This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GfUSPtyw5Dp1eUWAKcRV9dFnPls.roa File: GfUSPtyw5Dp1eUWAKcRV9dFnPls.roa (raw, json) Hash identifier: wKVmZKCrBnXcZKMyGUM3TQ1y0ups9eHY5ERt18uW6jA= Subject key identifier: 19:F5:12:3E:DC:B0:E4:3A:75:79:45:80:29:C4:55:F5:D1:67:3E:5B Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CB1AAB0A886E260CE2369AA830276 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GfUSPtyw5Dp1eUWAKcRV9dFnPls.roa Signing time: Fri 02 Jan 2026 06:19:45 +0000 ROA not before: Fri 02 Jan 2026 06:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47422 IP address blocks: 2a0e:b107:620::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b1:aa:b0:a8:86:e2:60:ce:23:69:aa:83:02:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19f5123edcb0e43a7579458029c455f5d1673e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f3:f9:21:42:7d:c9:48:6b:e7:55:2b:56:f1: d9:52:77:30:5d:ae:10:f9:81:e2:52:77:34:67:de: ba:4f:b4:ac:fe:47:b8:e7:8e:e3:e5:94:3f:50:70: 06:97:3c:ce:a4:1b:ec:f9:3d:e3:a7:41:df:b2:05: c4:93:2f:cc:7b:83:70:e2:9c:c5:75:e1:71:ce:68: eb:ca:ae:75:6a:47:a0:66:cc:de:c6:fa:48:e5:fa: 20:dd:c6:cd:6a:76:c8:2d:d6:1b:1e:ef:71:56:9a: d1:e9:6b:08:1c:a8:23:e2:15:5f:2b:36:58:7d:92: ed:50:f3:d3:e6:10:77:a7:fd:2b:a8:87:dd:7e:cf: b9:88:60:97:75:da:25:de:d7:87:49:26:ca:59:e9: 48:4d:7b:8d:db:e6:ff:b9:1b:18:2a:82:cc:45:24: 86:0b:a6:f6:75:6b:1f:1f:57:97:85:68:c2:ed:db: 54:86:c5:a2:d9:f7:b2:98:1b:77:7f:03:dc:c8:46: 75:76:e3:40:ed:32:80:51:54:0e:9f:4d:d5:dd:89: 4f:02:3c:9a:9a:db:16:ed:21:3b:f0:a2:9d:c2:e1: 0e:3b:09:9d:51:ba:98:76:4d:0d:7a:93:16:63:ef: 53:b8:8d:41:c1:3d:f7:5b:0e:09:6a:3c:2c:80:04: f3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F5:12:3E:DC:B0:E4:3A:75:79:45:80:29:C4:55:F5:D1:67:3E:5B X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GfUSPtyw5Dp1eUWAKcRV9dFnPls.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:620::/44 Signature Algorithm: sha256WithRSAEncryption 00:a6:7c:30:47:db:1f:c9:3a:3c:7e:fb:3c:dd:eb:55:7e:c0: de:ef:ba:fd:0b:a8:df:d4:a4:b4:19:59:81:a2:df:8a:39:c6: ed:bd:0b:d6:4f:5c:fd:c9:e3:46:29:fc:e1:14:b1:4a:48:97: 43:99:5a:f2:ee:55:8c:94:7c:78:37:ae:f2:01:99:0a:7b:de: 95:5c:4c:0e:0a:7b:98:f0:be:4d:ed:55:f1:99:4c:95:d9:09: fe:ad:0a:e6:64:7d:67:d6:01:80:67:95:33:08:bc:9b:a0:31: 10:59:e1:63:7a:54:a3:d0:78:9b:0d:9a:7a:fd:2a:1e:c8:d6: 45:b0:d1:71:03:07:2a:61:6a:5e:a1:c9:85:ab:4a:46:95:61: 61:2d:c6:8a:f5:c9:bf:a4:01:ab:a9:c8:b4:50:93:34:2f:ba: 19:ae:95:6e:78:fa:77:ee:fa:5b:03:7a:b5:66:15:8d:53:66: 8b:c8:ab:68:e8:84:7b:09:27:fa:3e:08:97:30:58:40:52:ac: 75:ab:f6:42:5c:0e:4a:36:48:d0:67:8d:88:51:25:f5:22:14: 34:ad:9b:c4:0d:44:90:f5:e5:7b:84:49:4b:51:3c:9f:d5:4a: 29:70:e2:46:67:e2:f4:87:5b:f9:b4:3f:94:b6:07:73:6b:57: 83:d6:3f:8a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XLGqsKiG4mDOI2mqgwJ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWY1MTIzZWRjYjBlNDNhNzU3OTQ1ODAyOWM0NTVmNWQxNjczZTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/P5IUJ9yUhr51UrVvHZUncwXa4Q +YHiUnc0Z966T7Ss/ke4547j5ZQ/UHAGlzzOpBvs+T3jp0HfsgXEky/Me4Nw4pzF deFxzmjryq51akegZszexvpI5fog3cbNanbILdYbHu9xVprR6WsIHKgj4hVfKzZY fZLtUPPT5hB3p/0rqIfdfs+5iGCXddol3teHSSbKWelITXuN2+b/uRsYKoLMRSSG C6b2dWsfH1eXhWjC7dtUhsWi2feymBt3fwPcyEZ1duNA7TKAUVQOn03V3YlPAjya mtsW7SE78KKdwuEOOwmdUbqYdk0NepMWY+9TuI1BwT33Ww4JajwsgATzkQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBn1Ej7csOQ6dXlFgCnEVfXRZz5bMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvR2ZVU1B0eXc1RHAxZVVXQUtjUlY5ZEZuUGxzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBwYg MA0GCSqGSIb3DQEBCwUAA4IBAQAApnwwR9sfyTo8fvs83etVfsDe77r9C6jf1KS0 GVmBot+KOcbtvQvWT1z9yeNGKfzhFLFKSJdDmVry7lWMlHx4N67yAZkKe96VXEwO CnuY8L5N7VXxmUyV2Qn+rQrmZH1n1gGAZ5UzCLyboDEQWeFjelSj0HibDZp6/Soe yNZFsNFxAwcqYWpeocmFq0pGlWFhLcaK9cm/pAGrqci0UJM0L7oZrpVuePp37vpb A3q1ZhWNU2aLyKto6IR7CSf6PgiXMFhAUqx1q/ZCXA5KNkjQZ42IUSX1IhQ0rZvE DUSQ9eV7hElLUTyf1UopcOJGZ+L0h1v5tD+Utgdza1eD1j+K -----END CERTIFICATE-----Generated at Sat Jan 3 06:26:27 2026 by rpki-client