This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/ggAlU2FvvMVt8QnyY4zRaT2PLhk.roa File: ggAlU2FvvMVt8QnyY4zRaT2PLhk.roa (raw, json) Hash identifier: SC4t7+i4rHmGw8cE2pQbNtpAxChfBbrVKnQs9mBdyuU= Subject key identifier: 82:00:25:53:61:6F:BC:C5:6D:F1:09:F2:63:8C:D1:69:3D:8F:2E:19 Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Certificate serial: 019B7AC87A8D0CDE79230A553F2B6DC75A06 Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/ggAlU2FvvMVt8QnyY4zRaT2PLhk.roa Signing time: Thu 01 Jan 2026 18:18:37 +0000 ROA not before: Thu 01 Jan 2026 18:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210546 IP address blocks: 2a0d:d940:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:20:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:7a:8d:0c:de:79:23:0a:55:3f:2b:6d:c7:5a:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Validity Not Before: Jan 1 18:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82002553616fbcc56df109f2638cd1693d8f2e19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d6:1c:a7:51:9f:1e:3b:0c:e5:d0:12:45:46: 95:6e:22:6b:85:c8:df:3a:e8:2d:e1:3c:57:02:89: 50:f1:22:34:7c:51:75:e5:31:88:d9:fd:7d:33:a9: cb:69:1a:4a:bf:e1:8b:c7:25:48:9f:34:74:29:f1: 4a:04:10:3d:93:af:a8:2e:8b:1f:52:e1:03:b4:75: c7:e5:f1:db:87:e2:39:fd:30:21:a4:b8:42:73:c6: af:38:75:93:17:30:81:24:dd:2f:4c:50:d0:45:14: 28:dc:b5:b9:2a:18:66:b8:3c:7a:ba:98:df:71:75: 2e:60:7a:b9:d5:9d:63:15:85:0e:d6:35:93:fe:03: 91:0b:cb:6e:02:13:18:17:42:4e:fa:c0:a5:6f:ef: 96:25:1a:9a:5a:11:3b:79:2c:54:30:b9:28:e4:98: c0:cf:aa:a2:94:6c:7e:b7:0b:90:c6:28:04:fb:43: ce:9f:96:45:94:6b:24:ab:67:f4:f5:5d:ec:6b:c2: 68:16:5c:ce:5b:c8:2d:05:df:c5:fa:71:a2:64:38: 29:d8:a0:98:0b:0b:67:46:07:eb:38:05:a1:63:9a: 26:e1:2b:2c:32:3d:1a:ef:c7:c3:02:ff:b2:74:63: 81:19:9c:bd:10:a1:63:90:ff:98:0c:cc:14:b7:92: 6b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:00:25:53:61:6F:BC:C5:6D:F1:09:F2:63:8C:D1:69:3D:8F:2E:19 X509v3 Authority Key Identifier: keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/ggAlU2FvvMVt8QnyY4zRaT2PLhk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:d940:12::/48 Signature Algorithm: sha256WithRSAEncryption d9:43:8d:a0:57:33:cd:d6:68:b9:87:2b:41:fd:ff:76:d3:a8: 4b:03:f5:c7:b1:51:0e:3f:9d:d6:ed:cc:b9:f2:9b:ba:77:f8: 43:b1:ab:d5:fa:9d:b3:f8:fb:e4:5e:fe:26:94:00:87:e6:55: 8a:58:cb:bc:c3:43:42:73:6e:b7:ac:bb:76:45:c4:ff:29:4f: 98:03:1a:e1:57:82:21:0c:29:b0:a4:f9:57:8d:a3:f9:dd:46: 79:02:eb:e9:e9:42:fd:28:17:65:74:66:ba:9b:3d:9d:17:b1: a6:f3:21:30:00:0c:54:c7:68:78:7e:d5:2a:4f:ea:ff:98:2d: 6b:2e:99:3d:30:d2:5e:00:d7:7b:9d:9d:2b:77:85:ec:86:b3: 91:3f:12:1e:7b:3c:84:39:62:97:34:f8:36:e8:59:80:4d:b3: 07:1a:fe:d1:23:3b:eb:c3:5a:82:1f:eb:d7:c1:6f:24:e1:1c: f7:5a:7c:f6:2a:07:f2:51:a2:4c:2a:f6:21:48:34:5f:99:af: 5a:31:3e:5b:d2:58:6e:db:96:41:c7:40:f2:1a:ab:49:b2:b9: fb:47:81:0c:a1:d0:b7:1b:8f:6d:a7:8e:74:ba:50:d8:17:57: 12:e7:74:5a:3c:9d:f4:b0:ce:03:fa:4e:d9:23:26:cf:ff:39: e0:82:a4:af -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6yHqNDN55IwpVPyttx1oGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj YmJjNzQwHhcNMjYwMTAxMTgxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjAwMjU1MzYxNmZiY2M1NmRmMTA5ZjI2MzhjZDE2OTNkOGYyZTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNYcp1GfHjsM5dASRUaVbiJrhcjf Ougt4TxXAolQ8SI0fFF15TGI2f19M6nLaRpKv+GLxyVInzR0KfFKBBA9k6+oLosf UuEDtHXH5fHbh+I5/TAhpLhCc8avOHWTFzCBJN0vTFDQRRQo3LW5KhhmuDx6upjf cXUuYHq51Z1jFYUO1jWT/gORC8tuAhMYF0JO+sClb++WJRqaWhE7eSxUMLko5JjA z6qilGx+twuQxigE+0POn5ZFlGskq2f09V3sa8JoFlzOW8gtBd/F+nGiZDgp2KCY CwtnRgfrOAWhY5om4SssMj0a78fDAv+ydGOBGZy9EKFjkP+YDMwUt5JrjQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIIAJVNhb7zFbfEJ8mOM0Wk9jy4ZMB8GA1UdIwQY MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt MTRkMjM4NTI3ODM1LzEvZ2dBbFUyRnZ2TVZ0OFFueVk0elJhVDJQTGhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1 LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg3ZQAAS MA0GCSqGSIb3DQEBCwUAA4IBAQDZQ42gVzPN1mi5hytB/f9206hLA/XHsVEOP53W 7cy58pu6d/hDsavV+p2z+PvkXv4mlACH5lWKWMu8w0NCc263rLt2RcT/KU+YAxrh V4IhDCmwpPlXjaP53UZ5Auvp6UL9KBdldGa6mz2dF7Gm8yEwAAxUx2h4ftUqT+r/ mC1rLpk9MNJeANd7nZ0rd4XshrORPxIeezyEOWKXNPg26FmATbMHGv7RIzvrw1qC H+vXwW8k4Rz3Wnz2KgfyUaJMKvYhSDRfma9aMT5b0lhu25ZBx0DyGqtJsrn7R4EM odC3G49tp450ulDYF1cS53RaPJ30sM4D+k7ZIybP/znggqSv -----END CERTIFICATE-----Generated at Wed Jan 21 16:59:20 2026 by rpki-client