This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/24lTMeGLIaPFZsdmyz11Dv2aT3Q.roa File: 24lTMeGLIaPFZsdmyz11Dv2aT3Q.roa (raw, json) Hash identifier: 6e98PafCmetivCjJLmvsjO6hgkJ9/ge54UvagwgmDPc= Subject key identifier: DB:89:53:31:E1:8B:21:A3:C5:66:C7:66:CB:3D:75:0E:FD:9A:4F:74 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CEDB6746ED1E4E16ED03D5BCB5786 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/24lTMeGLIaPFZsdmyz11Dv2aT3Q.roa Signing time: Fri 02 Jan 2026 06:20:00 +0000 ROA not before: Fri 02 Jan 2026 06:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202458 IP address blocks: 2a0e:97c0:c00::/44 maxlen: 48 2a0e:97c0:c01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ed:b6:74:6e:d1:e4:e1:6e:d0:3d:5b:cb:57:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db895331e18b21a3c566c766cb3d750efd9a4f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:18:ed:82:ff:c1:dd:17:ca:45:78:af:18:1d: 96:ef:bc:93:8a:ab:19:bd:9a:d6:67:a5:04:32:b1: c4:f8:52:c3:9e:bd:67:86:da:ed:98:54:06:3b:7e: b7:0a:a8:a2:a1:3e:8d:98:64:eb:d8:64:b7:3f:ab: 3e:a5:f2:21:19:de:f6:36:40:01:96:af:78:48:2c: e8:90:9f:90:2c:8f:ff:81:4d:91:aa:73:3a:a7:38: b2:5d:38:31:2e:74:f8:35:3b:01:3c:b1:34:fb:0a: 87:4f:f2:35:89:bb:39:02:71:fe:5d:43:29:7c:af: d5:ff:84:19:5b:6b:8f:18:46:5d:0f:ae:97:f7:a6: 50:18:cb:72:49:93:3d:dc:f0:6c:79:d9:b8:08:e3: 2c:72:c8:1f:c2:76:f6:7b:07:5d:32:1d:e7:4f:c5: 70:b7:1b:16:41:7d:35:64:07:ca:04:e9:52:5b:c8: 0c:b4:cb:35:e8:f0:6e:49:d0:ab:5a:0b:f9:c4:c8: d8:29:05:24:5c:55:f0:f0:40:6e:b7:11:2b:48:41: 7b:01:ac:1d:8f:f2:b8:7b:a0:00:56:7c:d6:98:48: 8d:ec:a4:ef:5b:16:07:e0:49:85:1c:59:aa:7a:d7: ff:00:da:4e:2d:08:7d:4e:2f:c6:bd:cf:c7:ba:86: aa:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:89:53:31:E1:8B:21:A3:C5:66:C7:66:CB:3D:75:0E:FD:9A:4F:74 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/24lTMeGLIaPFZsdmyz11Dv2aT3Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:c00::/44 Signature Algorithm: sha256WithRSAEncryption 19:e8:13:dc:3e:af:2b:2d:c7:3f:cb:90:77:80:b2:aa:7f:52: 7f:5b:25:42:f3:2c:82:38:1b:de:8b:67:85:19:10:a3:e5:93: d5:a7:2c:d4:97:26:64:47:46:f2:d3:51:14:a9:ba:89:0c:53: 0d:56:ce:bc:7c:c9:9b:2a:94:c8:5c:5e:63:86:91:2a:81:a4: de:9a:9e:d2:7e:49:b0:35:67:b2:3a:66:78:e9:e0:8b:95:e1: 99:f5:d5:4e:e7:90:cb:98:04:1b:9b:a4:78:ec:07:2c:77:78: fa:d2:d9:b9:bd:b8:6f:b1:2f:88:79:1c:11:8d:fe:4c:df:4e: 27:4f:bc:2e:43:de:bf:6b:78:a8:53:79:33:a1:77:d3:a4:0d: 0a:af:fc:aa:6d:c8:20:51:2e:d7:2e:ab:ed:af:cf:f1:dd:23: c2:68:e2:4a:e0:13:2d:ad:01:1c:0e:7a:4d:fc:0a:f4:ab:4b: 26:6e:6a:24:d7:3a:f9:a9:2d:f7:e3:a4:5c:75:32:94:66:6a: a2:0a:47:ec:a6:95:ed:a6:dc:8c:f9:c9:e7:62:13:91:13:0b: 21:20:53:e6:e5:91:40:50:4c:b2:d4:2e:6b:1f:3d:c5:32:75: 34:8f:cb:e1:c3:de:cc:25:f7:a8:c8:b0:a5:b8:ac:84:7d:d4: ed:35:71:73 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XO22dG7R5OFu0D1by1eGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjg5NTMzMWUxOGIyMWEzYzU2NmM3NjZjYjNkNzUwZWZkOWE0Zjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBjtgv/B3RfKRXivGB2W77yTiqsZ vZrWZ6UEMrHE+FLDnr1nhtrtmFQGO363CqiioT6NmGTr2GS3P6s+pfIhGd72NkAB lq94SCzokJ+QLI//gU2RqnM6pziyXTgxLnT4NTsBPLE0+wqHT/I1ibs5AnH+XUMp fK/V/4QZW2uPGEZdD66X96ZQGMtySZM93PBsedm4COMscsgfwnb2ewddMh3nT8Vw txsWQX01ZAfKBOlSW8gMtMs16PBuSdCrWgv5xMjYKQUkXFXw8EButxErSEF7Aawd j/K4e6AAVnzWmEiN7KTvWxYH4EmFHFmqetf/ANpOLQh9Ti/Gvc/HuoaqQwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNuJUzHhiyGjxWbHZss9dQ79mk90MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvMjRsVE1lR0xJYVBGWnNkbXl6MTFEdjJhVDNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAwA MA0GCSqGSIb3DQEBCwUAA4IBAQAZ6BPcPq8rLcc/y5B3gLKqf1J/WyVC8yyCOBve i2eFGRCj5ZPVpyzUlyZkR0by01EUqbqJDFMNVs68fMmbKpTIXF5jhpEqgaTemp7S fkmwNWeyOmZ46eCLleGZ9dVO55DLmAQbm6R47Acsd3j60tm5vbhvsS+IeRwRjf5M 304nT7wuQ96/a3ioU3kzoXfTpA0Kr/yqbcggUS7XLqvtr8/x3SPCaOJK4BMtrQEc DnpN/Ar0q0smbmok1zr5qS3346RcdTKUZmqiCkfsppXtptyM+cnnYhOREwshIFPm 5ZFAUEyy1C5rHz3FMnU0j8vhw97MJfeoyLCluKyEfdTtNXFz -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:27 2026 by rpki-client