This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-GNTA5hooV5mZCOUzr7OR0bewJs.roa File: 1-GNTA5hooV5mZCOUzr7OR0bewJs.roa (raw, json) Hash identifier: j2kbZ2YCNEehINd4Z0V37srdexe2KTvN0c//EkuI9Ps= Subject key identifier: F8:63:53:03:98:68:A1:5E:66:64:23:94:CE:BE:CE:47:46:DE:C0:9B Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CCB24CDC59E5523DCF15794B29D31 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-GNTA5hooV5mZCOUzr7OR0bewJs.roa Signing time: Fri 02 Jan 2026 06:19:51 +0000 ROA not before: Fri 02 Jan 2026 06:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 141221 IP address blocks: 2a0e:b107:e11::/48 maxlen: 48 2a0e:b107:e12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:cb:24:cd:c5:9e:55:23:dc:f1:57:94:b2:9d:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f86353039868a15e66642394cebece4746dec09b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3d:d7:4a:61:58:12:53:20:e0:47:66:0e:8d: 57:82:c3:ff:dd:ca:98:5b:00:25:00:1e:d8:ae:eb: 3e:4e:cd:bf:41:65:e5:7b:9c:d3:c0:94:d3:75:1a: 44:6b:cd:49:1f:d8:3e:bf:e4:0a:d1:41:1c:4c:89: 0e:0a:17:80:e7:aa:fa:7e:4e:91:aa:f7:fb:1c:27: 9f:77:f8:b4:2a:f2:93:4c:78:23:8b:11:77:04:84: 5e:13:41:80:90:ef:13:95:31:73:38:97:6c:31:f0: 96:5a:2b:ba:d5:78:ec:91:9f:eb:55:54:2f:70:dd: 01:40:fc:c1:0a:6d:5c:9d:8d:70:c2:79:b5:45:38: fc:40:d3:de:10:47:a6:45:48:5b:ef:ad:ef:f0:46: 8e:6e:4b:05:1e:db:9a:bd:f8:d0:a9:ab:c4:bf:f4: a8:9d:ab:6e:c4:a9:90:0b:86:4a:e8:c6:34:18:d8: 48:74:27:1c:4f:8c:c9:a9:5f:3d:7a:43:15:c2:84: f8:d4:11:17:d9:8f:7d:37:c8:4f:4c:89:f0:4f:5e: ba:13:ad:de:19:39:f7:10:ca:be:cd:36:ad:4b:4f: 44:6c:fd:ef:a7:bd:51:30:c2:67:96:d9:15:17:38: 15:7e:bb:3f:c1:6e:e8:2e:cd:ad:6f:65:bd:d3:1c: ec:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:63:53:03:98:68:A1:5E:66:64:23:94:CE:BE:CE:47:46:DE:C0:9B X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-GNTA5hooV5mZCOUzr7OR0bewJs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:e11::-2a0e:b107:e12:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 93:18:af:cc:b8:88:33:f5:cd:2b:81:7b:3f:f8:0e:cd:ef:ba: ce:1b:50:d2:f1:df:6a:a6:e2:c6:18:f0:aa:6d:22:5f:6c:f3: 12:26:00:36:0b:19:0a:b3:ef:e1:5a:11:cb:da:b6:d9:94:4c: af:34:c1:5c:05:17:44:38:ed:8d:bb:ee:aa:73:ff:df:51:61: ce:f2:9b:b2:dc:5a:39:be:cb:82:54:3f:2c:a3:66:a2:b4:f3: b6:58:cd:08:b2:b8:c6:9b:0a:71:f5:48:62:14:7f:99:dc:11: cd:7d:c5:60:3f:ce:78:be:cd:be:2f:07:ca:ea:ab:de:57:26: 54:f4:5d:3a:7c:dc:0f:75:d7:c3:79:0c:2a:04:58:08:28:89: dd:33:e6:04:be:e5:96:77:70:c6:5a:0b:fc:0d:23:19:dc:b7: c9:c9:15:75:8d:58:b8:55:ae:3e:62:bc:94:27:b8:52:45:e2: 73:86:6f:ee:59:ec:d2:ab:1c:4c:82:1a:0a:29:5c:a5:6f:a2: 0a:f9:8d:ee:93:26:c5:bc:ad:46:4b:55:28:b7:bb:a1:cf:26: dd:85:82:b9:17:09:15:09:a1:de:20:17:e9:02:32:fd:71:0b: ee:e4:2d:70:c0:c1:d3:13:cb:c1:b7:75:39:74:66:a7:02:bf: ac:c8:e0:54 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9XMskzcWeVSPc8VeUsp0xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODYzNTMwMzk4NjhhMTVlNjY2NDIzOTRjZWJlY2U0NzQ2ZGVjMDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz3XSmFYElMg4EdmDo1XgsP/3cqY WwAlAB7Yrus+Ts2/QWXle5zTwJTTdRpEa81JH9g+v+QK0UEcTIkOCheA56r6fk6R qvf7HCefd/i0KvKTTHgjixF3BIReE0GAkO8TlTFzOJdsMfCWWiu61XjskZ/rVVQv cN0BQPzBCm1cnY1wwnm1RTj8QNPeEEemRUhb763v8EaObksFHtuavfjQqavEv/So natuxKmQC4ZK6MY0GNhIdCccT4zJqV89ekMVwoT41BEX2Y99N8hPTInwT166E63e GTn3EMq+zTatS09EbP3vp71RMMJnltkVFzgVfrs/wW7oLs2tb2W90xzsTwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPhjUwOYaKFeZmQjlM6+zkdG3sCbMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvMS1HTlRBNWhvb1Y1bVpDT1V6cjdPUjBiZXdKcy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTEvNDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZh NS8xL1kta1djWHF4SE16eEh2SDdYQkx1UVpVUHJacy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQeMBwwGgQCAAIwFDASAwcAKg6x Bw4RAwcAKg6xBw4SMA0GCSqGSIb3DQEBCwUAA4IBAQCTGK/MuIgz9c0rgXs/+A7N 77rOG1DS8d9qpuLGGPCqbSJfbPMSJgA2CxkKs+/hWhHL2rbZlEyvNMFcBRdEOO2N u+6qc//fUWHO8puy3Fo5vsuCVD8so2aitPO2WM0IsrjGmwpx9UhiFH+Z3BHNfcVg P854vs2+LwfK6qveVyZU9F06fNwPddfDeQwqBFgIKIndM+YEvuWWd3DGWgv8DSMZ 3LfJyRV1jVi4Va4+YryUJ7hSReJzhm/uWezSqxxMghoKKVylb6IK+Y3ukybFvK1G S1Uot7uhzybdhYK5FwkVCaHeIBfpAjL9cQvu5C1wwMHTE8vBt3U5dGanAr+syOBU -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:49 2026 by rpki-client