This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/cGga_UlFTCbnwXV3quwRzrwroFw.roa File: cGga_UlFTCbnwXV3quwRzrwroFw.roa (raw, json) Hash identifier: hzugl55vuGsk+ki+kfROWDQ8A3uux3/9x0uGvNuMBCM= Subject key identifier: 70:68:1A:FD:49:45:4C:26:E7:C1:75:77:AA:EC:11:CE:BC:2B:A0:5C Certificate issuer: /CN=66dfc89c07ae1331bfb37138568ea79a87fecf3b Certificate serial: 019B78A2331D6A37B39B0CC1D522B38EA904 Authority key identifier: 66:DF:C8:9C:07:AE:13:31:BF:B3:71:38:56:8E:A7:9A:87:FE:CF:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt_InAeuEzG_s3E4Vo6nmof-zzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/cGga_UlFTCbnwXV3quwRzrwroFw.roa Signing time: Thu 01 Jan 2026 08:17:34 +0000 ROA not before: Thu 01 Jan 2026 08:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48662 IP address blocks: 2a0a:4a00::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.mft rsync://rpki.ripe.net/repository/DEFAULT/Zt_InAeuEzG_s3E4Vo6nmof-zzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 11:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:33:1d:6a:37:b3:9b:0c:c1:d5:22:b3:8e:a9:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dfc89c07ae1331bfb37138568ea79a87fecf3b Validity Not Before: Jan 1 08:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70681afd49454c26e7c17577aaec11cebc2ba05c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fe:58:c0:48:e0:07:bd:39:91:87:58:97:c5: 53:0f:30:ae:c8:bf:61:a6:9c:7a:fa:26:8c:01:d1: 76:9f:36:e2:73:92:ca:fe:f7:86:f5:48:84:e3:d2: fe:45:c1:12:a5:38:c9:99:a3:98:ff:c8:31:13:92: d7:82:a5:23:f9:45:f6:fa:5d:51:fc:48:c1:01:be: 8e:50:6e:75:51:8f:26:2f:9b:57:8a:fa:19:4f:8e: 38:39:02:26:b6:fc:be:d6:a9:64:36:0a:13:1f:94: c2:a7:81:c5:cf:67:27:9d:00:72:f7:20:c2:02:0a: 23:33:bd:c4:93:56:c4:74:39:42:7a:d4:dd:13:1f: 65:6e:fe:0c:d8:d8:a2:fd:d1:41:cc:62:bc:4e:91: e5:5b:17:2c:34:33:fe:62:e1:d9:bf:b1:5f:86:88: 53:b1:44:12:ec:c4:dd:25:69:72:3d:72:ca:5e:84: a4:b6:6a:7e:13:2a:5a:1f:ae:47:a3:4d:e1:46:ad: 62:c9:46:7f:84:10:d0:58:59:ff:2d:78:e2:dc:2a: fc:70:16:dd:ba:7f:7f:5b:5c:40:b7:8d:6e:d2:10: 85:5c:37:d5:03:bf:cf:91:18:26:77:ce:a5:6b:b7: 10:af:02:ac:55:0f:b5:00:ba:be:eb:75:72:f6:b7: 22:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:68:1A:FD:49:45:4C:26:E7:C1:75:77:AA:EC:11:CE:BC:2B:A0:5C X509v3 Authority Key Identifier: keyid:66:DF:C8:9C:07:AE:13:31:BF:B3:71:38:56:8E:A7:9A:87:FE:CF:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt_InAeuEzG_s3E4Vo6nmof-zzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/cGga_UlFTCbnwXV3quwRzrwroFw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:4a00::/29 