This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/GxVgjcu_oE_U6B83TKaga_EPtqg.roa File: GxVgjcu_oE_U6B83TKaga_EPtqg.roa (raw, json) Hash identifier: j1YzgkZZH4948VDeh/3QBe6Tf6mUzzAh/SQ6pXh37tc= Subject key identifier: 1B:15:60:8D:CB:BF:A0:4F:D4:E8:1F:37:4C:A6:A0:6B:F1:0F:B6:A8 Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Certificate serial: 019B77594CCDC58909AD576C150CEE5CD002 Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/GxVgjcu_oE_U6B83TKaga_EPtqg.roa Signing time: Thu 01 Jan 2026 02:18:19 +0000 ROA not before: Thu 01 Jan 2026 02:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216222 IP address blocks: 2a13:cc87:fc01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:4c:cd:c5:89:09:ad:57:6c:15:0c:ee:5c:d0:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Validity Not Before: Jan 1 02:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b15608dcbbfa04fd4e81f374ca6a06bf10fb6a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f5:82:31:2b:42:c9:f5:cc:7f:80:5a:03:68: 92:bf:ab:8a:84:b5:4b:5f:6f:69:b9:e9:a8:ac:67: fd:5b:1d:ae:c9:4b:9f:c2:59:04:a9:e2:e0:6c:8b: 5c:be:25:92:40:84:f8:48:13:95:ee:f6:d3:09:97: c0:cd:30:eb:de:d6:2c:85:ca:37:31:25:35:4a:0c: 6e:94:32:36:67:c1:09:7a:ed:be:9f:2b:eb:f5:7d: 2d:41:61:21:9d:86:60:c5:08:46:2a:08:82:45:00: e4:6a:dc:4c:cd:14:93:41:fb:a1:b1:2e:ab:66:78: 5f:d8:6c:32:de:9b:55:af:9a:d9:89:95:1f:84:87: e8:80:12:2b:1f:b8:b6:94:ef:85:0e:56:11:b9:2c: 68:3e:cf:ab:c3:fb:54:dd:38:92:71:c0:9e:95:53: 4b:be:55:56:62:df:11:53:8a:67:5d:9d:b5:a4:2a: 54:51:6e:5e:18:14:f0:8b:8d:b5:f3:b8:4a:ec:c1: ad:2d:f4:38:3f:47:3c:b9:61:65:7e:f2:7f:20:76: 4c:e8:f9:8c:17:2a:06:6a:cc:20:43:8a:7d:82:69: 17:d9:9e:4b:10:e4:3c:8c:14:23:b5:c5:b7:a7:dc: 09:39:03:9d:03:10:3e:03:20:fe:8f:54:5e:f6:b4: 71:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:15:60:8D:CB:BF:A0:4F:D4:E8:1F:37:4C:A6:A0:6B:F1:0F:B6:A8 X509v3 Authority Key Identifier: keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/GxVgjcu_oE_U6B83TKaga_EPtqg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:cc87:fc01::/48 Signature Algorithm: sha256WithRSAEncryption 12:76:c2:20:2d:cb:c8:c8:c3:2a:a7:08:9e:31:6b:fc:1c:0b: fb:1b:14:41:84:c0:3e:5c:40:dd:6b:27:96:2b:31:d3:6c:49: b7:23:ca:a7:95:7f:30:7d:13:b4:33:0e:9e:a2:14:16:07:c9: 73:0d:84:12:0b:9b:61:64:08:fe:6d:cf:1a:60:9c:d5:27:63: 59:2d:d7:15:cc:d5:6b:d1:27:dc:66:0c:6e:90:cd:ba:5d:1a: 6d:19:8c:1f:19:c9:b8:e2:e0:5c:74:98:93:95:2e:63:7a:03: 8c:6a:c4:f5:7a:77:70:b6:71:f0:bf:c7:78:11:9c:f1:41:3e: 0c:b3:c0:c2:73:f7:df:18:ec:7e:7a:0e:f0:81:2e:b1:2c:71: 23:d6:77:cf:97:cc:dd:9f:4c:86:92:de:6b:25:17:f9:5e:02: e1:57:5d:8f:b0:02:3d:33:f0:8f:ce:6f:f2:7a:ae:54:96:43: 26:15:90:d9:dc:10:12:5a:14:7d:a3:63:79:b3:31:55:04:c3: 77:09:f3:3d:ef:f3:bd:e0:87:7d:47:f4:87:72:ce:2c:f1:64: 7c:d5:96:f5:48:89:cd:81:59:77:0d:87:0f:bf:e4:9b:68:54: 7d:cd:ac:59:13:1a:38:59:ed:28:0e:0e:6c:c3:5a:80:a5:62: f6:5f:75:10 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WUzNxYkJrVdsFQzuXNACMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxN2EwYzk2ODQyYmFmYzlmNjMwYmExNGI4M2VhNzliZDEy YTUzYjkwHhcNMjYwMTAxMDIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjE1NjA4ZGNiYmZhMDRmZDRlODFmMzc0Y2E2YTA2YmYxMGZiNmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/WCMStCyfXMf4BaA2iSv6uKhLVL X29puemorGf9Wx2uyUufwlkEqeLgbItcviWSQIT4SBOV7vbTCZfAzTDr3tYshco3 MSU1SgxulDI2Z8EJeu2+nyvr9X0tQWEhnYZgxQhGKgiCRQDkatxMzRSTQfuhsS6r Znhf2Gwy3ptVr5rZiZUfhIfogBIrH7i2lO+FDlYRuSxoPs+rw/tU3TiSccCelVNL vlVWYt8RU4pnXZ21pCpUUW5eGBTwi42187hK7MGtLfQ4P0c8uWFlfvJ/IHZM6PmM FyoGaswgQ4p9gmkX2Z5LEOQ8jBQjtcW3p9wJOQOdAxA+AyD+j1Re9rRxbwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBsVYI3Lv6BP1OgfN0ymoGvxD7aoMB8GA1UdIwQY MBaAFFF6DJaEK6/J9jC6FLg+p5vRKlO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMt YjBlYjY3MTVlMGFmLzEvR3hWZ2pjdV9vRV9VNkI4M1RLYWdhX0VQdHFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMtYjBlYjY3MTVlMGFm LzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhPMh/wB MA0GCSqGSIb3DQEBCwUAA4IBAQASdsIgLcvIyMMqpwieMWv8HAv7GxRBhMA+XEDd ayeWKzHTbEm3I8qnlX8wfRO0Mw6eohQWB8lzDYQSC5thZAj+bc8aYJzVJ2NZLdcV zNVr0SfcZgxukM26XRptGYwfGcm44uBcdJiTlS5jegOMasT1endwtnHwv8d4EZzx QT4Ms8DCc/ffGOx+eg7wgS6xLHEj1nfPl8zdn0yGkt5rJRf5XgLhV12PsAI9M/CP zm/yeq5UlkMmFZDZ3BASWhR9o2N5szFVBMN3CfM97/O94Id9R/SHcs4s8WR81Zb1 SInNgVl3DYcPv+SbaFR9zaxZExo4We0oDg5sw1qApWL2X3UQ -----END CERTIFICATE-----Generated at Wed Jan 7 22:30:41 2026 by rpki-client