This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/33geRL4nhqmWddCGlsovnD4CttU.roa File: 33geRL4nhqmWddCGlsovnD4CttU.roa (raw, json) Hash identifier: 6xNyDZB9BOnnIr/FPhdrAEzUFdlR13pc5Rqsv4IwE0U= Subject key identifier: DF:78:1E:44:BE:27:86:A9:96:75:D0:86:96:CA:2F:9C:3E:02:B6:D5 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CD2E2334EC744D01B9AD5D4EF9530 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/33geRL4nhqmWddCGlsovnD4CttU.roa Signing time: Fri 02 Jan 2026 06:19:53 +0000 ROA not before: Fri 02 Jan 2026 06:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 149977 IP address blocks: 2a0e:97c0:aa0::/44 maxlen: 48 2a0f:e404:105::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d2:e2:33:4e:c7:44:d0:1b:9a:d5:d4:ef:95:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df781e44be2786a99675d08696ca2f9c3e02b6d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:08:bc:a8:c7:dc:8a:3f:d9:e9:1e:ae:9b:18: d9:4d:86:82:f4:a4:a7:4a:79:eb:6e:08:42:b6:fe: 28:a5:0b:3d:49:40:38:4f:b2:f0:f3:75:4f:24:eb: 68:e7:2e:9d:f9:89:62:76:f6:e8:0b:01:ee:fc:5a: f3:f2:e0:06:33:32:63:ff:eb:c4:5d:25:47:8d:b9: 4e:70:7f:f7:23:8a:42:64:da:a4:b3:ea:67:8a:bb: 27:ee:36:e9:ad:02:50:b3:df:40:66:09:b0:c3:cf: fa:4d:35:88:3c:41:f9:d9:b0:f0:b4:78:0a:95:c3: 5f:ce:2a:e8:09:41:90:b2:b4:68:ef:d8:37:46:92: b6:19:d2:87:43:ff:6d:4a:0e:d2:d7:79:85:5f:3c: d0:f2:cb:f6:dc:3f:bc:49:6b:26:01:14:d6:02:fa: 53:f3:4c:de:ea:12:c3:2a:7b:fa:9e:30:38:57:86: 94:4f:56:ef:87:75:68:bf:5d:80:8b:d2:a8:d4:b8: 9f:0c:8c:e7:13:b4:5d:cc:2e:b2:83:a1:26:35:d3: 27:b0:fc:f9:9d:9a:1c:df:e3:37:3b:67:ad:e9:44: 15:bf:5a:99:26:06:f0:f9:a4:cf:05:99:95:5f:2e: 53:23:ff:9b:6d:d7:41:b4:84:df:f9:f5:a1:9a:75: 8f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:78:1E:44:BE:27:86:A9:96:75:D0:86:96:CA:2F:9C:3E:02:B6:D5 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/33geRL4nhqmWddCGlsovnD4CttU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:aa0::/44 2a0f:e404:105::/48 Signature Algorithm: sha256WithRSAEncryption 94:61:4c:01:fa:57:87:c6:4a:55:25:ba:c8:02:70:77:2d:d3: ce:f3:b3:56:30:a9:0b:e6:e5:b1:e4:7f:9b:d0:c3:d2:a8:ec: d3:51:7f:38:87:02:c3:dd:87:f7:82:93:57:4e:c6:21:c9:e6: 73:5d:ea:56:5f:07:7d:94:2d:29:7a:8b:53:b5:be:fd:b4:2c: f7:54:4a:70:59:30:7a:7c:b6:e3:49:9f:d1:36:d7:76:93:e1: 34:ce:a7:f2:53:69:a2:6c:49:fc:b2:c5:bb:55:2c:ec:cd:90: 5b:78:3f:3e:a6:c4:4a:89:c1:69:fa:d8:4b:e1:8b:af:41:2b: 6b:ee:bd:cb:ba:cd:7d:ab:17:b7:03:53:0b:97:3a:fc:77:28: a5:4b:13:a3:79:35:1b:39:a2:24:e2:84:8a:28:db:1b:fb:3a: 43:b3:87:73:d8:84:7e:c5:87:97:b8:b1:b6:79:39:b3:ae:75: 2f:06:c9:d9:e3:b5:a3:d6:dc:db:29:ee:d4:47:06:70:af:81: 4b:15:aa:78:69:13:da:4b:82:e4:3d:0d:4f:8d:07:d5:79:32: 86:a9:2a:47:4d:58:ea:e0:56:b9:1a:2d:f6:30:35:07:c4:d0: 18:b7:68:18:bb:3c:85:e4:e9:5f:1b:65:4a:f1:0c:94:eb:f8: 6a:56:67:26 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XNLiM07HRNAbmtXU75UwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjc4MWU0NGJlMjc4NmE5OTY3NWQwODY5NmNhMmY5YzNlMDJiNmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwi8qMfcij/Z6R6umxjZTYaC9KSn SnnrbghCtv4opQs9SUA4T7Lw83VPJOto5y6d+YlidvboCwHu/Frz8uAGMzJj/+vE XSVHjblOcH/3I4pCZNqks+pnirsn7jbprQJQs99AZgmww8/6TTWIPEH52bDwtHgK lcNfziroCUGQsrRo79g3RpK2GdKHQ/9tSg7S13mFXzzQ8sv23D+8SWsmARTWAvpT 80ze6hLDKnv6njA4V4aUT1bvh3Vov12Ai9Ko1LifDIznE7RdzC6yg6EmNdMnsPz5 nZoc3+M3O2et6UQVv1qZJgbw+aTPBZmVXy5TI/+bbddBtITf+fWhmnWPBwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFN94HkS+J4aplnXQhpbKL5w+ArbVMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvMzNnZVJMNG5ocW1XZGRDR2xzb3ZuRDRDdHRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg6XwAqg AwcAKg/kBAEFMA0GCSqGSIb3DQEBCwUAA4IBAQCUYUwB+leHxkpVJbrIAnB3LdPO 87NWMKkL5uWx5H+b0MPSqOzTUX84hwLD3Yf3gpNXTsYhyeZzXepWXwd9lC0peotT tb79tCz3VEpwWTB6fLbjSZ/RNtd2k+E0zqfyU2mibEn8ssW7VSzszZBbeD8+psRK icFp+thL4YuvQStr7r3Lus19qxe3A1MLlzr8dyilSxOjeTUbOaIk4oSKKNsb+zpD s4dz2IR+xYeXuLG2eTmzrnUvBsnZ47Wj1tzbKe7URwZwr4FLFap4aRPaS4LkPQ1P jQfVeTKGqSpHTVjq4Fa5Gi32MDUHxNAYt2gYuzyF5OlfG2VK8QyU6/hqVmcm -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:28 2026 by rpki-client