This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/Gtwjc7NNuv58O6hnKDqBYDJmyRQ.roa File: Gtwjc7NNuv58O6hnKDqBYDJmyRQ.roa (raw, json) Hash identifier: LK5oiJ5hBo2z5XWsMY/8RHb1LgIogizoQEzKylCXOUQ= Subject key identifier: 1A:DC:23:73:B3:4D:BA:FE:7C:3B:A8:67:28:3A:81:60:32:66:C9:14 Certificate issuer: /CN=7ca8898ff6212b4d65cf323fc8330af98803bf76 Certificate serial: 019B7AC886AA90084611935D0E90B1BF931E Authority key identifier: 7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/Gtwjc7NNuv58O6hnKDqBYDJmyRQ.roa Signing time: Thu 01 Jan 2026 18:18:40 +0000 ROA not before: Thu 01 Jan 2026 18:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209878 IP address blocks: 2001:678:f9c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:86:aa:90:08:46:11:93:5d:0e:90:b1:bf:93:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca8898ff6212b4d65cf323fc8330af98803bf76 Validity Not Before: Jan 1 18:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1adc2373b34dbafe7c3ba867283a81603266c914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3f:12:5c:c6:76:55:89:6e:2c:41:21:61:bf: c2:e1:db:af:d1:52:23:89:1e:1b:d3:49:71:fe:0c: 62:b3:84:3b:0a:62:c5:21:12:9d:8b:5d:a1:34:35: a3:23:79:77:f5:31:c2:c8:a1:74:16:49:d3:82:a0: 28:c0:0e:dc:c0:5d:1d:6e:42:60:c7:99:38:19:97: b2:fe:c4:f4:bf:d2:fb:ca:dd:58:09:39:e0:29:80: 0f:fc:23:c0:2d:2b:a1:b8:6d:5a:e7:a9:69:e3:4e: 98:fd:40:45:0c:34:1d:36:c2:fb:be:c7:0e:0d:52: ca:18:8e:33:af:24:7a:43:e0:24:d5:6a:99:b1:e2: 6c:48:85:9c:ba:ea:c9:cd:3c:27:b7:d1:63:da:bc: 13:d0:0f:5f:9e:8a:3c:d9:12:d2:4e:fe:6a:03:ca: 21:c0:5e:0e:06:a9:e0:c4:67:e9:9b:7d:70:a6:59: e5:35:50:b6:62:f4:f9:23:d0:57:d8:e6:a3:a9:4b: 06:d6:c2:ef:d3:ee:ef:58:77:46:01:fb:a7:31:58: 5f:f6:bc:7a:84:0f:7c:5e:4e:38:6e:1e:46:53:13: 0c:95:66:01:a9:0b:4a:b2:4b:0e:1a:77:1c:b2:6b: 0d:d6:d4:2b:ec:2b:aa:dc:0e:e3:26:3d:ad:1c:60: a1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:DC:23:73:B3:4D:BA:FE:7C:3B:A8:67:28:3A:81:60:32:66:C9:14 X509v3 Authority Key Identifier: keyid:7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/Gtwjc7NNuv58O6hnKDqBYDJmyRQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:f9c::/48 Signature Algorithm: sha256WithRSAEncryption bd:61:45:a9:57:e4:ba:df:04:00:e1:9f:86:32:79:5e:f4:39: db:f3:43:01:a2:63:72:26:bb:8a:72:44:84:08:b6:94:1a:f5: de:78:3d:3c:d6:e5:65:92:e0:3f:8f:36:b4:9e:f8:89:44:c2: 76:69:61:e6:7c:82:9e:8d:69:8a:aa:0f:18:cc:cf:e4:03:dc: 37:3e:b1:12:8b:99:2b:3f:c0:ae:af:94:16:da:25:8f:51:48: 7e:68:bb:1a:65:7b:22:07:f6:5a:23:20:5e:32:68:6a:86:54: 0b:11:a4:49:0d:3a:c5:d7:6a:5e:b3:8c:2d:31:31:ef:f6:bd: 25:3a:2e:1a:f7:70:c7:cd:b9:e5:a7:8c:9a:28:7a:d8:c5:57: 98:38:62:2b:8b:48:7c:90:cf:b0:3e:e4:05:82:3d:90:3c:d7: ce:20:29:4e:3d:89:e4:93:6b:91:5c:cb:c9:2f:98:82:36:8a: b9:47:a1:ca:dc:b4:69:9a:2a:49:dc:4c:ca:d1:70:61:a2:e2: 72:19:c8:07:1d:0b:d7:ca:64:4f:f7:09:17:da:9d:a2:1b:1f: 32:75:0d:c8:6d:d2:10:bb:fb:50:66:6a:ef:a8:df:97:98:20: fd:f2:05:0e:d1:8c:24:4b:20:a1:1a:a9:83:e4:e6:7f:5e:47: 21:1a:5c:4f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6yIaqkAhGEZNdDpCxv5MeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTg4OThmZjYyMTJiNGQ2NWNmMzIzZmM4MzMwYWY5ODgw M2JmNzYwHhcNMjYwMTAxMTgxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWRjMjM3M2IzNGRiYWZlN2MzYmE4NjcyODNhODE2MDMyNjZjOTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyT8SXMZ2VYluLEEhYb/C4duv0VIj iR4b00lx/gxis4Q7CmLFIRKdi12hNDWjI3l39THCyKF0FknTgqAowA7cwF0dbkJg x5k4GZey/sT0v9L7yt1YCTngKYAP/CPALSuhuG1a56lp406Y/UBFDDQdNsL7vscO DVLKGI4zryR6Q+Ak1WqZseJsSIWcuurJzTwnt9Fj2rwT0A9fnoo82RLSTv5qA8oh wF4OBqngxGfpm31wplnlNVC2YvT5I9BX2OajqUsG1sLv0+7vWHdGAfunMVhf9rx6 hA98Xk44bh5GUxMMlWYBqQtKsksOGnccsmsN1tQr7Cuq3A7jJj2tHGChewIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBrcI3OzTbr+fDuoZyg6gWAyZskUMB8GA1UdIwQY MBaAFHyoiY/2IStNZc8yP8gzCvmIA792MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktpSmpfWWhLMDFsenpJX3lETUstWWdEdjNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zYjRlMjEtMGZjMS00NTRmLTk3ZGYt Y2VlMmQxNDMwZTZjLzEvR3R3amM3Tk51djU4TzZobktEcUJZREpteVJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zYjRlMjEtMGZjMS00NTRmLTk3ZGYtY2VlMmQxNDMwZTZj LzEvZktpSmpfWWhLMDFsenpJX3lETUstWWdEdjNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA+c MA0GCSqGSIb3DQEBCwUAA4IBAQC9YUWpV+S63wQA4Z+GMnle9Dnb80MBomNyJruK ckSECLaUGvXeeD081uVlkuA/jza0nviJRMJ2aWHmfIKejWmKqg8YzM/kA9w3PrES i5krP8Cur5QW2iWPUUh+aLsaZXsiB/ZaIyBeMmhqhlQLEaRJDTrF12pes4wtMTHv 9r0lOi4a93DHzbnlp4yaKHrYxVeYOGIri0h8kM+wPuQFgj2QPNfOIClOPYnkk2uR XMvJL5iCNoq5R6HK3LRpmipJ3EzK0XBhouJyGcgHHQvXymRP9wkX2p2iGx8ydQ3I bdIQu/tQZmrvqN+XmCD98gUO0YwkSyChGqmD5OZ/XkchGlxP -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:43 2026 by rpki-client