This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/GGLL8XFrdxeiG0mWnlVmcg3i2kE.roa File: GGLL8XFrdxeiG0mWnlVmcg3i2kE.roa (raw, json) Hash identifier: GrNoQNewnJjAIzQvYcKI2NNxn2zO66B7kE8paGeycUY= Subject key identifier: 18:62:CB:F1:71:6B:77:17:A2:1B:49:96:9E:55:66:72:0D:E2:DA:41 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6F917E282159F5ED3B37AE0EFB9B3 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/GGLL8XFrdxeiG0mWnlVmcg3i2kE.roa Signing time: Fri 02 Jan 2026 12:20:30 +0000 ROA not before: Fri 02 Jan 2026 12:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210215 IP address blocks: 2a0c:9a40:8f50::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 02:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f9:17:e2:82:15:9f:5e:d3:b3:7a:e0:ef:b9:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1862cbf1716b7717a21b49969e5566720de2da41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4e:63:fa:08:c7:37:2f:39:23:c9:77:10:b9: 21:74:45:fb:c6:a9:72:15:da:8e:02:b7:c9:76:93: 2d:9b:a1:1d:01:5f:24:36:59:73:33:f7:c5:ed:fb: 91:9c:31:ba:08:ea:f0:83:72:86:a1:02:38:58:63: 88:29:12:46:13:cc:3c:8c:14:91:1a:4b:9b:97:24: 0f:41:13:8a:8b:c4:46:e5:50:d0:2e:2e:a4:0d:9c: b3:c8:c9:d8:0c:a9:b1:c1:fb:9d:d3:04:e0:80:df: df:72:58:f4:4e:87:16:79:9f:61:ae:6c:63:de:fa: 0f:32:52:ed:92:31:a8:d1:06:c5:ab:b8:cb:8e:83: 56:56:ce:f4:bc:cd:9e:30:16:20:28:bd:ff:f0:8f: e4:94:31:76:bb:3c:81:25:f7:5e:82:75:40:f3:88: 7f:83:7d:c6:2d:94:e0:5e:fc:a7:c9:5b:46:fd:11: c7:b9:f4:2c:9f:d1:05:1c:91:2e:dd:df:86:59:04: de:e3:00:f2:38:54:44:ab:79:c8:7a:99:ea:a4:5f: 7d:49:a8:30:4d:80:4d:88:02:dd:32:4d:dd:ff:a8: 04:ae:ba:7b:00:10:e3:b7:d0:b3:86:37:fa:5b:62: 9a:57:d2:1c:02:0c:1f:fc:58:cd:02:22:c2:86:4b: a3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:62:CB:F1:71:6B:77:17:A2:1B:49:96:9E:55:66:72:0D:E2:DA:41 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/GGLL8XFrdxeiG0mWnlVmcg3i2kE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8f50::/48 Signature Algorithm: sha256WithRSAEncryption a6:fc:56:74:2d:20:c8:cf:b4:98:55:c3:31:a9:05:8b:92:99: f4:e3:07:99:8c:ac:db:f9:b7:1b:bd:99:21:a5:4f:74:07:28: e9:9d:43:62:a5:33:fa:64:34:bc:20:a1:9e:ff:ec:66:8a:0c: 6f:ef:01:5e:86:01:24:97:9f:77:cc:d2:4b:73:7c:9e:5a:4a: d5:e8:38:d9:a2:60:ee:e4:5d:cb:f9:bb:b4:71:1a:6f:d6:fa: bd:36:37:b8:d7:a6:1a:ca:d1:85:0b:53:1d:fc:dd:d2:03:8c: 70:a1:54:e9:1a:3a:4c:cc:33:44:e6:1d:46:10:ce:6a:ba:87: 6f:54:de:19:69:5d:8e:32:2d:14:e0:4c:97:79:95:10:b3:b7: 9e:da:44:53:dc:48:3b:9f:b4:56:0c:03:c4:43:55:de:fe:39: a0:73:68:20:dd:7d:60:1a:17:74:8e:73:4d:0f:96:35:b8:c1: 5b:59:9f:ea:56:1c:53:20:f3:b9:a0:40:2a:f0:c1:ff:06:0d: e6:e0:3b:a2:71:b8:a9:c9:9f:5c:d1:0a:db:cb:2d:c3:4e:8e: c3:6a:93:50:f7:34:ae:36:b8:b3:49:ca:a5:d0:71:f1:5f:41: 87:a0:92:4d:41:38:59:cf:7e:e7:f6:06:d1:4e:61:e5:b2:a1: 57:77:70:65 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pvkX4oIVn17Ts3rg77mzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODYyY2JmMTcxNmI3NzE3YTIxYjQ5OTY5ZTU1NjY3MjBkZTJkYTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk5j+gjHNy85I8l3ELkhdEX7xqly FdqOArfJdpMtm6EdAV8kNllzM/fF7fuRnDG6COrwg3KGoQI4WGOIKRJGE8w8jBSR GkublyQPQROKi8RG5VDQLi6kDZyzyMnYDKmxwfud0wTggN/fclj0TocWeZ9hrmxj 3voPMlLtkjGo0QbFq7jLjoNWVs70vM2eMBYgKL3/8I/klDF2uzyBJfdegnVA84h/ g33GLZTgXvynyVtG/RHHufQsn9EFHJEu3d+GWQTe4wDyOFREq3nIepnqpF99Sagw TYBNiALdMk3d/6gErrp7ABDjt9Czhjf6W2KaV9IcAgwf/FjNAiLChkuj5QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBhiy/Fxa3cXohtJlp5VZnIN4tpBMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvR0dMTDhYRnJkeGVpRzBtV25sVm1jZzNpMmtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQI9Q MA0GCSqGSIb3DQEBCwUAA4IBAQCm/FZ0LSDIz7SYVcMxqQWLkpn04weZjKzb+bcb vZkhpU90ByjpnUNipTP6ZDS8IKGe/+xmigxv7wFehgEkl593zNJLc3yeWkrV6DjZ omDu5F3L+bu0cRpv1vq9Nje416YaytGFC1Md/N3SA4xwoVTpGjpMzDNE5h1GEM5q uodvVN4ZaV2OMi0U4EyXeZUQs7ee2kRT3Eg7n7RWDAPEQ1Xe/jmgc2gg3X1gGhd0 jnNND5Y1uMFbWZ/qVhxTIPO5oEAq8MH/Bg3m4DuicbipyZ9c0Qrbyy3DTo7DapNQ 9zSuNrizScql0HHxX0GHoJJNQThZz37n9gbRTmHlsqFXd3Bl -----END CERTIFICATE-----Generated at Sun Jan 11 13:12:52 2026 by rpki-client