This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-9rvIYdbauWwb19Hw7YzPMsSodU.roa File: 1-9rvIYdbauWwb19Hw7YzPMsSodU.roa (raw, json) Hash identifier: HFw3Lys2TP0Y6iO6a32urEhRpfu8oQZ1bhaxwBNg0SA= Subject key identifier: FB:DA:EF:21:87:5B:6A:E5:B0:6F:5F:47:C3:B6:33:3C:CB:12:A1:D5 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CE8CF58065D284712063F35F688E0 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-9rvIYdbauWwb19Hw7YzPMsSodU.roa Signing time: Fri 02 Jan 2026 06:19:59 +0000 ROA not before: Fri 02 Jan 2026 06:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200993 IP address blocks: 2a0e:b107:2691::/48 maxlen: 48 2a0e:b107:278a::/48 maxlen: 48 2a10:ccc1:1337::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e8:cf:58:06:5d:28:47:12:06:3f:35:f6:88:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbdaef21875b6ae5b06f5f47c3b6333ccb12a1d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:35:15:c1:f4:71:73:18:51:a7:71:f0:1c:67: 13:c2:de:d6:03:91:ea:88:14:9a:de:d5:93:8c:61: d7:8a:d0:9a:44:dd:c2:3c:42:df:42:fd:fc:02:3f: f8:af:d4:84:03:d3:ee:30:34:39:e6:3c:3f:7d:27: 72:a1:b8:25:70:84:84:0e:6b:28:7d:d4:29:c9:19: 71:4f:e5:44:71:47:c7:60:81:4b:08:5f:a3:20:cd: 1f:d9:ed:9e:86:bc:d5:32:f7:1f:ca:4c:c0:24:f7: 39:66:69:7c:a9:f3:36:e9:e9:73:b7:b0:b8:fc:f1: 09:3e:84:e6:89:93:30:cb:16:cf:9d:e8:77:52:39: a0:41:24:2f:81:e0:aa:cd:29:29:81:bb:1c:9c:4d: 72:00:3a:64:eb:54:d8:d2:6f:16:56:2a:1c:81:c3: e0:1f:eb:6c:aa:82:c1:60:62:a3:d9:d2:3f:15:96: 44:03:fe:93:02:a0:4c:37:cf:76:79:a9:d6:cc:58: 25:49:73:d4:31:24:fa:24:7d:b0:ad:19:c8:f0:4e: 4f:f2:4f:34:db:9e:82:88:32:44:f9:57:7d:69:55: 8d:1d:41:8f:e1:52:b8:70:bd:e9:38:17:72:26:4b: d7:39:10:71:c1:a8:28:ae:e4:c3:95:02:20:85:5b: 01:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:DA:EF:21:87:5B:6A:E5:B0:6F:5F:47:C3:B6:33:3C:CB:12:A1:D5 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-9rvIYdbauWwb19Hw7YzPMsSodU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:2691::/48 2a0e:b107:278a::/48 2a10:ccc1:1337::/48 Signature Algorithm: sha256WithRSAEncryption 69:b4:c5:bf:1f:47:1e:d1:28:20:42:99:ec:9c:51:f8:64:6e: 37:2f:db:61:c4:0e:1e:c5:c0:b2:5b:bb:23:f4:36:1a:8e:8c: c9:01:2b:05:b0:99:4f:93:ac:5e:01:6a:0e:29:ee:51:40:c5: a8:9e:91:ef:8c:f6:88:a5:65:f9:4d:57:d0:14:77:68:c7:87: f5:5c:09:13:ef:f4:65:e5:ff:5f:52:a5:80:f7:ea:46:bf:4c: 4e:e6:24:00:a6:18:4e:93:b6:ae:6d:59:24:39:37:02:70:4f: 1f:e0:e1:f4:d0:59:c5:ee:e9:59:f7:a3:7b:6e:cc:96:96:5d: 29:eb:a9:8a:b5:ac:74:61:21:7a:38:7b:b0:fc:e4:c7:63:4e: 30:3b:a2:16:aa:f4:53:50:4c:7a:5f:5b:e6:41:05:d1:55:71: d6:3e:91:93:ad:f9:38:b5:31:15:dd:6f:d2:f3:8d:30:37:4c: 5e:22:95:37:2a:79:77:d4:75:14:0b:99:03:68:e5:32:a0:2d: a8:a8:d6:57:c1:16:11:b9:21:ee:05:16:2c:49:56:50:8a:75: ce:c0:e6:50:12:e9:e9:3f:3c:7c:9c:e6:2b:d8:54:22:92:24: 2d:43:63:33:70:e1:38:dd:38:a6:0e:25:44:a2:28:ca:e5:15: 3d:dc:b4:ef -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt9XOjPWAZdKEcSBj819ojgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmRhZWYyMTg3NWI2YWU1YjA2ZjVmNDdjM2I2MzMzY2NiMTJhMWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzUVwfRxcxhRp3HwHGcTwt7WA5Hq iBSa3tWTjGHXitCaRN3CPELfQv38Aj/4r9SEA9PuMDQ55jw/fSdyobglcISEDmso fdQpyRlxT+VEcUfHYIFLCF+jIM0f2e2ehrzVMvcfykzAJPc5Zml8qfM26elzt7C4 /PEJPoTmiZMwyxbPneh3UjmgQSQvgeCqzSkpgbscnE1yADpk61TY0m8WViocgcPg H+tsqoLBYGKj2dI/FZZEA/6TAqBMN892eanWzFglSXPUMST6JH2wrRnI8E5P8k80 256CiDJE+Vd9aVWNHUGP4VK4cL3pOBdyJkvXORBxwagoruTDlQIghVsBawIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFPva7yGHW2rlsG9fR8O2MzzLEqHVMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvMS05cnZJWWRiYXVXd2IxOUh3N1l6UE1zU29kVS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTEvNDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZh NS8xL1kta1djWHF4SE16eEh2SDdYQkx1UVpVUHJacy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwIQQCAAIwGwMHACoOsQcm kQMHACoOsQcnigMHACoQzMETNzANBgkqhkiG9w0BAQsFAAOCAQEAabTFvx9HHtEo IEKZ7JxR+GRuNy/bYcQOHsXAslu7I/Q2Go6MyQErBbCZT5OsXgFqDinuUUDFqJ6R 74z2iKVl+U1X0BR3aMeH9VwJE+/0ZeX/X1KlgPfqRr9MTuYkAKYYTpO2rm1ZJDk3 AnBPH+Dh9NBZxe7pWfeje27MlpZdKeupirWsdGEhejh7sPzkx2NOMDuiFqr0U1BM el9b5kEF0VVx1j6Rk635OLUxFd1v0vONMDdMXiKVNyp5d9R1FAuZA2jlMqAtqKjW V8EWEbkh7gUWLElWUIp1zsDmUBLp6T88fJzmK9hUIpIkLUNjM3DhON04pg4lRKIo yuUVPdy07w== -----END CERTIFICATE-----Generated at Fri Jan 9 13:11:50 2026 by rpki-client