This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/g5-Zci8BaPOrvJde7rW947mdvUw.roa File: g5-Zci8BaPOrvJde7rW947mdvUw.roa (raw, json) Hash identifier: VGff+BAlruVvWRsG7EUKClGyIluM60Db2mXsViAs3QU= Subject key identifier: 83:9F:99:72:2F:01:68:F3:AB:BC:97:5E:EE:B5:BD:E3:B9:9D:BD:4C Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D064E1E2B2F2621F1D7A4B796C395 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/g5-Zci8BaPOrvJde7rW947mdvUw.roa Signing time: Fri 02 Jan 2026 06:20:07 +0000 ROA not before: Fri 02 Jan 2026 06:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207079 IP address blocks: 2a0e:b107:17f0::/44 maxlen: 48 2a0e:b107:1ed0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:06:4e:1e:2b:2f:26:21:f1:d7:a4:b7:96:c3:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=839f99722f0168f3abbc975eeeb5bde3b99dbd4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:da:01:bc:c6:5e:99:ec:33:6e:f3:9b:5f:ea: 05:22:cd:41:fb:8d:f1:10:0e:ef:e6:f2:1f:8e:c8: 3e:b4:39:e2:8b:43:e8:54:81:9f:63:38:e2:cf:cf: f2:3b:0d:0d:0b:ec:13:fd:f5:a3:ee:e4:3a:89:da: d7:7a:99:33:89:4e:07:b4:f5:19:b7:36:45:b2:22: 2e:52:82:6c:26:1e:c7:05:d3:ce:d3:0d:ef:2a:00: 96:89:6d:b7:78:a3:3d:0f:8a:c7:67:75:a1:ad:67: 17:65:ed:a3:60:08:da:a4:73:aa:36:ac:1b:7e:d3: d0:2d:6d:38:01:c8:00:e0:5c:34:32:5a:1c:c0:d9: 03:42:c3:15:0e:d4:9d:6f:ac:6d:c9:f1:9f:b5:17: 00:a6:9c:87:c5:97:0f:29:61:59:51:36:a9:f3:54: 4d:ad:6f:54:37:a6:71:54:f9:82:bb:07:4d:5d:c2: 28:b0:27:93:ac:09:12:96:a4:f3:31:b2:83:b4:ac: 58:ea:eb:95:02:f6:c7:08:6c:d6:b1:e7:3c:31:4c: 95:b3:9d:d8:22:cc:5b:5a:4e:87:6c:f5:f3:7f:b4: 6c:a4:d9:47:93:97:be:49:6a:d6:72:53:2f:cd:a6: 73:7e:1a:de:e7:0a:e6:1a:39:3a:5c:4e:6f:85:89: 19:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9F:99:72:2F:01:68:F3:AB:BC:97:5E:EE:B5:BD:E3:B9:9D:BD:4C X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/g5-Zci8BaPOrvJde7rW947mdvUw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:17f0::/44 2a0e:b107:1ed0::/44 Signature Algorithm: sha256WithRSAEncryption 63:0f:6b:d0:d1:3b:e9:f0:ac:0e:a9:cb:ba:7c:c7:b8:0e:c7: 7d:18:33:f0:a2:4a:fa:86:5d:68:75:f1:81:ec:0d:94:82:bf: ea:18:29:28:9a:ff:ea:2e:15:62:1f:dd:b1:0b:a6:26:a2:51: a0:5b:a9:70:0b:21:87:d4:f6:fe:dd:f6:69:6d:50:a6:b8:77: cb:25:a8:89:36:1a:7d:5b:cc:3e:d9:1a:82:d8:e2:d5:f0:66: cb:0e:d4:b5:e5:ef:79:2c:55:14:de:b6:49:9a:5e:56:0a:34: 96:30:44:a5:a4:f3:aa:b0:4c:d2:3f:e9:80:ad:fa:8d:32:36: fc:f7:0d:ad:87:de:34:c4:fa:18:aa:85:b4:5f:9e:4a:f5:c0: 37:e8:fe:cc:9b:90:56:f5:b7:42:56:71:cf:51:2a:fc:57:23: eb:62:eb:46:3e:83:27:94:f0:71:2c:46:ca:2d:1a:37:e2:2c: 61:ad:ee:b4:b5:73:44:4f:4b:9c:11:5b:fd:26:06:9f:c0:ef: c8:04:34:fb:b4:76:4e:d6:ec:eb:48:98:8f:fe:e5:b8:af:dd: d2:e5:67:45:69:e2:e9:4e:e3:cc:c2:90:ab:cf:68:b1:7e:3f: 82:48:94:41:ff:5b:e7:23:35:bf:92:89:1a:33:c7:92:5a:df: 62:2f:7a:0d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XQZOHisvJiHx16S3lsOVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzlmOTk3MjJmMDE2OGYzYWJiYzk3NWVlZWI1YmRlM2I5OWRiZDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69oBvMZemewzbvObX+oFIs1B+43x EA7v5vIfjsg+tDnii0PoVIGfYzjiz8/yOw0NC+wT/fWj7uQ6idrXepkziU4HtPUZ tzZFsiIuUoJsJh7HBdPO0w3vKgCWiW23eKM9D4rHZ3WhrWcXZe2jYAjapHOqNqwb ftPQLW04AcgA4Fw0MlocwNkDQsMVDtSdb6xtyfGftRcAppyHxZcPKWFZUTap81RN rW9UN6ZxVPmCuwdNXcIosCeTrAkSlqTzMbKDtKxY6uuVAvbHCGzWsec8MUyVs53Y IsxbWk6HbPXzf7RspNlHk5e+SWrWclMvzaZzfhre5wrmGjk6XE5vhYkZbwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIOfmXIvAWjzq7yXXu61veO5nb1MMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvZzUtWmNpOEJhUE9ydkpkZTdyVzk0N21kdlV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg6xBxfw AwcEKg6xBx7QMA0GCSqGSIb3DQEBCwUAA4IBAQBjD2vQ0Tvp8KwOqcu6fMe4Dsd9 GDPwokr6hl1odfGB7A2Ugr/qGCkomv/qLhViH92xC6YmolGgW6lwCyGH1Pb+3fZp bVCmuHfLJaiJNhp9W8w+2RqC2OLV8GbLDtS15e95LFUU3rZJml5WCjSWMESlpPOq sEzSP+mArfqNMjb89w2th940xPoYqoW0X55K9cA36P7Mm5BW9bdCVnHPUSr8VyPr YutGPoMnlPBxLEbKLRo34ixhre60tXNET0ucEVv9JgafwO/IBDT7tHZO1uzrSJiP /uW4r93S5WdFaeLpTuPMwpCrz2ixfj+CSJRB/1vnIzW/kokaM8eSWt9iL3oN -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:06 2026 by rpki-client