This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/GJ9jq1utAOnfB6vGzK5aQugyYRo.roa File: GJ9jq1utAOnfB6vGzK5aQugyYRo.roa (raw, json) Hash identifier: 4LC584iGEYWuEuibcnVRjFRB3sB/Gg71VV3hzTlGieE= Subject key identifier: 18:9F:63:AB:5B:AD:00:E9:DF:07:AB:C6:CC:AE:5A:42:E8:32:61:1A Certificate issuer: /CN=1dab365ecc350458ada2b0949ee67ef9d8c6f4dc Certificate serial: 019B7DC9FF2D89B3DFE74F6820871C9665CD Authority key identifier: 1D:AB:36:5E:CC:35:04:58:AD:A2:B0:94:9E:E6:7E:F9:D8:C6:F4:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/GJ9jq1utAOnfB6vGzK5aQugyYRo.roa Signing time: Fri 02 Jan 2026 08:19:08 +0000 ROA not before: Fri 02 Jan 2026 08:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34927 IP address blocks: 2001:678:1110::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.crl rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:ff:2d:89:b3:df:e7:4f:68:20:87:1c:96:65:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dab365ecc350458ada2b0949ee67ef9d8c6f4dc Validity Not Before: Jan 2 08:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=189f63ab5bad00e9df07abc6ccae5a42e832611a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b5:cf:38:6f:5c:ee:3c:f4:84:d2:82:91:a0: 25:6d:0a:f5:21:51:4c:4c:08:44:47:9f:85:dd:4e: 7e:5e:8b:43:b2:ae:c8:db:e6:66:41:27:d2:f1:7f: 6b:01:56:5b:c3:28:a9:e8:ae:15:cb:e6:63:20:43: 0a:01:4c:53:1e:bf:16:13:e3:f8:6a:c0:b2:3f:7d: f6:1a:f9:ea:b7:eb:36:35:fe:27:a4:79:d7:62:0c: c5:f9:46:d0:a7:04:34:0d:49:c7:76:a3:64:d5:6b: d6:fd:7b:86:8c:b3:dd:40:bd:58:ed:aa:63:dd:63: 47:c5:85:5d:d4:cc:71:14:a3:c1:c9:b0:0a:cd:3c: 97:8b:07:6e:31:30:e2:f5:30:98:01:e4:95:22:8f: b0:f9:f5:9b:f2:ac:1a:f4:7c:5c:1f:bf:a4:a3:ab: 7f:96:ed:f2:79:93:9f:39:53:9c:1b:6d:2b:64:7c: 69:19:db:2e:1e:5e:ab:9d:2e:4a:32:01:d8:99:7b: 41:5b:a6:e6:aa:48:ed:36:03:f7:82:ef:b9:68:86: ca:9a:98:76:cb:d7:b4:c2:0c:88:8b:4e:59:98:a1: df:09:86:0c:14:9d:29:24:5f:99:c5:84:0d:5d:c8: e6:7d:e3:30:18:de:1d:e7:3f:82:5b:a6:50:82:e4: 11:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:9F:63:AB:5B:AD:00:E9:DF:07:AB:C6:CC:AE:5A:42:E8:32:61:1A X509v3 Authority Key Identifier: keyid:1D:AB:36:5E:CC:35:04:58:AD:A2:B0:94:9E:E6:7E:F9:D8:C6:F4:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/GJ9jq1utAOnfB6vGzK5aQugyYRo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:1110::/48 Signature Algorithm: sha256WithRSAEncryption 54:c4:20:eb:bc:5d:a0:69:9b:21:86:61:a8:69:f7:06:cf:c4: 