This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0f1HHsiGaMls9yB2qm7qyuUa1fA.roa File: 0f1HHsiGaMls9yB2qm7qyuUa1fA.roa (raw, json) Hash identifier: KkgeYsUU+0j+EQrBXUtlru7f6/JOSRONgTADGLK/D08= Subject key identifier: D1:FD:47:1E:C8:86:68:C9:6C:F7:20:76:AA:6E:EA:CA:E5:1A:D5:F0 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CB64621AD32980100CDAE121B9123 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0f1HHsiGaMls9yB2qm7qyuUa1fA.roa Signing time: Fri 02 Jan 2026 06:19:46 +0000 ROA not before: Fri 02 Jan 2026 06:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50104 IP address blocks: 2a0e:97c0:600::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b6:46:21:ad:32:98:01:00:cd:ae:12:1b:91:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1fd471ec88668c96cf72076aa6eeacae51ad5f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:85:e0:79:e6:8f:e1:95:62:77:53:0e:86:e7: b5:2c:97:95:4b:41:dd:4f:74:44:5b:e1:34:61:79: 96:92:d4:fc:cb:c2:81:bc:38:73:38:05:da:f8:97: 18:d4:a8:7d:5b:50:2e:b0:52:66:2a:49:d3:6a:2e: 4a:05:26:e6:df:86:2d:09:0c:2e:9e:7e:00:18:c2: a8:32:83:52:a2:6c:5c:ee:3b:85:d4:d5:43:aa:75: 57:be:fe:fb:5b:c9:f6:9a:9b:28:13:26:45:9e:ac: ca:ed:a2:0c:44:64:fc:5c:59:f6:8e:cf:18:65:b5: f6:bc:9d:bb:2b:e5:c9:e8:84:f8:b9:3e:18:07:58: d7:dc:a3:09:88:c9:28:e1:c9:45:58:80:63:65:91: 40:a1:8a:c7:d7:f4:bd:2f:40:f7:c3:2f:9d:a5:9e: 45:5d:9b:46:5c:ca:7b:55:8e:08:36:db:53:3e:58: a8:1b:ff:6e:e9:73:cb:ec:e0:c6:b6:6c:7c:65:ed: 84:ed:0c:37:13:98:97:05:30:53:59:c2:5d:c0:18: 57:46:ab:f5:fa:45:9e:55:f7:c4:05:2c:8e:a4:15: 4a:bf:7c:dd:11:08:0c:64:4b:8a:98:d8:29:64:5d: 71:c9:a6:07:cd:a9:e1:e6:7e:3f:49:ee:34:23:b6: d1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FD:47:1E:C8:86:68:C9:6C:F7:20:76:AA:6E:EA:CA:E5:1A:D5:F0 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0f1HHsiGaMls9yB2qm7qyuUa1fA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:600::/48 Signature Algorithm: sha256WithRSAEncryption c0:2d:ea:12:a1:eb:79:14:e0:95:b5:f6:fd:62:cf:5c:e2:73: 2e:e2:98:5b:2b:a8:af:20:64:27:5e:04:e2:25:cb:56:89:7e: 55:da:65:47:53:30:10:7f:77:b7:2a:13:8f:d4:8a:b8:8c:66: 28:cf:51:a3:af:3c:f1:0a:91:45:c9:83:2e:29:72:2a:32:18: a2:ec:13:e1:dc:fc:62:1e:e6:1c:43:1d:bc:52:80:87:05:0a: be:bc:5f:93:9a:6c:2b:c5:68:e9:76:3a:d5:2c:72:a1:b8:56: f2:57:32:0b:c2:f2:ae:d0:d1:c6:ed:0c:81:31:1c:f5:31:5b: ba:b8:82:b8:44:de:92:4b:e3:c3:0e:f0:6c:31:86:ba:2a:31: b5:cf:73:78:5f:83:e9:09:34:94:21:0f:bd:dd:7e:83:e0:72: 06:86:29:1b:a3:e4:3a:15:46:86:d9:5b:58:e1:5f:e6:0a:59: f2:45:03:ee:95:33:c2:a5:9f:cd:63:15:31:7b:97:85:f6:11: 3b:1d:05:64:1b:48:bb:f2:0d:8b:2b:6c:75:b8:8e:e9:41:01: 7c:52:a7:07:c5:30:54:94:2c:e9:49:dc:f2:67:92:d4:92:d7: 8b:20:0b:cc:0b:06:49:d2:7e:2a:1f:ea:77:da:c1:7c:e5:b0: d6:c9:4f:a6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XLZGIa0ymAEAza4SG5EjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWZkNDcxZWM4ODY2OGM5NmNmNzIwNzZhYTZlZWFjYWU1MWFkNWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIXgeeaP4ZVid1MOhue1LJeVS0Hd T3REW+E0YXmWktT8y8KBvDhzOAXa+JcY1Kh9W1AusFJmKknTai5KBSbm34YtCQwu nn4AGMKoMoNSomxc7juF1NVDqnVXvv77W8n2mpsoEyZFnqzK7aIMRGT8XFn2js8Y ZbX2vJ27K+XJ6IT4uT4YB1jX3KMJiMko4clFWIBjZZFAoYrH1/S9L0D3wy+dpZ5F XZtGXMp7VY4INttTPlioG/9u6XPL7ODGtmx8Ze2E7Qw3E5iXBTBTWcJdwBhXRqv1 +kWeVffEBSyOpBVKv3zdEQgMZEuKmNgpZF1xyaYHzanh5n4/Se40I7bRSQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNH9Rx7IhmjJbPcgdqpu6srlGtXwMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvMGYxSEhzaUdhTWxzOXlCMnFtN3F5dVVhMWZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6XwAYA MA0GCSqGSIb3DQEBCwUAA4IBAQDALeoSoet5FOCVtfb9Ys9c4nMu4phbK6ivIGQn XgTiJctWiX5V2mVHUzAQf3e3KhOP1Iq4jGYoz1GjrzzxCpFFyYMuKXIqMhii7BPh 3PxiHuYcQx28UoCHBQq+vF+TmmwrxWjpdjrVLHKhuFbyVzILwvKu0NHG7QyBMRz1 MVu6uIK4RN6SS+PDDvBsMYa6KjG1z3N4X4PpCTSUIQ+93X6D4HIGhikbo+Q6FUaG 2VtY4V/mClnyRQPulTPCpZ/NYxUxe5eF9hE7HQVkG0i78g2LK2x1uI7pQQF8UqcH xTBUlCzpSdzyZ5LUkteLIAvMCwZJ0n4qH+p32sF85bDWyU+m -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:24 2026 by rpki-client