This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GGbF9-zGjyTDR6c_8u9_YjrTpyA.roa File: GGbF9-zGjyTDR6c_8u9_YjrTpyA.roa (raw, json) Hash identifier: bwO8/hNalFS0BhivjgCF+g+jV4ja4h3km9adCluqbWA= Subject key identifier: 18:66:C5:F7:EC:C6:8F:24:C3:47:A7:3F:F2:EF:7F:62:3A:D3:A7:20 Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Certificate serial: 019A7D5C617DDE08CA7AFA3E66EEF7ECB090 Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GGbF9-zGjyTDR6c_8u9_YjrTpyA.roa Signing time: Thu 13 Nov 2025 13:16:37 +0000 ROA not before: Thu 13 Nov 2025 13:16:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6079 IP address blocks: 2a06:b3c0::/29 maxlen: 29 2a06:b440::/32 maxlen: 32 2a11:1140::/29 maxlen: 29 2a11:9600::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 07:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7d:5c:61:7d:de:08:ca:7a:fa:3e:66:ee:f7:ec:b0:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Validity Not Before: Nov 13 13:16:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1866c5f7ecc68f24c347a73ff2ef7f623ad3a720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3d:f2:b5:46:b6:6d:59:32:6b:f8:29:52:97: 63:10:61:22:4b:c9:9d:9b:47:e4:0e:5c:7f:82:83: 97:4f:69:52:de:f8:24:d2:de:f6:37:5f:3c:1c:ed: 97:7b:73:8f:eb:a6:18:24:8d:8a:23:10:bf:f6:83: d8:17:4d:05:5d:fe:6b:85:ce:ce:87:94:14:2f:2c: 0d:9d:38:10:5f:48:ee:55:3b:b7:5e:00:e6:6f:a5: 12:be:c7:d4:f2:c2:19:93:64:2f:a2:94:30:c5:77: ee:d3:42:c5:3e:c6:e0:9b:d0:21:61:03:c8:f2:3b: c3:d9:c4:08:49:a0:07:09:cd:a6:06:2e:0e:b7:88: 99:7b:07:48:0a:68:d4:8a:4c:34:58:f8:1e:37:7c: 18:5a:75:45:eb:57:b4:e0:d9:7d:29:b9:15:d3:3d: 32:9b:1e:87:d0:6e:82:25:18:68:9a:cf:61:6d:32: 7f:4e:ed:45:9b:48:be:2b:b4:79:b8:3f:64:7a:0c: 30:f1:6a:3c:31:a1:31:27:84:f0:4d:db:8f:0c:e6: 0c:a3:19:45:83:e0:c5:2c:3f:92:06:ff:12:31:24: 86:cb:ec:a9:04:22:ee:51:63:d3:ec:87:fd:14:8c: a9:0b:4b:02:e2:d0:b2:eb:44:ff:99:9d:a4:c5:9d: b8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:66:C5:F7:EC:C6:8F:24:C3:47:A7:3F:F2:EF:7F:62:3A:D3:A7:20 X509v3 Authority Key Identifier: keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GGbF9-zGjyTDR6c_8u9_YjrTpyA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:b3c0::/29 2a06:b440::/32 2a11:1140::/29 2a11:9600::/29 Signature Algorithm: sha256WithRSAEncryption 00:b3:73:bf:d7:3e:9c:36:07:bc:3b:dc:20:6b:7f:7f:07:2b: 0d:f8:aa:31:ff:80:cd:b1:fc:45:29:dc:98:de:ed:8b:47:cd: ef:93:53:7b:1b:ff:8d:83:56:cd:02:42:b8:30:11:ad:e1:f0: ce:1d:87:f7:42:89:19:bc:e7:05:65:3b:32:e4:ea:79:cb:cf: 30:a5:79:16:53:d2:7e:0b:fe:2b:1f:67:55:3b:3d:6e:4d:0a: 08:9f:83:3d:83:0c:ba:39:f1:7c:7a:c3:a3:db:b5:2a:69:23: b0:7b:6c:ea:bf:95:c4:50:2d:45:9d:6f:4d:67:ec:37:9a:6d: a9:15:de:61:f7:a9:8f:c7:a7:85:17:76:15:e8:c0:63:f0:04: 5e:e5:24:0c:20:8c:51:61:d7:2f:d2:55:b1:96:3b:f2:7e:e5: 95:52:c8:e8:9f:ab:50:2a:83:33:93:25:1b:34:67:47:c1:e4: d2:15:6e:15:a3:79:af:14:f6:72:eb:26:e1:67:20:c3:e3:27: 52:38:41:6d:98:ef:ed:cc:86:16:e9:ed:e9:41:1e:e8:e8:9b: 5c:96:a8:f5:a7:46:9f:46:5b:85:92:e4:d0:72:ca:be:60:8c: c0:5e:a2:85:35:b4:64:dd:95:5a:41:f5:f0:34:7e:99:7f:c3: 3b:05:02:e4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZp9XGF93gjKevo+Zu737LCQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz Mjc2ZTMwHhcNMjUxMTEzMTMxNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODY2YzVmN2VjYzY4ZjI0YzM0N2E3M2ZmMmVmN2Y2MjNhZDNhNzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT3ytUa2bVkya/gpUpdjEGEiS8md m0fkDlx/goOXT2lS3vgk0t72N188HO2Xe3OP66YYJI2KIxC/9oPYF00FXf5rhc7O h5QULywNnTgQX0juVTu3XgDmb6USvsfU8sIZk2QvopQwxXfu00LFPsbgm9AhYQPI 8jvD2cQISaAHCc2mBi4Ot4iZewdICmjUikw0WPgeN3wYWnVF61e04Nl9KbkV0z0y mx6H0G6CJRhoms9hbTJ/Tu1Fm0i+K7R5uD9kegww8Wo8MaExJ4TwTduPDOYMoxlF g+DFLD+SBv8SMSSGy+ypBCLuUWPT7If9FIypC0sC4tCy60T/mZ2kxZ242wIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFBhmxffsxo8kw0enP/Lvf2I606cgMB8GA1UdIwQY MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt YTJhNGM2YTYyMWNkLzEvR0diRjktekdqeVREUjZjXzh1OV9ZanJUcHlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUDKgazwAMF ACoGtEADBQMqERFAAwUDKhGWADANBgkqhkiG9w0BAQsFAAOCAQEAALNzv9c+nDYH vDvcIGt/fwcrDfiqMf+AzbH8RSncmN7ti0fN75NTexv/jYNWzQJCuDARreHwzh2H 90KJGbznBWU7MuTqecvPMKV5FlPSfgv+Kx9nVTs9bk0KCJ+DPYMMujnxfHrDo9u1 KmkjsHts6r+VxFAtRZ1vTWfsN5ptqRXeYfepj8enhRd2FejAY/AEXuUkDCCMUWHX L9JVsZY78n7llVLI6J+rUCqDM5MlGzRnR8Hk0hVuFaN5rxT2cusm4Wcgw+MnUjhB bZjv7cyGFunt6UEe6OibXJao9adGn0ZbhZLk0HLKvmCMwF6ihTW0ZN2VWkH18DR+ mX/DOwUC5A== -----END CERTIFICATE-----Generated at Fri Dec 5 12:24:20 2025 by rpki-client