This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-i3PuyEQX3OeSo9yeCdiINqbx3k.roa File: 1-i3PuyEQX3OeSo9yeCdiINqbx3k.roa (raw, json) Hash identifier: VJBqb8rKfnQt0/grzDMDN1DuezFYYNk5MTlf+JH/7+Y= Subject key identifier: FA:2D:CF:BB:21:10:5F:73:9E:4A:8F:72:78:27:62:20:DA:9B:C7:79 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CDF1294EC4640AA74351E8FA5D6A2 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-i3PuyEQX3OeSo9yeCdiINqbx3k.roa Signing time: Fri 02 Jan 2026 06:19:56 +0000 ROA not before: Fri 02 Jan 2026 06:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199310 IP address blocks: 2a0e:b107:2440::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:df:12:94:ec:46:40:aa:74:35:1e:8f:a5:d6:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa2dcfbb21105f739e4a8f7278276220da9bc779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fd:7f:a3:b9:76:79:66:a1:cf:fa:70:af:f9: af:38:4a:85:89:d5:81:fb:3c:11:1b:16:d9:c7:11: 23:e8:2a:1d:01:49:a0:28:b0:65:64:fd:43:d8:be: 5c:dc:e2:88:73:1c:0a:4e:27:eb:ff:bc:9a:1e:3a: 48:20:f0:69:b0:90:10:af:73:91:7e:4b:52:23:33: 25:80:6f:79:8b:71:2c:ba:d8:ab:db:d0:91:09:55: bc:73:da:d9:82:0e:3e:60:7e:a9:df:5e:45:3b:92: c8:42:6d:ef:fd:35:2d:ef:62:d3:fd:81:61:49:dc: a4:fd:27:fe:2f:c1:f4:84:24:ea:57:1c:65:bf:76: fe:c0:7e:93:d3:d9:4a:d8:6f:6f:cd:d1:f9:42:eb: 83:81:7a:7a:9a:c7:ce:02:40:5a:0e:26:b7:f7:f7: ae:e9:1f:14:d1:5a:c1:55:6c:b6:97:be:4e:30:b7: 5a:db:19:0d:59:bb:18:ea:5d:cf:74:af:f6:60:5e: bc:68:c1:89:51:32:3c:ea:f0:b7:dc:fe:03:c5:4e: 59:07:fc:51:87:12:2d:5b:37:b6:55:61:5b:ff:f2: ba:38:33:75:52:40:38:e5:5e:e8:fd:e8:15:fe:f0: cf:f2:25:4b:64:32:c8:3a:49:b2:57:bf:e9:88:3b: c1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:2D:CF:BB:21:10:5F:73:9E:4A:8F:72:78:27:62:20:DA:9B:C7:79 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-i3PuyEQX3OeSo9yeCdiINqbx3k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:2440::/44 Signature Algorithm: sha256WithRSAEncryption b7:27:b3:65:0e:2d:a3:52:f5:62:a1:d5:7b:64:c5:e4:0a:49: f1:0a:a8:cd:2e:b1:7b:a0:ec:e9:ba:f4:19:0c:0f:43:2d:ab: 83:37:5b:e8:1d:9c:cf:a8:f7:4a:99:72:e0:e0:27:58:dc:e1: 0f:bb:a9:bc:24:02:23:4a:31:95:08:1e:73:70:53:66:be:45: f3:cb:14:31:4c:28:f6:a6:e2:f3:6a:52:1e:dd:a8:bb:67:5e: b0:a2:5f:09:c7:ec:77:cd:8c:12:ec:e3:80:dc:a1:1b:a1:3c: 1d:7f:64:a4:91:ed:5e:4d:98:2c:bc:78:91:ed:e4:ba:6c:df: 5b:a8:d4:85:8e:46:54:2f:4b:17:ed:d7:25:f2:2f:0b:59:e6: 3e:f7:c7:40:5d:70:f9:69:a0:94:b3:bc:0f:a5:fd:0b:71:12: 76:52:03:d8:9d:fc:7e:38:e5:09:46:18:86:21:0e:99:e2:f6: 89:5e:eb:ff:52:e0:65:78:43:9e:62:86:e8:f2:ea:20:8b:c9: 55:f6:1b:5f:39:4f:49:95:6a:5b:2d:0a:b2:d3:9c:87:94:59: 45:fd:94:a1:72:11:c1:2b:70:42:45:ac:bb:33:b0:38:a7:2c: 5f:43:4b:60:c8:24:94:22:72:b1:40:bf:cc:44:8d:a3:af:32: 17:7d:cf:c8 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt9XN8SlOxGQKp0NR6PpdaiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTJkY2ZiYjIxMTA1ZjczOWU0YThmNzI3ODI3NjIyMGRhOWJjNzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP1/o7l2eWahz/pwr/mvOEqFidWB +zwRGxbZxxEj6CodAUmgKLBlZP1D2L5c3OKIcxwKTifr/7yaHjpIIPBpsJAQr3OR fktSIzMlgG95i3Esutir29CRCVW8c9rZgg4+YH6p315FO5LIQm3v/TUt72LT/YFh Sdyk/Sf+L8H0hCTqVxxlv3b+wH6T09lK2G9vzdH5QuuDgXp6msfOAkBaDia39/eu 6R8U0VrBVWy2l75OMLda2xkNWbsY6l3PdK/2YF68aMGJUTI86vC33P4DxU5ZB/xR hxItWze2VWFb//K6ODN1UkA45V7o/egV/vDP8iVLZDLIOkmyV7/piDvB7QIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFPotz7shEF9znkqPcngnYiDam8d5MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvMS1pM1B1eUVRWDNPZVNvOXllQ2RpSU5xYngzay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTEvNDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZh NS8xL1kta1djWHF4SE16eEh2SDdYQkx1UVpVUHJacy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoOsQck QDANBgkqhkiG9w0BAQsFAAOCAQEAtyezZQ4to1L1YqHVe2TF5ApJ8QqozS6xe6Ds 6br0GQwPQy2rgzdb6B2cz6j3Sply4OAnWNzhD7upvCQCI0oxlQgec3BTZr5F88sU MUwo9qbi82pSHt2ou2desKJfCcfsd82MEuzjgNyhG6E8HX9kpJHtXk2YLLx4ke3k umzfW6jUhY5GVC9LF+3XJfIvC1nmPvfHQF1w+WmglLO8D6X9C3ESdlID2J38fjjl CUYYhiEOmeL2iV7r/1LgZXhDnmKG6PLqIIvJVfYbXzlPSZVqWy0KstOch5RZRf2U oXIRwStwQkWsuzOwOKcsX0NLYMgklCJysUC/zESNo68yF33PyA== -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:43 2026 by rpki-client