This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3hHy3bbhei0O5vSydtvx0IlHsRI.roa File: 3hHy3bbhei0O5vSydtvx0IlHsRI.roa (raw, json) Hash identifier: giVoXiHo357BYvBiV00vtnXRbONolF5a8/63UguF3kI= Subject key identifier: DE:11:F2:DD:B6:E1:7A:2D:0E:E6:F4:B2:76:DB:F1:D0:89:47:B1:12 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D7AA9A8378FFCD568C15C73E2D50B Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3hHy3bbhei0O5vSydtvx0IlHsRI.roa Signing time: Fri 02 Jan 2026 06:20:36 +0000 ROA not before: Fri 02 Jan 2026 06:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215536 IP address blocks: 2a0e:b107:12d6::/48 maxlen: 48 2a0e:b107:12d8::/48 maxlen: 48 2a0e:b107:12db::/48 maxlen: 48 2a0e:b107:12dd::/48 maxlen: 48 2a0e:b107:12df::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:7a:a9:a8:37:8f:fc:d5:68:c1:5c:73:e2:d5:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de11f2ddb6e17a2d0ee6f4b276dbf1d08947b112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:17:7a:3a:93:fe:62:38:a2:4f:76:23:c0:db: 67:07:44:99:b2:65:16:d1:bc:17:e4:5b:e2:c1:fe: 9d:28:ec:f2:bc:09:64:1d:7e:1c:f0:ac:b3:69:9a: 8f:41:59:7e:59:2b:2b:60:5b:c6:63:c3:0e:b3:35: 7f:1c:51:fe:0f:38:ea:79:3e:34:20:8c:68:8f:ac: 4f:31:19:a8:5c:19:31:e4:7b:a6:95:5f:93:93:d3: 89:91:4d:66:52:b8:87:b8:5d:7a:e8:cf:43:2e:a8: f3:23:da:69:bd:3c:3a:fb:df:41:ae:06:e8:7d:0c: bb:a6:e8:bf:66:3c:65:e3:ce:b7:eb:41:cf:70:9a: 6f:c8:02:bc:39:3a:e7:69:72:4b:f2:38:33:a1:5b: 3e:f2:8f:63:1f:d0:ca:d6:bf:bc:27:22:94:5e:12: 60:d4:94:9f:92:28:dd:13:bc:1a:6d:90:a9:61:8c: b8:7a:d3:e9:49:3e:e1:e5:e4:88:d1:75:f7:56:77: e8:5e:e2:2c:26:4d:75:5a:1a:97:29:5f:d3:29:a7: 13:9d:1b:ed:af:02:8c:8f:f4:f7:37:aa:c3:e8:82: 81:ad:17:71:21:52:88:f0:2e:3c:6a:ac:ee:c0:db: d6:1b:54:30:d9:ba:31:83:a4:b0:d3:8d:80:39:5b: 5f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:11:F2:DD:B6:E1:7A:2D:0E:E6:F4:B2:76:DB:F1:D0:89:47:B1:12 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3hHy3bbhei0O5vSydtvx0IlHsRI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:12d6::/48 2a0e:b107:12d8::/48 2a0e:b107:12db::/48 2a0e:b107:12dd::/48 2a0e:b107:12df::/48 Signature Algorithm: sha256WithRSAEncryption 1f:00:4b:d2:40:59:63:a1:ea:f4:83:1b:25:1f:b5:96:9e:50: c1:c9:e0:09:bc:54:67:fd:66:0f:0f:87:98:cd:4c:da:e8:d6: 67:7a:2c:2a:a3:8b:df:83:a1:00:90:33:72:bf:21:95:b7:02: 50:4c:4d:38:32:da:e9:67:34:68:ee:ff:28:fa:6e:5a:84:3d: 33:a1:c1:2f:91:34:57:50:88:6a:7d:32:8c:91:1c:09:77:11: 03:1f:9a:b4:a1:02:e0:70:68:d5:90:03:cc:35:1a:33:8c:dd: 40:97:ec:9a:2a:cc:24:6d:46:75:45:b4:7f:0f:ea:75:42:49: 1d:94:3d:dc:e8:05:63:b9:18:4d:32:13:f4:f9:38:f6:f7:d3: a6:a1:1e:64:29:9e:4c:e4:f9:54:6b:d6:be:7b:81:b4:c0:b7: 2f:a6:5c:dc:09:52:77:2d:eb:c6:6a:61:c0:58:85:a5:4e:a4: c5:2c:82:a5:0e:13:90:f9:50:f6:fc:33:51:16:e0:94:6b:a9: b7:99:69:ca:22:14:40:41:e9:60:76:dc:42:a5:7b:5c:62:c2: a4:0c:82:9e:28:5d:85:af:24:46:84:97:c3:ad:73:8a:d5:09: a0:59:97:63:ca:a5:3f:b1:ff:ad:bd:2a:8e:82:52:c4:cc:45: 39:e6:76:5d -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt9XXqpqDeP/NVowVxz4tULMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTExZjJkZGI2ZTE3YTJkMGVlNmY0YjI3NmRiZjFkMDg5NDdiMTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRd6OpP+YjiiT3YjwNtnB0SZsmUW 0bwX5Fviwf6dKOzyvAlkHX4c8KyzaZqPQVl+WSsrYFvGY8MOszV/HFH+DzjqeT40 IIxoj6xPMRmoXBkx5HumlV+Tk9OJkU1mUriHuF166M9DLqjzI9ppvTw6+99Brgbo fQy7pui/Zjxl486360HPcJpvyAK8OTrnaXJL8jgzoVs+8o9jH9DK1r+8JyKUXhJg 1JSfkijdE7wabZCpYYy4etPpST7h5eSI0XX3VnfoXuIsJk11WhqXKV/TKacTnRvt rwKMj/T3N6rD6IKBrRdxIVKI8C48aqzuwNvWG1Qw2boxg6Sw042AOVtfmQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFN4R8t224XotDub0snbb8dCJR7ESMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvM2hIeTNiYmhlaTBPNXZTeWR0dngwSWxIc1JJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAzBAIAAjAtAwcAKg6xBxLW AwcAKg6xBxLYAwcAKg6xBxLbAwcAKg6xBxLdAwcAKg6xBxLfMA0GCSqGSIb3DQEB CwUAA4IBAQAfAEvSQFljoer0gxslH7WWnlDByeAJvFRn/WYPD4eYzUza6NZneiwq o4vfg6EAkDNyvyGVtwJQTE04MtrpZzRo7v8o+m5ahD0zocEvkTRXUIhqfTKMkRwJ dxEDH5q0oQLgcGjVkAPMNRozjN1Al+yaKswkbUZ1RbR/D+p1QkkdlD3c6AVjuRhN MhP0+Tj299OmoR5kKZ5M5PlUa9a+e4G0wLcvplzcCVJ3LevGamHAWIWlTqTFLIKl DhOQ+VD2/DNRFuCUa6m3mWnKIhRAQelgdtxCpXtcYsKkDIKeKF2FryRGhJfDrXOK 1QmgWZdjyqU/sf+tvSqOglLEzEU55nZd -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:07 2026 by rpki-client