This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/GxGTOBMeu2N1blMJyGtOJ7pqxXk.roa File: GxGTOBMeu2N1blMJyGtOJ7pqxXk.roa (raw, json) Hash identifier: zCml5uGaaanR/bHz+EfmHiD1+eZh00uY8Hx7W5hVHSg= Subject key identifier: 1B:11:93:38:13:1E:BB:63:75:6E:53:09:C8:6B:4E:27:BA:6A:C5:79 Certificate issuer: /CN=205945443c5b25e4dcf6203f061ac04d36871554 Certificate serial: 019B797ED60DD2854EEF25D25DFEC3A9F8E4 Authority key identifier: 20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/GxGTOBMeu2N1blMJyGtOJ7pqxXk.roa Signing time: Thu 01 Jan 2026 12:18:34 +0000 ROA not before: Thu 01 Jan 2026 12:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204082 IP address blocks: 2001:67c:2f88::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d6:0d:d2:85:4e:ef:25:d2:5d:fe:c3:a9:f8:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=205945443c5b25e4dcf6203f061ac04d36871554 Validity Not Before: Jan 1 12:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b119338131ebb63756e5309c86b4e27ba6ac579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ff:2d:d6:e5:87:4a:91:cd:91:20:da:c8:c1: d6:92:81:44:07:7d:07:c5:fb:83:93:fd:98:18:7b: 8b:a1:43:06:bc:d8:f1:a1:97:c3:bd:a3:e7:36:5f: 1c:34:6e:96:3e:6f:28:71:6a:29:06:63:04:72:04: 4e:87:20:6b:ab:88:3d:7e:c6:31:e7:99:33:d7:52: 6e:63:13:31:1a:49:91:a4:e9:07:a1:7f:0d:c5:34: 35:f1:09:c0:31:ed:ee:14:73:a8:8f:56:7c:9d:0f: 33:6c:d1:98:77:16:a4:85:26:5b:7b:6f:0c:2e:94: 1c:3d:c9:cb:e9:04:c8:c9:1f:e4:84:55:6f:5c:c0: e6:7e:3b:73:fd:78:74:27:fb:46:55:33:30:d5:70: f1:9b:08:1a:87:a4:de:38:ca:91:c5:d5:9a:2d:7d: 16:be:61:a1:d1:5b:63:94:8b:ee:35:48:32:dd:f2: cd:dc:e6:9d:60:90:40:18:b4:d9:e6:a5:c1:a0:0d: fa:2f:81:bc:40:88:a1:1d:00:e4:d1:75:52:b8:d9: 9e:4c:94:02:ed:56:b3:19:f5:a8:da:d3:b9:0a:64: 17:ac:62:49:11:26:0b:4b:86:89:fa:24:d1:00:36: 8a:c4:99:2d:63:db:cb:e5:db:38:40:ab:4d:34:d5: 03:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:11:93:38:13:1E:BB:63:75:6E:53:09:C8:6B:4E:27:BA:6A:C5:79 X509v3 Authority Key Identifier: keyid:20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/GxGTOBMeu2N1blMJyGtOJ7pqxXk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2f88::/48 Signature Algorithm: sha256WithRSAEncryption 15:46:fc:fc:2f:4c:e6:f6:aa:0b:de:9b:f1:49:bb:77:ca:ce: 58:9f:5a:61:07:e2:be:46:9b:d4:f6:f1:a8:84:bb:78:48:97: bc:f3:ef:c1:ee:5a:32:6f:72:23:72:3e:36:31:a2:28:f2:c1: 