0f:1f:e8:43:f6:08:45:c1:4c:53:c5:af:a7:a6:da:58:2e:da: 1c:9f:9f:4b:01:0c:15:d3:ec:58:1d:f5:65:05:51:28:e7:53: a7:7f:1d:f9:45:e2:9c:1d:8c:14:6e:6d:d2:91:45:63:b2:0b: d7:d3:cc:bf:93:a3:7e:7c:34:90:33:8d:e5:93:b9:60:27:fc: 61:48:ec:9d:f3:9a:bd:a7:fd:20:ff:47:17:fd:aa:eb:a9:4b: b1:f5:2f:b1:03:57:78:89:8c:bb:76:36:5f:81:6a:56:86:6e: 97:c9:9c:08:a6:42:63:9e:f3:f3:9e:a9:d1:25:d1:bb:fe:bf: 80:6a:69:22:bf:55:df:3d:a3:c1:36:8b:8c:04:df:97:d8:b3: cd:ed:29:d2:95:5a:72:e9:ac:f0:fc:9e:fb:85:51:07:47:15: 0f:44:18:9a:4b:b0:6f:81:c7:0b:f0:c3:8c:77:13:a2:28:8e: 89:47:eb:f0:18:ae:ab:09:20:e4:ee:10:e1:5e:e0:79:05:a2: 86:e5:d3:b5:83:03:30:7a:a6:8b:bf:d5:7c:4f:c9:67:9e:53: 52:d6:9b:7d:bb:30:db:ce:70:40:1f:7d:42:d1:59:ab:52:05: b7:2d:5c:92 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9yf8tibPf509oIIcclmXNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYWIzNjVlY2MzNTA0NThhZGEyYjA5NDllZTY3ZWY5ZDhj NmY0ZGMwHhcNMjYwMTAyMDgxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODlmNjNhYjViYWQwMGU5ZGYwN2FiYzZjY2FlNWE0MmU4MzI2MTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7XPOG9c7jz0hNKCkaAlbQr1IVFM TAhER5+F3U5+XotDsq7I2+ZmQSfS8X9rAVZbwyip6K4Vy+ZjIEMKAUxTHr8WE+P4 asCyP332Gvnqt+s2Nf4npHnXYgzF+UbQpwQ0DUnHdqNk1WvW/XuGjLPdQL1Y7apj 3WNHxYVd1MxxFKPBybAKzTyXiwduMTDi9TCYAeSVIo+w+fWb8qwa9HxcH7+ko6t/ lu3yeZOfOVOcG20rZHxpGdsuHl6rnS5KMgHYmXtBW6bmqkjtNgP3gu+5aIbKmph2 y9e0wgyIi05ZmKHfCYYMFJ0pJF+ZxYQNXcjmfeMwGN4d5z+CW6ZQguQRrwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBifY6tbrQDp3werxsyuWkLoMmEaMB8GA1UdIwQY MBaAFB2rNl7MNQRYraKwlJ7mfvnYxvTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGFzMlhzdzFCRml0b3JDVW51Wi0tZGpHOU53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mYThmNzgtNzZlNS00OGE5LWFiYjAt NjBhZTc2NjQ2ZGQ0LzEvR0o5anExdXRBT25mQjZ2R3pLNWFRdWd5WVJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9mYThmNzgtNzZlNS00OGE5LWFiYjAtNjBhZTc2NjQ2ZGQ0 LzEvSGFzMlhzdzFCRml0b3JDVW51Wi0tZGpHOU53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBEQ MA0GCSqGSIb3DQEBCwUAA4IBAQBUxCDrvF2gaZshhmGoafcGz8QPH+hD9ghFwUxT xa+nptpYLtocn59LAQwV0+xYHfVlBVEo51Onfx35ReKcHYwUbm3SkUVjsgvX08y/ k6N+fDSQM43lk7lgJ/xhSOyd85q9p/0g/0cX/arrqUux9S+xA1d4iYy7djZfgWpW hm6XyZwIpkJjnvPznqnRJdG7/r+Aamkiv1XfPaPBNouMBN+X2LPN7SnSlVpy6azw /J77hVEHRxUPRBiaS7BvgccL8MOMdxOiKI6JR+vwGK6rCSDk7hDhXuB5BaKG5dO1 gwMweqaLv9V8T8lnnlNS1pt9uzDbznBAH31C0VmrUgW3LVyS -----END CERTIFICATE-----Generated at Tue Jan 20 12:11:16 2026 by rpki-client