This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1g5fn_AeTKbC9ymRvBweHpl2TLY.roa File: 1g5fn_AeTKbC9ymRvBweHpl2TLY.roa (raw, json) Hash identifier: kN5QJ9LJioSKPudvqWGeVgzo74qA8DlDlDMxPEJn96s= Subject key identifier: D6:0E:5F:9F:F0:1E:4C:A6:C2:F7:29:91:BC:1C:1E:1E:99:76:4C:B6 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D6DA3C3A828964B49C9953B8D6BD0 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1g5fn_AeTKbC9ymRvBweHpl2TLY.roa Signing time: Fri 02 Jan 2026 06:20:33 +0000 ROA not before: Fri 02 Jan 2026 06:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214537 IP address blocks: 2a0e:b107:2798::/46 maxlen: 48 2a0e:b107:279c::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:6d:a3:c3:a8:28:96:4b:49:c9:95:3b:8d:6b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d60e5f9ff01e4ca6c2f72991bc1c1e1e99764cb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f4:b7:2c:37:ad:1b:81:97:85:be:ba:8e:33: 62:c6:93:14:5e:f7:ca:66:36:d3:84:05:ef:35:e9: a8:70:89:43:7d:0e:6a:7e:10:62:04:5d:84:ef:54: 9b:e8:fd:49:52:7e:d0:fb:75:84:9f:22:f7:4d:9d: 8c:85:47:39:0d:84:75:33:7a:ea:ea:81:0f:3b:20: 4d:05:ea:a8:1d:9d:93:93:68:54:eb:f1:b3:47:af: 6d:36:27:8b:f8:e7:01:32:61:f2:8e:e4:fc:53:b4: 85:d9:12:8b:bb:53:6f:2a:27:c8:3d:ab:5a:60:c4: 48:ad:20:e5:83:c9:03:2a:34:09:50:a7:1a:97:26: c3:e2:4d:c2:e3:9a:ce:a0:2d:59:38:f6:b4:3c:37: 76:c9:7a:57:ac:86:c4:ca:ee:79:9a:03:0f:3e:a1: 69:ff:18:95:4f:01:0f:9b:3e:92:19:af:65:17:bb: 51:b7:eb:e2:e7:01:7a:d7:e0:36:b9:d4:73:89:03: 53:b9:ae:d1:70:46:85:c9:d4:e5:60:6c:f5:34:62: 88:0a:8f:fb:c5:b6:18:b9:ff:36:a4:ef:a3:9f:26: fb:a6:ce:14:66:c4:c1:4b:70:c1:e6:73:de:93:86: 16:5c:66:8e:9b:0c:3d:49:fc:60:01:a8:4e:ba:fa: 5b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:0E:5F:9F:F0:1E:4C:A6:C2:F7:29:91:BC:1C:1E:1E:99:76:4C:B6 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1g5fn_AeTKbC9ymRvBweHpl2TLY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:2798::/45 Signature Algorithm: sha256WithRSAEncryption 9e:49:91:c1:4d:ea:67:4a:6c:c3:f0:4e:a1:7d:c8:56:cb:0a: 9d:03:78:c7:2c:f8:b7:a5:58:21:d3:d6:d0:bd:8f:81:6b:74: 44:13:11:e8:24:b6:64:7d:99:99:8e:ed:10:82:b2:25:69:ea: b8:a6:90:c8:43:31:79:02:10:61:07:1f:93:7b:f4:e4:29:da: 52:b6:e7:64:f4:36:b3:05:e2:5c:b2:66:95:74:dc:88:03:b6: b4:66:66:f4:12:2d:c7:58:b0:73:01:d6:e9:9e:50:25:1a:94: 84:b0:46:37:a9:7b:97:7c:8c:a3:46:92:f3:69:41:cc:89:c7: da:89:c4:cb:2e:31:f0:ba:a5:b4:24:8a:5a:74:e2:13:a9:e1: 4f:4b:a3:1b:85:53:62:6a:44:46:36:bb:2f:37:e5:d7:0d:7c: 67:7a:2c:48:b1:9b:a9:98:91:a3:6e:c7:fd:4b:3a:91:bc:fd: 59:12:b3:a0:fc:0d:c5:e1:2a:7c:49:69:b8:25:e1:e2:97:9c: 5c:4e:59:c1:04:e1:eb:b4:35:4e:91:2d:43:38:da:07:04:16: dc:e3:1a:10:ee:06:74:78:ae:43:02:35:60:06:eb:f8:e1:9a: 2f:4b:ef:69:6d:45:9c:d5:c8:57:04:b5:8d:7a:f4:13:4d:9a: 50:31:23:c6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XW2jw6golktJyZU7jWvQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjBlNWY5ZmYwMWU0Y2E2YzJmNzI5OTFiYzFjMWUxZTk5NzY0Y2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPS3LDetG4GXhb66jjNixpMUXvfK ZjbThAXvNemocIlDfQ5qfhBiBF2E71Sb6P1JUn7Q+3WEnyL3TZ2MhUc5DYR1M3rq 6oEPOyBNBeqoHZ2Tk2hU6/GzR69tNieL+OcBMmHyjuT8U7SF2RKLu1NvKifIPata YMRIrSDlg8kDKjQJUKcalybD4k3C45rOoC1ZOPa0PDd2yXpXrIbEyu55mgMPPqFp /xiVTwEPmz6SGa9lF7tRt+vi5wF61+A2udRziQNTua7RcEaFydTlYGz1NGKICo/7 xbYYuf82pO+jnyb7ps4UZsTBS3DB5nPek4YWXGaOmww9SfxgAahOuvpbdQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNYOX5/wHkymwvcpkbwcHh6Zdky2MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvMWc1Zm5fQWVUS2JDOXltUnZCd2VIcGwyVExZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDKg6xByeY MA0GCSqGSIb3DQEBCwUAA4IBAQCeSZHBTepnSmzD8E6hfchWywqdA3jHLPi3pVgh 09bQvY+Ba3REExHoJLZkfZmZju0QgrIlaeq4ppDIQzF5AhBhBx+Te/TkKdpStudk 9DazBeJcsmaVdNyIA7a0Zmb0Ei3HWLBzAdbpnlAlGpSEsEY3qXuXfIyjRpLzaUHM icfaicTLLjHwuqW0JIpadOITqeFPS6MbhVNiakRGNrsvN+XXDXxneixIsZupmJGj bsf9SzqRvP1ZErOg/A3F4Sp8SWm4JeHil5xcTlnBBOHrtDVOkS1DONoHBBbc4xoQ 7gZ0eK5DAjVgBuv44ZovS+9pbUWc1chXBLWNevQTTZpQMSPG -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:11 2026 by rpki-client