This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-YjFSYKUrhZdzXwjoj0_H19mtq8.roa File: 1-YjFSYKUrhZdzXwjoj0_H19mtq8.roa (raw, json) Hash identifier: p6EW4zadmvwIXE9UH5npfWKCrR6FaO7ZPlUOVPYrYco= Subject key identifier: F9:88:C5:49:82:94:AE:16:5D:CD:7C:23:A2:3D:3F:1F:5F:66:B6:AF Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D3749AC84AA8F35A1BC2C519FD76B Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-YjFSYKUrhZdzXwjoj0_H19mtq8.roa Signing time: Fri 02 Jan 2026 06:20:19 +0000 ROA not before: Fri 02 Jan 2026 06:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211168 IP address blocks: 2a0e:b107:13d6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:37:49:ac:84:aa:8f:35:a1:bc:2c:51:9f:d7:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f988c5498294ae165dcd7c23a23d3f1f5f66b6af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:85:74:0a:eb:2d:84:26:47:8b:a3:22:42:26: 2d:9e:a0:08:5b:b6:46:e2:66:2c:3f:5c:7d:a9:03: 69:c6:2f:fe:6a:00:44:e5:57:be:f5:d1:5f:7a:50: fa:17:12:91:20:c2:6e:00:1e:9f:a0:18:fa:1c:2b: 71:22:54:dc:84:02:a5:31:39:2b:13:76:d4:6c:42: cd:e5:0c:7f:6d:74:46:28:21:d8:c1:2f:a5:c6:f7: cd:82:cd:3d:6c:4d:ae:f5:7f:9f:67:ab:23:99:33: ee:be:f0:ec:50:ad:ca:7b:8f:24:f1:8b:e2:31:ee: ee:d9:52:6a:32:fc:3d:73:f8:9e:85:d4:84:aa:08: ab:04:1a:a9:df:f8:07:0e:ff:f5:d0:ce:91:47:2c: 6b:6a:a6:8a:bc:56:d2:19:5c:84:d9:1f:84:da:89: e0:b7:dd:49:2d:b3:9f:6d:ad:64:e0:2f:8d:16:eb: 62:6b:16:63:08:dc:2d:2f:93:60:e6:a9:bc:85:d4: 9e:cf:60:55:6b:29:6c:e3:b6:a4:f1:f8:1f:a1:c2: bd:20:82:90:db:e1:12:f5:21:84:06:69:89:8d:0e: d2:c2:be:68:b2:ac:96:2d:37:95:0b:74:1a:0f:ef: 3f:cf:84:87:fa:9b:09:e9:3d:cd:b5:af:a9:cc:d2: 58:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:88:C5:49:82:94:AE:16:5D:CD:7C:23:A2:3D:3F:1F:5F:66:B6:AF X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-YjFSYKUrhZdzXwjoj0_H19mtq8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:13d6::/48 Signature Algorithm: sha256WithRSAEncryption a6:77:9f:d4:91:8c:22:4b:7a:ae:af:0e:eb:ea:87:cc:ae:05: 46:56:fe:c1:78:06:2a:3f:44:42:a7:92:1b:ed:db:4e:63:a8: 99:de:c0:fc:50:73:70:7b:65:64:a5:47:73:11:b5:a1:93:a6: b5:60:c6:b1:ae:ae:8f:d3:a0:77:40:f0:1b:aa:06:3c:8e:d2: 7d:ce:e2:8c:74:e5:73:3b:7b:a3:7a:78:ae:d0:41:63:79:d8: 48:dd:8a:0d:e3:e4:33:6f:cf:36:ab:c6:31:36:11:0c:80:b6: fe:35:25:31:29:0a:2c:55:f3:ff:18:06:f9:25:09:f6:4e:a3: 7b:f9:c5:bd:d1:c0:a7:21:7b:94:56:15:49:9a:4d:44:a5:11: 86:77:d9:0a:44:a0:52:5e:66:bc:e7:ed:35:e5:6c:24:bd:67: cc:f5:bd:8a:46:d8:12:e0:4d:dc:32:c9:ec:e4:b6:14:74:54: c3:7f:42:db:f3:3f:88:2f:8d:60:37:f9:4e:f1:91:ec:f6:5b: fb:8f:2d:e5:85:c5:13:c1:95:1e:ea:d7:88:55:b0:95:a5:af: ec:0c:0a:38:ed:01:9f:bc:b0:fd:e6:1d:bf:72:f7:96:1b:58: 1f:e5:18:7c:10:0e:f8:8e:c0:25:3f:e7:4d:38:fe:92:f8:a4: a0:dd:74:6f -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt9XTdJrISqjzWhvCxRn9drMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTg4YzU0OTgyOTRhZTE2NWRjZDdjMjNhMjNkM2YxZjVmNjZiNmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoV0CusthCZHi6MiQiYtnqAIW7ZG 4mYsP1x9qQNpxi/+agBE5Ve+9dFfelD6FxKRIMJuAB6foBj6HCtxIlTchAKlMTkr E3bUbELN5Qx/bXRGKCHYwS+lxvfNgs09bE2u9X+fZ6sjmTPuvvDsUK3Ke48k8Yvi Me7u2VJqMvw9c/iehdSEqgirBBqp3/gHDv/10M6RRyxraqaKvFbSGVyE2R+E2ong t91JLbOfba1k4C+NFutiaxZjCNwtL5Ng5qm8hdSez2BVayls47ak8fgfocK9IIKQ 2+ES9SGEBmmJjQ7Swr5osqyWLTeVC3QaD+8/z4SH+psJ6T3Nta+pzNJYTwIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFPmIxUmClK4WXc18I6I9Px9fZravMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvMS1ZakZTWUtVcmhaZHpYd2pvajBfSDE5bXRxOC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTEvNDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZh NS8xL1kta1djWHF4SE16eEh2SDdYQkx1UVpVUHJacy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoOsQcT 1jANBgkqhkiG9w0BAQsFAAOCAQEApnef1JGMIkt6rq8O6+qHzK4FRlb+wXgGKj9E QqeSG+3bTmOomd7A/FBzcHtlZKVHcxG1oZOmtWDGsa6uj9Ogd0DwG6oGPI7Sfc7i jHTlczt7o3p4rtBBY3nYSN2KDePkM2/PNqvGMTYRDIC2/jUlMSkKLFXz/xgG+SUJ 9k6je/nFvdHApyF7lFYVSZpNRKURhnfZCkSgUl5mvOftNeVsJL1nzPW9ikbYEuBN 3DLJ7OS2FHRUw39C2/M/iC+NYDf5TvGR7PZb+48t5YXFE8GVHurXiFWwlaWv7AwK OO0Bn7yw/eYdv3L3lhtYH+UYfBAO+I7AJT/nTTj+kvikoN10bw== -----END CERTIFICATE-----Generated at Fri Jan 9 13:11:53 2026 by rpki-client