This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/GdXLtakb-VVZb4sIMxasJO3C9e0.roa File: GdXLtakb-VVZb4sIMxasJO3C9e0.roa (raw, json) Hash identifier: lYew3AcxBQCaUjqVtA2l1sMtRC1UlXtpZ4kuSqJbBQU= Subject key identifier: 19:D5:CB:B5:A9:1B:F9:55:59:6F:8B:08:33:16:AC:24:ED:C2:F5:ED Certificate issuer: /CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9 Certificate serial: 019B76EACD610F70C94CFB857F60C769B5F2 Authority key identifier: F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/GdXLtakb-VVZb4sIMxasJO3C9e0.roa Signing time: Thu 01 Jan 2026 00:17:37 +0000 ROA not before: Thu 01 Jan 2026 00:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197942 IP address blocks: 2001:678:70c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 19:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:cd:61:0f:70:c9:4c:fb:85:7f:60:c7:69:b5:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9 Validity Not Before: Jan 1 00:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19d5cbb5a91bf955596f8b083316ac24edc2f5ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b8:14:85:60:19:51:02:07:10:36:75:26:9c: 1b:2a:79:1a:db:16:28:30:87:25:5e:6c:ce:6f:1b: e6:5f:cf:e5:9e:d5:b4:c8:7f:2a:82:48:7f:47:64: 3a:1e:2f:05:ee:c0:8d:d8:c7:8f:5a:52:67:f9:bd: 80:21:bc:4e:99:72:39:a7:d3:a8:2a:6e:77:da:f3: f2:44:0e:5b:6c:87:97:4f:b6:84:95:f0:fc:d4:54: da:7e:24:c7:8e:a0:1d:e4:a2:5c:4f:ac:6c:05:e9: 80:02:72:ad:82:40:31:db:26:2e:64:12:21:4f:d5: 8a:1b:03:24:02:65:16:f4:01:96:89:79:50:96:f0: 20:a4:d9:fe:9a:e8:88:a0:2e:7e:57:1d:05:43:be: 17:04:c7:fa:a3:96:5f:2a:0d:71:40:0b:06:44:65: 5d:27:2a:a0:32:db:48:40:8e:4c:2e:53:6f:02:04: bf:56:47:59:46:a6:8d:ba:07:30:26:3b:fc:e4:7a: af:9c:57:4a:77:ea:91:3a:36:54:95:d1:3c:a0:29: 10:79:ad:5a:49:5f:06:57:59:b5:b9:ac:c8:6e:ee: 0c:2a:0d:36:5a:71:b1:80:2c:f0:ee:95:1d:49:0c: 16:8d:bc:b1:f6:d0:4b:09:eb:d4:b6:ab:64:f9:50: a6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D5:CB:B5:A9:1B:F9:55:59:6F:8B:08:33:16:AC:24:ED:C2:F5:ED X509v3 Authority Key Identifier: keyid:F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/GdXLtakb-VVZb4sIMxasJO3C9e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:70c::/48 Signature Algorithm: sha256WithRSAEncryption 13:3e:4f:f8:6e:af:1e:a1:a2:2b:3a:b6:56:7c:ce:fa:f6:33: a3:1b:9e:c6:e4:a5:77:46:76:50:e5:73:07:ce:bb:85:d0:a9: 16:f0:2c:e2:a8:4a:3a:44:84:9c:19:a0:e5:07:b7:bd:00:38: e5:46:56:62:8e:93:2d:f3:91:44:1c:f4:31:1b:32:61:aa:76: fa:4b:71:e7:ae:c4:a5:31:b2:71:b7:75:66:61:d6:c7:17:d4: f7:62:2e:4e:1e:0e:df:d7:69:f6:e3:ec:20:a3:70:83:3b:72: ba:46:24:63:11:76:61:b1:c4:3c:8b:c6:47:00:01:96:e4:2c: 35:77:42:d4:2e:ef:1e:e4:ee:7e:d6:1a:d1:27:11:45:b8:3d: 48:51:da:c2:4b:6a:b9:15:51:5c:be:bd:3b:b8:e7:83:b7:fc: f5:31:c8:78:e2:dc:d3:31:bb:e9:c7:2f:d7:d8:72:b0:c3:1a: 84:0a:be:ee:e9:a0:a7:aa:7e:b8:00:52:93:05:57:39:2a:d9: 10:57:8b:61:39:da:41:c7:90:5d:95:d5:25:14:8e:29:26:45: 3b:bd:ba:96:39:58:31:7f:81:5e:ac:69:ae:90:78:96:9d:d7: 71:cf:17:b9:53:9f:8c:34:77:24:0d:4f:5c:1a:52:31:d2:61: de:fd:c7:25 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt26s1hD3DJTPuFf2DHabXyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1OWFkYjAyMDhhMmQyYTcxOGQzMDY0YjQ2MTNmZGM0MzIw ZDI4ZjkwHhcNMjYwMTAxMDAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWQ1Y2JiNWE5MWJmOTU1NTk2ZjhiMDgzMzE2YWMyNGVkYzJmNWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLgUhWAZUQIHEDZ1JpwbKnka2xYo MIclXmzObxvmX8/lntW0yH8qgkh/R2Q6Hi8F7sCN2MePWlJn+b2AIbxOmXI5p9Oo Km532vPyRA5bbIeXT7aElfD81FTafiTHjqAd5KJcT6xsBemAAnKtgkAx2yYuZBIh T9WKGwMkAmUW9AGWiXlQlvAgpNn+muiIoC5+Vx0FQ74XBMf6o5ZfKg1xQAsGRGVd JyqgMttIQI5MLlNvAgS/VkdZRqaNugcwJjv85HqvnFdKd+qROjZUldE8oCkQea1a SV8GV1m1uazIbu4MKg02WnGxgCzw7pUdSQwWjbyx9tBLCevUtqtk+VCmwQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBnVy7WpG/lVWW+LCDMWrCTtwvXtMB8GA1UdIwQY MBaAFPWa2wIIotKnGNMGS0YT/cQyDSj5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVpyYkFnaWkwcWNZMHdaTFJoUDl4RElOS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jMGZlZjktYWZmZi00OWRlLTgwOGEt ZTQ0NzhjNTUzMDhhLzEvR2RYTHRha2ItVlZaYjRzSU14YXNKTzNDOWUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9jMGZlZjktYWZmZi00OWRlLTgwOGEtZTQ0NzhjNTUzMDhh LzEvOVpyYkFnaWkwcWNZMHdaTFJoUDl4RElOS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAcM MA0GCSqGSIb3DQEBCwUAA4IBAQATPk/4bq8eoaIrOrZWfM769jOjG57G5KV3RnZQ 5XMHzruF0KkW8CziqEo6RIScGaDlB7e9ADjlRlZijpMt85FEHPQxGzJhqnb6S3Hn rsSlMbJxt3VmYdbHF9T3Yi5OHg7f12n24+wgo3CDO3K6RiRjEXZhscQ8i8ZHAAGW 5Cw1d0LULu8e5O5+1hrRJxFFuD1IUdrCS2q5FVFcvr07uOeDt/z1Mch44tzTMbvp xy/X2HKwwxqECr7u6aCnqn64AFKTBVc5KtkQV4thOdpBx5BdldUlFI4pJkU7vbqW OVgxf4FerGmukHiWnddxzxe5U5+MNHckDU9cGlIx0mHe/ccl -----END CERTIFICATE-----Generated at Mon Feb 2 07:53:50 2026 by rpki-client