This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gIGJDIlE9GNKaXv92V-mzEtKbgk.roa File: gIGJDIlE9GNKaXv92V-mzEtKbgk.roa (raw, json) Hash identifier: YlyPgaxt7AMtGw+M3oiC4W1Gf5yHY/wI3ZhkyUH+eaw= Subject key identifier: 80:81:89:0C:89:44:F4:63:4A:69:7B:FD:D9:5F:A6:CC:4B:4A:6E:09 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CBA92B6FB383D4BEAF32CF77DA866 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gIGJDIlE9GNKaXv92V-mzEtKbgk.roa Signing time: Fri 02 Jan 2026 06:19:47 +0000 ROA not before: Fri 02 Jan 2026 06:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56758 IP address blocks: 2a0e:97c0:660::/44 maxlen: 48 2a0e:b107:17a0::/44 maxlen: 48 2a10:cc40:b000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ba:92:b6:fb:38:3d:4b:ea:f3:2c:f7:7d:a8:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8081890c8944f4634a697bfdd95fa6cc4b4a6e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bb:fc:28:47:d2:3f:e4:90:aa:80:4f:bf:4b: 0a:1e:e8:3a:14:a0:c6:c4:c8:8b:f5:16:85:cb:7b: ea:5e:aa:4b:b5:6e:3e:b6:62:39:cd:ce:3a:71:52: 93:07:c5:d3:88:a7:54:4b:68:8e:93:b4:8b:aa:f4: 5d:fb:9d:ce:29:06:2e:f3:6f:5f:97:c4:ab:29:3f: 10:96:f9:40:94:77:bf:9b:00:6b:75:46:89:4e:48: 72:01:1d:11:cd:5f:a8:3e:79:07:36:b6:c3:0a:28: e0:98:10:57:e8:11:cb:e7:bc:84:c7:b8:d3:a9:3e: c1:aa:85:29:7e:08:00:5b:05:bc:28:a7:18:9e:9e: d7:54:f0:5f:d4:e2:24:4e:82:25:5b:0c:52:3d:db: b7:92:88:a2:79:18:3d:54:6d:d3:b2:bf:46:9a:4e: 61:c4:27:fa:49:c8:1b:5c:41:f6:1d:39:0a:15:52: c8:fb:f2:9b:07:46:e4:fb:16:d7:a2:f8:22:2f:da: be:ce:6a:b4:71:93:2f:5a:e2:62:23:63:47:30:13: 70:00:f9:bf:0e:6e:bf:79:69:32:cc:0d:c9:2b:ee: e1:79:96:57:fd:20:95:9b:76:d5:34:72:25:26:51: c7:4f:42:b2:af:40:75:4f:9c:07:6e:97:b6:3b:72: e8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:81:89:0C:89:44:F4:63:4A:69:7B:FD:D9:5F:A6:CC:4B:4A:6E:09 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gIGJDIlE9GNKaXv92V-mzEtKbgk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:660::/44 2a0e:b107:17a0::/44 2a10:cc40:b000::/44 Signature Algorithm: sha256WithRSAEncryption 06:f2:29:18:5e:24:e8:69:e4:c4:3d:87:41:62:b1:27:3a:94: 2c:fd:d6:67:9a:ac:89:f6:01:58:4b:4f:e6:42:de:56:41:3a: 02:a2:77:0f:5f:c1:ac:35:1d:d5:f9:32:aa:21:64:bc:3f:93: a9:e2:4d:cc:92:ad:82:ee:a5:0a:5b:b4:4a:86:a9:64:fe:88: de:4d:1f:72:a8:a5:bf:2a:12:42:ad:0b:e8:24:04:e7:9f:f9: 2c:9e:94:3a:d6:e2:cb:05:bd:8e:53:3c:8f:62:1c:6b:c6:6f: 79:a6:59:a7:9e:e5:57:6d:4c:e2:9c:f7:91:e7:9d:f6:bb:e0: 0e:50:80:41:ac:a8:c8:13:07:86:b6:fd:e2:69:72:7a:95:bb: a5:ee:ad:73:ef:2f:f9:dd:b7:22:0d:dd:88:68:94:6e:de:33: c2:b0:41:89:68:6a:82:9d:2a:36:60:18:45:bf:5f:2a:18:28: f1:9d:8c:05:a3:a4:46:17:ac:c8:c3:5d:89:14:21:57:23:0b: 2a:8a:5f:e1:c7:66:6c:6d:95:23:eb:d3:5f:a1:cb:12:7d:29: 2e:4c:b6:53:8c:91:a7:a3:89:ef:9b:81:fc:fd:c8:3d:2b:b5: 8b:82:6f:2e:eb:22:ff:71:c0:f6:be:ef:cf:bb:f3:c5:aa:2c: 72:f0:93:5d -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9XLqStvs4PUvq8yz3fahmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDgxODkwYzg5NDRmNDYzNGE2OTdiZmRkOTVmYTZjYzRiNGE2ZTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrv8KEfSP+SQqoBPv0sKHug6FKDG xMiL9RaFy3vqXqpLtW4+tmI5zc46cVKTB8XTiKdUS2iOk7SLqvRd+53OKQYu829f l8SrKT8QlvlAlHe/mwBrdUaJTkhyAR0RzV+oPnkHNrbDCijgmBBX6BHL57yEx7jT qT7BqoUpfggAWwW8KKcYnp7XVPBf1OIkToIlWwxSPdu3koiieRg9VG3Tsr9Gmk5h xCf6ScgbXEH2HTkKFVLI+/KbB0bk+xbXovgiL9q+zmq0cZMvWuJiI2NHMBNwAPm/ Dm6/eWkyzA3JK+7heZZX/SCVm3bVNHIlJlHHT0Kyr0B1T5wHbpe2O3LoiQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFICBiQyJRPRjSml7/dlfpsxLSm4JMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvZ0lHSkRJbEU5R05LYVh2OTJWLW16RXRLYmdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcEKg6XwAZg AwcEKg6xBxegAwcEKhDMQLAAMA0GCSqGSIb3DQEBCwUAA4IBAQAG8ikYXiToaeTE PYdBYrEnOpQs/dZnmqyJ9gFYS0/mQt5WQToConcPX8GsNR3V+TKqIWS8P5Op4k3M kq2C7qUKW7RKhqlk/ojeTR9yqKW/KhJCrQvoJATnn/ksnpQ61uLLBb2OUzyPYhxr xm95plmnnuVXbUzinPeR5532u+AOUIBBrKjIEweGtv3iaXJ6lbul7q1z7y/53bci Dd2IaJRu3jPCsEGJaGqCnSo2YBhFv18qGCjxnYwFo6RGF6zIw12JFCFXIwsqil/h x2ZsbZUj69NfocsSfSkuTLZTjJGno4nvm4H8/cg9K7WLgm8u6yL/ccD2vu/Pu/PF qixy8JNd -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:48 2026 by rpki-client