This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/GGzxVw443Uj_IW3j64X8sAPCUzw.roa File: GGzxVw443Uj_IW3j64X8sAPCUzw.roa (raw, json) Hash identifier: HGjjUnXWqwg4186m3+EqzAvOTruMV7DlPvPyy6XWESM= Subject key identifier: 18:6C:F1:57:0E:38:DD:48:FF:21:6D:E3:EB:85:FC:B0:03:C2:53:3C Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019BE615DE02DA00C54EE399587A8CDACB16 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/GGzxVw443Uj_IW3j64X8sAPCUzw.roa Signing time: Thu 22 Jan 2026 14:22:31 +0000 ROA not before: Thu 22 Jan 2026 14:22:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31898 IP address blocks: 2a12:bec0:230::/44 maxlen: 48 2a12:bec0:5df::/48 maxlen: 48 2a12:bec4:1cff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e6:15:de:02:da:00:c5:4e:e3:99:58:7a:8c:da:cb:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 22 14:22:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=186cf1570e38dd48ff216de3eb85fcb003c2533c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:67:55:6a:89:dd:3b:4d:40:65:ec:3f:96:9a: 12:5c:92:60:c8:92:fe:a2:e0:26:91:bd:e0:7f:6f: 32:69:28:33:f9:e2:42:df:7a:b0:02:9d:24:6b:63: 95:95:88:c4:fe:9f:fa:c6:5f:23:18:2c:39:80:64: 7f:2f:89:86:53:a9:00:38:11:3e:9d:59:62:2b:7c: bd:db:95:09:17:22:02:3d:b1:8e:a5:f1:ac:6c:6a: d3:ee:78:c7:c6:73:d1:88:f3:ee:b4:95:3d:75:d7: 3e:a5:6e:2e:1d:06:4a:a1:3b:df:c5:54:1b:8e:92: 8f:39:00:0d:d0:ba:83:09:17:28:fd:f9:d2:99:63: fe:24:91:c7:98:f6:f4:d8:fb:f1:88:2e:ef:72:9e: 2d:cd:40:3e:d8:bd:a7:01:8a:d0:da:bc:8a:ca:7c: 54:c1:6d:84:48:c3:d0:fd:ac:f5:a2:19:60:8c:bd: 06:ba:0c:34:b7:ca:58:7b:82:2b:e5:77:eb:73:ce: db:0e:91:00:02:44:08:e2:99:5f:55:7e:28:e6:0c: 0b:0b:ad:84:dd:9c:cb:ad:46:44:6f:73:19:51:41: 56:c0:2f:ec:78:0d:68:6e:ae:7c:dd:77:89:7e:1f: db:63:98:1e:3e:34:ba:10:a0:30:96:0b:ef:50:83: e7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:6C:F1:57:0E:38:DD:48:FF:21:6D:E3:EB:85:FC:B0:03:C2:53:3C X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/GGzxVw443Uj_IW3j64X8sAPCUzw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:230::/44 2a12:bec0:5df::/48 2a12:bec4:1cff::/48 Signature Algorithm: sha256WithRSAEncryption 34:f2:d1:7e:8e:12:7b:2a:51:97:fa:bd:d0:61:e3:e3:00:13: af:9f:46:83:71:ad:fa:6b:c6:5e:bb:10:14:25:54:36:83:c0: c6:cd:f9:9d:0c:20:d3:68:1e:63:5d:87:4b:bd:68:4d:38:22: 75:05:35:5f:c5:1d:db:4d:5f:91:08:a1:00:c3:27:a7:d7:30: 64:32:a1:a6:be:4c:79:70:ea:68:b9:a7:ca:98:76:ef:ea:dc: 07:8a:d0:aa:da:66:6d:96:11:d7:b8:57:12:8f:a8:53:f2:c6: 39:d4:52:0c:e5:fe:7d:45:a3:00:b0:bc:0c:a0:21:55:97:f7: 98:a7:9a:7a:f9:b7:0a:b8:e5:f3:e1:e0:df:b7:0b:61:e3:76: 42:f8:cf:6d:12:7a:1a:8d:82:43:ba:21:cf:c3:31:e2:78:4a: f0:bb:13:06:8c:6f:d1:69:de:84:c7:20:00:ea:ae:34:c9:9e: 6a:91:8f:1a:ac:e4:37:4d:5a:ec:82:69:f9:08:6d:d2:a3:9f: 98:84:17:b5:bd:5e:04:39:c4:02:32:29:6f:41:e8:60:d4:f2: 69:68:c3:d6:31:f0:ba:e1:94:91:80:c6:2f:35:60:59:8b:78: 70:62:54:c9:0f:93:d0:86:66:14:ff:db:dc:ec:00:67:1b:f7: 15:70:42:81 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZvmFd4C2gDFTuOZWHqM2ssWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTIyMTQyMjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODZjZjE1NzBlMzhkZDQ4ZmYyMTZkZTNlYjg1ZmNiMDAzYzI1MzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmdVaondO01AZew/lpoSXJJgyJL+ ouAmkb3gf28yaSgz+eJC33qwAp0ka2OVlYjE/p/6xl8jGCw5gGR/L4mGU6kAOBE+ nVliK3y925UJFyICPbGOpfGsbGrT7njHxnPRiPPutJU9ddc+pW4uHQZKoTvfxVQb jpKPOQAN0LqDCRco/fnSmWP+JJHHmPb02PvxiC7vcp4tzUA+2L2nAYrQ2ryKynxU wW2ESMPQ/az1ohlgjL0Gugw0t8pYe4Ir5Xfrc87bDpEAAkQI4plfVX4o5gwLC62E 3ZzLrUZEb3MZUUFWwC/seA1obq583XeJfh/bY5gePjS6EKAwlgvvUIPnLwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFBhs8VcOON1I/yFt4+uF/LADwlM8MB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvR0d6eFZ3NDQzVWpfSVczajY0WDhzQVBDVXp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcEKhK+wAIw AwcAKhK+wAXfAwcAKhK+xBz/MA0GCSqGSIb3DQEBCwUAA4IBAQA08tF+jhJ7KlGX +r3QYePjABOvn0aDca36a8ZeuxAUJVQ2g8DGzfmdDCDTaB5jXYdLvWhNOCJ1BTVf xR3bTV+RCKEAwyen1zBkMqGmvkx5cOpouafKmHbv6twHitCq2mZtlhHXuFcSj6hT 8sY51FIM5f59RaMAsLwMoCFVl/eYp5p6+bcKuOXz4eDftwth43ZC+M9tEnoajYJD uiHPwzHieErwuxMGjG/Rad6ExyAA6q40yZ5qkY8arOQ3TVrsgmn5CG3So5+YhBe1 vV4EOcQCMilvQehg1PJpaMPWMfC64ZSRgMYvNWBZi3hwYlTJD5PQhmYU/9vc7ABn G/cVcEKB -----END CERTIFICATE-----Generated at Sun Jan 25 11:01:32 2026 by rpki-client