This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/63iECvpt_JyxIKUmSa2AzJswxBU.roa File: 63iECvpt_JyxIKUmSa2AzJswxBU.roa (raw, json) Hash identifier: iOxmTGzgMD5vvJktQMYNiGdektBYNo31XkG4N94XQm8= Subject key identifier: EB:78:84:0A:FA:6D:FC:9C:B1:20:A5:26:49:AD:80:CC:9B:30:C4:15 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6D825024AB204CF61E544F6C45B70 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/63iECvpt_JyxIKUmSa2AzJswxBU.roa Signing time: Fri 02 Jan 2026 12:20:22 +0000 ROA not before: Fri 02 Jan 2026 12:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199680 IP address blocks: 2a0c:9a40:8880::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d8:25:02:4a:b2:04:cf:61:e5:44:f6:c4:5b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb78840afa6dfc9cb120a52649ad80cc9b30c415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ae:2a:73:73:93:b3:b0:a9:34:6b:c6:3c:1e: bc:5b:0e:f7:04:1d:05:21:d2:a3:e9:c8:bb:b5:30: 52:34:07:87:2f:c3:c0:e9:8e:26:fe:fc:71:3b:83: 25:2f:89:9c:c3:8f:00:28:cb:cc:ff:ac:28:81:60: 11:38:ee:62:21:90:fc:1d:9c:bb:5f:1c:12:19:79: 2e:28:21:20:b3:fb:1d:7b:c9:e6:ed:f3:c9:e9:20: e6:da:93:2b:f5:9e:c9:da:96:a1:fa:18:cf:5e:6d: f4:64:d6:56:8a:c1:1f:fa:c6:d9:52:e3:98:d6:e3: d2:fa:4f:f0:84:3f:47:a8:b3:4a:37:02:5d:fe:1f: df:04:13:d0:77:c4:3f:57:f4:db:44:f9:2b:6e:c4: cb:a1:05:d3:29:32:a6:6c:ee:08:43:38:c1:58:0a: e8:ab:ad:0c:49:d8:3d:06:cc:83:eb:ec:ee:a0:b3: 3d:34:ec:c6:04:6e:b6:bf:7a:07:84:06:6f:48:2b: ce:ba:cd:d0:b5:00:21:15:7b:8c:1a:bd:d3:1b:54: 1f:5e:74:95:a5:2b:72:91:48:ae:85:19:e1:7b:3c: 00:d9:22:f5:30:c7:88:c6:25:c2:cf:81:40:46:b5: 09:6d:dc:8a:f7:dd:9d:ac:d6:1b:a4:06:cc:e3:cb: 98:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:78:84:0A:FA:6D:FC:9C:B1:20:A5:26:49:AD:80:CC:9B:30:C4:15 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/63iECvpt_JyxIKUmSa2AzJswxBU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8880::/44 Signature Algorithm: sha256WithRSAEncryption 2f:74:d5:7b:e3:60:7b:3b:44:ba:ef:f3:50:2e:20:2b:ba:c2: 12:a3:39:98:a9:9a:99:63:74:86:52:77:82:d8:6d:a3:fb:83: e2:1d:b9:b4:d7:6e:9d:fc:a8:81:58:74:a0:bc:dc:b5:8b:a1: fd:40:2f:2e:f8:8b:1c:5c:e5:00:dd:d3:02:09:e8:a1:08:b0: 1e:d0:e8:26:ef:0b:12:2a:3c:b3:67:55:da:ad:84:bc:1a:85: 76:8e:04:9b:02:1b:72:18:2a:e8:80:ab:19:b5:49:ae:d8:fe: f1:1d:eb:7b:5f:d9:6b:c4:64:02:3e:43:5f:a7:56:d4:12:62: b3:f9:bf:71:35:da:c7:b0:61:9f:08:c0:e1:17:c8:4c:e7:3c: d6:f0:3c:f5:c4:10:b9:a1:d6:93:55:92:30:f4:b8:28:10:55: 34:fa:88:8b:cc:8b:bc:08:9f:40:a8:74:76:2e:e1:d8:91:c4: f4:eb:69:96:4b:97:8c:a5:c1:f6:e9:b1:fe:96:70:8c:74:fa: fb:c0:01:d4:8a:32:88:7a:24:37:a5:6a:48:db:f1:86:05:7d: c2:0a:a3:a0:69:48:d3:ec:d3:69:3b:d4:b6:23:41:4a:5d:39: 56:3b:d1:c5:79:c2:ac:aa:10:eb:64:01:ff:be:37:6d:56:39: 08:8b:c4:c0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+ptglAkqyBM9h5UT2xFtwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjc4ODQwYWZhNmRmYzljYjEyMGE1MjY0OWFkODBjYzliMzBjNDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr64qc3OTs7CpNGvGPB68Ww73BB0F IdKj6ci7tTBSNAeHL8PA6Y4m/vxxO4MlL4mcw48AKMvM/6wogWAROO5iIZD8HZy7 XxwSGXkuKCEgs/sde8nm7fPJ6SDm2pMr9Z7J2pah+hjPXm30ZNZWisEf+sbZUuOY 1uPS+k/whD9HqLNKNwJd/h/fBBPQd8Q/V/TbRPkrbsTLoQXTKTKmbO4IQzjBWAro q60MSdg9BsyD6+zuoLM9NOzGBG62v3oHhAZvSCvOus3QtQAhFXuMGr3TG1QfXnSV pStykUiuhRnhezwA2SL1MMeIxiXCz4FARrUJbdyK992drNYbpAbM48uY9wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOt4hAr6bfycsSClJkmtgMybMMQVMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvNjNpRUN2cHRfSnl4SUtVbVNhMkF6SnN3eEJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQIiA MA0GCSqGSIb3DQEBCwUAA4IBAQAvdNV742B7O0S67/NQLiArusISozmYqZqZY3SG UneC2G2j+4PiHbm0126d/KiBWHSgvNy1i6H9QC8u+IscXOUA3dMCCeihCLAe0Ogm 7wsSKjyzZ1XarYS8GoV2jgSbAhtyGCrogKsZtUmu2P7xHet7X9lrxGQCPkNfp1bU EmKz+b9xNdrHsGGfCMDhF8hM5zzW8Dz1xBC5odaTVZIw9LgoEFU0+oiLzIu8CJ9A qHR2LuHYkcT062mWS5eMpcH26bH+lnCMdPr7wAHUijKIeiQ3pWpI2/GGBX3CCqOg aUjT7NNpO9S2I0FKXTlWO9HFecKsqhDrZAH/vjdtVjkIi8TA -----END CERTIFICATE-----Generated at Sat Jan 10 22:34:39 2026 by rpki-client