This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-iaFfdZwsau9D_Fpa9slUrkM_rc.roa File: 1-iaFfdZwsau9D_Fpa9slUrkM_rc.roa (raw, json) Hash identifier: Cr63l2AAx4REc5rG5qOzLgykF9WoZAXHJTUWxBaNGvc= Subject key identifier: FA:26:85:7D:D6:70:B1:AB:BD:0F:F1:69:6B:DB:25:52:B9:0C:FE:B7 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CAC180DDEDAC544895C65AC10F6D8 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-iaFfdZwsau9D_Fpa9slUrkM_rc.roa Signing time: Fri 02 Jan 2026 06:19:43 +0000 ROA not before: Fri 02 Jan 2026 06:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41732 IP address blocks: 2a0e:b107:820::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ac:18:0d:de:da:c5:44:89:5c:65:ac:10:f6:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa26857dd670b1abbd0ff1696bdb2552b90cfeb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:02:56:bd:19:63:af:c2:62:80:d8:09:e2:6e: 4d:97:76:3f:3f:40:44:5e:82:6e:b6:88:23:a6:5a: 23:b9:0d:86:b0:d9:18:3c:d0:3d:bc:1d:e2:79:e9: be:41:8b:e5:4d:07:35:48:4f:04:e5:5f:57:c4:f5: f4:83:6b:76:e8:aa:fa:f0:a2:d7:79:78:e8:7e:b6: c0:1a:09:45:f9:21:8b:10:d7:7a:73:1c:79:94:8a: 77:f6:55:2c:dc:ea:59:10:dd:fc:c9:47:e1:75:3f: 14:3e:41:bd:35:59:dd:0b:6b:57:fb:7e:8d:49:1b: e7:fa:f7:4a:03:4b:00:3a:a4:54:44:92:1b:37:50: b8:4d:f6:25:41:71:b3:43:c0:14:eb:1a:66:27:fd: 48:3d:f2:b4:8c:29:da:db:a5:e7:79:b5:b3:63:0d: aa:46:38:c4:f8:63:a4:b2:ed:58:57:bd:bd:93:e4: 04:98:a4:7e:71:04:26:d2:e9:64:38:1e:42:91:e8: 27:53:48:49:66:f2:29:b9:a2:2b:c1:9d:dc:25:c2: 9b:61:6a:a0:95:1d:f6:a9:c3:e1:d5:75:96:d7:5b: b1:b2:b4:0f:12:31:c5:76:87:c8:fb:1f:25:c5:57: 5f:da:5f:ae:0f:0e:4f:93:4e:96:5c:a3:1e:0f:c6: 98:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:26:85:7D:D6:70:B1:AB:BD:0F:F1:69:6B:DB:25:52:B9:0C:FE:B7 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-iaFfdZwsau9D_Fpa9slUrkM_rc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:820::/44 Signature Algorithm: sha256WithRSAEncryption 10:ca:81:36:bc:ec:af:ec:38:69:7c:8b:6d:c0:a4:90:ea:24: 36:de:31:d9:95:21:01:a5:44:51:5c:13:48:55:64:78:f0:24: b1:14:37:75:c0:22:cc:ba:6a:89:1c:db:c2:3d:4e:3a:41:59: 37:bd:74:be:f3:35:1d:ad:2c:41:f1:9f:cd:57:1e:61:cb:8b: ef:63:4b:e2:de:b7:49:b2:f0:d1:1d:7d:43:dd:49:e5:d2:9d: cb:94:5d:78:4b:38:78:bf:cc:24:e4:6f:08:fb:5b:a7:99:ab: 6b:46:e2:c6:e9:7a:f0:69:83:94:e8:42:5d:13:fb:34:6a:57: fc:d1:69:be:d3:eb:62:c0:3f:41:06:b4:a4:d2:ad:1c:54:c3: 99:7e:80:12:63:69:7b:b1:60:fb:df:92:9d:23:44:03:0c:9b: fb:ed:df:89:01:d2:b1:87:db:bd:31:12:6d:56:03:a5:9c:86: 53:3c:c7:8d:ef:0f:9d:09:ce:fe:a2:8d:5c:41:de:6d:ae:9c: 6a:30:76:da:f7:08:be:ba:91:1f:e9:ff:bd:48:ef:2c:18:72: 3e:a3:7d:1f:e4:73:7d:d1:28:a0:aa:f2:29:2f:47:95:d2:8c: f1:8c:42:29:3e:8e:ad:58:8c:c6:4e:1f:e9:17:6d:25:5a:3f: 50:90:2f:a0 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt9XKwYDd7axUSJXGWsEPbYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTI2ODU3ZGQ2NzBiMWFiYmQwZmYxNjk2YmRiMjU1MmI5MGNmZWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwJWvRljr8JigNgJ4m5Nl3Y/P0BE XoJutogjplojuQ2GsNkYPNA9vB3ieem+QYvlTQc1SE8E5V9XxPX0g2t26Kr68KLX eXjofrbAGglF+SGLENd6cxx5lIp39lUs3OpZEN38yUfhdT8UPkG9NVndC2tX+36N SRvn+vdKA0sAOqRURJIbN1C4TfYlQXGzQ8AU6xpmJ/1IPfK0jCna26XnebWzYw2q RjjE+GOksu1YV729k+QEmKR+cQQm0ulkOB5CkegnU0hJZvIpuaIrwZ3cJcKbYWqg lR32qcPh1XWW11uxsrQPEjHFdofI+x8lxVdf2l+uDw5Pk06WXKMeD8aYewIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFPomhX3WcLGrvQ/xaWvbJVK5DP63MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvMS1pYUZmZFp3c2F1OURfRnBhOXNsVXJrTV9yYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTEvNDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZh NS8xL1kta1djWHF4SE16eEh2SDdYQkx1UVpVUHJacy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoOsQcI IDANBgkqhkiG9w0BAQsFAAOCAQEAEMqBNrzsr+w4aXyLbcCkkOokNt4x2ZUhAaVE UVwTSFVkePAksRQ3dcAizLpqiRzbwj1OOkFZN710vvM1Ha0sQfGfzVceYcuL72NL 4t63SbLw0R19Q91J5dKdy5RdeEs4eL/MJORvCPtbp5mra0bixul68GmDlOhCXRP7 NGpX/NFpvtPrYsA/QQa0pNKtHFTDmX6AEmNpe7Fg+9+SnSNEAwyb++3fiQHSsYfb vTESbVYDpZyGUzzHje8PnQnO/qKNXEHeba6cajB22vcIvrqRH+n/vUjvLBhyPqN9 H+RzfdEooKryKS9HldKM8YxCKT6OrViMxk4f6RdtJVo/UJAvoA== -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:08 2026 by rpki-client