This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4BX6mwKV4bP7-K3LqYQE3Mi8l7o.roa File: 4BX6mwKV4bP7-K3LqYQE3Mi8l7o.roa (raw, json) Hash identifier: xgeN34ZZDLoDoXn57Xwki3vVKRZWpmsoVze85hoTQAE= Subject key identifier: E0:15:FA:9B:02:95:E1:B3:FB:F8:AD:CB:A9:84:04:DC:C8:BC:97:BA Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D48FA6F242E0998AEC64A7CB2BF2F Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4BX6mwKV4bP7-K3LqYQE3Mi8l7o.roa Signing time: Fri 02 Jan 2026 06:20:24 +0000 ROA not before: Fri 02 Jan 2026 06:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212094 IP address blocks: 2a06:de01:e0::/44 maxlen: 48 2a0e:97c0:480::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 17:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:48:fa:6f:24:2e:09:98:ae:c6:4a:7c:b2:bf:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e015fa9b0295e1b3fbf8adcba98404dcc8bc97ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d5:aa:29:38:b8:4c:c2:d6:09:f9:90:76:91: 1b:57:11:83:71:b7:d0:13:29:45:ab:89:70:81:1e: 70:da:47:02:6a:d0:4e:da:16:50:4a:15:61:8f:5a: 57:d2:79:76:dd:17:a0:57:4d:19:80:4c:8f:82:1a: 82:c6:24:29:50:ef:af:af:c7:3d:da:6b:59:b6:15: 50:47:ca:3e:c9:9a:4c:40:63:2b:ae:34:77:00:3a: dd:37:eb:e3:f8:ea:fc:33:93:19:bb:14:b0:82:59: 33:d0:84:b5:85:82:9e:4f:8c:da:fe:65:8d:43:8d: 07:14:58:eb:ed:99:0b:73:17:bf:f6:af:98:f0:16: 63:b0:6c:4c:e3:ba:01:14:2a:40:89:d6:09:ba:e0: a7:77:b7:d6:87:53:ec:d7:b1:cb:9d:34:2e:17:8b: 90:f1:5a:b0:e6:2d:2f:f1:42:34:87:b2:1d:42:12: 26:c7:8f:4d:d1:44:9a:4d:69:6f:91:31:95:8c:84: 2e:3e:ed:f4:15:e0:51:1c:58:95:42:36:40:79:73: 41:fc:6c:4a:bb:1d:2c:e8:04:94:05:5f:66:cb:c4: 8b:a7:78:af:fd:7a:2a:97:2f:b6:b4:75:05:57:93: f6:46:69:4e:87:86:dc:76:7a:1d:94:be:f3:52:ad: ac:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:15:FA:9B:02:95:E1:B3:FB:F8:AD:CB:A9:84:04:DC:C8:BC:97:BA X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4BX6mwKV4bP7-K3LqYQE3Mi8l7o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:de01:e0::/44 2a0e:97c0:480::/44 Signature Algorithm: sha256WithRSAEncryption 61:1c:18:2e:83:ad:b0:6f:06:12:5b:2e:57:c0:f1:3a:38:40: 76:f2:f2:5d:16:7f:3b:db:33:40:2a:2f:d5:1b:f1:dc:c5:bb: 90:49:00:b6:08:60:2c:5e:c1:8e:df:8d:0d:c7:e2:16:17:64: cd:9c:fa:11:1c:41:6d:44:8b:b9:ea:34:b9:ec:41:a2:01:56: 5e:99:5f:b8:d9:59:7e:63:c3:00:3a:64:87:ff:18:f1:80:1a: b3:e6:63:9b:8c:79:b0:85:68:02:64:d7:3c:d2:1a:58:27:db: 6e:cd:d7:b8:50:b0:32:32:f4:01:f0:6b:fc:a9:89:5b:74:e2: 3a:66:28:b4:15:d3:56:83:91:61:89:da:df:d9:6a:eb:8d:1a: 95:20:ef:82:3f:64:3d:4c:fc:76:92:2a:b0:0d:5e:92:52:03: 33:76:fa:92:27:16:57:dc:b6:ef:c3:1e:3d:35:d9:c2:2b:31: 15:f5:78:02:aa:c2:bf:4d:c3:24:34:6d:7e:f8:0c:36:dd:63: 7c:ae:ca:08:c7:c7:27:e2:14:a6:22:de:e6:28:cc:8d:ba:a4: f8:a7:73:6a:ae:77:d6:d6:fe:10:15:a4:58:e4:7f:4b:90:b1: c9:0b:ea:0b:91:13:73:a0:a1:90:b6:b0:eb:af:b2:98:b3:1b: b7:93:c1:6a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XUj6byQuCZiuxkp8sr8vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDE1ZmE5YjAyOTVlMWIzZmJmOGFkY2JhOTg0MDRkY2M4YmM5N2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdWqKTi4TMLWCfmQdpEbVxGDcbfQ EylFq4lwgR5w2kcCatBO2hZQShVhj1pX0nl23RegV00ZgEyPghqCxiQpUO+vr8c9 2mtZthVQR8o+yZpMQGMrrjR3ADrdN+vj+Or8M5MZuxSwglkz0IS1hYKeT4za/mWN Q40HFFjr7ZkLcxe/9q+Y8BZjsGxM47oBFCpAidYJuuCnd7fWh1Ps17HLnTQuF4uQ 8Vqw5i0v8UI0h7IdQhImx49N0USaTWlvkTGVjIQuPu30FeBRHFiVQjZAeXNB/GxK ux0s6ASUBV9my8SLp3iv/Xoqly+2tHUFV5P2RmlOh4bcdnodlL7zUq2s/wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOAV+psCleGz+/ity6mEBNzIvJe6MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvNEJYNm13S1Y0YlA3LUszTHFZUUUzTWk4bDdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgbeAQDg AwcEKg6XwASAMA0GCSqGSIb3DQEBCwUAA4IBAQBhHBgug62wbwYSWy5XwPE6OEB2 8vJdFn872zNAKi/VG/HcxbuQSQC2CGAsXsGO340Nx+IWF2TNnPoRHEFtRIu56jS5 7EGiAVZemV+42Vl+Y8MAOmSH/xjxgBqz5mObjHmwhWgCZNc80hpYJ9tuzde4ULAy MvQB8Gv8qYlbdOI6Zii0FdNWg5Fhidrf2WrrjRqVIO+CP2Q9TPx2kiqwDV6SUgMz dvqSJxZX3Lbvwx49NdnCKzEV9XgCqsK/TcMkNG1++Aw23WN8rsoIx8cn4hSmIt7m KMyNuqT4p3NqrnfW1v4QFaRY5H9LkLHJC+oLkRNzoKGQtrDrr7KYsxu3k8Fq -----END CERTIFICATE-----Generated at Sat Jan 10 02:19:26 2026 by rpki-client