This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/gjw8-u1-RUYPwvnzCcEWN9um84A.roa File: gjw8-u1-RUYPwvnzCcEWN9um84A.roa (raw, json) Hash identifier: Wj/WMx/gYXtU3/ndk9JR5hs9b+E4Gn3UhAqqySc/EVk= Subject key identifier: 82:3C:3C:FA:ED:7E:45:46:0F:C2:F9:F3:09:C1:16:37:DB:A6:F3:80 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3950483A99055D041F23B22D7C3B9C Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/gjw8-u1-RUYPwvnzCcEWN9um84A.roa Signing time: Fri 02 Jan 2026 10:20:43 +0000 ROA not before: Fri 02 Jan 2026 10:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210674 IP address blocks: 2a0c:b641:370::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:50:48:3a:99:05:5d:04:1f:23:b2:2d:7c:3b:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=823c3cfaed7e45460fc2f9f309c11637dba6f380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:37:5f:00:4a:75:c7:06:9e:8a:3b:a8:cc:12: 29:23:98:dc:0d:04:fd:de:1c:fc:df:9f:83:a8:c5: d2:04:e5:2c:a8:84:71:23:da:47:33:d7:34:59:7a: f8:d5:73:1b:3c:f2:7a:82:22:84:e8:11:db:ea:49: a5:6e:5e:a0:be:e5:08:0a:f0:13:0d:6a:6b:28:de: af:93:09:0d:70:3d:7d:77:2c:cf:fc:4e:6a:eb:b8: ca:fd:79:b6:f2:26:8b:13:f7:5f:6e:f4:39:10:85: d0:81:73:c8:8c:b8:cc:fd:54:93:a3:07:64:47:63: 50:6b:4a:67:54:57:19:73:fd:2c:57:a1:0c:33:ac: 2c:e2:65:cb:a7:17:1c:07:6e:1a:a1:11:52:fd:ec: 89:c3:87:d5:44:84:02:46:32:a0:c2:40:37:4e:05: 86:82:f2:3b:95:ce:bb:e1:8a:4e:50:fe:b0:bc:8d: 4f:88:6c:45:60:6e:9b:f1:32:14:8e:0c:1b:6d:eb: 8b:a2:a1:fe:2d:95:30:21:8f:f2:6d:fe:47:c6:12: 97:fe:30:f4:0f:bb:a5:67:01:85:b0:64:fa:41:03: 0d:8d:5d:ea:3f:77:99:e8:44:3d:ed:15:a0:8b:41: ed:27:5b:0e:b7:d6:8e:2a:83:4d:56:62:20:10:3f: 99:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:3C:3C:FA:ED:7E:45:46:0F:C2:F9:F3:09:C1:16:37:DB:A6:F3:80 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/gjw8-u1-RUYPwvnzCcEWN9um84A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:370::/44 Signature Algorithm: sha256WithRSAEncryption 33:c4:12:6b:f3:2d:27:27:a6:ff:aa:8b:9a:fa:a8:68:8d:a8: bc:14:f2:48:7e:d9:6a:fa:64:4d:8b:6e:66:51:83:4b:7b:3b: f3:32:1b:e7:d1:13:35:08:56:bf:aa:0e:d2:32:f9:dd:e7:be: 82:09:fc:7f:54:26:b4:45:b3:4d:c4:4d:01:0e:33:39:54:2e: 2c:24:15:99:d8:4e:5f:60:28:18:75:45:5a:15:6e:8a:a6:c9: d6:89:12:c6:d1:55:51:ee:82:59:12:c8:10:99:f9:89:54:63: c0:64:8f:c5:ab:e8:9f:62:0d:bb:50:a9:81:2f:0f:ce:3a:c6: f3:f2:da:b7:7e:3f:f4:29:3c:40:40:dc:27:92:66:02:db:12: be:b7:0c:ac:b1:4d:87:8a:62:9d:75:d2:b4:5a:4b:9f:ab:cb: 31:60:1f:69:ce:cb:ce:89:cd:a0:4f:f2:2b:84:12:46:ba:1d: 3d:1e:81:17:37:f2:42:39:75:40:51:6b:06:ae:01:db:4c:de: b8:80:f4:4b:e7:57:ef:29:6a:08:ac:f1:8f:2e:71:82:f8:7c: 65:0d:a7:1a:3b:70:fb:89:26:dc:b5:11:c8:74:9f:fe:54:11: 28:59:b0:f1:64:a7:90:55:98:ac:25:17:3a:02:95:e3:23:64: 07:55:50:a4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OVBIOpkFXQQfI7ItfDucMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjNjM2NmYWVkN2U0NTQ2MGZjMmY5ZjMwOWMxMTYzN2RiYTZmMzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zdfAEp1xwaeijuozBIpI5jcDQT9 3hz835+DqMXSBOUsqIRxI9pHM9c0WXr41XMbPPJ6giKE6BHb6kmlbl6gvuUICvAT DWprKN6vkwkNcD19dyzP/E5q67jK/Xm28iaLE/dfbvQ5EIXQgXPIjLjM/VSTowdk R2NQa0pnVFcZc/0sV6EMM6ws4mXLpxccB24aoRFS/eyJw4fVRIQCRjKgwkA3TgWG gvI7lc674YpOUP6wvI1PiGxFYG6b8TIUjgwbbeuLoqH+LZUwIY/ybf5HxhKX/jD0 D7ulZwGFsGT6QQMNjV3qP3eZ6EQ97RWgi0HtJ1sOt9aOKoNNVmIgED+ZcwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFII8PPrtfkVGD8L58wnBFjfbpvOAMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvZ2p3OC11MS1SVVlQd3ZuekNjRVdOOXVtODRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQNw MA0GCSqGSIb3DQEBCwUAA4IBAQAzxBJr8y0nJ6b/qoua+qhojai8FPJIftlq+mRN i25mUYNLezvzMhvn0RM1CFa/qg7SMvnd576CCfx/VCa0RbNNxE0BDjM5VC4sJBWZ 2E5fYCgYdUVaFW6KpsnWiRLG0VVR7oJZEsgQmfmJVGPAZI/Fq+ifYg27UKmBLw/O Osbz8tq3fj/0KTxAQNwnkmYC2xK+twyssU2HimKdddK0Wkufq8sxYB9pzsvOic2g T/IrhBJGuh09HoEXN/JCOXVAUWsGrgHbTN64gPRL51fvKWoIrPGPLnGC+HxlDaca O3D7iSbctRHIdJ/+VBEoWbDxZKeQVZisJRc6ApXjI2QHVVCk -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:00 2026 by rpki-client