This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/GgM8OW03SnTWQN6a4-JcJuboxRQ.roa File: GgM8OW03SnTWQN6a4-JcJuboxRQ.roa (raw, json) Hash identifier: PcNLLvc5YaEzAxnanxM9AExzd2bC6OppQmgQXDF3KdM= Subject key identifier: 1A:03:3C:39:6D:37:4A:74:D6:40:DE:9A:E3:E2:5C:26:E6:E8:C5:14 Certificate issuer: /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473 Certificate serial: 019B78A29AC0E0A57D85537C3AE95B3CBDC8 Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/GgM8OW03SnTWQN6a4-JcJuboxRQ.roa Signing time: Thu 01 Jan 2026 08:18:00 +0000 ROA not before: Thu 01 Jan 2026 08:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5486 IP address blocks: 81.5.0.0/21 maxlen: 21 81.5.16.0/21 maxlen: 21 2001:40a8:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 08:19:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:9a:c0:e0:a5:7d:85:53:7c:3a:e9:5b:3c:bd:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473 Validity Not Before: Jan 1 08:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a033c396d374a74d640de9ae3e25c26e6e8c514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:da:f9:f5:c8:f3:fc:57:42:7b:b3:b0:7a:14: ce:31:cc:f2:3c:8f:6e:03:1b:a6:3b:59:09:4a:6f: f8:ea:90:33:ed:21:39:27:e7:51:93:ca:ad:b1:26: 68:42:c2:f1:de:19:6c:30:c8:ae:f2:b3:7b:44:60: 8a:71:38:9c:77:6a:38:08:95:a7:8f:68:fa:54:2d: be:0c:c5:c0:66:65:d7:c1:25:da:ed:24:05:8f:e1: 7c:1e:d5:ec:47:58:1d:72:ff:d0:10:58:81:50:20: 01:74:df:20:1c:84:70:78:4d:b5:36:ea:61:80:14: c1:49:4a:78:ae:9a:5b:8d:4c:6f:87:85:73:06:2b: 44:23:1c:64:1d:3f:c8:2c:ab:b8:76:60:1b:8c:6b: 2f:de:80:f6:de:bb:96:7e:a3:e9:dc:49:d8:d1:c6: 77:a7:0d:e4:88:3f:16:26:c2:ce:26:93:de:5c:b5: 7d:9a:35:73:44:19:fc:a7:a3:ce:bc:49:a5:90:4e: cd:f4:7a:50:84:56:04:b3:7a:9f:7d:6a:64:77:19: 4f:1a:75:85:10:eb:23:a9:29:b3:2f:2d:aa:10:d7: a6:f9:5e:cb:15:ed:2d:14:a6:39:33:2b:2e:f0:4a: 00:4a:2b:db:ca:f5:d1:99:41:a4:06:ae:ce:fb:85: 17:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:03:3C:39:6D:37:4A:74:D6:40:DE:9A:E3:E2:5C:26:E6:E8:C5:14 X509v3 Authority Key Identifier: keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/GgM8OW03SnTWQN6a4-JcJuboxRQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.5.0.0/21 81.5.16.0/21 IPv6: 2001:40a8:2000::/40 Signature Algorithm: sha256WithRSAEncryption 7f:c9:5b:21:3d:06:7f:a7:bf:f2:c4:f2:49:53:fa:6b:28:6a: c3:90:19:c1:a2:9a:5d:94:70:5a:b3:52:6d:93:8e:48:10:87: fa:20:81:f1:a0:4d:56:fa:5e:96:8d:64:4b:cf:4c:51:b9:1b: 