This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/G52urYOpkf3XPWBfPPvzqEru6VQ.roa File: G52urYOpkf3XPWBfPPvzqEru6VQ.roa (raw, json) Hash identifier: CFc5Duuz1+Ee6i1ReFqfXcYJIbj4lSEVq26JcmOr7ZY= Subject key identifier: 1B:9D:AE:AD:83:A9:91:FD:D7:3D:60:5F:3C:FB:F3:A8:4A:EE:E9:54 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CF80F1A274E563B2CC3FEC4467BAD Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/G52urYOpkf3XPWBfPPvzqEru6VQ.roa Signing time: Fri 02 Jan 2026 06:20:03 +0000 ROA not before: Fri 02 Jan 2026 06:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204134 IP address blocks: 2a0e:97c0:750::/44 maxlen: 48 2a0e:97c0:750::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f8:0f:1a:27:4e:56:3b:2c:c3:fe:c4:46:7b:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b9daead83a991fdd73d605f3cfbf3a84aeee954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:82:e1:f7:19:23:0b:57:5f:74:50:43:2c:63: 64:26:25:fa:c9:72:3e:a3:a5:77:c7:0a:ff:50:91: fb:92:dd:b2:cc:16:ad:fc:6a:31:5d:81:a5:50:92: 7f:9b:d7:27:2d:20:53:be:e2:c1:55:36:8c:46:db: 2b:4a:44:05:39:4c:af:45:d4:09:5e:90:32:04:b0: 33:3b:81:2f:26:24:e8:b5:4d:07:4d:ca:67:ba:27: 96:b2:e9:b1:ac:4b:5b:a6:51:85:91:ec:4f:90:7b: 94:0a:54:f6:f3:7f:43:6a:55:a1:4e:56:0d:20:e3: 80:85:f4:eb:74:16:83:f0:b7:0b:87:bf:28:9c:6b: f7:b4:6a:c8:d1:2d:32:70:e2:20:90:65:ee:68:b1: 47:4a:4b:f9:83:0d:29:6d:29:d0:4e:f7:a1:a2:69: 71:91:fc:70:f9:da:c5:a4:bc:ce:32:68:5f:74:47: d8:94:8e:ac:59:3b:83:96:92:7d:13:a2:6b:13:26: 8f:34:6f:23:86:b4:84:3c:2d:1f:cd:f8:2d:7e:e2: 60:4f:40:2c:25:e1:1e:6e:24:e0:39:73:97:89:da: a6:0d:6a:d1:c7:47:98:db:23:a5:bf:af:36:83:b0: 8b:09:d8:a5:04:6c:bb:90:0f:15:19:1e:8d:e6:51: c4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:9D:AE:AD:83:A9:91:FD:D7:3D:60:5F:3C:FB:F3:A8:4A:EE:E9:54 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/G52urYOpkf3XPWBfPPvzqEru6VQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:750::/44 Signature Algorithm: sha256WithRSAEncryption 4f:26:09:70:4c:55:01:a7:dc:18:75:56:e0:84:e0:70:40:f1: d7:f3:03:e9:ac:bc:41:46:60:56:49:9a:fc:4d:97:e4:7e:01: 57:95:a2:58:b4:80:66:17:5d:4b:b6:5c:f0:69:ab:89:91:4a: af:18:a7:50:b5:cf:b7:0f:c1:b5:ec:1f:b0:45:e3:b6:b4:a5: 03:99:4f:06:83:7a:38:f2:70:9c:16:08:82:1a:38:33:c0:1c: 7f:05:9a:b6:c4:e2:d6:4c:88:f0:00:8e:10:48:dc:7a:9f:7c: 53:c0:db:88:a9:dc:05:65:3d:44:cb:72:d7:33:44:4f:d7:08: f9:e7:6c:71:75:ec:4b:97:3b:08:e9:18:fd:b2:b8:d9:79:f4: d7:88:53:d7:c4:e4:bf:0e:b4:8f:1f:85:db:b7:b6:d9:83:06: f0:f0:7a:ff:7e:fc:63:b0:be:ad:12:25:e4:cd:bd:7b:0b:34: f7:38:43:30:94:ea:bc:a1:b1:4f:47:1d:f4:4a:aa:9d:40:80: 8f:35:8f:30:b6:68:35:08:1a:2b:47:22:3a:d1:36:41:9c:d8: 41:4e:c6:39:08:c9:11:07:44:e7:57:b2:ff:ce:d0:1b:1d:e9: 3e:79:d8:cd:85:6b:d4:ea:84:d0:d4:7f:3c:82:2c:90:de:82: cd:74:bc:71 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XPgPGidOVjssw/7ERnutMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjlkYWVhZDgzYTk5MWZkZDczZDYwNWYzY2ZiZjNhODRhZWVlOTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoLh9xkjC1dfdFBDLGNkJiX6yXI+ o6V3xwr/UJH7kt2yzBat/GoxXYGlUJJ/m9cnLSBTvuLBVTaMRtsrSkQFOUyvRdQJ XpAyBLAzO4EvJiTotU0HTcpnuieWsumxrEtbplGFkexPkHuUClT2839DalWhTlYN IOOAhfTrdBaD8LcLh78onGv3tGrI0S0ycOIgkGXuaLFHSkv5gw0pbSnQTvehomlx kfxw+drFpLzOMmhfdEfYlI6sWTuDlpJ9E6JrEyaPNG8jhrSEPC0fzfgtfuJgT0As JeEebiTgOXOXidqmDWrRx0eY2yOlv682g7CLCdilBGy7kA8VGR6N5lHEKQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBudrq2DqZH91z1gXzz786hK7ulUMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvRzUydXJZT3BrZjNYUFdCZlBQdnpxRXJ1NlZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAdQ MA0GCSqGSIb3DQEBCwUAA4IBAQBPJglwTFUBp9wYdVbghOBwQPHX8wPprLxBRmBW SZr8TZfkfgFXlaJYtIBmF11LtlzwaauJkUqvGKdQtc+3D8G17B+wReO2tKUDmU8G g3o48nCcFgiCGjgzwBx/BZq2xOLWTIjwAI4QSNx6n3xTwNuIqdwFZT1Ey3LXM0RP 1wj552xxdexLlzsI6Rj9srjZefTXiFPXxOS/DrSPH4Xbt7bZgwbw8Hr/fvxjsL6t EiXkzb17CzT3OEMwlOq8obFPRx30SqqdQICPNY8wtmg1CBorRyI60TZBnNhBTsY5 CMkRB0TnV7L/ztAbHek+edjNhWvU6oTQ1H88giyQ3oLNdLxx -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:08 2026 by rpki-client