34:f3:1c:e2:c5:04:16:f4:90:96:ec: 7d:4f:87:ad:66:8f:4a:3e:4c:14:9e:60:8c:2f:da: 85:d1:7c:3d:ee:f1:c4:be:42:cc:8d:f8:74:d8:c8: e3:d9:cf:68:77:92:d8:eb:06:39:b3:95:f7:13:da: 58:3a:46:c6:87:06:26:af:d4:4c:35:e9:2c:30:56: 70:8d:c7:90:1e:cf:8e:41:b9:62:ff:57:a4:7e:b3: f6:8c:0c:9d:f0:73:a0:78:2b:59:82:a3:9b:7c:3a: fa:f0:71:02:25:12:cd:96:26:03:70:ba:7e:08:cd: 8a:c0:51:3b:70:fb:79:69:d5:cd:9e:ea:3e:1f:79: af:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D8:EE:8D:C4:19:95:47:55:30:EA:6D:1B:57:92:0D:4D:98:63:C2 X509v3 Authority Key Identifier: keyid:1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/G9jujcQZlUdVMOptG1eSDU2YY8I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:3a80::/48 Signature Algorithm: sha256WithRSAEncryption 8e:0f:01:31:df:10:78:0b:9a:f9:b2:0f:69:3b:94:8f:f3:24: 17:cb:c4:99:18:22:26:8a:8f:98:5e:8e:f9:0f:14:8b:3d:c5: c5:7a:41:bc:e6:31:7d:78:de:d6:3c:1a:4d:08:89:93:21:00: b5:a9:ec:37:f6:78:94:a0:94:64:a5:43:3b:18:63:28:23:0e: e0:49:82:95:c3:62:04:b0:6a:b1:14:17:8e:26:61:f6:b8:11: f9:14:b4:cb:aa:5b:0f:60:e5:98:c4:b2:5e:83:b1:79:ce:c9: 86:c5:d3:03:f9:d2:5e:d6:84:17:ea:c1:3c:be:23:2c:15:7f: 99:3c:8f:d1:da:7d:ad:3b:bf:a0:b8:a5:98:2e:eb:a6:c8:fe: fe:7a:e2:4e:16:37:a6:df:3a:b7:49:5a:c6:b6:ab:50:6c:21: df:cf:e7:bf:69:0c:d2:f9:5a:da:ba:01:f2:d5:52:98:25:26: 2d:3e:74:26:9a:84:d6:3b:95:34:07:10:13:23:27:aa:57:6e: 3a:b5:58:c5:62:70:dd:0b:37:19:4f:3d:54:37:95:49:f7:08: 22:c5:6f:a4:7c:52:ed:25:ff:f4:02:43:f5:03:a9:a3:c2:30: a0:f0:cf:24:5a:de:9b:e0:56:ac:0a:99:bc:95:b8:a8:37:1d: 92:bc:62:5b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FTKq7qBo1VG57/4J5gBwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMDI4MTcxYzFlNTJjOGFjYWQ0ZGIyOWI5MmQyMTZiMzMy ZjAzMjAwHhcNMjYwMTAyMTQyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmQ4ZWU4ZGM0MTk5NTQ3NTUzMGVhNmQxYjU3OTIwZDRkOTg2M2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybSxNXoT3qJFMV0bjxF3dHflPqGu Mf0ecZiXvr4t5fC8FY24nFJotlIWpftXVp+HYtT8lJxVL23ghFEoBqUueXjdNCg9 TPJJ/6caV3TYfKWKgDj5s5p3k3q2HpNp/49FSAaQmC7ZQEr1kCfKUVbWj5AuXAxI w8ZHLvLENPMc4sUEFvSQlux9T4etZo9KPkwUnmCML9qF0Xw97vHEvkLMjfh02Mjj 2c9od5LY6wY5s5X3E9pYOkbGhwYmr9RMNeksMFZwjceQHs+OQbli/1ekfrP2jAyd 8HOgeCtZgqObfDr68HECJRLNliYDcLp+CM2KwFE7cPt5adXNnuo+H3mvPwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBvY7o3EGZVHVTDqbRtXkg1NmGPCMB8GA1UdIwQY MBaAFBwCgXHB5SyKytTbKbktIWszLwMgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEFLQmNjSGxMSXJLMU5zcHVTMGhhek12QXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9mZjYzY2UtY2YyMC00M2UzLWFkM2Yt NjRkMWIyZDU2ZTk1LzEvRzlqdWpjUVpsVWRWTU9wdEcxZVNEVTJZWThJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9mZjYzY2UtY2YyMC00M2UzLWFkM2YtNjRkMWIyZDU2ZTk1 LzEvSEFLQmNjSGxMSXJLMU5zcHVTMGhhek12QXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgU6gAAA MA0GCSqGSIb3DQEBCwUAA4IBAQCODwEx3xB4C5r5sg9pO5SP8yQXy8SZGCImio+Y Xo75DxSLPcXFekG85jF9eN7WPBpNCImTIQC1qew39niUoJRkpUM7GGMoIw7gSYKV w2IEsGqxFBeOJmH2uBH5FLTLqlsPYOWYxLJeg7F5zsmGxdMD+dJe1oQX6sE8viMs FX+ZPI/R2n2tO7+guKWYLuumyP7+euJOFjem3zq3SVrGtqtQbCHfz+e/aQzS+Vra ugHy1VKYJSYtPnQmmoTWO5U0BxATIyeqV246tVjFYnDdCzcZTz1UN5VJ9wgixW+k fFLtJf/0AkP1A6mjwjCg8M8kWt6b4FasCpm8lbioNx2SvGJb -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:15 2026 by rpki-client