This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0DNy2zReg2eHUlDwYOYHUWQEcKM.roa File: 0DNy2zReg2eHUlDwYOYHUWQEcKM.roa (raw, json) Hash identifier: X9q1dQB7oBw8kAmJ0Typ2wMzeSQaG8CFhaVGJ24fJ0Y= Subject key identifier: D0:33:72:DB:34:5E:83:67:87:52:50:F0:60:E6:07:51:64:04:70:A3 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CF021814C7AB48511F11B5433882D Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0DNy2zReg2eHUlDwYOYHUWQEcKM.roa Signing time: Fri 02 Jan 2026 06:20:01 +0000 ROA not before: Fri 02 Jan 2026 06:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202747 IP address blocks: 2a10:2f00:189::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f0:21:81:4c:7a:b4:85:11:f1:1b:54:33:88:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d03372db345e8367875250f060e60751640470a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f0:15:79:24:83:60:b5:6a:f0:11:2e:e3:9a: 4d:55:37:6e:05:ca:b6:67:60:52:07:4d:48:d6:04: 49:aa:eb:24:bf:83:82:99:f3:1b:ed:c8:b5:7e:f1: a1:98:3c:82:fa:64:29:d8:68:91:36:1a:f3:76:a2: 35:e2:9a:34:cf:ac:fd:9d:34:6b:64:53:67:20:b6: 98:f6:f1:92:f8:f7:06:1a:43:32:1f:69:ea:36:9b: 6f:a4:5f:f0:fe:f8:1b:21:d7:7e:2c:74:0e:a5:b6: 1d:8e:1c:af:3f:70:ad:7d:dd:78:7e:ff:c3:99:68: 95:59:ff:ce:ab:af:8c:eb:06:aa:c0:47:9c:b2:af: 8a:e5:3c:4a:c1:64:66:08:d5:2f:c9:07:d4:52:8e: 53:4b:33:df:e9:ce:b9:a8:cc:5e:96:22:f8:04:52: e0:e0:24:3d:9e:88:12:fd:0f:bb:0d:a6:b6:70:42: b3:8c:a3:8c:fa:aa:2e:04:07:e9:9d:be:06:c6:1c: 3b:52:04:99:10:c9:e5:5d:cb:ba:16:bf:9d:d5:72: d8:9e:8a:e9:36:0e:9b:d8:de:6e:d7:f3:1d:55:ce: 25:8c:f3:92:10:b5:78:54:43:a8:2f:4e:4e:6f:00: 35:21:70:6e:be:cf:fe:13:ba:3c:a6:96:a1:a1:ce: 14:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:33:72:DB:34:5E:83:67:87:52:50:F0:60:E6:07:51:64:04:70:A3 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0DNy2zReg2eHUlDwYOYHUWQEcKM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:2f00:189::/48 Signature Algorithm: sha256WithRSAEncryption 85:97:26:b8:5f:7f:e5:1b:dc:bb:2f:7f:23:79:c4:1c:dd:30: ba:7c:75:56:72:66:af:f8:4b:87:59:d7:c0:fc:34:42:08:26: 96:14:50:fc:04:7c:98:77:14:55:5a:84:dc:8c:bb:fe:cb:c8: 8c:40:1c:5e:3b:09:4a:27:ae:7e:3f:9f:93:74:1e:c1:0c:5d: 4d:3b:a8:bf:45:f7:b3:1f:21:97:46:25:41:56:25:19:4a:da: 0c:7b:b2:e6:38:99:9b:b3:cb:23:ae:77:f0:0e:f0:06:7b:81: 38:6c:5f:75:29:72:f2:8e:53:e9:21:51:ff:1c:9c:cb:76:47: 28:c6:a3:69:03:14:2a:c4:81:3b:81:9e:98:a1:00:d4:c1:9a: 71:9b:2f:a1:b9:fb:2a:0b:18:8e:26:e3:52:2a:c3:14:62:97: e7:89:de:7d:56:7e:a8:fc:24:ed:2f:ef:63:fa:71:04:87:59: d9:fc:12:f9:90:c6:9e:20:bb:94:1f:90:65:da:9b:bb:07:b6: 1a:73:76:98:65:23:48:18:96:1c:20:8f:38:cd:ce:78:8b:22: 49:33:7e:5c:9d:c2:91:c8:0f:17:f0:1a:c5:7f:24:12:aa:0e: 36:fb:7d:89:bc:f1:79:29:cb:65:38:b5:10:98:68:55:17:04: 87:5e:bc:91 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XPAhgUx6tIUR8RtUM4gtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDMzNzJkYjM0NWU4MzY3ODc1MjUwZjA2MGU2MDc1MTY0MDQ3MGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfAVeSSDYLVq8BEu45pNVTduBcq2 Z2BSB01I1gRJquskv4OCmfMb7ci1fvGhmDyC+mQp2GiRNhrzdqI14po0z6z9nTRr ZFNnILaY9vGS+PcGGkMyH2nqNptvpF/w/vgbIdd+LHQOpbYdjhyvP3Ctfd14fv/D mWiVWf/Oq6+M6waqwEecsq+K5TxKwWRmCNUvyQfUUo5TSzPf6c65qMxeliL4BFLg 4CQ9nogS/Q+7Daa2cEKzjKOM+qouBAfpnb4Gxhw7UgSZEMnlXcu6Fr+d1XLYnorp Ng6b2N5u1/MdVc4ljPOSELV4VEOoL05ObwA1IXBuvs/+E7o8ppahoc4UAQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNAzcts0XoNnh1JQ8GDmB1FkBHCjMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvMEROeTJ6UmVnMmVIVWxEd1lPWUhVV1FFY0tNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAvAAGJ MA0GCSqGSIb3DQEBCwUAA4IBAQCFlya4X3/lG9y7L38jecQc3TC6fHVWcmav+EuH WdfA/DRCCCaWFFD8BHyYdxRVWoTcjLv+y8iMQBxeOwlKJ65+P5+TdB7BDF1NO6i/ RfezHyGXRiVBViUZStoMe7LmOJmbs8sjrnfwDvAGe4E4bF91KXLyjlPpIVH/HJzL dkcoxqNpAxQqxIE7gZ6YoQDUwZpxmy+hufsqCxiOJuNSKsMUYpfnid59Vn6o/CTt L+9j+nEEh1nZ/BL5kMaeILuUH5Bl2pu7B7Yac3aYZSNIGJYcII84zc54iyJJM35c ncKRyA8X8BrFfyQSqg42+32JvPF5KctlOLUQmGhVFwSHXryR -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:22 2026 by rpki-client