This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/GYDK-B1cTVaxD72tO0or-Ns0aKA.roa File: GYDK-B1cTVaxD72tO0or-Ns0aKA.roa (raw, json) Hash identifier: v/5rY/ZipplwbG7oMWwPzCGk4XTmXHPnHAONkJ1/p3U= Subject key identifier: 19:80:CA:F8:1D:5C:4D:56:B1:0F:BD:AD:3B:4A:2B:F8:DB:34:68:A0 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B79109C48FB63454F26BEFBACDE891C17 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/GYDK-B1cTVaxD72tO0or-Ns0aKA.roa Signing time: Thu 01 Jan 2026 10:18:10 +0000 ROA not before: Thu 01 Jan 2026 10:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200586 IP address blocks: 2a12:bec0:a0::/44 maxlen: 48 2a12:bec0:b0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:9c:48:fb:63:45:4f:26:be:fb:ac:de:89:1c:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1980caf81d5c4d56b10fbdad3b4a2bf8db3468a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f7:49:06:e8:66:cc:5a:3c:dd:00:7d:3a:52: be:15:26:67:af:48:41:8f:30:53:3a:2a:ff:59:5c: a3:2f:04:86:5c:16:32:d7:4f:2c:36:ff:42:a0:82: 31:d6:9c:d6:df:e8:3b:14:80:96:f6:b3:be:bf:0d: 6b:6f:db:88:01:73:65:08:49:fb:10:5c:f6:bf:3c: d2:14:6e:19:cf:39:30:c3:90:3b:43:2c:51:a9:58: 65:c3:61:4b:89:9b:56:5d:8e:15:23:68:3d:c7:3b: 9d:b9:95:59:82:18:5d:ce:12:2e:9a:19:38:f2:8d: 47:bc:d8:df:5c:06:78:ac:7e:1a:67:1c:05:c9:2b: 76:52:b5:ee:db:75:dd:6f:1a:a5:2e:28:22:01:e1: 4f:01:15:2e:da:5b:d2:14:fc:49:6b:bc:5f:e7:10: 1c:b5:10:f3:80:ee:36:29:71:a6:cc:e9:00:24:90: cd:39:4d:99:e8:ad:d6:57:6b:d0:c2:f1:3d:df:b8: db:66:b5:c0:59:59:74:b7:b5:17:a7:7e:6b:5c:51: c9:65:13:34:97:dd:3a:36:ce:3d:59:8e:3d:f6:ea: c0:2f:22:ed:57:d0:ca:15:07:b4:ab:9c:4f:dc:0d: 01:7e:e8:74:45:e6:36:c8:c0:89:4d:a1:cd:ed:75: 5e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:80:CA:F8:1D:5C:4D:56:B1:0F:BD:AD:3B:4A:2B:F8:DB:34:68:A0 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/GYDK-B1cTVaxD72tO0or-Ns0aKA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec0:a0::/43 Signature Algorithm: sha256WithRSAEncryption 7a:6e:6f:81:94:d0:6e:fa:cf:00:7d:a3:fd:9f:5d:c9:9c:ee: a7:e8:f5:5e:6a:37:99:b6:be:8f:8f:36:c4:31:12:b8:d7:25: 65:40:7f:4a:48:b2:db:3a:9f:eb:8e:6d:fa:e4:ab:2d:e6:77: e8:67:d2:d7:f7:3b:30:7a:82:dc:46:6e:5c:84:ac:e6:63:fd: eb:e5:e6:bc:46:ac:ae:b5:a8:3f:da:0c:b8:86:6d:46:18:20: ad:7a:cf:d7:0a:36:0e:81:12:50:1d:1c:82:f8:b2:e5:a4:a4: 80:66:4c:69:e6:e2:cf:21:b6:e1:33:2c:f2:10:4e:b2:7c:73: 79:f9:30:9c:9e:1a:9f:93:b4:f7:59:f9:7c:a5:46:8a:7c:80: c5:39:52:50:0e:21:79:79:e1:5d:a4:6a:d6:d7:a3:91:ea:36: c3:c4:ad:76:09:ac:ab:ae:05:c6:0f:cc:29:84:26:74:3e:66: ab:ec:e9:f4:fd:df:4b:7f:d6:b6:24:6e:a9:ee:b9:6d:34:8b: e3:3c:17:c8:19:c2:88:27:d8:cb:8d:06:7f:40:f1:c4:91:b7: b4:40:50:c0:be:ed:8e:b4:35:05:e7:f9:3f:66:f1:a7:87:9c: 31:5b:b1:bb:29:2e:cf:b6:cb:e0:0d:19:6f:b9:47:4f:66:cd: 3b:84:e2:e5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EJxI+2NFTya++6zeiRwXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTgwY2FmODFkNWM0ZDU2YjEwZmJkYWQzYjRhMmJmOGRiMzQ2OGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvdJBuhmzFo83QB9OlK+FSZnr0hB jzBTOir/WVyjLwSGXBYy108sNv9CoIIx1pzW3+g7FICW9rO+vw1rb9uIAXNlCEn7 EFz2vzzSFG4Zzzkww5A7QyxRqVhlw2FLiZtWXY4VI2g9xzuduZVZghhdzhIumhk4 8o1HvNjfXAZ4rH4aZxwFySt2UrXu23XdbxqlLigiAeFPARUu2lvSFPxJa7xf5xAc tRDzgO42KXGmzOkAJJDNOU2Z6K3WV2vQwvE937jbZrXAWVl0t7UXp35rXFHJZRM0 l906Ns49WY499urALyLtV9DKFQe0q5xP3A0Bfuh0ReY2yMCJTaHN7XVeRwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBmAyvgdXE1WsQ+9rTtKK/jbNGigMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvR1lESy1CMWNUVmF4RDcydE8wb3ItTnMwYUtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFKhK+wACg MA0GCSqGSIb3DQEBCwUAA4IBAQB6bm+BlNBu+s8AfaP9n13JnO6n6PVeajeZtr6P jzbEMRK41yVlQH9KSLLbOp/rjm365Kst5nfoZ9LX9zsweoLcRm5chKzmY/3r5ea8 Rqyutag/2gy4hm1GGCCtes/XCjYOgRJQHRyC+LLlpKSAZkxp5uLPIbbhMyzyEE6y fHN5+TCcnhqfk7T3Wfl8pUaKfIDFOVJQDiF5eeFdpGrW16OR6jbDxK12CayrrgXG D8wphCZ0Pmar7On0/d9Lf9a2JG6p7rltNIvjPBfIGcKIJ9jLjQZ/QPHEkbe0QFDA vu2OtDUF5/k/ZvGnh5wxW7G7KS7PtsvgDRlvuUdPZs07hOLl -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:50 2026 by rpki-client