This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3u11jFvBkRrcp0ApcqHvSL-7wdM.roa File: 3u11jFvBkRrcp0ApcqHvSL-7wdM.roa (raw, json) Hash identifier: vqDp2vfjU7GSucThjk/UBDrMZSrdK6HfJjC9FPYig0U= Subject key identifier: DE:ED:75:8C:5B:C1:91:1A:DC:A7:40:29:72:A1:EF:48:BF:BB:C1:D3 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CE8407E5EDBA1940C5B7112041ACC Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3u11jFvBkRrcp0ApcqHvSL-7wdM.roa Signing time: Fri 02 Jan 2026 06:19:59 +0000 ROA not before: Fri 02 Jan 2026 06:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200959 IP address blocks: 2a0e:b107:1a40::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e8:40:7e:5e:db:a1:94:0c:5b:71:12:04:1a:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=deed758c5bc1911adca7402972a1ef48bfbbc1d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ca:d7:39:7c:fa:55:e6:16:56:3e:a1:9d:f5: 3d:12:1a:91:cb:60:c6:6a:0f:fd:c9:81:b3:d2:31: 33:51:3a:1b:62:62:57:06:8a:53:2f:aa:6e:cf:09: 94:57:5e:f8:0b:f0:9c:f2:e4:f7:58:7a:f7:b6:ba: ad:cd:ec:f5:63:3d:a4:50:6b:f6:ff:15:43:97:57: de:10:2f:a8:02:f7:e3:47:ed:ae:0d:16:60:8a:ab: 78:d3:b0:6b:43:75:47:91:e7:dc:a1:3c:14:33:e2: f1:8c:f6:62:2c:53:90:e8:40:85:c5:0f:84:50:10: b9:63:7d:d1:2c:21:1b:f0:9b:aa:b7:82:6a:1e:fc: 1d:6f:26:8d:5e:10:00:9e:cd:46:c8:5c:36:c3:21: 15:c6:b0:d9:16:20:aa:be:af:bc:96:2f:4d:94:b5: 35:f4:07:44:60:90:8a:6f:aa:fc:33:ba:55:35:e9: cb:cc:cc:9d:a3:ab:f5:d2:ab:f1:86:d4:a2:95:e3: 11:9e:23:0e:42:30:43:d4:89:57:c4:1b:61:4f:cd: e2:29:66:b3:9b:85:15:ee:4e:01:32:56:49:47:41: 84:5c:dd:17:0b:26:79:a3:ea:91:02:14:bf:32:7a: c1:f6:15:09:3f:34:e3:ca:14:c9:6e:f5:0c:4f:1b: f9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:ED:75:8C:5B:C1:91:1A:DC:A7:40:29:72:A1:EF:48:BF:BB:C1:D3 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3u11jFvBkRrcp0ApcqHvSL-7wdM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1a40::/44 Signature Algorithm: sha256WithRSAEncryption 66:11:82:59:2b:41:a4:77:a1:33:79:3e:33:c3:ce:d6:5e:1e: 21:f4:3d:e8:50:ed:14:ea:17:67:af:36:61:6e:f2:f5:4d:28: 92:8b:56:66:a8:68:46:95:a3:a0:f6:13:db:e6:88:20:dd:58: 2a:b6:4c:9c:82:d6:83:e3:2f:93:12:1f:40:98:4a:c0:3c:6f: a6:5d:23:3d:47:ec:e2:e0:b8:e1:fd:22:48:d3:1b:43:fa:01: 8f:45:90:75:c8:4e:b8:65:14:f9:d0:1f:6a:e2:bf:f0:3e:17: a9:40:e5:b0:7e:3e:2a:d9:f5:4d:1a:61:8f:ad:a9:b9:ef:39: 57:87:27:01:1c:b8:d6:88:db:42:d3:2d:ce:bc:c3:59:09:eb: c1:26:27:40:ae:32:1e:81:6d:5b:90:5d:ef:ba:ee:70:f6:8a: c9:2c:86:23:37:c0:68:02:87:c0:41:f8:75:05:a1:30:a7:0d: be:a3:ae:f9:fe:0f:48:54:91:97:0a:1c:db:31:1e:67:dd:28: 86:c4:64:21:62:1a:65:a0:4a:ef:0a:53:0d:3e:ce:c4:4e:ef: a4:c3:9c:e8:a4:e4:9e:be:81:a3:ea:5e:17:db:de:c5:3b:05: 18:13:f5:10:cf:8b:2e:bb:dc:6c:6a:27:03:96:6d:26:e6:1f: 3b:2b:6b:99 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XOhAfl7boZQMW3ESBBrMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWVkNzU4YzViYzE5MTFhZGNhNzQwMjk3MmExZWY0OGJmYmJjMWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MrXOXz6VeYWVj6hnfU9EhqRy2DG ag/9yYGz0jEzUTobYmJXBopTL6puzwmUV174C/Cc8uT3WHr3trqtzez1Yz2kUGv2 /xVDl1feEC+oAvfjR+2uDRZgiqt407BrQ3VHkefcoTwUM+LxjPZiLFOQ6ECFxQ+E UBC5Y33RLCEb8Juqt4JqHvwdbyaNXhAAns1GyFw2wyEVxrDZFiCqvq+8li9NlLU1 9AdEYJCKb6r8M7pVNenLzMydo6v10qvxhtSileMRniMOQjBD1IlXxBthT83iKWaz m4UV7k4BMlZJR0GEXN0XCyZ5o+qRAhS/MnrB9hUJPzTjyhTJbvUMTxv52wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFN7tdYxbwZEa3KdAKXKh70i/u8HTMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvM3UxMWpGdkJrUnJjcDBBcGNxSHZTTC03d2RNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxpA MA0GCSqGSIb3DQEBCwUAA4IBAQBmEYJZK0Gkd6EzeT4zw87WXh4h9D3oUO0U6hdn rzZhbvL1TSiSi1ZmqGhGlaOg9hPb5ogg3VgqtkycgtaD4y+TEh9AmErAPG+mXSM9 R+zi4Ljh/SJI0xtD+gGPRZB1yE64ZRT50B9q4r/wPhepQOWwfj4q2fVNGmGPram5 7zlXhycBHLjWiNtC0y3OvMNZCevBJidArjIegW1bkF3vuu5w9orJLIYjN8BoAofA Qfh1BaEwpw2+o675/g9IVJGXChzbMR5n3SiGxGQhYhploErvClMNPs7ETu+kw5zo pOSevoGj6l4X297FOwUYE/UQz4suu9xsaicDlm0m5h87K2uZ -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:11 2026 by rpki-client