This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GX73oqtj_g8crIjl0L3wAGOmsdk.roa File: GX73oqtj_g8crIjl0L3wAGOmsdk.roa (raw, json) Hash identifier: /KFXn4Ia4MgZ3JlcDd/ORKMThBxNZHjD76qVKM/Cf/Y= Subject key identifier: 19:7E:F7:A2:AB:63:FE:0F:1C:AC:88:E5:D0:BD:F0:00:63:A6:B1:D9 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D34D5D3304E457FA8D472686233FF Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GX73oqtj_g8crIjl0L3wAGOmsdk.roa Signing time: Fri 02 Jan 2026 06:20:18 +0000 ROA not before: Fri 02 Jan 2026 06:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211042 IP address blocks: 2a0e:b107:14c0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:34:d5:d3:30:4e:45:7f:a8:d4:72:68:62:33:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=197ef7a2ab63fe0f1cac88e5d0bdf00063a6b1d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ee:5f:30:b2:b4:26:3e:52:17:ee:11:52:ef: 41:18:d0:2b:4b:60:e4:23:97:04:fc:49:b9:76:2a: ec:71:82:3c:53:3a:70:69:67:64:62:88:00:bf:06: 91:e4:15:40:d3:34:7e:f7:41:bb:d0:7e:f8:8c:cf: c2:1a:a2:50:1c:40:3f:07:d3:40:a4:44:23:da:83: 04:10:af:aa:66:fd:fa:83:7d:79:56:89:5e:b9:6e: 7e:d5:94:8e:7b:f0:82:47:38:3a:bc:93:3e:26:30: 48:e5:4c:e3:45:84:1f:35:d3:86:48:e0:ed:24:7d: 13:f1:c6:8e:b2:a5:ee:5e:e7:a6:08:27:73:55:31: b4:34:f4:0f:8c:46:ed:21:9b:b9:aa:cb:96:a1:80: 9b:c0:f2:e8:b5:e3:38:46:1c:0a:26:df:eb:81:a6: c6:ab:91:4b:4c:75:9d:d3:39:46:e8:46:b9:7d:29: e6:2b:e3:64:c4:61:9f:e7:19:57:7b:31:c4:ce:d1: 13:0d:aa:32:15:a1:5e:8a:03:11:42:1d:3f:e6:67: 97:bd:1a:26:6f:28:bd:a4:d6:c7:1f:ab:e8:74:38: 4b:14:97:f6:f3:13:61:a2:12:2a:87:cb:a7:d6:2d: 20:98:a6:f3:4e:af:fd:45:aa:50:08:74:93:ae:df: d5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:7E:F7:A2:AB:63:FE:0F:1C:AC:88:E5:D0:BD:F0:00:63:A6:B1:D9 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GX73oqtj_g8crIjl0L3wAGOmsdk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:14c0::/44 Signature Algorithm: sha256WithRSAEncryption 14:a9:ad:4e:0c:49:84:2b:cf:69:48:4a:b5:f8:cb:9f:bf:70: a5:e9:2b:2c:12:cf:60:cb:34:18:b1:19:1e:83:53:f3:3b:91: 34:01:3c:e1:d6:41:95:2a:3e:c4:0c:2e:82:17:b1:6b:d7:ee: a7:3c:44:e3:04:7e:04:33:e1:d4:9c:e7:04:f7:e0:03:18:bb: 6c:0d:7b:52:e3:44:4a:82:16:98:19:ed:a4:91:0f:67:66:7b: c5:97:25:02:13:9a:08:04:66:3a:82:d5:b8:a8:c6:17:3a:e8: bc:78:a4:60:74:b9:ea:93:a2:e7:02:aa:6e:a5:96:05:41:6c: bf:4d:22:d3:44:45:b7:11:38:1d:c6:e0:e2:1e:a2:b4:0f:16: ec:7b:81:69:b3:42:5d:f8:12:30:3f:2e:0e:cc:82:3d:1b:32: e5:2d:00:9d:1a:0c:e2:02:18:7c:6b:b3:78:02:11:75:dd:54: 1a:0e:46:29:87:c6:11:34:8a:4b:1c:fa:99:27:f7:b5:a8:a2: 24:56:1a:8e:75:79:73:54:7b:0c:34:37:71:2e:83:b2:c3:48: 7a:5a:2b:67:0e:d5:35:1d:46:a5:70:86:e0:ef:77:5d:ce:1e: 5d:91:57:d8:3b:ca:cf:b7:35:83:c9:7e:3f:9f:86:1f:11:44: f9:37:ef:30 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XTTV0zBORX+o1HJoYjP/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTdlZjdhMmFiNjNmZTBmMWNhYzg4ZTVkMGJkZjAwMDYzYTZiMWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0u5fMLK0Jj5SF+4RUu9BGNArS2Dk I5cE/Em5dirscYI8UzpwaWdkYogAvwaR5BVA0zR+90G70H74jM/CGqJQHEA/B9NA pEQj2oMEEK+qZv36g315VoleuW5+1ZSOe/CCRzg6vJM+JjBI5UzjRYQfNdOGSODt JH0T8caOsqXuXuemCCdzVTG0NPQPjEbtIZu5qsuWoYCbwPLoteM4RhwKJt/rgabG q5FLTHWd0zlG6Ea5fSnmK+NkxGGf5xlXezHEztETDaoyFaFeigMRQh0/5meXvRom byi9pNbHH6vodDhLFJf28xNhohIqh8un1i0gmKbzTq/9RapQCHSTrt/VTQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBl+96KrY/4PHKyI5dC98ABjprHZMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvR1g3M29xdGpfZzhjcklqbDBMM3dBR09tc2RrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxTA MA0GCSqGSIb3DQEBCwUAA4IBAQAUqa1ODEmEK89pSEq1+Mufv3Cl6SssEs9gyzQY sRkeg1PzO5E0ATzh1kGVKj7EDC6CF7Fr1+6nPETjBH4EM+HUnOcE9+ADGLtsDXtS 40RKghaYGe2kkQ9nZnvFlyUCE5oIBGY6gtW4qMYXOui8eKRgdLnqk6LnAqpupZYF QWy/TSLTREW3ETgdxuDiHqK0Dxbse4Fps0Jd+BIwPy4OzII9GzLlLQCdGgziAhh8 a7N4AhF13VQaDkYph8YRNIpLHPqZJ/e1qKIkVhqOdXlzVHsMNDdxLoOyw0h6Witn DtU1HUalcIbg73ddzh5dkVfYO8rPtzWDyX4/n4YfEUT5N+8w -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:49 2026 by rpki-client