This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/GjZ1JpvrKQS1iLcDNvLVb2T5EBI.roa File: GjZ1JpvrKQS1iLcDNvLVb2T5EBI.roa (raw, json) Hash identifier: d0OoK7akyC1bmNgU+wnwXuN9qnkRWPDQso9AjYii7HI= Subject key identifier: 1A:36:75:26:9B:EB:29:04:B5:88:B7:03:36:F2:D5:6F:64:F9:10:12 Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071 Certificate serial: 019B7E389671BE09D38CE71DA18B3BEE599A Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/GjZ1JpvrKQS1iLcDNvLVb2T5EBI.roa Signing time: Fri 02 Jan 2026 10:19:56 +0000 ROA not before: Fri 02 Jan 2026 10:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 2a04:9a04::/32 maxlen: 48 2a07:3506:4c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:96:71:be:09:d3:8c:e7:1d:a1:8b:3b:ee:59:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071 Validity Not Before: Jan 2 10:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a3675269beb2904b588b70336f2d56f64f91012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:99:d6:91:1c:38:53:54:80:88:1e:3e:4b:8a: f6:c0:a7:99:d2:d3:f2:32:83:3e:ac:dc:83:5a:e8: f8:42:10:d0:94:5b:30:21:bc:eb:23:6a:ad:eb:f9: 95:84:30:0d:ea:63:45:8b:10:2a:12:ee:d5:1d:6f: 9c:27:f1:08:12:17:b7:e7:1c:d2:ef:b4:03:ab:b6: e6:3f:d0:42:01:97:5e:9a:44:f6:de:df:cc:ed:72: af:e7:f9:85:6d:1d:cb:02:f7:fe:26:b1:a0:53:92: fd:2e:7a:0f:5c:95:0f:72:f8:42:cc:83:49:e1:31: 7c:54:fd:8a:da:21:56:2c:6a:cc:63:fa:60:4c:93: 80:4b:01:f8:29:2b:d9:51:6e:d9:d9:d6:06:8e:78: 40:ec:d2:64:e3:bf:f8:67:b3:c1:41:43:43:48:b4: e8:96:d4:a3:4e:ae:39:e4:b7:81:a4:a1:32:e1:36: 85:01:53:7d:4f:c1:22:c4:f4:48:4f:86:d9:ec:b3: 55:34:ed:a8:2e:31:bd:be:f6:c7:76:b2:fa:9a:da: 2f:eb:39:96:85:de:3b:88:6d:f7:2b:b1:1c:de:00: bf:d4:0b:ed:10:45:04:74:e2:e4:9f:5b:5d:39:ae: 5d:9e:5a:cb:b3:4d:51:46:bd:ec:2e:ab:5f:78:5f: 87:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:36:75:26:9B:EB:29:04:B5:88:B7:03:36:F2:D5:6F:64:F9:10:12 X509v3 Authority Key Identifier: keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/GjZ1JpvrKQS1iLcDNvLVb2T5EBI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:9a04::/32 2a07:3506:4c::/48 Signature Algorithm: sha256WithRSAEncryption 62:02:ad:5b:86:03:5e:78:7a:4a:27:af:06:b5:0c:9b:b9:57: 9c:7a:12:27:81:bd:48:c4:44:db:8f:9b:52:6d:69:a7:c9:b6: d5:b0:24:9c:07:81:7a:6f:ac:b7:f1:e8:1e:71:22:fd:68:70: 0f:6b:27:81:ad:61:92:fb:33:8b:bf:a8:95:28:be:4d:8b:41: 64:32:a5:da:ba:e0:ed:80:46:26:1e:a3:6f:31:5e:4e:c9:33: 2f:76:64:04:d5:65:4b:a5:2b:00:34:31:b1:a1:07:61:23:c4: 85:c5:1c:a3:75:16:62:ab:4d:fe:02:6f:93:75:48:96:61:40: 9f:bd:de:38:35:33:04:0f:8e:ed:86:46:2b:8d:e3:a9:89:67: 8c:1f:d8:4c:8b:40:ca:69:d4:5e:02:fc:5d:47:2e:0c:02:6e: 0a:12:bd:8b:5b:e8:ed:1a:b6:e5:0e:3d:3a:35:b7:01:ee:d3: 98:1a:17:40:d7:0e:31:04:c8:68:6c:68:d3:8f:3d:1b:4d:56: 92:aa:20:d8:bc:9f:e0:5f:d5:5b:a9:6c:4c:5a:6b:54:b9:7b: 70:98:1d:8f:3c:0b:ac:b4:02:6b:86:eb:4b:43:01:8e:75:7d: c2:c7:0f:a7:30:70:93:6e:15:c7:77:b1:65:77:5b:0f:50:c3: 84:85:c9:e7 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt+OJZxvgnTjOcdoYs77lmaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl MTQwNzEwHhcNMjYwMTAyMTAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTM2NzUyNjliZWIyOTA0YjU4OGI3MDMzNmYyZDU2ZjY0ZjkxMDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpnWkRw4U1SAiB4+S4r2wKeZ0tPy MoM+rNyDWuj4QhDQlFswIbzrI2qt6/mVhDAN6mNFixAqEu7VHW+cJ/EIEhe35xzS 77QDq7bmP9BCAZdemkT23t/M7XKv5/mFbR3LAvf+JrGgU5L9LnoPXJUPcvhCzINJ 4TF8VP2K2iFWLGrMY/pgTJOASwH4KSvZUW7Z2dYGjnhA7NJk47/4Z7PBQUNDSLTo ltSjTq455LeBpKEy4TaFAVN9T8EixPRIT4bZ7LNVNO2oLjG9vvbHdrL6mtov6zmW hd47iG33K7Ec3gC/1AvtEEUEdOLkn1tdOa5dnlrLs01RRr3sLqtfeF+HFwIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFBo2dSab6ykEtYi3Azby1W9k+RASMB8GA1UdIwQY MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt YWQ1NzU1MjJiMzY1LzEvR2paMUpwdnJLUVMxaUxjRE52TFZiMlQ1RUJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1 LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwUAKgSaBAMH ACoHNQYATDANBgkqhkiG9w0BAQsFAAOCAQEAYgKtW4YDXnh6SievBrUMm7lXnHoS J4G9SMRE24+bUm1pp8m21bAknAeBem+st/HoHnEi/WhwD2snga1hkvszi7+olSi+ TYtBZDKl2rrg7YBGJh6jbzFeTskzL3ZkBNVlS6UrADQxsaEHYSPEhcUco3UWYqtN /gJvk3VIlmFAn73eODUzBA+O7YZGK43jqYlnjB/YTItAymnUXgL8XUcuDAJuChK9 i1vo7Rq25Q49OjW3Ae7TmBoXQNcOMQTIaGxo0489G01Wkqog2Lyf4F/VW6lsTFpr VLl7cJgdjzwLrLQCa4brS0MBjnV9wscPpzBwk24Vx3exZXdbD1DDhIXJ5w== -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:23 2026 by rpki-client