Signature Algorithm: sha256WithRSAEncryption c0:f9:56:09:c8:47:17:36:93:f0:f6:58:4e:49:f3:7e:45:33: 67:29:fc:64:60:18:81:2b:91:17:ca:e5:d0:a2:d0:ac:07:4c: c6:60:f4:93:0a:01:62:88:e1:e4:b0:f3:22:6d:3d:59:35:d2: ba:a6:82:05:c2:61:f7:4e:c7:88:2e:ea:d4:74:5b:e6:79:8f: 19:e3:a2:19:c3:23:1c:d3:be:51:b5:aa:c2:16:6c:1f:d6:36: 33:ca:a0:ae:c4:9d:ba:10:cb:6c:97:38:06:77:50:28:8e:d9: d9:81:a0:ea:08:54:15:6f:9d:19:f9:5d:cb:89:3d:ff:dc:98: 9c:c3:6c:69:48:b8:7c:45:f9:4b:70:0c:ed:10:2f:ff:b7:8a: 1a:11:ac:19:09:77:7b:15:bf:8d:fa:78:18:45:63:19:db:49: 04:0e:0a:fd:50:4f:ac:c5:65:e6:2d:72:dd:7a:46:53:ba:d6: 4f:ff:e0:fa:90:50:62:fc:4d:e6:57:c4:61:77:d2:c0:b6:fc: 51:4b:46:eb:01:98:76:87:41:32:10:6e:f3:49:c5:f3:72:5e: 04:3e:b1:4e:83:f0:f3:c5:68:72:a0:bb:94:09:0f:97:1d:0e: 73:19:6f:5a:9e:09:06:65:33:4f:6c:41:a7:b1:5d:24:8c:04: 86:a0:6b:3d -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4ojMdajezmwzB1SKzjqkEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZGZjODljMDdhZTEzMzFiZmIzNzEzODU2OGVhNzlhODdm ZWNmM2IwHhcNMjYwMTAxMDgxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDY4MWFmZDQ5NDU0YzI2ZTdjMTc1NzdhYWVjMTFjZWJjMmJhMDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/5YwEjgB705kYdYl8VTDzCuyL9h ppx6+iaMAdF2nzbic5LK/veG9UiE49L+RcESpTjJmaOY/8gxE5LXgqUj+UX2+l1R /EjBAb6OUG51UY8mL5tXivoZT444OQImtvy+1qlkNgoTH5TCp4HFz2cnnQBy9yDC AgojM73Ek1bEdDlCetTdEx9lbv4M2Nii/dFBzGK8TpHlWxcsNDP+YuHZv7FfhohT sUQS7MTdJWlyPXLKXoSktmp+EypaH65Ho03hRq1iyUZ/hBDQWFn/LXji3Cr8cBbd un9/W1xAt41u0hCFXDfVA7/PkRgmd86la7cQrwKsVQ+1ALq+63Vy9rciHwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFHBoGv1JRUwm58F1d6rsEc68K6BcMB8GA1UdIwQY MBaAFGbfyJwHrhMxv7NxOFaOp5qH/s87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRfSW5BZXVFekdfczNFNFZvNm5tb2YtenpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wMzVkZTYtZWE1Zi00MGE2LWE2NzMt MTljOTI5OGZmNWQ1LzEvY0dnYV9VbEZUQ2Jud1hWM3F1d1J6cndyb0Z3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8wMzVkZTYtZWE1Zi00MGE2LWE2NzMtMTljOTI5OGZmNWQ1 LzEvWnRfSW5BZXVFekdfczNFNFZvNm5tb2YtenpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgpKADAN BgkqhkiG9w0BAQsFAAOCAQEAwPlWCchHFzaT8PZYTknzfkUzZyn8ZGAYgSuRF8rl 0KLQrAdMxmD0kwoBYojh5LDzIm09WTXSuqaCBcJh907HiC7q1HRb5nmPGeOiGcMj HNO+UbWqwhZsH9Y2M8qgrsSduhDLbJc4BndQKI7Z2YGg6ghUFW+dGfldy4k9/9yY nMNsaUi4fEX5S3AM7RAv/7eKGhGsGQl3exW/jfp4GEVjGdtJBA4K/VBPrMVl5i1y 3XpGU7rWT//g+pBQYvxN5lfEYXfSwLb8UUtG6wGYdodBMhBu80nF83JeBD6xToPw 88VocqC7lAkPlx0OcxlvWp4JBmUzT2xBp7FdJIwEhqBrPQ== -----END CERTIFICATE-----Generated at Mon Jan 26 19:34:15 2026 by rpki-client