This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/guflmBU8dUyHmgFZQ7y9uFE13Ew.roa File: guflmBU8dUyHmgFZQ7y9uFE13Ew.roa (raw, json) Hash identifier: ZZYVGxjBYXp16Qvf6LgP6zNavZhvmPfekfoLJ22SeIg= Subject key identifier: 82:E7:E5:98:15:3C:75:4C:87:9A:01:59:43:BC:BD:B8:51:35:DC:4C Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CD05B8F34FFC16CC5BE5EF18DA960 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/guflmBU8dUyHmgFZQ7y9uFE13Ew.roa Signing time: Fri 02 Jan 2026 06:19:53 +0000 ROA not before: Fri 02 Jan 2026 06:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142597 IP address blocks: 2a0e:b107:15aa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d0:5b:8f:34:ff:c1:6c:c5:be:5e:f1:8d:a9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82e7e598153c754c879a015943bcbdb85135dc4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:92:af:2b:de:78:01:05:d4:8b:31:c5:39:ef: 57:2a:a4:57:67:da:84:06:7a:29:e7:29:aa:67:00: c3:e4:b3:f2:66:06:e1:a6:73:9b:f2:fa:e2:ed:3a: f3:14:cd:36:0f:b9:3c:5c:57:a1:5d:a7:ac:d7:95: b9:aa:33:30:a3:ce:f1:75:eb:f2:62:75:8d:c6:a0: 53:a4:37:41:0b:25:a1:35:9e:e3:90:d1:4c:4d:84: 1b:db:ab:f4:19:f0:08:11:a1:20:73:b9:a3:a4:2d: 16:2a:24:37:67:06:d6:31:ac:a8:d6:c6:7a:5c:c6: 88:34:d8:de:2b:b9:c8:03:b4:c2:79:47:9f:9e:97: 97:0a:3b:3a:90:97:32:dc:cc:17:b4:31:d8:8d:3d: 36:97:85:b4:ae:f3:38:18:4a:f5:f6:38:a4:40:44: 0d:26:d3:f4:a9:34:69:01:3c:09:a3:72:f2:89:6f: fd:d6:79:7f:a9:96:95:9a:30:e3:76:bf:f3:22:63: a7:04:af:50:cd:12:a0:e6:ab:b7:fd:34:66:e3:99: c6:63:e2:e2:cc:1f:42:aa:9b:50:09:74:ba:f4:54: 84:f2:b0:eb:aa:8b:7c:37:6e:dc:10:77:5f:0a:6e: 4e:79:4c:f7:64:ef:3c:22:d9:66:93:c2:76:e9:8a: 6f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E7:E5:98:15:3C:75:4C:87:9A:01:59:43:BC:BD:B8:51:35:DC:4C X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/guflmBU8dUyHmgFZQ7y9uFE13Ew.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:15aa::/48 Signature Algorithm: sha256WithRSAEncryption 9f:ba:f8:f6:b0:40:54:59:a2:94:95:27:01:02:b0:5a:c5:22: a1:34:69:2a:e1:65:68:35:d1:e3:f1:0c:a5:dd:30:dc:a2:19: c0:25:8d:02:d5:eb:e2:8e:90:db:4e:5a:7d:e3:fe:a0:87:75: d9:83:1c:28:29:31:bf:ea:1c:d8:9c:e3:a1:73:db:8f:8b:b2: c8:3b:51:a2:19:b4:47:3d:83:75:75:32:a1:18:1d:11:ff:57: 65:76:8d:c8:c7:95:7f:ee:c1:d5:e4:42:61:4d:99:55:b3:4b: 51:fd:d8:d4:5d:b9:0b:e9:0a:af:55:06:fa:3e:a4:c6:c7:da: 29:bf:d9:c8:b3:b0:ed:90:26:37:80:30:2a:08:fb:61:59:d0: 0f:dd:48:f9:f9:e0:78:5d:31:3f:c9:8e:b2:37:24:75:60:67: 1f:8a:98:84:46:08:f0:dd:38:82:3f:0c:30:54:18:77:9d:3a: 17:2b:f2:a8:6c:da:c7:ab:22:b5:2d:a1:16:9f:03:1d:e4:bc: 8c:07:df:b2:c9:ba:fc:aa:3c:bf:25:ed:4a:f3:ea:2f:5d:2d: 63:d4:c7:8f:23:99:17:fa:0b:62:2f:92:ac:4f:08:ac:3e:e5: 47:25:94:ed:aa:f6:15:09:51:5e:42:c1:38:fe:e4:a6:b5:21: af:13:66:8a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XNBbjzT/wWzFvl7xjalgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmU3ZTU5ODE1M2M3NTRjODc5YTAxNTk0M2JjYmRiODUxMzVkYzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJKvK954AQXUizHFOe9XKqRXZ9qE Bnop5ymqZwDD5LPyZgbhpnOb8vri7TrzFM02D7k8XFehXaes15W5qjMwo87xdevy YnWNxqBTpDdBCyWhNZ7jkNFMTYQb26v0GfAIEaEgc7mjpC0WKiQ3ZwbWMayo1sZ6 XMaINNjeK7nIA7TCeUefnpeXCjs6kJcy3MwXtDHYjT02l4W0rvM4GEr19jikQEQN JtP0qTRpATwJo3LyiW/91nl/qZaVmjDjdr/zImOnBK9QzRKg5qu3/TRm45nGY+Li zB9CqptQCXS69FSE8rDrqot8N27cEHdfCm5OeUz3ZO88Itlmk8J26YpvSQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFILn5ZgVPHVMh5oBWUO8vbhRNdxMMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvZ3VmbG1CVThkVXlIbWdGWlE3eTl1RkUxM0V3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBxWq MA0GCSqGSIb3DQEBCwUAA4IBAQCfuvj2sEBUWaKUlScBArBaxSKhNGkq4WVoNdHj 8Qyl3TDcohnAJY0C1evijpDbTlp94/6gh3XZgxwoKTG/6hzYnOOhc9uPi7LIO1Gi GbRHPYN1dTKhGB0R/1dldo3Ix5V/7sHV5EJhTZlVs0tR/djUXbkL6QqvVQb6PqTG x9opv9nIs7DtkCY3gDAqCPthWdAP3Uj5+eB4XTE/yY6yNyR1YGcfipiERgjw3TiC PwwwVBh3nToXK/KobNrHqyK1LaEWnwMd5LyMB9+yybr8qjy/Je1K8+ovXS1j1MeP I5kX+gtiL5KsTwisPuVHJZTtqvYVCVFeQsE4/uSmtSGvE2aK -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:26 2026 by rpki-client