This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/Gg_alP2mFO3oRShalv4zYhkZtEI.roa File: Gg_alP2mFO3oRShalv4zYhkZtEI.roa (raw, json) Hash identifier: c1t1ZXq7lnILVOJ0YZafOnYK9luC0QXvmJ3DhCUXZKo= Subject key identifier: 1A:0F:DA:94:FD:A6:14:ED:E8:45:28:5A:96:FE:33:62:19:19:B4:42 Certificate issuer: /CN=663a24480f04d1318bf1a70dabffa4b27ef32da2 Certificate serial: 019C34B91EAF491B766D113FB503CCF23D0B Authority key identifier: 66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/Gg_alP2mFO3oRShalv4zYhkZtEI.roa Signing time: Fri 06 Feb 2026 20:51:13 +0000 ROA not before: Fri 06 Feb 2026 20:51:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213565 IP address blocks: 2a14:a902::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:34:b9:1e:af:49:1b:76:6d:11:3f:b5:03:cc:f2:3d:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=663a24480f04d1318bf1a70dabffa4b27ef32da2 Validity Not Before: Feb 6 20:51:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a0fda94fda614ede845285a96fe33621919b442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:dc:bb:0b:66:3b:45:ec:c1:a6:66:c5:7d:e5: ad:4d:06:f3:08:b5:84:e6:9c:cd:4b:02:c1:3f:6b: fc:95:52:78:07:49:0c:ba:6e:70:b6:5f:e1:c0:89: be:73:e5:72:fb:a6:62:f8:94:8a:9a:e0:eb:d6:66: cb:e5:74:04:86:51:f0:b5:b4:91:82:71:e8:92:96: 83:21:f1:e9:1e:6d:33:41:dd:f4:5c:ea:41:bd:d1: 48:2a:69:91:04:47:00:b4:a0:fd:30:8c:19:8c:db: a9:96:85:dd:ac:fb:ce:84:70:7a:07:5d:34:af:11: ca:d8:c3:83:a3:5e:a6:92:1d:15:1c:39:1b:f8:f8: 64:c4:9c:31:a5:16:bb:bb:1c:34:3a:8e:f9:7a:73: 04:86:4c:cd:ec:67:e7:9f:77:81:f1:6b:5f:45:f7: d1:ec:6f:e4:ea:fe:33:5b:29:42:90:b4:bc:57:76: 1a:1f:a8:6b:eb:0d:8d:f1:b2:99:3a:30:fa:12:b9: 5c:14:66:28:8a:0f:da:8b:f5:a8:26:bb:e0:09:2a: 3f:c5:b8:05:df:ed:13:d5:92:e6:99:92:ba:9e:a7: 93:fd:2f:a2:be:44:29:62:61:97:e7:f1:8c:9e:10: 66:73:7b:0d:f6:6e:d0:65:28:a9:2d:05:a3:9e:3c: fd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:0F:DA:94:FD:A6:14:ED:E8:45:28:5A:96:FE:33:62:19:19:B4:42 X509v3 Authority Key Identifier: keyid:66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/Gg_alP2mFO3oRShalv4zYhkZtEI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:a902::/32 Signature Algorithm: sha256WithRSAEncryption a0:1a:5a:f1:02:d7:d6:c5:02:98:d0:08:6d:97:aa:9b:41:ec: 8a:4a:18:d4:b1:b9:59:1d:f0:ae:0d:65:49:d2:8a:78:70:90: 97:4c:cd:e1:a8:74:aa:bb:6b:36:af:4a:6f:49:8b:fd:02:91: