This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Gg2S60Bz8fiJkyGLzZbWwlnqZzo.roa File: Gg2S60Bz8fiJkyGLzZbWwlnqZzo.roa (raw, json) Hash identifier: 27359CIHCGUW9IdIMhzpkIfX4PNB0SYRnEHOiXU/Vsw= Subject key identifier: 1A:0D:92:EB:40:73:F1:F8:89:93:21:8B:CD:96:D6:C2:59:EA:67:3A Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B79108DB89A107D53DDECC1168EA34CE8 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Gg2S60Bz8fiJkyGLzZbWwlnqZzo.roa Signing time: Thu 01 Jan 2026 10:18:06 +0000 ROA not before: Thu 01 Jan 2026 10:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198590 IP address blocks: 2a12:bec0:330::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:8d:b8:9a:10:7d:53:dd:ec:c1:16:8e:a3:4c:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a0d92eb4073f1f88993218bcd96d6c259ea673a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:18:d2:60:9c:5a:c7:42:43:bd:2a:69:b0:72: e8:8e:3f:1c:31:e7:da:e7:80:d2:7f:f5:43:a0:8e: 62:f2:eb:fb:c6:a1:cd:56:f3:58:aa:84:45:a7:b9: 5c:f8:cc:bc:95:1c:92:8c:e6:e7:e9:02:4e:2b:73: 51:f0:86:99:7a:57:85:db:13:38:f7:df:28:2a:03: ab:6e:8b:80:c8:c9:d2:85:ec:fc:f0:b3:25:65:36: 77:00:fb:37:e6:b5:38:ba:eb:af:6d:61:c9:b8:b3: bb:dd:e2:2f:6d:82:a1:ad:72:18:84:a1:33:3b:7b: a6:7f:06:cc:69:41:f6:eb:01:2f:68:de:f4:a9:04: 24:7d:97:f3:27:17:f9:68:b7:f6:43:a8:10:24:47: a2:4e:82:eb:11:63:2b:13:4a:7d:32:25:0c:bf:f6: af:bd:ea:b7:b2:70:77:d2:1d:d3:aa:36:ad:cf:b5: 5c:53:f6:1e:77:f9:8c:82:04:95:0a:e0:cf:e3:63: 50:37:17:29:a1:88:a1:d3:2e:3e:72:0d:eb:f2:d3: 6e:ce:b0:89:8d:bb:d4:c8:86:0f:46:48:10:19:ae: e4:2d:18:db:85:b4:3f:e8:9b:f7:dd:6b:18:5b:3c: 5b:be:ec:56:07:8e:6e:2f:ca:e5:7d:77:74:d3:46: 6d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:0D:92:EB:40:73:F1:F8:89:93:21:8B:CD:96:D6:C2:59:EA:67:3A X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Gg2S60Bz8fiJkyGLzZbWwlnqZzo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:330::/44 Signature Algorithm: sha256WithRSAEncryption b5:8f:91:4a:19:d1:25:d3:b9:c8:a1:5d:f8:0b:14:29:05:96: 78:e9:24:2c:1e:0f:f0:74:ff:c1:d4:0e:c7:36:0b:c6:07:08: d6:ff:1b:2e:37:20:e7:ba:2e:7b:f8:98:f0:58:8b:8b:87:2e: ab:68:31:25:8a:3f:c0:51:0e:88:60:07:e8:f9:05:ac:12:46: bf:75:dd:cc:e9:e9:59:b7:81:a7:46:b2:d1:18:ec:97:ec:93: 48:fb:74:ff:e3:38:57:af:2f:9b:8d:25:11:99:e5:83:4b:99: ba:bd:f3:aa:53:96:a2:bc:39:26:5d:65:c7:22:01:4a:3f:35: 21:ae:a0:97:dc:a0:3a:8a:6c:7b:ca:ef:05:c7:e7:cb:77:f9: 51:7d:b6:1a:25:e0:70:ba:52:93:18:68:f8:ab:07:1b:5d:e2: ff:99:72:98:9d:ba:6f:75:41:2e:ec:04:5a:e3:1d:aa:6b:de: 98:13:58:d1:81:0a:39:fc:a7:48:40:eb:88:39:7c:eb:19:bf: 1d:f4:40:e8:ed:a1:f7:3e:51:f1:60:c6:00:30:e4:ba:aa:f1: c2:bd:d6:a1:85:4d:db:a2:d6:3b:97:b9:0d:08:e1:bd:7c:2d: 72:a3:6c:ae:ef:f0:4b:cd:a3:8a:06:f0:ef:63:6e:f7:4e:f8: 4b:40:87:f9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EI24mhB9U93swRaOo0zoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTBkOTJlYjQwNzNmMWY4ODk5MzIxOGJjZDk2ZDZjMjU5ZWE2NzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRjSYJxax0JDvSppsHLojj8cMefa 54DSf/VDoI5i8uv7xqHNVvNYqoRFp7lc+My8lRySjObn6QJOK3NR8IaZeleF2xM4 998oKgOrbouAyMnShez88LMlZTZ3APs35rU4uuuvbWHJuLO73eIvbYKhrXIYhKEz O3umfwbMaUH26wEvaN70qQQkfZfzJxf5aLf2Q6gQJEeiToLrEWMrE0p9MiUMv/av veq3snB30h3Tqjatz7VcU/Yed/mMggSVCuDP42NQNxcpoYih0y4+cg3r8tNuzrCJ jbvUyIYPRkgQGa7kLRjbhbQ/6Jv33WsYWzxbvuxWB45uL8rlfXd000ZtnwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBoNkutAc/H4iZMhi82W1sJZ6mc6MB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvR2cyUzYwQno4ZmlKa3lHTHpaYld3bG5xWnpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAMw MA0GCSqGSIb3DQEBCwUAA4IBAQC1j5FKGdEl07nIoV34CxQpBZZ46SQsHg/wdP/B 1A7HNgvGBwjW/xsuNyDnui57+JjwWIuLhy6raDElij/AUQ6IYAfo+QWsEka/dd3M 6elZt4GnRrLRGOyX7JNI+3T/4zhXry+bjSURmeWDS5m6vfOqU5aivDkmXWXHIgFK PzUhrqCX3KA6imx7yu8Fx+fLd/lRfbYaJeBwulKTGGj4qwcbXeL/mXKYnbpvdUEu 7ARa4x2qa96YE1jRgQo5/KdIQOuIOXzrGb8d9EDo7aH3PlHxYMYAMOS6qvHCvdah hU3botY7l7kNCOG9fC1yo2yu7/BLzaOKBvDvY273TvhLQIf5 -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:00 2026 by rpki-client