This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GeyHHsktR2rph13SVOAMzdy2xmo.roa File: GeyHHsktR2rph13SVOAMzdy2xmo.roa (raw, json) Hash identifier: YmgHmIWVLEnuY4R8dmPbep4MwspH4rDNBsZMw5/B4Pg= Subject key identifier: 19:EC:87:1E:C9:2D:47:6A:E9:87:5D:D2:54:E0:0C:CD:DC:B6:C6:6A Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D4F73170BFC18741795BAABFA8B1C Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GeyHHsktR2rph13SVOAMzdy2xmo.roa Signing time: Fri 02 Jan 2026 06:20:25 +0000 ROA not before: Fri 02 Jan 2026 06:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212332 IP address blocks: 2a0e:b107:27b0::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:4f:73:17:0b:fc:18:74:17:95:ba:ab:fa:8b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19ec871ec92d476ae9875dd254e00ccddcb6c66a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6d:43:3e:ae:5f:14:5c:db:7e:72:65:88:d5: a9:99:e0:63:9d:7f:a1:ad:bf:f4:8d:5f:7d:3d:d8: 84:43:db:c5:18:31:61:96:8c:92:09:6b:c3:b2:63: f1:d7:84:6e:d2:35:74:49:73:34:4a:35:b7:98:88: aa:f5:dd:06:61:69:05:f9:8f:e3:ed:2c:f6:6c:e5: 89:39:9f:cf:42:01:55:f7:e3:82:ad:ec:f3:f0:52: 94:c1:b7:ec:89:8c:a1:cd:f2:22:08:0d:93:4b:5c: 76:63:2e:69:63:3e:7c:4d:e8:0f:0b:6c:eb:b6:2e: b9:d9:8f:ae:44:c5:37:8e:c1:71:ec:cd:dd:2e:99: 2c:b8:ce:63:de:85:2f:86:8c:99:09:01:d0:ef:ba: 90:2a:0e:c1:da:58:a5:17:c3:dc:16:d3:f2:64:76: 3b:2d:95:42:92:aa:02:a9:0e:50:32:15:3d:68:1d: 85:5a:82:68:ea:a0:49:1e:21:94:bb:cd:7f:67:ad: 6a:85:a7:20:35:8b:50:34:24:b3:71:bb:8c:7a:f3: 6c:bd:37:3c:bb:30:50:4d:a6:f1:69:9f:0f:93:21: 8e:45:c0:12:60:ed:1b:60:30:f8:7a:64:90:4c:fa: e7:b7:72:db:65:53:9e:ff:e0:f7:47:18:ce:a8:c8: 4b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:EC:87:1E:C9:2D:47:6A:E9:87:5D:D2:54:E0:0C:CD:DC:B6:C6:6A X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GeyHHsktR2rph13SVOAMzdy2xmo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:27b0::/45 Signature Algorithm: sha256WithRSAEncryption 18:6f:ca:f2:44:56:41:4a:64:5f:1e:91:e8:fb:5d:a1:b2:a2: 4a:0c:b0:96:2c:a3:6f:85:94:02:c6:ad:2a:cd:46:c8:1c:e3: 53:fd:65:1e:f5:aa:47:72:dd:54:9b:6e:04:e2:a5:f3:69:4a: 13:56:f4:73:01:f1:30:3d:8b:cb:3e:d9:89:3e:42:76:bc:ba: ec:f2:eb:a8:4b:80:07:e4:10:00:a9:5b:76:19:be:82:0f:55: 00:a4:cd:ee:03:c9:92:92:e1:42:6e:37:6c:d0:9a:d8:c2:c7: be:51:2a:96:74:c2:34:3c:92:85:5f:ce:a9:f7:e5:85:ed:60: b8:42:3f:02:10:c9:98:77:c4:1c:a6:76:f2:e2:b8:ab:7b:65: ce:28:75:91:42:da:ab:10:ac:cb:c1:54:ce:77:3a:5c:80:0b: 82:57:9a:5c:f7:e6:86:97:ae:9b:0a:2d:ba:26:d0:64:c3:c0: 07:e4:ba:e1:52:44:ea:73:0e:08:7b:57:b4:0f:ef:ec:67:39: 8e:6c:12:c4:c8:cd:9b:17:40:df:cb:68:94:3d:a4:4c:91:47: 30:28:5e:ad:4d:7d:24:c0:89:6a:2e:db:10:6e:23:05:db:24: 28:b4:07:04:66:a3:93:e9:c7:fa:bc:c9:fe:73:41:69:8c:a1: 02:51:a4:e0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XU9zFwv8GHQXlbqr+oscMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWVjODcxZWM5MmQ0NzZhZTk4NzVkZDI1NGUwMGNjZGRjYjZjNjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj21DPq5fFFzbfnJliNWpmeBjnX+h rb/0jV99PdiEQ9vFGDFhloySCWvDsmPx14Ru0jV0SXM0SjW3mIiq9d0GYWkF+Y/j 7Sz2bOWJOZ/PQgFV9+OCrezz8FKUwbfsiYyhzfIiCA2TS1x2Yy5pYz58TegPC2zr ti652Y+uRMU3jsFx7M3dLpksuM5j3oUvhoyZCQHQ77qQKg7B2lilF8PcFtPyZHY7 LZVCkqoCqQ5QMhU9aB2FWoJo6qBJHiGUu81/Z61qhacgNYtQNCSzcbuMevNsvTc8 uzBQTabxaZ8PkyGORcASYO0bYDD4emSQTPrnt3LbZVOe/+D3RxjOqMhLewIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBnshx7JLUdq6Ydd0lTgDM3ctsZqMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvR2V5SEhza3RSMnJwaDEzU1ZPQU16ZHkyeG1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDKg6xByew MA0GCSqGSIb3DQEBCwUAA4IBAQAYb8ryRFZBSmRfHpHo+12hsqJKDLCWLKNvhZQC xq0qzUbIHONT/WUe9apHct1Um24E4qXzaUoTVvRzAfEwPYvLPtmJPkJ2vLrs8uuo S4AH5BAAqVt2Gb6CD1UApM3uA8mSkuFCbjds0JrYwse+USqWdMI0PJKFX86p9+WF 7WC4Qj8CEMmYd8Qcpnby4rire2XOKHWRQtqrEKzLwVTOdzpcgAuCV5pc9+aGl66b Ci26JtBkw8AH5LrhUkTqcw4Ie1e0D+/sZzmObBLEyM2bF0Dfy2iUPaRMkUcwKF6t TX0kwIlqLtsQbiMF2yQotAcEZqOT6cf6vMn+c0FpjKECUaTg -----END CERTIFICATE-----Generated at Mon Jan 12 01:58:20 2026 by rpki-client