This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/GIo6XBIIGKLKY5fo-2KAJGPCwGY.roa File: GIo6XBIIGKLKY5fo-2KAJGPCwGY.roa (raw, json) Hash identifier: KkZCoIa9nndDPKaAqxfqTYTtr6XtVmuZC5N9YIEfldg= Subject key identifier: 18:8A:3A:5C:12:08:18:A2:CA:63:97:E8:FB:62:80:24:63:C2:C0:66 Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Certificate serial: 019B7FF13431D5276BCB8790C0195F0C0D1A Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/GIo6XBIIGKLKY5fo-2KAJGPCwGY.roa Signing time: Fri 02 Jan 2026 18:21:12 +0000 ROA not before: Fri 02 Jan 2026 18:21:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207080 IP address blocks: 2a0a:5940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:34:31:d5:27:6b:cb:87:90:c0:19:5f:0c:0d:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Validity Not Before: Jan 2 18:21:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=188a3a5c120818a2ca6397e8fb62802463c2c066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2d:55:7f:56:63:bd:e4:f2:a0:61:56:58:71: d5:e1:b0:b5:a7:58:e3:fb:c9:95:55:c1:52:36:c8: a0:4f:33:6d:81:ba:66:88:5f:c0:b2:a2:4b:11:0b: 68:e1:8e:ec:ed:19:45:63:fe:b6:f2:01:9b:59:57: 02:a8:d3:5c:b7:7a:22:ef:02:d1:8e:0e:3d:85:0b: 6a:99:12:fc:26:ce:2c:59:76:e5:25:cf:17:e0:02: 97:05:76:06:71:8d:99:06:60:04:ba:22:51:db:4b: 9c:c8:04:1d:7a:96:b6:b3:60:12:92:85:94:6c:f9: 71:97:b8:a5:7a:cc:fb:44:9f:28:c0:c3:85:bf:63: 2b:cd:a5:db:21:0a:f2:37:39:26:f8:be:e8:3f:73: 96:e7:72:3d:c2:b3:71:47:c0:b1:67:f7:91:f4:d3: bf:c6:0e:aa:cc:3a:86:e0:df:4e:16:26:90:65:33: 67:c9:90:91:b4:57:1f:a4:d3:71:e7:89:85:a0:53: 01:43:8a:ce:67:1f:8c:56:6a:c6:92:fb:8e:d7:7d: cb:f5:70:85:59:6e:0e:d4:2d:f0:d8:7d:3e:f2:a8: 9e:0d:ad:0a:45:f1:53:64:28:08:17:eb:c0:7f:36: 0a:47:26:cd:c0:72:cc:1f:3f:c5:fc:3a:47:e4:21: 16:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:8A:3A:5C:12:08:18:A2:CA:63:97:E8:FB:62:80:24:63:C2:C0:66 X509v3 Authority Key Identifier: keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/GIo6XBIIGKLKY5fo-2KAJGPCwGY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:5940::/48 Signature Algorithm: sha256WithRSAEncryption 82:30:f0:71:9c:51:c0:0e:99:6a:3b:0f:05:04:a5:cb:a6:a5: f9:f4:69:e7:f4:b8:99:98:ee:b8:ec:cc:ab:cc:bb:a1:db:0f: d6:60:f3:f9:16:a6:82:15:c1:3c:24:0c:c1:bf:4d:ae:3e:63: 7d:27:60:bd:11:14:cb:f0:97:44:a2:fe:17:57:7d:f1:2b:08: 6b:7a:b8:ec:d3:6b:d3:29:d3:65:cb:87:60:e8:cd:d4:06:24: 50:24:0c:61:48:61:c5:ea:27:cc:85:a7:7b:93:17:86:90:bc: 26:59:9e:1a:7a:0d:69:d2:80:b5:7f:30:ce:dc:35:89:bf:28: 96:30:78:99:a3:47:11:79:82:5e:5a:55:33:b0:d8:d1:da:f0: 77:f9:c9:b0:5d:95:23:7d:bb:29:ce:5e:3b:40:05:a8:7f:56: ad:05:e1:ed:fa:25:0b:70:d5:6f:b3:29:23:8a:74:3a:eb:d0: 77:17:53:11:d9:3c:23:90:3c:04:7b:ac:94:9f:ef:ab:dd:c1: 91:9d:8a:c5:b9:c8:ee:bd:25:c2:69:d0:bf:8d:29:eb:9a:76: ee:1b:17:7e:c2:2c:84:db:9f:2e:f9:65:6f:3e:6f:91:8b:2c: d0:06:46:b0:54:79:93:f4:81:94:b1:bd:b1:cf:6a:69:21:c2: 86:f9:a6:c4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8TQx1Sdry4eQwBlfDA0aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4 YmUxYmQwHhcNMjYwMTAyMTgyMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODhhM2E1YzEyMDgxOGEyY2E2Mzk3ZThmYjYyODAyNDYzYzJjMDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy1Vf1ZjveTyoGFWWHHV4bC1p1jj +8mVVcFSNsigTzNtgbpmiF/AsqJLEQto4Y7s7RlFY/628gGbWVcCqNNct3oi7wLR jg49hQtqmRL8Js4sWXblJc8X4AKXBXYGcY2ZBmAEuiJR20ucyAQdepa2s2ASkoWU bPlxl7ilesz7RJ8owMOFv2MrzaXbIQryNzkm+L7oP3OW53I9wrNxR8CxZ/eR9NO/ xg6qzDqG4N9OFiaQZTNnyZCRtFcfpNNx54mFoFMBQ4rOZx+MVmrGkvuO133L9XCF WW4O1C3w2H0+8qieDa0KRfFTZCgIF+vAfzYKRybNwHLMHz/F/DpH5CEW0QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBiKOlwSCBiiymOX6PtigCRjwsBmMB8GA1UdIwQY MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt N2U4YzZkNGQ5YmVmLzEvR0lvNlhCSUlHS0xLWTVmby0yS0FKR1BDd0dZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgpZQAAA MA0GCSqGSIb3DQEBCwUAA4IBAQCCMPBxnFHADplqOw8FBKXLpqX59Gnn9LiZmO64 7MyrzLuh2w/WYPP5FqaCFcE8JAzBv02uPmN9J2C9ERTL8JdEov4XV33xKwhrerjs 02vTKdNly4dg6M3UBiRQJAxhSGHF6ifMhad7kxeGkLwmWZ4aeg1p0oC1fzDO3DWJ vyiWMHiZo0cReYJeWlUzsNjR2vB3+cmwXZUjfbspzl47QAWof1atBeHt+iULcNVv sykjinQ669B3F1MR2TwjkDwEe6yUn++r3cGRnYrFucjuvSXCadC/jSnrmnbuGxd+ wiyE258u+WVvPm+RiyzQBkawVHmT9IGUsb2xz2ppIcKG+abE -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:40 2026 by rpki-client