ad:e4:59:22:aa:7b:e1:50:6d:ba:de:65:ae:ce:6a:0c:64:3b: c0:bf:d1:a7:3a:ba:32:1d:fc:5a:a2:e4:e5:8a:f8:4d:c6:55: f3:35:8f:04:4d:63:55:d2:cc:4e:b8:a9:db:30:4d:9f:00:b8: 03:3f:8f:60:0a:83:2c:58:50:3e:ef:2a:43:0e:2a:22:03:13: 02:7d:ab:d0:9f:7a:d5:ae:eb:54:44:f8:6f:6c:d4:eb:75:b8: 2c:d5:a5:74:52:d3:44:25:b8:3d:ed:19:76:30:e1:90:87:57: b3:62:57:7b:7e:5a:7a:43:e5:4a:e5:5d:15:d3:11:4c:a2:c3: 92:62:6e:02:5c:39:27:51:04:82:75:34:c7:e8:ed:63:92:42: 42:01:f1:d6:75:60:07:5f:b6:75:e5:40:b0:44:d9:28:44:3c: a5:87:25:e1:3b:c0:66:e2:cc:18:52:86:56:c2:fc:4e:8e:74: 8e:8b:80:19:04:55:cc:4a:55:89:d1:d4:5b:70:21:54:d7:03: e1:08:7d:02 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZw0uR6vSRt2bRE/tQPM8j0LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2M2EyNDQ4MGYwNGQxMzE4YmYxYTcwZGFiZmZhNGIyN2Vm MzJkYTIwHhcNMjYwMjA2MjA1MTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTBmZGE5NGZkYTYxNGVkZTg0NTI4NWE5NmZlMzM2MjE5MTliNDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dy7C2Y7RezBpmbFfeWtTQbzCLWE 5pzNSwLBP2v8lVJ4B0kMum5wtl/hwIm+c+Vy+6Zi+JSKmuDr1mbL5XQEhlHwtbSR gnHokpaDIfHpHm0zQd30XOpBvdFIKmmRBEcAtKD9MIwZjNuploXdrPvOhHB6B100 rxHK2MODo16mkh0VHDkb+PhkxJwxpRa7uxw0Oo75enMEhkzN7Gfnn3eB8WtfRffR 7G/k6v4zWylCkLS8V3YaH6hr6w2N8bKZOjD6ErlcFGYoig/ai/WoJrvgCSo/xbgF 3+0T1ZLmmZK6nqeT/S+ivkQpYmGX5/GMnhBmc3sN9m7QZSipLQWjnjz9YwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFBoP2pT9phTt6EUoWpb+M2IZGbRCMB8GA1UdIwQY MBaAFGY6JEgPBNExi/GnDav/pLJ+8y2iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmpva1NBOEUwVEdMOGFjTnFfLWtzbjd6TGFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi82ZjgwYTgtNmI2YS00ZDk2LWJmNDkt Nzc1ZjVmNzRkNTgxLzEvR2dfYWxQMm1GTzNvUlNoYWx2NHpZaGtadEVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi82ZjgwYTgtNmI2YS00ZDk2LWJmNDktNzc1ZjVmNzRkNTgx LzEvWmpva1NBOEUwVEdMOGFjTnFfLWtzbjd6TGFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhSpAjAN BgkqhkiG9w0BAQsFAAOCAQEAoBpa8QLX1sUCmNAIbZeqm0HsikoY1LG5WR3wrg1l SdKKeHCQl0zN4ah0qrtrNq9Kb0mL/QKRreRZIqp74VBtut5lrs5qDGQ7wL/Rpzq6 Mh38WqLk5Yr4TcZV8zWPBE1jVdLMTrip2zBNnwC4Az+PYAqDLFhQPu8qQw4qIgMT An2r0J961a7rVET4b2zU63W4LNWldFLTRCW4Pe0ZdjDhkIdXs2JXe35aekPlSuVd FdMRTKLDkmJuAlw5J1EEgnU0x+jtY5JCQgHx1nVgB1+2deVAsETZKEQ8pYcl4TvA ZuLMGFKGVsL8To50jouAGQRVzEpVidHUW3AhVNcD4Qh9Ag== -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:05 2026 by rpki-client