1c:dc:0b:31:a2:1e:82:cd:52:1f:32:f2:7b:f8:85:e1:07:a5: 8a:1b:15:3e:51:5e:37:32:5d:f3:14:58:5e:f8:bb:07:67:22: 5d:81:b9:46:6e:5e:48:97:f3:d1:5c:52:ee:12:c3:bc:34:a3: 03:40:65:b8:b9:8a:a6:40:95:0a:6e:c2:f4:b8:6d:46:0f:de: 2d:69:27:51:7a:66:e7:12:c4:8d:08:e1:e4:f7:85:b6:3f:01: 5a:a2:a4:79:0e:b0:3e:45:c1:76:82:50:40:9d:4c:b7:31:8e: c8:7b:0b:e4:65:6a:09:6e:be:e4:b3:76:1c:b5:7b:d0:96:84: c8:8d:9f:02:04:08:12:ef:ac:df:47:40:41:c3:30:7e:4e:c7: a4:aa:6e:6e:fc:7d:f6:2a:1c:3b:31:c1:ad:f8:fc:4b:28:3e: bd:17:59:86:b1:29:db:8c:58:94:c5:82:12:4d:e7:de:ec:c0: 55:c4:98:0b:a2:f3:98:b0:0b:4d:41:07:a3:82:2a:f6:66:06: d5:dd:48:29 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt4oprA4KV9hVN8OulbPL3IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ODU2ZDY3NGYwZTlkYmY2MDEyZDViNWQzZDk2YjQzYWZk NzY0NzMwHhcNMjYwMTAxMDgxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTAzM2MzOTZkMzc0YTc0ZDY0MGRlOWFlM2UyNWMyNmU2ZThjNTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtr59cjz/FdCe7OwehTOMczyPI9u AxumO1kJSm/46pAz7SE5J+dRk8qtsSZoQsLx3hlsMMiu8rN7RGCKcTicd2o4CJWn j2j6VC2+DMXAZmXXwSXa7SQFj+F8HtXsR1gdcv/QEFiBUCABdN8gHIRweE21Nuph gBTBSUp4rppbjUxvh4VzBitEIxxkHT/ILKu4dmAbjGsv3oD23ruWfqPp3EnY0cZ3 pw3kiD8WJsLOJpPeXLV9mjVzRBn8p6POvEmlkE7N9HpQhFYEs3qffWpkdxlPGnWF EOsjqSmzLy2qENem+V7LFe0tFKY5Mysu8EoASivbyvXRmUGkBq7O+4UXbwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFBoDPDltN0p01kDemuPiXCbm6MUUMB8GA1UdIwQY MBaAFPmFbWdPDp2/YBLVtdPZa0Ov12RzMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ZVnRaMDhPbmI5Z0V0VzEwOWxyUTZfWFpITS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvOWY5NTkwLTdmMGEtNDFiMy1hYzRm LWVmZDE0ZGI5NTdmYi8xL0dnTThPVzAzU25UV1FONmE0LUpjSnVib3hSUS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMGEvOWY5NTkwLTdmMGEtNDFiMy1hYzRmLWVmZDE0ZGI5NTdm Yi8xLzEtWVZ0WjA4T25iOWdFdFcxMDlsclE2X1haSE0uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwNQYIKwYBBQUHAQcBAf8EJjAkMBIEAgABMAwDBANRBQAD BANRBRAwDgQCAAIwCAMGACABQKggMA0GCSqGSIb3DQEBCwUAA4IBAQB/yVshPQZ/ p7/yxPJJU/prKGrDkBnBoppdlHBas1Jtk45IEIf6IIHxoE1W+l6WjWRLz0xRuRsc 3Asxoh6CzVIfMvJ7+IXhB6WKGxU+UV43Ml3zFFhe+LsHZyJdgblGbl5Il/PRXFLu EsO8NKMDQGW4uYqmQJUKbsL0uG1GD94taSdRembnEsSNCOHk94W2PwFaoqR5DrA+ RcF2glBAnUy3MY7IewvkZWoJbr7ks3YctXvQloTIjZ8CBAgS76zfR0BBwzB+Tsek qm5u/H32Khw7McGt+PxLKD69F1mGsSnbjFiUxYISTefe7MBVxJgLovOYsAtNQQej gir2ZgbV3Ugp -----END CERTIFICATE-----Generated at Thu Jan 1 12:26:54 2026 by rpki-client