This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GKiKmNathxGYBORiWQSnvvDoM_0.roa File: GKiKmNathxGYBORiWQSnvvDoM_0.roa (raw, json) Hash identifier: Nq6JcC6b+TXOz7igslr4Ka09vfG/+wK3e3/iJoZcFN0= Subject key identifier: 18:A8:8A:98:D6:AD:87:11:98:04:E4:62:59:04:A7:BE:F0:E8:33:FD Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CCE555A16B9CB30353A3DC35FFB45 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GKiKmNathxGYBORiWQSnvvDoM_0.roa Signing time: Fri 02 Jan 2026 06:19:52 +0000 ROA not before: Fri 02 Jan 2026 06:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142164 IP address blocks: 2a0e:b107:1470::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ce:55:5a:16:b9:cb:30:35:3a:3d:c3:5f:fb:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=18a88a98d6ad87119804e4625904a7bef0e833fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:36:89:37:5b:b1:42:88:8b:a3:7f:d4:1d:56: 4f:b0:f8:15:76:93:d9:67:4c:d7:74:83:e5:76:98: 7f:60:25:69:5b:1e:79:92:b3:dd:16:0a:f9:20:a1: 3f:64:7b:01:11:f9:97:9a:de:3c:66:f0:59:93:ac: 9b:dd:92:e5:49:db:89:fb:7a:3e:f8:d1:8b:61:7d: f3:56:0b:d1:5a:a3:d3:9e:f9:68:ae:ef:78:14:0b: 7e:86:75:59:02:69:69:28:63:1d:ce:59:2e:23:fb: 7e:ef:19:a8:1c:a5:c1:69:04:b3:95:c0:7f:0f:b5: 0b:ac:9b:3c:9e:78:ef:57:44:d7:4a:b0:14:19:1a: de:c0:d4:bd:bb:19:da:50:7f:f3:88:76:d5:fe:b7: 74:3f:9c:af:9f:93:0e:ed:e4:60:35:69:f0:d9:dc: 80:59:07:36:7d:fd:9c:a6:d7:d9:91:a6:62:1f:51: a2:3a:b8:08:f1:98:42:eb:61:4a:a2:15:cd:7d:00: bd:10:ab:f3:ac:43:09:d5:ae:b3:4c:56:5a:f5:32: 73:18:73:d2:9f:10:6f:14:4d:9d:62:dc:a1:da:9f: a1:ea:71:59:58:a8:34:35:df:26:c8:35:0e:96:8c: b4:f0:af:d4:51:87:47:4f:ff:0a:05:c0:8e:2f:e0: 5a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A8:8A:98:D6:AD:87:11:98:04:E4:62:59:04:A7:BE:F0:E8:33:FD X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GKiKmNathxGYBORiWQSnvvDoM_0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1470::/44 Signature Algorithm: sha256WithRSAEncryption 4e:e1:5f:27:ac:05:79:37:ca:75:91:93:50:f5:b7:6d:ed:3b: b3:36:76:d3:f0:22:63:8c:b7:ff:18:43:93:83:dd:e8:80:e3: b2:fe:41:b1:a5:37:67:94:c8:e9:ad:76:8b:01:69:9f:cd:c1: 05:db:09:ef:64:9e:92:37:87:80:02:80:9f:4e:9a:f3:b4:ac: 7a:b7:54:41:fe:83:de:8f:13:e6:be:62:bd:2d:18:44:d4:39: 42:aa:5e:d7:36:c9:70:be:c9:2d:ba:98:42:bc:b6:b6:7c:fe: 8f:9a:26:dc:96:28:cc:05:cc:c9:d4:4b:1f:44:eb:d2:71:54: b3:55:65:06:46:3f:91:39:0d:87:fd:6c:fb:36:1a:1a:59:e2: 13:5e:82:b0:5a:59:a0:1b:64:b8:61:8b:ff:4a:11:d4:8e:bd: be:a9:23:74:66:82:f0:ca:50:b8:5f:89:d8:89:94:e3:c4:d0: dd:bc:86:77:67:69:f0:0f:67:2d:29:26:07:b8:08:21:16:2e: 22:2a:f4:2a:32:02:ce:92:42:e3:9b:bb:f0:db:ce:07:a4:70: 8c:ee:28:75:83:56:a1:d3:93:c5:b9:ff:4b:6d:f9:6d:56:78: c3:15:f5:f3:74:c4:ba:be:ad:7d:93:f0:15:f2:c9:57:6d:a5: 32:4d:30:2d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XM5VWha5yzA1Oj3DX/tFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOGE4OGE5OGQ2YWQ4NzExOTgwNGU0NjI1OTA0YTdiZWYwZTgzM2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DaJN1uxQoiLo3/UHVZPsPgVdpPZ Z0zXdIPldph/YCVpWx55krPdFgr5IKE/ZHsBEfmXmt48ZvBZk6yb3ZLlSduJ+3o+ +NGLYX3zVgvRWqPTnvloru94FAt+hnVZAmlpKGMdzlkuI/t+7xmoHKXBaQSzlcB/ D7ULrJs8nnjvV0TXSrAUGRrewNS9uxnaUH/ziHbV/rd0P5yvn5MO7eRgNWnw2dyA WQc2ff2cptfZkaZiH1GiOrgI8ZhC62FKohXNfQC9EKvzrEMJ1a6zTFZa9TJzGHPS nxBvFE2dYtyh2p+h6nFZWKg0Nd8myDUOloy08K/UUYdHT/8KBcCOL+BafwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBioipjWrYcRmATkYlkEp77w6DP9MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvR0tpS21OYXRoeEdZQk9SaVdRU252dkRvTV8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxRw MA0GCSqGSIb3DQEBCwUAA4IBAQBO4V8nrAV5N8p1kZNQ9bdt7TuzNnbT8CJjjLf/ GEOTg93ogOOy/kGxpTdnlMjprXaLAWmfzcEF2wnvZJ6SN4eAAoCfTprztKx6t1RB /oPejxPmvmK9LRhE1DlCql7XNslwvsktuphCvLa2fP6PmibclijMBczJ1EsfROvS cVSzVWUGRj+ROQ2H/Wz7NhoaWeITXoKwWlmgG2S4YYv/ShHUjr2+qSN0ZoLwylC4 X4nYiZTjxNDdvIZ3Z2nwD2ctKSYHuAghFi4iKvQqMgLOkkLjm7vw284HpHCM7ih1 g1ah05PFuf9LbfltVnjDFfXzdMS6vq19k/AV8slXbaUyTTAt -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:25 2026 by rpki-client