This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/05dJnjX2XorGTHQfrKvjhWfsRV4.roa File: 05dJnjX2XorGTHQfrKvjhWfsRV4.roa (raw, json) Hash identifier: KiOoN3ONMmepEer9bJk46C8CXe0dkRBysfrL6UFiDg4= Subject key identifier: D3:97:49:9E:35:F6:5E:8A:C6:4C:74:1F:AC:AB:E3:85:67:EC:45:5E Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Certificate serial: 019B7A5B4A21CD977A60C7D1FA49F5FFDA5C Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/05dJnjX2XorGTHQfrKvjhWfsRV4.roa Signing time: Thu 01 Jan 2026 16:19:21 +0000 ROA not before: Thu 01 Jan 2026 16:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51847 IP address blocks: 2a12:f8c1:50::/48 maxlen: 48 2a12:f8c1:51::/48 maxlen: 48 2a12:f8c1:52::/48 maxlen: 48 2a12:f8c1:53::/48 maxlen: 48 2a12:f8c1:54::/48 maxlen: 48 2a12:f8c1:55::/48 maxlen: 48 2a12:f8c1:56::/48 maxlen: 48 2a12:f8c1:57::/48 maxlen: 48 2a12:f8c1:58::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 19:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:4a:21:cd:97:7a:60:c7:d1:fa:49:f5:ff:da:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Validity Not Before: Jan 1 16:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d397499e35f65e8ac64c741facabe38567ec455e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6b:ed:8a:98:80:92:94:78:76:eb:6e:29:6c: f3:8c:d5:53:97:5c:d5:ef:cb:67:9e:c2:c8:3c:6a: 60:93:2f:57:a6:87:a6:a8:9f:00:62:42:c8:45:17: 08:b2:73:3f:5a:11:fd:8e:89:37:d1:10:fa:f3:1d: c5:72:8b:b4:18:77:b9:a3:22:99:6f:be:46:32:b8: f8:ec:6a:b2:bb:cf:c4:e0:e5:77:76:39:35:3e:b3: 41:8b:13:97:67:ff:a5:57:9d:83:1a:26:0b:24:0f: 2d:a2:5c:03:9b:63:8d:e7:eb:af:d6:a3:ed:cc:67: a7:e2:c2:16:99:0b:70:a4:36:75:c0:72:64:53:f6: 9d:47:95:97:74:7f:e9:c9:3a:9f:ba:da:c6:1d:8b: f0:cd:c7:60:fe:c1:76:e9:91:72:4e:6a:43:c7:a5: a0:ac:41:82:e5:07:e8:c4:0b:45:e7:28:3e:f0:49: 28:3c:89:db:07:dd:ec:bd:e0:3c:88:2c:25:a7:f5: 42:95:e5:cc:03:ce:4f:6d:97:b2:b9:04:0c:8b:9d: 7b:37:ea:23:8f:47:3b:d2:b5:c2:a0:38:1c:3b:c4: ab:9b:55:45:3f:03:f2:36:f9:15:63:55:fd:a4:28: bd:60:c6:55:4a:5c:b9:a5:5f:20:48:33:63:70:97: a5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:97:49:9E:35:F6:5E:8A:C6:4C:74:1F:AC:AB:E3:85:67:EC:45:5E X509v3 Authority Key Identifier: keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/05dJnjX2XorGTHQfrKvjhWfsRV4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:f8c1:50::-2a12:f8c1:58:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 75:71:d3:43:97:5b:79:d3:3d:d2:a5:8c:fa:7d:78:59:c6:c3: 41:d2:07:70:63:99:c2:b8:24:dd:0a:c0:ac:21:1b:28:b1:67: 84:2e:73:cb:2e:7b:76:25:57:40:09:07:84:ea:4b:df:20:0d: ae:c4:a5:65:9b:4f:cf:32:6b:37:b6:c3:09:cf:34:b6:29:93: 88:2b:fc:c7:29:19:a1:20:94:29:b4:c6:23:72:73:a4:29:95: 6f:46:27:30:e1:27:10:c8:8d:c2:07:38:f3:78:3e:70:a7:ce: 20:e6:ea:47:ec:03:02:2c:b5:df:18:81:bc:7b:27:61:4d:62: 93:40:9a:ff:36:e9:69:9f:0b:5f:d1:e9:83:53:be:bf:b0:3f: c1:42:e1:3c:12:ed:ac:af:d7:2c:ee:92:85:8b:98:b8:e2:4d: a6:72:08:6d:01:da:3d:b6:a8:fc:dd:7f:c1:55:2c:45:dc:71: 7e:aa:35:5d:44:27:b5:90:4d:32:f7:8d:38:dc:1b:e3:29:b0: 0a:25:e3:da:65:a1:93:88:ad:16:b3:93:90:37:b3:ee:e5:64: a6:c3:67:27:e2:13:ef:a4:37:62:c7:a9:fe:5e:27:ae:24:4a: 15:f6:b7:d2:42:2e:c2:13:4f:6b:a6:94:61:3b:53:5e:f4:42: 28:95:6e:37 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt6W0ohzZd6YMfR+kn1/9pcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMzkyZTkyOTMxN2FlNmJkZTA4YTVhM2I5OGEyYjcwMWRk Yjg5M2EwHhcNMjYwMTAxMTYxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzk3NDk5ZTM1ZjY1ZThhYzY0Yzc0MWZhY2FiZTM4NTY3ZWM0NTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGvtipiAkpR4dutuKWzzjNVTl1zV 78tnnsLIPGpgky9XpoemqJ8AYkLIRRcIsnM/WhH9jok30RD68x3Fcou0GHe5oyKZ b75GMrj47Gqyu8/E4OV3djk1PrNBixOXZ/+lV52DGiYLJA8tolwDm2ON5+uv1qPt zGen4sIWmQtwpDZ1wHJkU/adR5WXdH/pyTqfutrGHYvwzcdg/sF26ZFyTmpDx6Wg rEGC5QfoxAtF5yg+8EkoPInbB93sveA8iCwlp/VCleXMA85PbZeyuQQMi517N+oj j0c70rXCoDgcO8Srm1VFPwPyNvkVY1X9pCi9YMZVSly5pV8gSDNjcJelrQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFNOXSZ419l6Kxkx0H6yr44Vn7EVeMB8GA1UdIwQY MBaAFGM5LpKTF65r3gilo7mKK3Ad24k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEt ODcyNTBmNWEwN2NjLzEvMDVkSm5qWDJYb3JHVEhRZnJLdmpoV2ZzUlY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEtODcyNTBmNWEwN2Nj LzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwQqEvjB AFADBwAqEvjBAFgwDQYJKoZIhvcNAQELBQADggEBAHVx00OXW3nTPdKljPp9eFnG w0HSB3BjmcK4JN0KwKwhGyixZ4Quc8sue3YlV0AJB4TqS98gDa7EpWWbT88yaze2 wwnPNLYpk4gr/McpGaEglCm0xiNyc6QplW9GJzDhJxDIjcIHOPN4PnCnziDm6kfs AwIstd8Ygbx7J2FNYpNAmv826WmfC1/R6YNTvr+wP8FC4TwS7ayv1yzukoWLmLji TaZyCG0B2j22qPzdf8FVLEXccX6qNV1EJ7WQTTL3jTjcG+MpsAol49ploZOIrRaz k5A3s+7lZKbDZyfiE++kN2LHqf5eJ64kShX2t9JCLsITT2umlGE7U170QiiVbjc= -----END CERTIFICATE-----Generated at Sun Jan 18 04:10:01 2026 by rpki-client