This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/giDrM6hKMAypC57aULaG-FJTPeg.roa
File: giDrM6hKMAypC57aULaG-FJTPeg.roa (raw, json)
Hash identifier: prNaK912rl6VKzzZKhqjIfptNdV50SNMVosTuFyGnwA=
Subject key identifier: 82:20:EB:33:A8:4A:30:0C:A9:0B:9E:DA:50:B6:86:F8:52:53:3D:E8
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019B7D5CDA56B499C3C9ABD5BB3322A2ED36
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/giDrM6hKMAypC57aULaG-FJTPeg.roa
Signing time: Fri 02 Jan 2026 06:19:55 +0000
ROA not before: Fri 02 Jan 2026 06:19:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198276
IP address blocks: 2a0e:b107:2030::/44 maxlen: 48
2a0e:b107:2030::/48 maxlen: 48
2a0e:b107:2031::/48 maxlen: 48
2a0e:b107:2032::/48 maxlen: 48
2a0e:b107:2033::/48 maxlen: 48
2a0e:b107:2034::/48 maxlen: 48
2a0e:b107:2035::/48 maxlen: 48
2a0e:b107:2036::/48 maxlen: 48
2a0e:b107:2037::/48 maxlen: 48
2a0e:b107:2038::/48 maxlen: 48
2a0e:b107:2039::/48 maxlen: 48
2a0e:b107:203a::/48 maxlen: 48
2a0e:b107:203b::/48 maxlen: 48
2a0e:b107:203c::/48 maxlen: 48
2a0e:b107:203d::/48 maxlen: 48
2a0e:b107:203e::/48 maxlen: 48
2a0e:b107:203f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Jan 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:da:56:b4:99:c3:c9:ab:d5:bb:33:22:a2:ed:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 06:19:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8220eb33a84a300ca90b9eda50b686f852533de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:71:72:d2:a5:2c:44:48:4b:0e:92:13:e2:5e:
98:cb:81:70:48:1d:ea:18:0e:31:93:2a:11:c9:e9:
11:18:e9:a9:74:11:42:8a:6f:1d:5b:d6:a7:2d:30:
bb:0d:dd:cd:4f:61:5d:23:83:43:4f:85:d1:85:51:
1d:5b:8d:78:19:07:e3:a5:a5:f9:27:0c:8a:66:e1:
2d:7c:3a:a0:9e:1e:d3:fa:f6:4a:67:28:5d:d6:ef:
cb:48:99:b5:7f:19:3b:37:f0:cd:34:68:1d:c7:a2:
ea:23:18:f7:c5:2d:a5:c8:4d:b4:d7:24:ae:41:10:
22:d7:de:4d:42:0b:eb:19:f3:79:5b:b5:2a:63:1b:
f2:ab:25:3e:17:68:c0:a3:b6:ed:f7:5e:35:ce:f3:
5a:d0:29:8c:a4:3f:50:8a:31:ae:7e:16:4f:95:6a:
a6:aa:f2:67:f6:3a:27:c2:81:b6:b7:33:28:65:d2:
d2:1b:d2:c3:eb:e8:75:c2:70:da:9b:c5:0a:da:35:
f7:39:64:8e:38:c9:72:3f:f3:e6:e6:c1:b3:4c:63:
00:d0:13:d2:39:90:bb:dc:b8:06:c8:3b:62:91:fe:
1a:69:82:91:6b:2f:1d:0d:a0:b8:a4:f1:26:dd:1a:
d3:25:43:ba:05:9c:d0:7d:e6:52:a6:89:6d:32:fe:
08:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:20:EB:33:A8:4A:30:0C:A9:0B:9E:DA:50:B6:86:F8:52:53:3D:E8
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/giDrM6hKMAypC57aULaG-FJTPeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2030::/44
Signature Algorithm: sha256WithRSAEncryption
39:8c:9f:ac:0f:cc:6a:e7:de:3f:06:ec:90:dd:de:de:c3:25:
37:91:d8:ed:b5:28:f4:05:24:34:98:fc:e4:5c:21:fa:a1:d5:
d8:15:8c:a7:a4:16:1e:ea:e2:0a:8b:ff:5e:2d:f1:b7:b5:f1:
9f:f0:d4:02:d0:f9:91:60:54:31:38:aa:b2:83:56:e8:93:9a:
90:65:a9:c6:e6:b5:f8:4c:17:cd:46:63:7b:0e:37:80:1a:0d:
d7:60:e3:90:b5:7c:d8:d0:2e:0b:a6:5a:f5:3d:cd:19:98:5b:
2b:1d:d6:82:10:03:d2:1d:ee:3e:bf:73:ee:e6:d5:19:09:de:
0d:ba:72:55:af:0b:db:d4:37:36:21:e2:90:89:d4:f6:c3:2b:
c0:2f:71:64:3b:1e:be:d2:9f:5e:7d:1c:3e:1c:60:4f:a8:a4:
68:40:68:7e:4a:70:c1:f3:fb:a1:93:48:07:62:0c:6d:a5:5d:
42:e7:c5:e5:6b:23:b3:41:05:24:9f:b5:c6:eb:1d:d0:09:c9:
ee:c4:8e:7c:71:28:5d:86:2a:26:92:e1:73:75:eb:29:b8:0e:
94:38:4c:5a:59:de:0c:ec:22:69:b7:80:54:69:28:a9:d3:e1:
3d:7f:57:31:a6:d7:cc:13:f3:60:52:58:33:73:2a:60:19:e9:
8d:98:d1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 13:13:25 2026 by rpki-client