This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GVuBvCtIODKd8YPnVzVjr7vTU6Y.roa File: GVuBvCtIODKd8YPnVzVjr7vTU6Y.roa (raw, json) Hash identifier: xRIFnMnVgBPEpawGw5ce3SKdCdMUNMRKKEENU/fkzJY= Subject key identifier: 19:5B:81:BC:2B:48:38:32:9D:F1:83:E7:57:35:63:AF:BB:D3:53:A6 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CE9685A9D13ADB68834FB2BE16CE9 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GVuBvCtIODKd8YPnVzVjr7vTU6Y.roa Signing time: Fri 02 Jan 2026 06:19:59 +0000 ROA not before: Fri 02 Jan 2026 06:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201911 IP address blocks: 2a0e:97c0:ae0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e9:68:5a:9d:13:ad:b6:88:34:fb:2b:e1:6c:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=195b81bc2b4838329df183e7573563afbbd353a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e5:1a:67:c5:39:ce:76:64:e1:72:e4:60:26: b1:62:1d:a0:c9:2e:e5:5f:63:16:1c:cd:c2:b0:ce: e2:51:9f:40:fb:84:e2:fa:22:f8:11:be:34:33:63: 00:e8:c0:05:f9:d4:31:7a:66:ed:1c:a8:3e:a2:5e: 60:05:3d:78:12:6b:73:49:52:38:a1:fb:7f:4d:a9: e4:8a:08:f8:36:11:b7:eb:81:14:37:9d:f6:17:e8: 3f:56:9c:1e:93:4a:0e:54:75:ed:e9:8d:f1:74:5e: 7c:c0:a1:28:95:a6:07:0c:5b:dc:be:59:b9:5c:3c: fc:92:91:08:21:98:67:b9:9f:b6:f0:30:f8:79:55: b3:c0:1e:04:b5:4d:19:31:ce:1c:13:79:0d:ff:6a: db:8b:cc:4f:a0:c2:b9:22:41:0c:87:d9:ba:6b:5f: 18:f7:28:54:26:ab:48:04:0f:7c:f6:67:80:14:f5: b6:26:37:c5:ca:e5:68:2c:75:af:ee:ca:82:fd:5a: b8:d4:7d:82:cf:4f:8f:12:67:5a:ae:3a:76:18:2a: 2e:74:28:1b:d0:0c:28:22:28:34:2d:ec:0f:a7:38: f0:28:6f:7e:e1:77:06:f1:7f:91:01:6c:79:7b:20: 0a:d0:57:a1:dd:6c:e1:11:09:6d:ae:5d:91:13:c3: 7d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:5B:81:BC:2B:48:38:32:9D:F1:83:E7:57:35:63:AF:BB:D3:53:A6 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GVuBvCtIODKd8YPnVzVjr7vTU6Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:ae0::/44 Signature Algorithm: sha256WithRSAEncryption ca:12:d5:a3:2f:66:3b:49:49:24:fd:c3:36:ee:46:e6:4e:26: 58:51:46:6a:64:fc:cb:dd:f9:94:37:60:e0:92:44:88:1c:23: e8:58:f0:f1:91:0e:21:3e:6a:8c:4a:0f:18:9a:b2:1f:b8:75: 1a:49:36:a4:9c:0e:14:c1:cf:ee:24:8c:90:e4:85:7c:dd:5b: f0:8f:57:ab:d7:5d:da:15:31:a2:10:7e:7a:95:5d:a5:f2:64: 28:a4:e5:a9:af:70:89:eb:b3:e6:79:ca:6b:55:0e:f8:a2:6e: f2:dc:47:fb:95:87:39:c9:7c:1f:f0:69:f8:b3:45:e0:2d:b4: cd:25:70:61:32:56:53:58:32:94:05:2b:d7:27:22:e7:b0:d6: 4b:91:58:15:4f:46:c9:fa:0d:1c:07:0b:6b:72:a5:03:0e:34: ce:e0:88:d8:5d:8b:4c:0b:2f:7d:af:01:7f:da:68:39:8d:d8: 65:46:ff:d9:d4:7d:c0:cf:74:9d:32:fb:66:30:3a:63:cf:00: d9:b0:6b:1d:33:d9:1e:1d:2c:64:11:60:c4:9b:cf:6c:a8:31: 46:f9:bb:b3:15:82:b7:08:f0:d4:b4:e5:f0:cc:47:fc:b8:44: bb:df:07:a0:d5:01:26:03:8d:10:54:31:88:3b:91:84:27:04: 42:c1:7d:b4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XOloWp0TrbaINPsr4WzpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTViODFiYzJiNDgzODMyOWRmMTgzZTc1NzM1NjNhZmJiZDM1M2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOUaZ8U5znZk4XLkYCaxYh2gyS7l X2MWHM3CsM7iUZ9A+4Ti+iL4Eb40M2MA6MAF+dQxembtHKg+ol5gBT14EmtzSVI4 oft/Tankigj4NhG364EUN532F+g/Vpwek0oOVHXt6Y3xdF58wKEolaYHDFvcvlm5 XDz8kpEIIZhnuZ+28DD4eVWzwB4EtU0ZMc4cE3kN/2rbi8xPoMK5IkEMh9m6a18Y 9yhUJqtIBA989meAFPW2JjfFyuVoLHWv7sqC/Vq41H2Cz0+PEmdarjp2GCoudCgb 0AwoIig0LewPpzjwKG9+4XcG8X+RAWx5eyAK0Feh3WzhEQltrl2RE8N9HQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBlbgbwrSDgynfGD51c1Y6+701OmMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvR1Z1QnZDdElPREtkOFlQblZ6VmpyN3ZUVTZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwArg MA0GCSqGSIb3DQEBCwUAA4IBAQDKEtWjL2Y7SUkk/cM27kbmTiZYUUZqZPzL3fmU N2DgkkSIHCPoWPDxkQ4hPmqMSg8YmrIfuHUaSTaknA4Uwc/uJIyQ5IV83Vvwj1er 113aFTGiEH56lV2l8mQopOWpr3CJ67PmecprVQ74om7y3Ef7lYc5yXwf8Gn4s0Xg LbTNJXBhMlZTWDKUBSvXJyLnsNZLkVgVT0bJ+g0cBwtrcqUDDjTO4IjYXYtMCy99 rwF/2mg5jdhlRv/Z1H3Az3SdMvtmMDpjzwDZsGsdM9keHSxkEWDEm89sqDFG+buz FYK3CPDUtOXwzEf8uES73weg1QEmA40QVDGIO5GEJwRCwX20 -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:27 2026 by rpki-client