This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/gp1wlgGo5vivn7gfDRwXZtwctws.roa File: gp1wlgGo5vivn7gfDRwXZtwctws.roa (raw, json) Hash identifier: KehzF0g+L+PNvyC/IBXZK4NamgKmadqbNbXSvh4706E= Subject key identifier: 82:9D:70:96:01:A8:E6:F8:AF:9F:B8:1F:0D:1C:17:66:DC:1C:B7:0B Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f Certificate serial: 019B7C12B36A16C781AA6C42F17D53EE77A9 Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/gp1wlgGo5vivn7gfDRwXZtwctws.roa Signing time: Fri 02 Jan 2026 00:19:18 +0000 ROA not before: Fri 02 Jan 2026 00:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44908 IP address blocks: 2a0a:280:3600::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:b3:6a:16:c7:81:aa:6c:42:f1:7d:53:ee:77:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f Validity Not Before: Jan 2 00:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=829d709601a8e6f8af9fb81f0d1c1766dc1cb70b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:04:b0:e6:3c:4f:7e:fa:72:e8:f4:af:c6:d8: 7a:17:8c:f3:57:c1:45:08:88:39:5c:0c:da:a6:f4: 9a:08:2e:10:ff:44:c7:9d:99:22:c8:e6:c5:38:3b: 68:64:4f:92:0d:0b:ce:75:27:9d:c5:ca:fe:88:1a: ba:d5:57:ce:e8:40:14:01:e1:05:7f:be:ab:f0:d1: 02:c4:a4:f4:d2:be:c4:55:a8:98:31:53:91:76:c1: 7e:0e:f9:ed:01:50:b3:16:03:d8:da:98:9a:86:2c: d2:8e:a7:85:fd:f5:15:fa:b0:04:22:72:1b:d7:31: 28:39:b2:f8:46:65:e4:3c:63:92:73:b7:87:fa:78: 2b:73:17:7c:27:79:0e:b7:b3:28:44:4e:e0:7e:40: c7:1b:cb:ce:7d:76:fa:f7:d9:57:50:74:ef:1b:f9: 13:8e:b3:60:4a:21:de:0c:57:12:89:a5:6a:3c:de: 66:4d:84:a9:0c:2d:16:5d:9a:45:2d:5a:3b:d2:23: 29:65:8f:21:b9:f1:f6:ca:ce:21:8e:12:96:5a:28: ce:e5:8f:dd:db:0e:eb:5e:e6:43:07:ad:e7:97:74: 5a:ba:9c:e8:ec:34:75:d5:f2:c0:05:cd:a8:28:bf: 43:be:df:5a:67:3e:b0:60:f1:58:3a:61:7a:b2:92: da:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:9D:70:96:01:A8:E6:F8:AF:9F:B8:1F:0D:1C:17:66:DC:1C:B7:0B X509v3 Authority Key Identifier: keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/gp1wlgGo5vivn7gfDRwXZtwctws.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:280:3600::/40 Signature Algorithm: sha256WithRSAEncryption 5f:f9:40:13:f9:41:fe:3a:c9:61:23:57:19:da:0e:22:06:05: b4:a5:46:2f:83:94:39:c0:40:19:30:7c:1e:3d:ef:38:b1:d8: 90:97:b9:f0:a3:35:ce:e2:de:98:34:f1:a9:6a:9f:23:a5:cd: 92:1c:33:8a:22:cb:2d:b8:e1:c4:ba:d5:40:5f:1c:a9:75:7c: 5c:86:e8:5d:03:e2:f4:30:9b:f6:c8:ee:81:85:24:39:4f:5a: 62:3c:a8:3b:40:76:21:ff:2a:3d:5e:29:0a:0c:15:43:d0:ba: f0:0a:89:d5:b7:89:70:68:c0:10:c8:72:a6:bc:68:1c:d1:0b: 4e:ce:5f:62:c7:ac:37:d5:e1:fd:68:bc:2e:fc:71:19:21:d6: c9:57:62:ec:ca:fa:69:3b:da:c6:60:e2:39:f1:5d:99:ca:84: 52:bb:3e:99:fc:cb:1b:a4:2d:62:d6:dd:72:84:50:55:e2:8b: be:5d:26:c1:46:61:21:3e:d6:b5:4a:b2:33:48:ed:83:17:95: 18:19:d3:c8:86:00:31:7b:a5:53:d5:4a:28:44:a5:53:fb:6a: 1f:b9:99:4c:0e:75:98:98:96:fa:69:fa:29:69:fd:08:fb:07: c5:c7:d3:68:b9:52:fd:45:0e:13:45:f2:aa:fb:95:7d:2c:e9: 16:97:fb:89 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt8ErNqFseBqmxC8X1T7nepMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiOWYyMWJhMDRlNWUzMDc3YjM5MWUzZDQ4ZmY1YjBhNTBi MzM2OWYwHhcNMjYwMTAyMDAxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjlkNzA5NjAxYThlNmY4YWY5ZmI4MWYwZDFjMTc2NmRjMWNiNzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gSw5jxPfvpy6PSvxth6F4zzV8FF CIg5XAzapvSaCC4Q/0THnZkiyObFODtoZE+SDQvOdSedxcr+iBq61VfO6EAUAeEF f76r8NECxKT00r7EVaiYMVORdsF+DvntAVCzFgPY2piahizSjqeF/fUV+rAEInIb 1zEoObL4RmXkPGOSc7eH+ngrcxd8J3kOt7MoRE7gfkDHG8vOfXb699lXUHTvG/kT jrNgSiHeDFcSiaVqPN5mTYSpDC0WXZpFLVo70iMpZY8hufH2ys4hjhKWWijO5Y/d 2w7rXuZDB63nl3Raupzo7DR11fLABc2oKL9Dvt9aZz6wYPFYOmF6spLacwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFIKdcJYBqOb4r5+4Hw0cF2bcHLcLMB8GA1UdIwQY MBaAFBufIboE5eMHezkePUj/WwpQszafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUt ZjUxYzVmYjNkZjlhLzEvZ3Axd2xnR281dml2bjdnZkRSd1hadHdjdHdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUtZjUxYzVmYjNkZjlh LzEvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgoCgDYw DQYJKoZIhvcNAQELBQADggEBAF/5QBP5Qf46yWEjVxnaDiIGBbSlRi+DlDnAQBkw fB497zix2JCXufCjNc7i3pg08alqnyOlzZIcM4oiyy244cS61UBfHKl1fFyG6F0D 4vQwm/bI7oGFJDlPWmI8qDtAdiH/Kj1eKQoMFUPQuvAKidW3iXBowBDIcqa8aBzR C07OX2LHrDfV4f1ovC78cRkh1slXYuzK+mk72sZg4jnxXZnKhFK7Ppn8yxukLWLW 3XKEUFXii75dJsFGYSE+1rVKsjNI7YMXlRgZ08iGADF7pVPVSihEpVP7ah+5mUwO dZiYlvpp+ilp/Qj7B8XH02i5Uv1FDhNF8qr7lX0s6RaX+4k= -----END CERTIFICATE-----Generated at Wed Jan 21 17:33:44 2026 by rpki-client