This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gUNj-v6mWkdqoycAfw6tCd9nH0Y.roa File: gUNj-v6mWkdqoycAfw6tCd9nH0Y.roa (raw, json) Hash identifier: eL+T5YtiGGMCCsF/8C/3NP7s7MouXF859vZOEttbRUE= Subject key identifier: 81:43:63:FA:FE:A6:5A:47:6A:A3:27:00:7F:0E:AD:09:DF:67:1F:46 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CC8CF1174E1CAEC347B128A0F5915 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gUNj-v6mWkdqoycAfw6tCd9nH0Y.roa Signing time: Fri 02 Jan 2026 06:19:51 +0000 ROA not before: Fri 02 Jan 2026 06:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 140731 IP address blocks: 2a0e:b107:c30::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:c8:cf:11:74:e1:ca:ec:34:7b:12:8a:0f:59:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=814363fafea65a476aa327007f0ead09df671f46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:61:c9:40:9c:d3:4e:41:0a:bb:b9:cb:9b:c4: 11:39:66:bc:44:e4:09:25:21:38:78:dc:1d:07:5d: 41:61:27:eb:34:27:00:1d:78:b0:8a:80:45:fd:20: e0:3a:8a:28:d5:48:fe:b8:fe:64:d8:c3:98:d7:83: ca:ac:52:71:e5:f9:2e:be:09:4f:fd:ad:8a:e6:97: de:98:15:32:3b:98:5c:1a:79:ff:af:5f:a3:cd:08: 5b:4f:8a:76:1c:77:a3:63:3f:2e:2c:a8:c7:e3:51: 51:1b:e4:47:a3:06:42:08:8f:1e:fb:e8:bd:1a:db: 5e:ba:c4:83:2b:e6:0a:d3:00:17:fe:17:5b:a2:20: cf:bb:ab:6a:a1:07:a3:2a:69:67:10:0a:f6:1d:3b: da:96:24:7b:fa:70:43:bd:2c:3c:73:dd:ef:8a:18: f9:ab:9b:9b:66:fc:4d:1e:d4:f7:55:de:db:da:af: 91:b1:e8:9e:68:e5:21:72:24:3e:2e:ed:98:a8:d4: 9d:ec:82:4d:d1:e6:68:3c:ca:99:37:5a:97:03:c4: 54:37:dc:1d:51:c9:41:21:d3:0e:11:56:c9:67:c8: ca:ae:5b:f3:ea:48:57:03:01:23:be:e8:d1:a5:52: 90:86:8a:80:e6:a2:d9:ca:01:08:69:59:46:fc:da: 3f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:43:63:FA:FE:A6:5A:47:6A:A3:27:00:7F:0E:AD:09:DF:67:1F:46 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gUNj-v6mWkdqoycAfw6tCd9nH0Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:c30::/44 Signature Algorithm: sha256WithRSAEncryption 9b:52:7f:52:ca:57:4a:db:a9:22:ff:69:d2:73:d9:ab:3a:82: 0e:68:31:bc:c2:40:2d:74:07:e0:75:5a:a1:7b:16:18:a3:02: 01:e7:a6:2f:88:7c:9e:01:40:24:5b:b3:ea:24:cf:cc:c2:81: d9:4a:89:ac:b6:18:4e:f9:6c:f7:74:68:f3:2f:4e:97:b6:ba: d1:d8:08:ba:d7:bc:39:63:24:ba:c4:c5:c5:9e:4a:b5:3b:3d: 3f:ec:83:66:af:38:86:6d:24:a9:ce:67:77:af:7b:b2:ef:75: 8d:80:c1:ac:5e:19:3c:7d:0b:72:12:b5:4e:86:4d:75:5e:29: 89:e8:dd:fb:78:aa:48:f7:05:87:78:54:71:14:b9:16:51:2e: a2:1e:67:53:35:dd:8d:3d:44:53:ff:ec:7f:95:30:a7:9b:b2: 5b:ca:8a:f7:77:a5:43:fa:dd:8c:b7:c9:49:43:9b:ab:12:9e: e5:a7:52:da:ec:17:ac:22:bf:ce:2f:a4:27:9e:71:20:da:63: bf:e6:f0:90:a7:43:f1:f3:4b:2f:27:12:04:28:db:8e:a0:42: a7:23:38:78:12:a8:31:83:48:54:80:2b:32:13:37:87:47:9c: 21:b5:0c:73:bc:72:99:e4:1d:fd:cf:ff:1b:bd:ba:60:90:4b: 58:07:92:ef -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XMjPEXThyuw0exKKD1kVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTQzNjNmYWZlYTY1YTQ3NmFhMzI3MDA3ZjBlYWQwOWRmNjcxZjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWHJQJzTTkEKu7nLm8QROWa8ROQJ JSE4eNwdB11BYSfrNCcAHXiwioBF/SDgOooo1Uj+uP5k2MOY14PKrFJx5fkuvglP /a2K5pfemBUyO5hcGnn/r1+jzQhbT4p2HHejYz8uLKjH41FRG+RHowZCCI8e++i9 GtteusSDK+YK0wAX/hdboiDPu6tqoQejKmlnEAr2HTvaliR7+nBDvSw8c93vihj5 q5ubZvxNHtT3Vd7b2q+RseieaOUhciQ+Lu2YqNSd7IJN0eZoPMqZN1qXA8RUN9wd UclBIdMOEVbJZ8jKrlvz6khXAwEjvujRpVKQhoqA5qLZygEIaVlG/No/QQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIFDY/r+plpHaqMnAH8OrQnfZx9GMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvZ1VOai12Nm1Xa2Rxb3ljQWZ3NnRDZDluSDBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBwww MA0GCSqGSIb3DQEBCwUAA4IBAQCbUn9SyldK26ki/2nSc9mrOoIOaDG8wkAtdAfg dVqhexYYowIB56YviHyeAUAkW7PqJM/MwoHZSomsthhO+Wz3dGjzL06XtrrR2Ai6 17w5YyS6xMXFnkq1Oz0/7INmrziGbSSpzmd3r3uy73WNgMGsXhk8fQtyErVOhk11 XimJ6N37eKpI9wWHeFRxFLkWUS6iHmdTNd2NPURT/+x/lTCnm7Jbyor3d6VD+t2M t8lJQ5urEp7lp1La7BesIr/OL6QnnnEg2mO/5vCQp0Px80svJxIEKNuOoEKnIzh4 Eqgxg0hUgCsyEzeHR5whtQxzvHKZ5B39z/8bvbpgkEtYB5Lv -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:42 2026 by rpki-client