This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ge_zdyIGFtl_TtrqRyB1YGlogtg.roa File: Ge_zdyIGFtl_TtrqRyB1YGlogtg.roa (raw, json) Hash identifier: JWv9zjjs6u8x58cNR7DOFnZ/g3fuon1qQjo9pLm4p+Q= Subject key identifier: 19:EF:F3:77:22:06:16:D9:7F:4E:DA:EA:47:20:75:60:69:68:82:D8 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CDB58DA8CE8DD33AF1CA856DC3B34 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ge_zdyIGFtl_TtrqRyB1YGlogtg.roa Signing time: Fri 02 Jan 2026 06:19:56 +0000 ROA not before: Fri 02 Jan 2026 06:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198739 IP address blocks: 2a0e:b107:2200::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:db:58:da:8c:e8:dd:33:af:1c:a8:56:dc:3b:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19eff377220616d97f4edaea47207560696882d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c1:1d:b6:e4:88:b1:aa:d7:82:11:9d:0e:fe: ab:5c:0d:3a:1b:d3:10:13:c7:62:f9:ef:79:23:74: 5c:05:c8:75:92:8d:24:97:04:70:41:8d:53:fd:66: 74:ca:77:54:93:a9:57:65:5a:79:0f:62:2b:3a:6b: 67:d2:b5:be:9c:d2:94:53:34:59:93:cb:eb:46:14: 5c:59:36:3c:34:db:d0:89:8a:50:61:3f:1c:22:55: 20:8b:10:6e:90:d8:ea:1e:93:a6:7b:e6:99:e7:24: a3:54:dd:7d:12:4f:5b:8a:09:33:3e:6b:78:56:e2: ff:96:f3:d9:76:81:ed:60:b5:1f:4e:76:76:8c:28: 5f:d9:dc:f7:ed:38:c6:8b:98:b9:36:7c:d1:70:87: 46:21:26:e0:50:43:2c:28:33:d8:1c:6b:59:0b:40: 00:1c:98:5f:4e:3d:14:c5:c0:9d:b3:0e:00:e3:1a: c7:11:d6:88:35:16:e0:fd:9c:2e:89:c0:7f:c3:ba: 74:16:ce:9f:16:ca:71:ec:9d:ee:83:83:69:c0:de: 7c:91:9c:2d:27:c7:44:2a:99:a3:e8:53:a2:60:44: ae:f5:27:c0:27:37:a9:6f:77:64:09:99:82:68:ef: 3f:9b:0f:32:0c:61:af:39:ea:d6:3f:b4:b4:e4:e9: ab:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:EF:F3:77:22:06:16:D9:7F:4E:DA:EA:47:20:75:60:69:68:82:D8 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ge_zdyIGFtl_TtrqRyB1YGlogtg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:2200::/44 Signature Algorithm: sha256WithRSAEncryption 00:4c:ad:09:16:38:e6:56:9b:ca:3a:e4:40:f9:1a:f0:cc:4a: 0d:6e:09:3c:28:cd:85:52:15:ba:bd:78:f9:b3:e0:20:bc:78: 9a:51:90:19:a3:2e:e1:de:c9:b4:c2:04:15:f2:47:3a:b1:ce: 55:9d:8f:c2:ce:c2:1b:29:3e:5e:10:22:fb:08:f8:c4:16:48: b2:90:0c:38:e4:37:bb:8e:20:86:8b:34:18:50:34:e1:73:a6: 71:51:b1:86:67:a6:ca:ff:ba:0e:60:b3:ab:2d:ef:c6:33:61: ce:05:ce:c9:b4:15:58:7e:b4:fb:e2:85:b3:81:91:15:cc:0b: 23:8b:28:0a:05:58:90:ff:dd:e1:1d:01:8e:b1:68:5b:58:bd: ac:ff:1c:25:b9:76:1d:91:a1:3d:c5:82:07:30:78:38:4a:24: e3:3b:dc:00:20:55:5c:44:a9:15:8a:a7:b4:ab:5c:f5:95:3a: ba:6b:1f:1e:fd:dc:b7:ce:7b:ee:74:d1:a7:65:cb:65:8d:c1: 6b:74:1d:49:37:f1:bb:0c:b6:9a:38:81:da:49:64:4f:d2:fa: b9:81:9c:57:b9:82:e3:8e:25:f0:f1:a2:00:6f:00:fc:8c:4a: 30:53:04:a3:92:e2:57:1d:d1:86:1f:05:39:61:61:6b:72:3c: fb:e9:9d:ce -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XNtY2ozo3TOvHKhW3Ds0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWVmZjM3NzIyMDYxNmQ5N2Y0ZWRhZWE0NzIwNzU2MDY5Njg4MmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MEdtuSIsarXghGdDv6rXA06G9MQ E8di+e95I3RcBch1ko0klwRwQY1T/WZ0yndUk6lXZVp5D2IrOmtn0rW+nNKUUzRZ k8vrRhRcWTY8NNvQiYpQYT8cIlUgixBukNjqHpOme+aZ5ySjVN19Ek9bigkzPmt4 VuL/lvPZdoHtYLUfTnZ2jChf2dz37TjGi5i5NnzRcIdGISbgUEMsKDPYHGtZC0AA HJhfTj0UxcCdsw4A4xrHEdaINRbg/ZwuicB/w7p0Fs6fFspx7J3ug4NpwN58kZwt J8dEKpmj6FOiYESu9SfAJzepb3dkCZmCaO8/mw8yDGGvOerWP7S05OmriwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBnv83ciBhbZf07a6kcgdWBpaILYMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvR2VfemR5SUdGdGxfVHRycVJ5QjFZR2xvZ3RnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xByIA MA0GCSqGSIb3DQEBCwUAA4IBAQAATK0JFjjmVpvKOuRA+RrwzEoNbgk8KM2FUhW6 vXj5s+AgvHiaUZAZoy7h3sm0wgQV8kc6sc5VnY/CzsIbKT5eECL7CPjEFkiykAw4 5De7jiCGizQYUDThc6ZxUbGGZ6bK/7oOYLOrLe/GM2HOBc7JtBVYfrT74oWzgZEV zAsjiygKBViQ/93hHQGOsWhbWL2s/xwluXYdkaE9xYIHMHg4SiTjO9wAIFVcRKkV iqe0q1z1lTq6ax8e/dy3znvudNGnZctljcFrdB1JN/G7DLaaOIHaSWRP0vq5gZxX uYLjjiXw8aIAbwD8jEowUwSjkuJXHdGGHwU5YWFrcjz76Z3O -----END CERTIFICATE-----Generated at Fri Jan 9 13:12:01 2026 by rpki-client