This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/GA5NIaob_i0eg5R554MtD65rkDU.roa File: GA5NIaob_i0eg5R554MtD65rkDU.roa (raw, json) Hash identifier: bpwMu6JYsIFlQS/jF79o+wgM6JCrcfl8VddhfNU17mo= Subject key identifier: 18:0E:4D:21:AA:1B:FE:2D:1E:83:94:79:E7:83:2D:0F:AE:6B:90:35 Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 019B76EB87773B7BFEA0F998447862ED57CF Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/GA5NIaob_i0eg5R554MtD65rkDU.roa Signing time: Thu 01 Jan 2026 00:18:25 +0000 ROA not before: Thu 01 Jan 2026 00:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133752 IP address blocks: 2a11:840:46::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:87:77:3b:7b:fe:a0:f9:98:44:78:62:ed:57:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Jan 1 00:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=180e4d21aa1bfe2d1e839479e7832d0fae6b9035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:36:b9:5c:18:0f:ff:db:9e:1e:23:27:98:ea: da:fa:60:28:9b:9e:39:5d:4c:2d:0c:bd:57:5b:97: a2:7b:78:0a:2b:d4:c5:81:9d:9b:c9:ff:37:a1:bd: c7:c0:ae:70:93:58:4d:09:84:4a:09:8b:94:7d:c0: 35:f4:9d:a7:81:af:9c:e7:04:95:75:77:f0:53:72: 03:a6:49:79:4b:31:53:2f:aa:e6:5a:52:7c:fe:29: ae:d5:a4:87:96:83:12:67:fd:ee:e7:8c:96:6e:75: 4d:2a:f4:d0:4a:43:52:d5:99:77:48:aa:88:a3:a8: 81:f5:c2:77:d0:54:07:6a:27:05:bd:d3:9a:b5:1d: 6c:e7:6d:87:19:ae:a4:6f:50:d5:60:a2:68:04:09: 66:59:96:06:1f:9f:16:80:e2:d4:12:4b:ed:cb:2a: e9:cc:d5:38:3f:a2:e1:14:1c:21:0c:8d:7c:ac:80: 7f:db:cb:2f:33:20:a7:15:c2:c6:86:54:a2:6e:df: 32:40:cf:7a:ef:2d:dd:14:8d:04:97:1d:4e:0b:ee: 2a:86:6b:3e:9d:ff:d1:a6:4f:8e:d1:20:15:78:d2: 05:14:f5:fc:62:f9:73:c1:8a:e4:50:fe:ec:f0:9b: 6b:cd:64:54:c3:a2:f5:0e:8c:e1:00:d0:92:6c:f6: c4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:0E:4D:21:AA:1B:FE:2D:1E:83:94:79:E7:83:2D:0F:AE:6B:90:35 X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/GA5NIaob_i0eg5R554MtD65rkDU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:840:46::/48 Signature Algorithm: sha256WithRSAEncryption 24:43:81:df:1b:2a:85:04:6b:1d:8a:c3:c1:ae:dc:fa:bd:e8: 81:b9:17:1c:4c:55:45:ca:83:62:17:e1:d4:df:67:e2:51:7d: 80:2c:c1:49:a1:98:46:d4:4d:cd:64:94:9c:4b:9c:53:b4:27: 49:0a:06:61:3c:e7:ca:56:d8:a9:49:a7:6a:da:51:9b:3a:2e: 20:ff:ab:b1:26:2d:86:62:fa:e4:27:9e:8c:a7:44:0d:6b:67: 14:af:c5:91:76:72:94:d1:38:07:4e:08:84:b7:7d:6b:dc:25: cf:63:99:58:dd:f6:93:fe:35:31:5c:a2:42:a2:c8:20:f1:9f: f0:9b:56:c2:02:74:03:0a:e4:23:2f:e4:d6:d5:39:94:ec:b5: 95:8b:9e:ff:05:ba:3b:b8:bc:f2:c7:e6:93:1e:a5:bc:4b:c3: 0f:ba:aa:93:f2:09:0c:f9:79:33:86:21:6d:8a:85:2d:09:c9: 3d:eb:c9:c0:60:c0:34:ca:de:35:25:bb:e4:90:a7:50:97:52: 02:11:65:12:e8:4f:65:d3:d8:d7:70:d3:d6:a6:1c:d3:f1:ac: a9:3c:63:3d:1f:17:30:2b:88:ce:64:61:d4:61:1e:ad:95:98: 3f:0e:6a:6d:a2:ba:c2:2b:cb:ff:1d:97:9e:06:0d:7e:d5:2d: 12:dd:fa:46 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt264d3O3v+oPmYRHhi7VfPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjYwMTAxMDAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODBlNGQyMWFhMWJmZTJkMWU4Mzk0NzllNzgzMmQwZmFlNmI5MDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkja5XBgP/9ueHiMnmOra+mAom545 XUwtDL1XW5eie3gKK9TFgZ2byf83ob3HwK5wk1hNCYRKCYuUfcA19J2nga+c5wSV dXfwU3IDpkl5SzFTL6rmWlJ8/imu1aSHloMSZ/3u54yWbnVNKvTQSkNS1Zl3SKqI o6iB9cJ30FQHaicFvdOatR1s522HGa6kb1DVYKJoBAlmWZYGH58WgOLUEkvtyyrp zNU4P6LhFBwhDI18rIB/28svMyCnFcLGhlSibt8yQM967y3dFI0Elx1OC+4qhms+ nf/Rpk+O0SAVeNIFFPX8YvlzwYrkUP7s8JtrzWRUw6L1DozhANCSbPbE1QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBgOTSGqG/4tHoOUeeeDLQ+ua5A1MB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvR0E1Tklhb2JfaTBlZzVSNTU0TXRENjVya0RVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhEIQABG MA0GCSqGSIb3DQEBCwUAA4IBAQAkQ4HfGyqFBGsdisPBrtz6veiBuRccTFVFyoNi F+HU32fiUX2ALMFJoZhG1E3NZJScS5xTtCdJCgZhPOfKVtipSadq2lGbOi4g/6ux Ji2GYvrkJ56Mp0QNa2cUr8WRdnKU0TgHTgiEt31r3CXPY5lY3faT/jUxXKJCosgg 8Z/wm1bCAnQDCuQjL+TW1TmU7LWVi57/Bbo7uLzyx+aTHqW8S8MPuqqT8gkM+Xkz hiFtioUtCck968nAYMA0yt41JbvkkKdQl1ICEWUS6E9l09jXcNPWphzT8aypPGM9 HxcwK4jOZGHUYR6tlZg/DmptorrCK8v/HZeeBg1+1S0S3fpG -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:09 2026 by rpki-client