09:f9:bd:fd:0c:67:2c:95:d4:61:2e:a8:66:a7:1c:d6:4f:c1: 5c:70:38:60:06:1d:1c:c3:d6:98:4b:4c:50:97:e5:41:3d:6d: 0e:ff:ec:59:1d:11:57:41:f2:f5:cc:09:e2:e9:c5:73:d7:4a: 5d:19:41:e4:b0:14:e4:67:2c:a1:dd:79:4a:b3:7c:58:71:00: c3:56:05:d1:37:12:8e:b7:19:50:95:51:36:73:02:be:1c:f0: 7e:3a:17:19:4a:18:79:5c:3b:4f:72:36:7b:f5:0f:94:a2:7b: 31:9d:02:78:84:32:85:aa:f0:da:67:c6:10:7e:9a:8a:65:4e: c3:c6:62:59:1d:d4:73:38:c1:dc:ad:58:eb:35:3d:1d:a9:6e: 46:53:06:f1:cb:c8:21:59:83:66:66:9b:2e:4f:41:02:d4:d8: ca:ad:d4:9c:c2:ac:de:4e:e0:48:e0:0b:0b:a0:fe:9f:1b:4b: 43:d6:dd:de:65:aa:0b:32:64:0e:a3:c9:fb:b6:2b:04:ed:7e: 0b:f5:91:ce -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5ftYN0oVO7yXSXf7DqfjkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNTk0NTQ0M2M1YjI1ZTRkY2Y2MjAzZjA2MWFjMDRkMzY4 NzE1NTQwHhcNMjYwMTAxMTIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjExOTMzODEzMWViYjYzNzU2ZTUzMDljODZiNGUyN2JhNmFjNTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyv8t1uWHSpHNkSDayMHWkoFEB30H xfuDk/2YGHuLoUMGvNjxoZfDvaPnNl8cNG6WPm8ocWopBmMEcgROhyBrq4g9fsYx 55kz11JuYxMxGkmRpOkHoX8NxTQ18QnAMe3uFHOoj1Z8nQ8zbNGYdxakhSZbe28M LpQcPcnL6QTIyR/khFVvXMDmfjtz/Xh0J/tGVTMw1XDxmwgah6TeOMqRxdWaLX0W vmGh0VtjlIvuNUgy3fLN3OadYJBAGLTZ5qXBoA36L4G8QIihHQDk0XVSuNmeTJQC 7VazGfWo2tO5CmQXrGJJESYLS4aJ+iTRADaKxJktY9vL5ds4QKtNNNUDSQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBsRkzgTHrtjdW5TCchrTie6asV5MB8GA1UdIwQY MBaAFCBZRUQ8WyXk3PYgPwYawE02hxVUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUZsRlJEeGJKZVRjOWlBX0JockFUVGFIRlZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85NDUzMDUtMGE2My00YzJmLWFhZmYt Y2IyMjBiNzE5ZTc4LzEvR3hHVE9CTWV1Mk4xYmxNSnlHdE9KN3BxeFhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85NDUzMDUtMGE2My00YzJmLWFhZmYtY2IyMjBiNzE5ZTc4 LzEvSUZsRlJEeGJKZVRjOWlBX0JockFUVGFIRlZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC+I MA0GCSqGSIb3DQEBCwUAA4IBAQAVRvz8L0zm9qoL3pvxSbt3ys5Yn1phB+K+RpvU 9vGohLt4SJe88+/B7loyb3Ijcj42MaIo8sEJ+b39DGcsldRhLqhmpxzWT8FccDhg Bh0cw9aYS0xQl+VBPW0O/+xZHRFXQfL1zAni6cVz10pdGUHksBTkZyyh3XlKs3xY cQDDVgXRNxKOtxlQlVE2cwK+HPB+OhcZShh5XDtPcjZ79Q+UonsxnQJ4hDKFqvDa Z8YQfpqKZU7DxmJZHdRzOMHcrVjrNT0dqW5GUwbxy8ghWYNmZpsuT0EC1NjKrdSc wqzeTuBI4AsLoP6fG0tD1t3eZaoLMmQOo8n7tisE7X4L9ZHO -----END CERTIFICATE-----Generated at Mon Feb 9 23:51:37 2026 by rpki-client