This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/GVUEDUnF5jUjS5nadTHF8d_a8jM.roa File: GVUEDUnF5jUjS5nadTHF8d_a8jM.roa (raw, json) Hash identifier: CNVQH1UrdXTDRK5lM23G9sOU0bUyYlN7wDHyKz8bSA4= Subject key identifier: 19:55:04:0D:49:C5:E6:35:23:4B:99:DA:75:31:C5:F1:DF:DA:F2:33 Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Certificate serial: 019B7D5C7A773A9F701B28D9D7B77D6D0C2B Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/GVUEDUnF5jUjS5nadTHF8d_a8jM.roa Signing time: Fri 02 Jan 2026 06:19:31 +0000 ROA not before: Fri 02 Jan 2026 06:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 150173 IP address blocks: 2a13:b487:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:7a:77:3a:9f:70:1b:28:d9:d7:b7:7d:6d:0c:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Validity Not Before: Jan 2 06:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1955040d49c5e635234b99da7531c5f1dfdaf233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6f:44:6e:ac:19:70:61:8e:8a:55:b8:c3:e1: c4:72:bb:7d:fe:b2:09:25:9b:b9:e5:30:ca:8a:d8: 42:a4:a6:ba:00:14:3d:b7:4f:0a:48:bc:fa:ca:d3: 80:8b:34:22:31:ae:a1:db:8d:6b:b9:e5:6b:10:48: d8:bb:70:ad:8d:80:fd:43:00:3d:8a:97:52:62:e3: 96:bc:e7:90:9b:f7:8a:87:a5:8e:6e:b5:4a:1e:43: 25:2f:01:ad:1d:e2:ed:44:6f:86:25:db:1a:2c:80: bb:89:d7:c0:65:05:e2:96:91:3b:23:94:17:43:e5: 5f:55:93:e3:81:06:e7:30:6c:f2:e2:a2:05:52:d6: 97:64:ac:33:99:73:ed:ab:06:05:04:74:dd:8d:a4: e4:32:c7:03:af:a5:5c:e2:b1:62:1f:7c:be:3c:17: 71:07:34:ac:3a:cb:65:4c:2f:a2:ad:10:9e:e6:6c: 20:ca:c4:eb:a7:0e:4a:1f:59:70:32:98:69:0b:d1: b1:fc:ef:86:81:71:1d:8a:cd:72:3c:59:ad:53:69: fe:4f:d0:04:6f:7a:6b:7e:06:11:5d:00:59:a4:e0: bc:38:99:56:b9:36:79:2d:44:05:6c:2a:10:e4:2d: f2:72:c2:0a:74:03:56:0f:0c:a6:ef:dd:7a:3d:31: 1c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:55:04:0D:49:C5:E6:35:23:4B:99:DA:75:31:C5:F1:DF:DA:F2:33 X509v3 Authority Key Identifier: keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/GVUEDUnF5jUjS5nadTHF8d_a8jM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:b487:5000::/40 Signature Algorithm: sha256WithRSAEncryption 1b:58:73:26:77:5b:8f:9c:bd:a6:2f:18:29:87:10:ad:99:4e: 91:42:1b:dd:77:f1:00:64:76:5c:2e:d7:c5:7f:ac:4e:01:95: 81:29:6c:cc:f8:f1:ba:8f:f1:e4:34:af:be:85:d2:94:89:90: 71:23:72:80:3e:7d:77:8e:7a:8b:b0:70:13:46:e0:90:79:28: 87:7c:0a:3d:c8:0b:76:45:c8:8a:d3:a7:98:7b:08:12:5a:bf: c4:eb:02:06:3a:ee:7b:7b:03:87:3d:83:4b:d6:65:92:40:63: 95:f5:de:98:04:2a:6d:6e:6a:f7:a3:ab:e1:40:3e:86:65:f8: a6:f2:a6:d5:d4:7d:7f:6b:14:a5:d4:b9:ca:d5:2e:ed:20:8d: 85:0d:c3:2a:b7:2a:4a:c8:42:e1:8a:6f:eb:5f:31:45:60:30: 03:90:8a:12:29:58:33:ea:f9:cc:f1:a0:73:93:34:73:df:0a: e4:e8:a6:db:2d:7b:25:7c:a8:d4:0a:05:8c:f1:ae:53:5f:32: c9:54:a9:6c:7a:d0:fb:ef:1b:16:11:1d:5a:5e:2c:a8:54:92: bc:76:a2:dd:89:27:ca:f3:98:40:6b:08:a1:93:c6:3c:2b:9b: 04:cc:be:36:ab:02:05:88:06:67:0e:87:c6:a4:3e:dc:2b:ce: 55:83:db:9c -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt9XHp3Op9wGyjZ17d9bQwrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYTk3N2Y4NTRjNjNkYzlmOTdhMThiZTdiMTMwMDIxMjFh NWQzODQwHhcNMjYwMTAyMDYxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTU1MDQwZDQ5YzVlNjM1MjM0Yjk5ZGE3NTMxYzVmMWRmZGFmMjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq29EbqwZcGGOilW4w+HEcrt9/rIJ JZu55TDKithCpKa6ABQ9t08KSLz6ytOAizQiMa6h241rueVrEEjYu3CtjYD9QwA9 ipdSYuOWvOeQm/eKh6WObrVKHkMlLwGtHeLtRG+GJdsaLIC7idfAZQXilpE7I5QX Q+VfVZPjgQbnMGzy4qIFUtaXZKwzmXPtqwYFBHTdjaTkMscDr6Vc4rFiH3y+PBdx BzSsOstlTC+irRCe5mwgysTrpw5KH1lwMphpC9Gx/O+GgXEdis1yPFmtU2n+T9AE b3prfgYRXQBZpOC8OJlWuTZ5LUQFbCoQ5C3ycsIKdANWDwym7916PTEcxwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFBlVBA1JxeY1I0uZ2nUxxfHf2vIzMB8GA1UdIwQY MBaAFGypd/hUxj3J+XoYvnsTACEhpdOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQt ZDZhNTk1MGNhZGYyLzEvR1ZVRURVbkY1alVqUzVuYWRUSEY4ZF9hOGpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQtZDZhNTk1MGNhZGYy LzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhO0h1Aw DQYJKoZIhvcNAQELBQADggEBABtYcyZ3W4+cvaYvGCmHEK2ZTpFCG9138QBkdlwu 18V/rE4BlYEpbMz48bqP8eQ0r76F0pSJkHEjcoA+fXeOeouwcBNG4JB5KId8Cj3I C3ZFyIrTp5h7CBJav8TrAgY67nt7A4c9g0vWZZJAY5X13pgEKm1uavejq+FAPoZl +KbyptXUfX9rFKXUucrVLu0gjYUNwyq3KkrIQuGKb+tfMUVgMAOQihIpWDPq+czx oHOTNHPfCuToptsteyV8qNQKBYzxrlNfMslUqWx60PvvGxYRHVpeLKhUkrx2ot2J J8rzmEBrCKGTxjwrmwTMvjarAgWIBmcOh8akPtwrzlWD25w= -----END CERTIFICATE-----Generated at Thu Jan 22 06:17:10 2026 by rpki-client