This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/G0U9wtdHDnyBIqwX7oOrIllxbZ0.roa File: G0U9wtdHDnyBIqwX7oOrIllxbZ0.roa (raw, json) Hash identifier: CVc7pFfQIeN+QGnFpM9jEldfs0RXoWa357t/1ugAP7E= Subject key identifier: 1B:45:3D:C2:D7:47:0E:7C:81:22:AC:17:EE:83:AB:22:59:71:6D:9D Certificate issuer: /CN=2793bde946ae936d3cacc136a5f3239edf2431f4 Certificate serial: 019B7E386AABBAB51401F38E114DFDA25393 Authority key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/G0U9wtdHDnyBIqwX7oOrIllxbZ0.roa Signing time: Fri 02 Jan 2026 10:19:45 +0000 ROA not before: Fri 02 Jan 2026 10:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202634 IP address blocks: 2a0b:8dc0::/29 maxlen: 29 2a0f:6840::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:6a:ab:ba:b5:14:01:f3:8e:11:4d:fd:a2:53:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2793bde946ae936d3cacc136a5f3239edf2431f4 Validity Not Before: Jan 2 10:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b453dc2d7470e7c8122ac17ee83ab2259716d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9f:13:a1:a4:95:e2:1a:ce:31:2d:ef:d7:74: 0f:1b:da:de:24:5c:a5:40:c8:69:c0:2c:60:f7:9b: 4f:17:71:f9:eb:d6:be:b7:57:88:9b:47:9a:9e:f1: b9:eb:3c:6c:6d:03:90:7d:74:5f:c9:cc:81:8b:bc: 22:32:aa:e4:a2:33:33:57:f3:86:41:8b:3c:46:6f: fb:08:d6:bd:d3:39:c9:40:ab:e2:f8:9b:4a:6b:40: 38:cf:1a:05:6c:49:47:5f:4e:6b:6a:43:6f:27:b2: bc:3d:12:3a:7c:99:08:96:ca:7f:4c:22:08:41:64: 9f:a8:66:21:17:81:41:11:f6:d4:76:12:e1:7d:5d: 4e:68:a3:44:2f:5b:a8:55:27:76:de:43:2f:67:2f: 7f:f2:7a:31:88:8c:19:0b:83:9b:5a:fd:51:2b:51: 3e:57:ba:db:1f:c0:c3:81:4e:11:74:e8:f7:a1:17: e5:ca:ef:eb:a2:b1:86:fc:98:72:eb:ea:c2:76:34: 1f:46:91:94:2b:a4:52:7f:51:b6:0f:63:b3:3c:a4: 69:0c:43:2f:1a:78:75:96:34:4f:af:5b:12:42:3e: 81:6d:fe:30:94:88:0f:8f:ce:2c:6f:df:ea:df:b4: e7:04:da:3c:39:5c:dd:a8:b5:74:7b:a3:54:15:b9: ea:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:45:3D:C2:D7:47:0E:7C:81:22:AC:17:EE:83:AB:22:59:71:6D:9D X509v3 Authority Key Identifier: keyid:27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/G0U9wtdHDnyBIqwX7oOrIllxbZ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:8dc0::/29 2a0f:6840::/29 Signature Algorithm: sha256WithRSAEncryption c7:7d:83:51:f8:58:83:cc:08:a1:4c:b0:71:5e:a2:f0:f4:9a: b7:14:aa:1e:7c:a7:dd:a1:98:87:28:e6:b0:5b:d2:40:a2:b2: 9b:69:46:93:25:82:31:c0:bc:34:87:f3:00:de:c7:84:c8:e7: 92:0b:99:87:89:f2:c4:0c:a2:70:78:e2:32:ff:40:79:19:39: c6:a7:62:36:c7:4e:f2:a9:8c:13:f2:a4:e6:a5:c4:18:b2:e4: cc:fa:73:84:61:83:37:d2:df:a3:c2:93:74:86:1c:bf:25:50: 1f:26:c5:b9:cf:19:c4:32:42:ab:ee:0f:34:71:68:d8:85:aa: 7e:1f:81:69:e2:31:19:7c:ed:2c:93:78:27:d6:b9:8e:2b:ac: 40:31:08:b1:c2:1c:86:b1:58:a5:b0:3f:a5:1f:8e:3c:57:29: 3d:b0:df:98:12:79:6a:4d:ac:f6:fe:c1:a5:5c:86:f9:16:e4: 75:b6:d6:bb:68:c8:45:ac:b1:63:fc:4c:48:be:8c:e7:81:1a: c2:65:1e:71:04:90:96:18:75:87:a8:a1:16:df:b0:b1:de:be: db:6c:2c:85:70:ca:e3:c1:e7:7c:d5:bc:f6:86:c1:9e:bc:51: 28:c7:95:29:45:64:99:4d:30:67:1d:a6:4e:c8:7c:d4:fe:60: 4a:cc:b2:ca -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+OGqrurUUAfOOEU39olOTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OTNiZGU5NDZhZTkzNmQzY2FjYzEzNmE1ZjMyMzllZGYy NDMxZjQwHhcNMjYwMTAyMTAxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjQ1M2RjMmQ3NDcwZTdjODEyMmFjMTdlZTgzYWIyMjU5NzE2ZDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup8ToaSV4hrOMS3v13QPG9reJFyl QMhpwCxg95tPF3H569a+t1eIm0eanvG56zxsbQOQfXRfycyBi7wiMqrkojMzV/OG QYs8Rm/7CNa90znJQKvi+JtKa0A4zxoFbElHX05rakNvJ7K8PRI6fJkIlsp/TCII QWSfqGYhF4FBEfbUdhLhfV1OaKNEL1uoVSd23kMvZy9/8noxiIwZC4ObWv1RK1E+ V7rbH8DDgU4RdOj3oRflyu/rorGG/Jhy6+rCdjQfRpGUK6RSf1G2D2OzPKRpDEMv Gnh1ljRPr1sSQj6Bbf4wlIgPj84sb9/q37TnBNo8OVzdqLV0e6NUFbnqjwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFBtFPcLXRw58gSKsF+6DqyJZcW2dMB8GA1UdIwQY MBaAFCeTvelGrpNtPKzBNqXzI57fJDH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2Et OTJjM2JmNzRhOTdiLzEvRzBVOXd0ZEhEbnlCSXF3WDdvT3JJbGx4YlowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9iZjU4ZGEtYTlkMi00MjFhLWI0M2EtOTJjM2JmNzRhOTdi LzEvSjVPOTZVYXVrMjA4ck1FMnBmTWpudDhrTWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKguNwAMF AyoPaEAwDQYJKoZIhvcNAQELBQADggEBAMd9g1H4WIPMCKFMsHFeovD0mrcUqh58 p92hmIco5rBb0kCisptpRpMlgjHAvDSH8wDex4TI55ILmYeJ8sQMonB44jL/QHkZ OcanYjbHTvKpjBPypOalxBiy5Mz6c4RhgzfS36PCk3SGHL8lUB8mxbnPGcQyQqvu DzRxaNiFqn4fgWniMRl87SyTeCfWuY4rrEAxCLHCHIaxWKWwP6UfjjxXKT2w35gS eWpNrPb+waVchvkW5HW21rtoyEWssWP8TEi+jOeBGsJlHnEEkJYYdYeooRbfsLHe vttsLIVwyuPB53zVvPaGwZ68USjHlSlFZJlNMGcdpk7IfNT+YErMsso= -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:25 2026 by rpki-client