This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GU55-5vPyFGrRuyxaGY51FdSUKg.roa File: GU55-5vPyFGrRuyxaGY51FdSUKg.roa (raw, json) Hash identifier: bCdWaLWiaElUSxBKI7ug9MIs3c4HkCRkMfGbpejHKyY= Subject key identifier: 19:4E:79:FB:9B:CF:C8:51:AB:46:EC:B1:68:66:39:D4:57:52:50:A8 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D13FEEE7C964D643FA7274F62FFF7 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GU55-5vPyFGrRuyxaGY51FdSUKg.roa Signing time: Fri 02 Jan 2026 06:20:10 +0000 ROA not before: Fri 02 Jan 2026 06:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208529 IP address blocks: 2a0e:b107:2b0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:13:fe:ee:7c:96:4d:64:3f:a7:27:4f:62:ff:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=194e79fb9bcfc851ab46ecb1686639d4575250a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e8:31:64:ed:d7:b7:69:73:eb:5f:5f:6e:29: 92:9d:49:7f:4a:76:a3:42:ca:35:8f:32:79:c1:37: ca:b4:ee:02:9c:92:e9:98:ce:c2:08:a3:c6:91:72: 89:41:a2:4e:ea:80:c4:65:7b:8c:74:de:36:a1:33: 6a:67:c5:dd:31:55:15:6e:a9:5f:eb:77:55:d1:1f: b5:1b:62:61:89:b2:8b:2c:9a:b0:50:b0:0d:66:45: 43:91:2a:c8:4f:c3:a1:0c:71:d6:1c:83:39:f6:38: 3c:91:a4:0c:fe:73:82:54:ce:ab:f6:0a:ad:f6:77: bf:c7:9d:54:88:3d:e9:77:dc:2d:7a:24:59:2b:f3: ee:7b:1f:87:bc:8d:0c:fe:64:aa:08:83:fa:89:39: ed:54:f8:07:a8:b5:f0:a5:db:92:2d:db:fd:b2:c8: 86:38:cb:db:2a:8e:2b:15:3c:f6:ab:92:93:8c:93: ee:47:5c:b5:31:eb:86:3b:0e:4f:f9:a4:37:be:8d: 15:99:9a:97:78:d6:de:7a:c3:b2:4f:54:0a:f8:2b: c4:fb:d5:1f:ee:4e:05:ce:88:30:27:e2:ba:29:5b: 81:1b:91:22:58:c1:11:0a:67:85:33:88:b2:50:eb: 68:a7:25:68:40:aa:ed:c3:36:2a:4a:15:57:33:75: 8e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:4E:79:FB:9B:CF:C8:51:AB:46:EC:B1:68:66:39:D4:57:52:50:A8 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GU55-5vPyFGrRuyxaGY51FdSUKg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:2b0::/48 Signature Algorithm: sha256WithRSAEncryption 0d:c6:1c:25:5b:fb:e9:41:bc:fb:f0:c8:d7:92:6d:a1:bf:d6: ff:67:61:85:0f:f3:23:bd:07:65:1f:bb:d1:cd:fe:75:6c:b0: db:22:77:23:c2:92:e5:3f:f3:21:5c:16:92:0c:50:78:9d:da: 98:b6:dd:1e:53:b9:61:8c:64:5d:a0:fa:1d:37:f9:8b:70:4c: a8:0c:d6:fa:34:85:6b:af:b9:f7:37:ac:28:c8:4d:9f:7c:16: 5d:22:78:76:13:fe:c3:1b:0e:c3:0a:60:7d:1b:2f:03:e6:75: c8:4e:a1:25:18:6e:b0:86:2a:0a:4d:08:8f:23:f2:e7:b0:e8: b7:66:49:31:75:96:c2:c7:33:09:18:f2:03:ca:78:95:2b:53: ed:bb:cf:f2:0a:85:f9:84:96:fa:d4:b9:20:26:18:a4:58:74: 5c:53:3f:76:cb:2b:af:64:3c:26:d5:1f:5f:00:e6:ab:ed:a9: 6b:6f:d7:67:2e:b6:6f:a6:5c:a4:06:94:15:23:59:9e:34:fe: 55:52:a8:ae:20:08:bf:05:0a:ca:c9:b1:b9:9b:36:79:c4:d9: 8a:ac:ac:6d:03:bc:60:f7:94:5d:b2:62:cf:aa:a5:ee:51:60: 7f:92:6f:bd:02:da:9e:37:2e:07:e7:88:8f:36:65:0f:3d:7c: 26:41:02:b0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XRP+7nyWTWQ/pydPYv/3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTRlNzlmYjliY2ZjODUxYWI0NmVjYjE2ODY2MzlkNDU3NTI1MGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlegxZO3Xt2lz619fbimSnUl/Snaj Qso1jzJ5wTfKtO4CnJLpmM7CCKPGkXKJQaJO6oDEZXuMdN42oTNqZ8XdMVUVbqlf 63dV0R+1G2JhibKLLJqwULANZkVDkSrIT8OhDHHWHIM59jg8kaQM/nOCVM6r9gqt 9ne/x51UiD3pd9wteiRZK/Puex+HvI0M/mSqCIP6iTntVPgHqLXwpduSLdv9ssiG OMvbKo4rFTz2q5KTjJPuR1y1MeuGOw5P+aQ3vo0VmZqXeNbeesOyT1QK+CvE+9Uf 7k4FzogwJ+K6KVuBG5EiWMERCmeFM4iyUOtopyVoQKrtwzYqShVXM3WO5QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBlOefubz8hRq0bssWhmOdRXUlCoMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvR1U1NS01dlB5RkdyUnV5eGFHWTUxRmRTVUtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBwKw MA0GCSqGSIb3DQEBCwUAA4IBAQANxhwlW/vpQbz78MjXkm2hv9b/Z2GFD/MjvQdl H7vRzf51bLDbIncjwpLlP/MhXBaSDFB4ndqYtt0eU7lhjGRdoPodN/mLcEyoDNb6 NIVrr7n3N6woyE2ffBZdInh2E/7DGw7DCmB9Gy8D5nXITqElGG6whioKTQiPI/Ln sOi3ZkkxdZbCxzMJGPIDyniVK1Ptu8/yCoX5hJb61LkgJhikWHRcUz92yyuvZDwm 1R9fAOar7alrb9dnLrZvplykBpQVI1meNP5VUqiuIAi/BQrKybG5mzZ5xNmKrKxt A7xg95RdsmLPqqXuUWB/km+9AtqeNy4H54iPNmUPPXwmQQKw -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:50 2026 by rpki-client