This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/GTprX4xnz7mXweL8nZWgsiFmIdM.roa File: GTprX4xnz7mXweL8nZWgsiFmIdM.roa (raw, json) Hash identifier: L+IoaOm1HdM2K3vqUyYDUjQ593SQoqmD3BA2z1vtP8o= Subject key identifier: 19:3A:6B:5F:8C:67:CF:B9:97:C1:E2:FC:9D:95:A0:B2:21:66:21:D3 Certificate issuer: /CN=32388fcf74d2e59524f4eb4d96e44c5222db63e1 Certificate serial: 019B7AC81F5E1563A230082F81F918E1A2AF Authority key identifier: 32:38:8F:CF:74:D2:E5:95:24:F4:EB:4D:96:E4:4C:52:22:DB:63:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MjiPz3TS5ZUk9OtNluRMUiLbY-E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/GTprX4xnz7mXweL8nZWgsiFmIdM.roa Signing time: Thu 01 Jan 2026 18:18:14 +0000 ROA not before: Thu 01 Jan 2026 18:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8194 IP address blocks: 2a14:5680::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.crl rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.mft rsync://rpki.ripe.net/repository/DEFAULT/MjiPz3TS5ZUk9OtNluRMUiLbY-E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:1f:5e:15:63:a2:30:08:2f:81:f9:18:e1:a2:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32388fcf74d2e59524f4eb4d96e44c5222db63e1 Validity Not Before: Jan 1 18:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=193a6b5f8c67cfb997c1e2fc9d95a0b2216621d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:58:e1:c4:a1:35:b8:a7:b6:37:14:2b:27:b2: 10:53:99:d7:8d:dc:5a:70:0b:d9:8b:2c:a5:44:c1: 74:0e:1c:90:f0:b1:b1:28:56:21:82:2a:f8:e9:d0: 9e:8a:ff:70:a7:8a:d9:32:68:f4:d4:4b:2c:aa:f1: b8:88:35:78:74:dd:0c:71:35:9f:37:da:d0:cf:1b: 90:06:94:9c:d6:60:8f:45:23:20:1c:0e:f4:1d:b6: a4:58:c0:97:0c:bd:0a:8c:5d:4a:a0:2d:99:4e:a0: 52:ae:4a:bf:d9:1c:d2:7b:16:82:9e:b6:61:28:8e: 07:2b:bb:bb:e9:d0:5c:70:32:05:79:bc:60:dc:a5: b5:7a:00:49:53:3e:70:9d:06:46:2f:10:de:9c:9a: ec:64:0f:99:eb:bd:6f:af:35:5c:88:fe:bc:11:2b: b6:00:c7:f7:20:11:b3:bd:0f:9b:9d:a8:f7:e2:78: 35:23:c1:11:e1:4b:65:ef:d2:4f:7a:15:26:c4:94: 5a:d9:b6:a7:6d:d4:e6:7a:8f:3b:83:bb:44:d5:6f: 09:d2:12:03:b5:0f:b9:53:60:b9:f0:c0:84:5b:df: 1a:f5:47:fc:10:d7:da:8d:21:47:3c:39:cf:47:8e: 51:37:54:b0:b0:d2:6d:14:d8:14:04:d4:b2:c1:35: 8e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:3A:6B:5F:8C:67:CF:B9:97:C1:E2:FC:9D:95:A0:B2:21:66:21:D3 X509v3 Authority Key Identifier: keyid:32:38:8F:CF:74:D2:E5:95:24:F4:EB:4D:96:E4:4C:52:22:DB:63:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MjiPz3TS5ZUk9OtNluRMUiLbY-E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/GTprX4xnz7mXweL8nZWgsiFmIdM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a9a1c9-3444-4e5b-a720-18040c8e22ed/1/MjiPz3TS5ZUk9OtNluRMUiLbY-E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:5680::/29 