This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/GnkphrOjuxTcnLnVByZAmcLPCW8.roa File: GnkphrOjuxTcnLnVByZAmcLPCW8.roa (raw, json) Hash identifier: JM+qW4wdjiqLdb+xSRmHLF9aUafcLcAwlui6gPABGZc= Subject key identifier: 1A:79:29:86:B3:A3:BB:14:DC:9C:B9:D5:07:26:40:99:C2:CF:09:6F Certificate issuer: /CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21 Certificate serial: 019B7A5A55DD7BAF80614A766F1138DA3B33 Authority key identifier: 17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/GnkphrOjuxTcnLnVByZAmcLPCW8.roa Signing time: Thu 01 Jan 2026 16:18:19 +0000 ROA not before: Thu 01 Jan 2026 16:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202044 IP address blocks: 2a13:af00::/30 maxlen: 30 2a13:af04::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:55:dd:7b:af:80:61:4a:76:6f:11:38:da:3b:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21 Validity Not Before: Jan 1 16:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a792986b3a3bb14dc9cb9d507264099c2cf096f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2e:2f:ae:2d:c6:ad:f0:51:a3:63:24:00:b7: 63:f5:b7:35:8c:26:2e:6f:24:f6:ef:a3:3b:be:58: f6:4a:29:b1:e7:67:81:65:be:ce:b5:ef:6a:3d:70: 41:45:52:b1:b6:4a:2f:65:2c:f9:f2:0f:b0:1a:fe: 83:25:53:17:17:87:4c:20:20:71:c8:c6:24:a4:55: 04:1e:89:b8:e2:25:5d:e5:71:84:ba:dd:1e:98:27: 73:b1:92:48:92:98:6a:39:6f:97:6f:fc:3b:cc:84: 49:7f:19:3e:dc:10:81:98:8f:c5:c5:21:b6:36:f4: 1c:4b:cc:ac:5b:e2:43:9e:68:c0:23:62:d7:ef:0b: 1d:a4:e9:a4:39:2b:21:4a:ed:0f:3c:27:5a:47:e9: 02:bc:f2:2d:12:67:d7:15:95:b0:dd:a2:b2:92:5c: 01:55:bd:82:08:1e:04:fd:d7:44:a9:70:8b:45:75: 2b:39:8e:36:78:63:5d:fb:9a:4a:d6:90:e1:cc:6b: e8:6b:ab:3f:a4:88:fb:03:1c:21:d8:87:c9:36:52: 82:70:d4:37:fb:f1:8e:58:84:6d:f8:ee:29:63:15: 4b:d1:67:49:db:96:f4:12:bc:11:26:8c:ec:8b:d8: d2:15:c3:18:d5:3d:ce:9a:35:0e:71:61:69:93:2a: cf:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:79:29:86:B3:A3:BB:14:DC:9C:B9:D5:07:26:40:99:C2:CF:09:6F X509v3 Authority Key Identifier: keyid:17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/GnkphrOjuxTcnLnVByZAmcLPCW8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:af00::/29 Signature Algorithm: sha256WithRSAEncryption 90:b9:4a:9d:a1:93:08:f3:1a:69:22:f1:ad:31:55:01:18:18: 28:85:e0:42:39:fc:0e:f7:df:c6:c4:6d:65:87:e0:15:d4:66: 03:a0:83:c1:8c:ac:dc:9a:1a:12:d5:bb:72:cc:24:0e:00:14: 48:cc:b4:fd:70:91:63:54:26:3e:56:15:3f:01:5e:af:2c:35: 98:4e:6b:25:c2:6b:f7:b0:31:56:d6:4e:09:4c:00:ea:72:61: 1e:2e:6c:2a:51:4a:32:2d:d6:6b:27:14:0b:ed:a2:ea:2a:65: 48:b8:3b:47:a0:86:5e:ee:ca:8b:ce:1b:4b:3c:8b:6b:0e:f2: 99:b6:d5:86:ff:80:40:a6:1b:c0:b9:46:a2:df:4c:ce:d2:7a: 1f:26:fc:ef:bb:ea:7d:a9:06:32:03:78:11:60:cf:e7:ec:80: c7:bd:72:c7:1a:b1:2e:13:32:d8:26:5d:38:0f:24:80:ee:01: c3:6a:cd:41:e4:b0:a7:56:64:6f:24:4e:f5:f7:86:32:0e:a7: 91:f4:da:9d:6b:de:5c:f7:2c:9d:a4:46:f9:31:d9:55:f0:04: e6:17:b9:8e:d3:43:6f:8a:ef:0a:d9:8d:01:7f:d8:7a:17:8d: 6a:4a:fb:1d:a1:5d:67:07:f2:3c:64:88:56:b9:0f:a4:e7:d2: 65:c1:0e:03 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6WlXde6+AYUp2bxE42jszMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YmJkNjAzNzRiYzIzZWQwN2QwMWMyNGU3Y2ZkOTE3OGI4 ZmVkMjEwHhcNMjYwMTAxMTYxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTc5Mjk4NmIzYTNiYjE0ZGM5Y2I5ZDUwNzI2NDA5OWMyY2YwOTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3C4vri3GrfBRo2MkALdj9bc1jCYu byT276M7vlj2Simx52eBZb7Ote9qPXBBRVKxtkovZSz58g+wGv6DJVMXF4dMICBx yMYkpFUEHom44iVd5XGEut0emCdzsZJIkphqOW+Xb/w7zIRJfxk+3BCBmI/FxSG2 NvQcS8ysW+JDnmjAI2LX7wsdpOmkOSshSu0PPCdaR+kCvPItEmfXFZWw3aKyklwB Vb2CCB4E/ddEqXCLRXUrOY42eGNd+5pK1pDhzGvoa6s/pIj7Axwh2IfJNlKCcNQ3 +/GOWIRt+O4pYxVL0WdJ25b0ErwRJozsi9jSFcMY1T3OmjUOcWFpkyrPgQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFBp5KYazo7sU3Jy51QcmQJnCzwlvMB8GA1UdIwQY MBaAFBe71gN0vCPtB9AcJOfP2ReLj+0hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjd2V0EzUzhJLTBIMEJ3azU4X1pGNHVQN1NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy81YjczZDctZjFmNS00ZThmLWE0YjYt Y2RmODk2ODM1NDBlLzEvR25rcGhyT2p1eFRjbkxuVkJ5WkFtY0xQQ1c4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy81YjczZDctZjFmNS00ZThmLWE0YjYtY2RmODk2ODM1NDBl LzEvRjd2V0EzUzhJLTBIMEJ3azU4X1pGNHVQN1NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhOvADAN BgkqhkiG9w0BAQsFAAOCAQEAkLlKnaGTCPMaaSLxrTFVARgYKIXgQjn8DvffxsRt ZYfgFdRmA6CDwYys3JoaEtW7cswkDgAUSMy0/XCRY1QmPlYVPwFeryw1mE5rJcJr 97AxVtZOCUwA6nJhHi5sKlFKMi3WaycUC+2i6iplSLg7R6CGXu7Ki84bSzyLaw7y mbbVhv+AQKYbwLlGot9MztJ6Hyb877vqfakGMgN4EWDP5+yAx71yxxqxLhMy2CZd OA8kgO4Bw2rNQeSwp1ZkbyRO9feGMg6nkfTanWveXPcsnaRG+THZVfAE5he5jtND b4rvCtmNAX/YeheNakr7HaFdZwfyPGSIVrkPpOfSZcEOAw== -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:32 2026 by rpki-client