This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/GbafPr-nz6jETA4H3wKy_jppcV4.roa File: GbafPr-nz6jETA4H3wKy_jppcV4.roa (raw, json) Hash identifier: GL7nF8v33Tb4evsXGeNMyUBxyv4eJPoUXT5+dY5suko= Subject key identifier: 19:B6:9F:3E:BF:A7:CF:A8:C4:4C:0E:07:DF:02:B2:FE:3A:69:71:5E Certificate issuer: /CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324 Certificate serial: 019B7C80AB147F189D9AD8AB270E98CAD1B9 Authority key identifier: 6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/GbafPr-nz6jETA4H3wKy_jppcV4.roa Signing time: Fri 02 Jan 2026 02:19:25 +0000 ROA not before: Fri 02 Jan 2026 02:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212543 IP address blocks: 192.38.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:ab:14:7f:18:9d:9a:d8:ab:27:0e:98:ca:d1:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324 Validity Not Before: Jan 2 02:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19b69f3ebfa7cfa8c44c0e07df02b2fe3a69715e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ec:59:d7:ce:43:1d:36:35:20:a5:e3:c8:51: aa:ff:32:e0:f4:99:61:bf:3d:59:de:6b:4f:ad:74: 6d:03:cf:eb:b7:5f:d8:4b:f1:a4:05:47:de:66:b3: 71:1a:11:99:48:67:cc:55:f1:0d:fa:e0:1e:04:a9: 51:7c:96:82:91:df:eb:50:b7:51:c5:bb:6b:25:18: 87:8d:80:d0:df:68:40:a8:75:5d:d1:cb:91:b0:14: 6e:e2:f2:6e:5c:75:3e:bf:ba:1a:80:73:3b:d6:8c: 86:80:4b:73:ec:d2:9b:88:1d:a9:06:fb:9e:8a:e7: 77:3e:cb:b0:74:88:d9:ec:df:3b:cd:79:d5:b3:ba: bd:de:8f:5a:24:60:ba:cf:0d:80:0f:91:a7:1d:16: 0b:97:60:07:f5:90:69:2b:23:a2:24:c4:d4:28:04: e8:a2:44:31:a3:6a:6a:b1:be:d3:35:23:93:af:dc: 7a:98:d7:af:72:1d:91:c8:f6:ca:54:82:e0:f8:24: be:b5:82:21:71:8e:fd:6f:40:d2:3c:bb:56:67:4c: aa:d5:11:82:d2:52:93:c5:c1:7f:7a:5d:ad:8d:1d: 57:90:da:3e:dc:56:63:c2:ea:00:f2:82:18:ca:4d: f9:f9:1c:ff:13:4b:5a:11:d9:03:af:96:3e:6f:17: 1c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B6:9F:3E:BF:A7:CF:A8:C4:4C:0E:07:DF:02:B2:FE:3A:69:71:5E X509v3 Authority Key Identifier: keyid:6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/GbafPr-nz6jETA4H3wKy_jppcV4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.38.0.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:96:e3:44:5c:f0:40:b9:9d:32:d1:09:d8:72:f3:d8:3b:a0: 1a:45:d5:3a:59:3f:14:1b:a7:88:92:5c:83:d1:1c:19:5a:63: de:81:38:76:e5:b8:f9:65:07:26:cd:8e:69:8a:07:30:fe:93: b7:53:35:76:2e:6c:2c:61:2f:8b:89:48:6a:79:61:c7:9b:e0: b6:37:1e:db:03:f4:63:00:8d:2b:02:cd:99:85:55:39:4d:82: 3e:7e:ab:0f:a0:40:19:3d:4a:69:42:cc:1b:29:e8:64:37:fe: e4:09:2d:f2:74:59:f1:24:22:96:9f:11:ea:f8:de:91:ed:01: af:6b:56:14:92:53:ba:34:b8:b0:7d:d7:16:28:76:93:b4:f9: d2:a1:3d:e9:bf:ff:ce:30:8d:7d:1a:b7:08:55:b5:f2:38:9e: ca:12:d6:ea:b5:55:b6:55:b6:20:1c:6a:62:3c:05:1d:17:67: df:82:01:4c:ae:69:15:17:97:0d:a5:1b:52:46:68:40:0f:d7: 54:6d:95:53:39:00:d0:47:bb:b8:23:e3:60:ba:48:ba:53:2a: 97:de:da:f5:44:c3:ef:d2:4a:48:81:b2:33:13:ac:cf:1a:dc: 07:ac:f3:71:83:f9:57:ae:f1:e8:87:f1:0e:3f:c0:1b:a3:16: 8b:68:fe:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gKsUfxidmtirJw6YytG5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGQ4ZjFlMzhjOTFmNWIxN2MzZDFhNzIzNGU0OWM5Yzcw ZGMzMjQwHhcNMjYwMTAyMDIxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWI2OWYzZWJmYTdjZmE4YzQ0YzBlMDdkZjAyYjJmZTNhNjk3MTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuxZ185DHTY1IKXjyFGq/zLg9Jlh vz1Z3mtPrXRtA8/rt1/YS/GkBUfeZrNxGhGZSGfMVfEN+uAeBKlRfJaCkd/rULdR xbtrJRiHjYDQ32hAqHVd0cuRsBRu4vJuXHU+v7oagHM71oyGgEtz7NKbiB2pBvue iud3PsuwdIjZ7N87zXnVs7q93o9aJGC6zw2AD5GnHRYLl2AH9ZBpKyOiJMTUKATo okQxo2pqsb7TNSOTr9x6mNevch2RyPbKVILg+CS+tYIhcY79b0DSPLtWZ0yq1RGC 0lKTxcF/el2tjR1XkNo+3FZjwuoA8oIYyk35+Rz/E0taEdkDr5Y+bxccuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBm2nz6/p8+oxEwOB98Csv46aXFeMB8GA1UdIwQY MBaAFG3djx44yR9bF8PRpyNOScnHDcMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmQyUEhqakpIMXNYdzlHbkkwNUp5Y2NOd3lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zMTZjOGYtNWUzNi00NzFmLTk1NTUt ZjYyOTdhNzdhMzdiLzEvR2JhZlByLW56NmpFVEE0SDN3S3lfanBwY1Y0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8zMTZjOGYtNWUzNi00NzFmLTk1NTUtZjYyOTdhNzdhMzdi LzEvYmQyUEhqakpIMXNYdzlHbkkwNUp5Y2NOd3lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwCYAMA0G CSqGSIb3DQEBCwUAA4IBAQAqluNEXPBAuZ0y0QnYcvPYO6AaRdU6WT8UG6eIklyD 0RwZWmPegTh25bj5ZQcmzY5pigcw/pO3UzV2LmwsYS+LiUhqeWHHm+C2Nx7bA/Rj AI0rAs2ZhVU5TYI+fqsPoEAZPUppQswbKehkN/7kCS3ydFnxJCKWnxHq+N6R7QGv a1YUklO6NLiwfdcWKHaTtPnSoT3pv//OMI19GrcIVbXyOJ7KEtbqtVW2VbYgHGpi PAUdF2ffggFMrmkVF5cNpRtSRmhAD9dUbZVTOQDQR7u4I+Nguki6UyqX3tr1RMPv 0kpIgbIzE6zPGtwHrPNxg/lXrvHoh/EOP8AboxaLaP7W -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:06 2026 by rpki-client