Signature Algorithm: sha256WithRSAEncryption 84:b3:d5:dc:9f:10:1f:2a:bc:d9:a4:97:4d:49:33:2c:2c:ab: 3f:8a:a4:7f:fa:75:6d:9d:74:b0:f3:b2:3e:b2:14:98:32:1a: 8b:0a:5d:43:17:2e:43:51:cf:8d:5a:41:98:e3:91:20:5d:49: 3e:46:90:69:9f:87:3b:4b:ae:e5:bf:40:3b:cc:33:cf:20:81: 6b:23:74:4b:56:e7:91:bf:cc:a3:c4:b5:a2:b9:a7:60:06:41: 5a:5c:17:6a:4d:51:e4:78:6a:9a:6c:e0:55:1f:65:ad:a2:6a: 0e:5d:5f:89:9a:0e:49:71:c7:6c:a0:1b:6d:ad:c2:1a:6d:c9: b0:17:bf:52:b7:d0:09:ed:bb:71:9d:15:8a:be:df:27:49:62: ea:7c:d2:56:60:b3:de:a2:bb:58:76:ac:73:cc:c6:3a:f1:6b: ea:c2:44:6d:fe:75:fc:3f:d8:b4:15:95:77:a6:96:af:95:5e: a5:91:92:9c:52:8c:d2:a1:36:e1:73:4b:83:db:9b:24:79:b0: 1d:77:f8:17:9d:3a:bd:8f:24:7b:e1:17:9a:1e:73:e8:8c:dc: 08:74:eb:ba:f4:32:03:a8:51:6c:82:9e:e9:de:82:5a:8f:1a: 87:80:81:fa:3b:0b:8c:21:a4:30:cf:e1:f4:b7:93:7d:5b:3a: 78:ef:71:7d -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6yB9eFWOiMAgvgfkY4aKvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMzg4ZmNmNzRkMmU1OTUyNGY0ZWI0ZDk2ZTQ0YzUyMjJk YjYzZTEwHhcNMjYwMTAxMTgxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTNhNmI1ZjhjNjdjZmI5OTdjMWUyZmM5ZDk1YTBiMjIxNjYyMWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFjhxKE1uKe2NxQrJ7IQU5nXjdxa cAvZiyylRMF0DhyQ8LGxKFYhgir46dCeiv9wp4rZMmj01EssqvG4iDV4dN0McTWf N9rQzxuQBpSc1mCPRSMgHA70HbakWMCXDL0KjF1KoC2ZTqBSrkq/2RzSexaCnrZh KI4HK7u76dBccDIFebxg3KW1egBJUz5wnQZGLxDenJrsZA+Z671vrzVciP68ESu2 AMf3IBGzvQ+bnaj34ng1I8ER4Utl79JPehUmxJRa2banbdTmeo87g7tE1W8J0hID tQ+5U2C58MCEW98a9Uf8ENfajSFHPDnPR45RN1SwsNJtFNgUBNSywTWOAwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFBk6a1+MZ8+5l8Hi/J2VoLIhZiHTMB8GA1UdIwQY MBaAFDI4j8900uWVJPTrTZbkTFIi22PhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWppUHozVFM1WlVrOU90Tmx1Uk1VaUxiWS1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9hOWExYzktMzQ0NC00ZTViLWE3MjAt MTgwNDBjOGUyMmVkLzEvR1Rwclg0eG56N21Yd2VMOG5aV2dzaUZtSWRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9hOWExYzktMzQ0NC00ZTViLWE3MjAtMTgwNDBjOGUyMmVk LzEvTWppUHozVFM1WlVrOU90Tmx1Uk1VaUxiWS1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhRWgDAN BgkqhkiG9w0BAQsFAAOCAQEAhLPV3J8QHyq82aSXTUkzLCyrP4qkf/p1bZ10sPOy PrIUmDIaiwpdQxcuQ1HPjVpBmOORIF1JPkaQaZ+HO0uu5b9AO8wzzyCBayN0S1bn kb/Mo8S1ormnYAZBWlwXak1R5HhqmmzgVR9lraJqDl1fiZoOSXHHbKAbba3CGm3J sBe/UrfQCe27cZ0Vir7fJ0li6nzSVmCz3qK7WHasc8zGOvFr6sJEbf51/D/YtBWV d6aWr5VepZGSnFKM0qE24XNLg9ubJHmwHXf4F506vY8ke+EXmh5z6IzcCHTruvQy A6hRbIKe6d6CWo8ah4CB+jsLjCGkMM/h9LeTfVs6eO9xfQ== -----END CERTIFICATE-----Generated at Tue Jan 27 04:10:54 2026 by rpki-client