This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Gh5HutlDNU3TB1teFUOFdl6X9dA.roa File: Gh5HutlDNU3TB1teFUOFdl6X9dA.roa (raw, json) Hash identifier: DexObbJnswCNJj3yUsB2mBTc3+y7fUou48/qzVBs7g4= Subject key identifier: 1A:1E:47:BA:D9:43:35:4D:D3:07:5B:5E:15:43:85:76:5E:97:F5:D0 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D3E98303ED8F0005E6FDCA6B592F7 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Gh5HutlDNU3TB1teFUOFdl6X9dA.roa Signing time: Fri 02 Jan 2026 06:20:21 +0000 ROA not before: Fri 02 Jan 2026 06:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211479 IP address blocks: 2a0e:b107:1220::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:3e:98:30:3e:d8:f0:00:5e:6f:dc:a6:b5:92:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a1e47bad943354dd3075b5e154385765e97f5d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:24:1e:48:f7:68:76:70:d0:a3:7f:81:5e:71: 8a:a8:bf:8b:9a:37:11:52:6f:9c:96:d7:6d:02:dd: b5:f3:72:b5:32:0d:77:0b:b1:67:81:9a:21:09:42: b0:ce:49:93:1b:4e:56:09:5f:9c:67:7c:bb:ee:70: 5d:44:11:a5:e6:f9:3f:79:e4:ce:9b:2b:84:a2:68: 30:38:43:3e:8a:c8:be:a7:1c:67:97:0c:b1:9d:1a: 8f:e3:8e:21:ec:81:78:c4:db:4e:17:20:7f:89:c4: 26:f1:fb:50:29:d9:81:de:e5:99:d7:3d:33:e6:f2: 74:d4:59:1e:92:d5:f5:49:a6:a2:87:c4:47:6e:11: 0e:3c:20:2f:cf:23:be:41:6f:1a:7e:90:25:44:0c: fb:52:a4:73:36:64:42:1d:2e:fb:6b:07:a7:b2:79: b8:34:3a:5b:e4:0a:f9:51:ff:bc:a5:ba:00:e4:76: c7:86:6e:4a:b7:9f:76:c2:13:15:3f:43:03:b8:69: d3:10:7d:e5:e3:6f:d7:31:3b:0e:51:e2:82:2d:f8: 7a:93:d3:99:c5:4b:f7:2f:e7:0a:af:88:61:b3:d8: 45:60:9f:8a:42:16:68:d1:b1:14:76:6f:cc:57:c8: 72:a0:fc:da:8c:7f:1d:df:00:d2:da:6f:f6:40:79: 87:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:1E:47:BA:D9:43:35:4D:D3:07:5B:5E:15:43:85:76:5E:97:F5:D0 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Gh5HutlDNU3TB1teFUOFdl6X9dA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1220::/44 Signature Algorithm: sha256WithRSAEncryption 7d:de:52:77:b4:44:e9:44:b1:20:a7:51:82:46:b2:d2:3d:74: 6b:1c:2d:8a:be:5e:80:98:c5:a7:fb:26:3c:df:30:c1:4b:3a: 26:3d:35:2c:37:90:65:f8:9c:e5:f1:1f:7d:69:54:b2:8b:1f: 2f:0d:c8:44:55:0c:f9:00:46:4b:99:a6:1a:a7:23:86:7f:bf: 58:b7:9e:1b:07:57:3a:ae:b3:7b:5e:29:14:42:e8:3c:7b:3e: af:c7:58:67:58:05:d2:2d:c0:bb:a9:82:89:d3:e3:8a:55:a6: e2:4b:39:9b:f6:b0:e0:00:46:42:08:af:c9:8f:2e:e3:45:da: 0a:39:2a:c5:88:4b:98:8a:02:db:a5:93:f1:ca:8f:c1:82:3c: ea:c9:77:2b:5c:08:d2:20:af:cb:f2:ce:2e:0c:89:c1:1a:51: 4d:44:ef:cb:75:92:02:aa:67:07:18:dd:8b:3a:ba:e7:57:09: d0:97:5f:fa:e6:7c:42:9b:12:1e:ed:b5:b6:0a:bf:97:6e:a1: 5e:f5:d5:ad:4d:ca:fa:af:ff:d7:4f:dd:e5:00:5a:fc:c8:50: 3e:7d:91:18:54:2a:12:36:ef:d2:ee:b1:4e:57:93:29:b1:74: 53:4a:fc:7b:11:16:4f:28:ab:19:b5:0b:8f:7d:9c:a1:d3:47: a4:a2:9b:b1 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XT6YMD7Y8ABeb9ymtZL3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTFlNDdiYWQ5NDMzNTRkZDMwNzViNWUxNTQzODU3NjVlOTdmNWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriQeSPdodnDQo3+BXnGKqL+LmjcR Um+cltdtAt2183K1Mg13C7FngZohCUKwzkmTG05WCV+cZ3y77nBdRBGl5vk/eeTO myuEomgwOEM+isi+pxxnlwyxnRqP444h7IF4xNtOFyB/icQm8ftQKdmB3uWZ1z0z 5vJ01FkektX1Saaih8RHbhEOPCAvzyO+QW8afpAlRAz7UqRzNmRCHS77awensnm4 NDpb5Ar5Uf+8pboA5HbHhm5Kt592whMVP0MDuGnTEH3l42/XMTsOUeKCLfh6k9OZ xUv3L+cKr4hhs9hFYJ+KQhZo0bEUdm/MV8hyoPzajH8d3wDS2m/2QHmH2wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBoeR7rZQzVN0wdbXhVDhXZel/XQMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvR2g1SHV0bEROVTNUQjF0ZUZVT0ZkbDZYOWRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxIg MA0GCSqGSIb3DQEBCwUAA4IBAQB93lJ3tETpRLEgp1GCRrLSPXRrHC2Kvl6AmMWn +yY83zDBSzomPTUsN5Bl+Jzl8R99aVSyix8vDchEVQz5AEZLmaYapyOGf79Yt54b B1c6rrN7XikUQug8ez6vx1hnWAXSLcC7qYKJ0+OKVabiSzmb9rDgAEZCCK/Jjy7j RdoKOSrFiEuYigLbpZPxyo/BgjzqyXcrXAjSIK/L8s4uDInBGlFNRO/LdZICqmcH GN2LOrrnVwnQl1/65nxCmxIe7bW2Cr+XbqFe9dWtTcr6r//XT93lAFr8yFA+fZEY VCoSNu/S7rFOV5MpsXRTSvx7ERZPKKsZtQuPfZyh00ekopux -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:51 2026 by rpki-client