This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/GXYUvs6WnIo6UrW1A6LBxc38LC8.roa File: GXYUvs6WnIo6UrW1A6LBxc38LC8.roa (raw, json) Hash identifier: 03e/jLPVXBnn+R6oylDyjcK9ALImb9no5llGJUqEhIw= Subject key identifier: 19:76:14:BE:CE:96:9C:8A:3A:52:B5:B5:03:A2:C1:C5:CD:FC:2C:2F Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3950E346B91B7B4B546EEC566CBF7E Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/GXYUvs6WnIo6UrW1A6LBxc38LC8.roa Signing time: Fri 02 Jan 2026 10:20:43 +0000 ROA not before: Fri 02 Jan 2026 10:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210688 IP address blocks: 2a0c:b641:1b0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 15:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:50:e3:46:b9:1b:7b:4b:54:6e:ec:56:6c:bf:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=197614bece969c8a3a52b5b503a2c1c5cdfc2c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d8:0a:a4:f0:ed:85:62:50:bb:33:30:ed:1b: 16:fe:8f:d1:22:da:3f:41:fb:ce:f2:71:82:a2:30: eb:fb:ee:25:74:c9:a5:de:0d:9d:52:18:dd:bd:ad: 56:04:1b:2e:a2:c1:f6:8c:77:4f:ea:7f:21:0e:0f: b6:48:e4:73:3b:f7:a7:b1:43:2a:52:3e:de:3d:b9: 64:23:0c:6e:7e:a6:0f:78:82:ff:d0:93:2a:63:ed: 5e:70:27:c8:b7:46:45:b2:0e:65:1d:90:32:48:56: 40:dd:19:ad:f6:8f:68:d8:d6:4f:25:60:84:24:48: de:60:72:00:e1:df:5a:26:d1:79:6e:42:99:20:50: c1:92:86:f2:4c:1e:eb:4a:02:e7:76:09:81:de:aa: bd:37:e4:07:c9:ab:eb:2e:c4:84:38:ed:3c:fc:eb: b9:17:94:f5:39:72:86:8f:50:f2:35:ef:90:62:c6: 7c:65:dc:43:2f:16:ba:a0:01:ee:23:cb:fe:f9:e2: 89:5f:4e:41:f3:39:99:65:0e:cb:5b:c9:0c:1c:c0: d6:fb:7a:bd:ea:d6:7a:75:24:f2:63:39:12:12:56: 88:34:c1:93:47:13:9c:31:d1:58:62:4c:e7:b8:3e: 57:b2:aa:c3:ba:bd:cd:1e:97:f6:07:40:e4:7d:3b: 4f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:76:14:BE:CE:96:9C:8A:3A:52:B5:B5:03:A2:C1:C5:CD:FC:2C:2F X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/GXYUvs6WnIo6UrW1A6LBxc38LC8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:1b0::/44 Signature Algorithm: sha256WithRSAEncryption 15:62:4f:de:8e:ad:db:ca:53:44:d3:9f:99:d2:e4:ab:06:7a: 67:74:07:d6:c1:13:90:1f:80:13:9e:5c:18:ca:02:57:76:26: 10:26:6a:8f:8e:5c:a8:01:49:04:34:a1:cf:1e:54:db:3e:82: 46:5f:66:32:8e:36:8b:6a:0b:bb:6e:dd:6a:eb:ed:7a:5e:6e: bb:22:8b:ac:f9:fb:b6:c3:be:0d:8e:1c:fd:8c:ae:e6:08:eb: fd:32:81:ac:ec:63:7e:8d:36:a4:cb:f6:48:9f:21:fb:32:42: 4a:85:0d:ea:36:2d:c5:63:b0:24:6b:9d:fb:7d:90:9b:7c:33: 33:8c:2c:d4:3b:36:87:3c:f4:1d:35:31:68:4a:ea:c6:92:f5: 55:8b:e7:8a:74:d6:fc:8c:ca:00:fc:2e:b0:42:10:4e:34:11: 20:0a:4c:f8:58:66:be:b0:21:f6:47:fc:9c:4b:e3:9b:b2:a4: 27:58:2a:df:59:40:11:8a:cf:e9:fa:4b:45:75:b4:1c:73:18: 6e:8a:63:e1:01:3a:64:9e:e0:33:f6:41:3b:8d:dc:46:04:95: 3c:56:02:33:ab:6f:04:ff:f4:26:19:1b:7d:66:2a:cf:2a:f2: 9d:14:24:5a:06:7a:a2:c8:b4:c5:52:27:7a:9c:0e:47:6b:32: 55:8f:0e:ba -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OVDjRrkbe0tUbuxWbL9+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTc2MTRiZWNlOTY5YzhhM2E1MmI1YjUwM2EyYzFjNWNkZmMyYzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtgKpPDthWJQuzMw7RsW/o/RIto/ QfvO8nGCojDr++4ldMml3g2dUhjdva1WBBsuosH2jHdP6n8hDg+2SORzO/ensUMq Uj7ePblkIwxufqYPeIL/0JMqY+1ecCfIt0ZFsg5lHZAySFZA3Rmt9o9o2NZPJWCE JEjeYHIA4d9aJtF5bkKZIFDBkobyTB7rSgLndgmB3qq9N+QHyavrLsSEOO08/Ou5 F5T1OXKGj1DyNe+QYsZ8ZdxDLxa6oAHuI8v++eKJX05B8zmZZQ7LW8kMHMDW+3q9 6tZ6dSTyYzkSElaINMGTRxOcMdFYYkznuD5XsqrDur3NHpf2B0DkfTtP0wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBl2FL7OlpyKOlK1tQOiwcXN/CwvMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvR1hZVXZzNlduSW82VXJXMUE2TEJ4YzM4TEM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQGw MA0GCSqGSIb3DQEBCwUAA4IBAQAVYk/ejq3bylNE05+Z0uSrBnpndAfWwROQH4AT nlwYygJXdiYQJmqPjlyoAUkENKHPHlTbPoJGX2YyjjaLagu7bt1q6+16Xm67Ious +fu2w74Njhz9jK7mCOv9MoGs7GN+jTaky/ZInyH7MkJKhQ3qNi3FY7Aka537fZCb fDMzjCzUOzaHPPQdNTFoSurGkvVVi+eKdNb8jMoA/C6wQhBONBEgCkz4WGa+sCH2 R/ycS+ObsqQnWCrfWUARis/p+ktFdbQccxhuimPhATpknuAz9kE7jdxGBJU8VgIz q28E//QmGRt9ZirPKvKdFCRaBnqiyLTFUid6nA5HazJVjw66 -----END CERTIFICATE-----Generated at Sun Jan 11 23:54:09 2026 by rpki-client