This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4mblz4VWbPHq-o8DuvXYP3scIjI.roa File: 4mblz4VWbPHq-o8DuvXYP3scIjI.roa (raw, json) Hash identifier: yTFUCIs7V6pKtJKQ+NPtFZxB90oNbb45FDiSUKZwy5I= Subject key identifier: E2:66:E5:CF:85:56:6C:F1:EA:FA:8F:03:BA:F5:D8:3F:7B:1C:22:32 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D4E7F649514CF96F9D17137AF2258 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4mblz4VWbPHq-o8DuvXYP3scIjI.roa Signing time: Fri 02 Jan 2026 06:20:25 +0000 ROA not before: Fri 02 Jan 2026 06:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212270 IP address blocks: 2a0e:b107:f50::/44 maxlen: 48 2a0e:b107:1210::/44 maxlen: 48 2a0e:b107:1510::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:4e:7f:64:95:14:cf:96:f9:d1:71:37:af:22:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e266e5cf85566cf1eafa8f03baf5d83f7b1c2232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:10:45:4c:14:dd:68:4a:c0:76:8f:d0:bc:94: 76:65:45:b0:dc:98:fb:1b:cf:85:68:e7:7c:2c:1f: ed:db:76:5c:e6:b3:02:1c:7d:c7:95:57:b9:eb:c1: a5:c5:29:80:87:e2:bc:75:85:53:fa:61:ec:d0:13: 79:e7:63:62:a9:9f:32:68:f6:b0:e0:f1:a8:fa:33: 15:62:00:8a:4c:8a:a5:53:c0:46:32:6a:66:cf:0c: 0e:79:2c:22:33:15:7e:cb:b3:9d:12:ad:5f:b3:f9: 4c:85:32:cf:a7:f4:cf:f5:6d:cc:78:2e:38:00:43: fb:05:8e:f9:e5:b7:1d:51:d5:7a:23:7f:b2:9b:d3: ac:9d:ad:c8:2f:b7:fa:1f:38:e5:a7:69:09:b6:f0: 9b:f0:4f:0b:55:5d:bf:2d:33:82:67:dd:41:ba:2a: 27:85:5a:84:da:8c:0d:46:12:22:82:d4:b5:9c:3c: c8:d9:e1:20:41:e7:4d:3f:7b:65:56:4b:4d:55:55: b6:aa:f1:3f:55:15:97:23:54:f4:6c:ad:5b:8c:be: 5b:62:64:e2:2f:ff:69:e0:c4:35:1f:50:0a:dc:5d: f9:bd:a0:76:3c:2f:91:65:e8:92:78:dd:a6:59:d0: f6:32:d9:37:39:12:66:03:4d:ee:7f:97:45:06:d4: ef:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:66:E5:CF:85:56:6C:F1:EA:FA:8F:03:BA:F5:D8:3F:7B:1C:22:32 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4mblz4VWbPHq-o8DuvXYP3scIjI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:f50::/44 2a0e:b107:1210::/44 2a0e:b107:1510::/44 Signature Algorithm: sha256WithRSAEncryption 08:b8:0e:39:4c:6f:8b:c2:cc:5c:84:42:70:83:56:00:39:8c: ee:3e:eb:51:63:65:20:9e:a8:84:2f:12:8d:08:78:64:23:d3: 13:e4:c1:96:3d:9e:06:5c:0e:8c:58:3a:8b:d0:9a:8c:71:bb: f3:1f:d0:28:cf:d4:ee:c0:b7:b6:ad:59:1c:b4:68:d4:9b:1d: 6d:1b:72:37:bc:3c:49:52:21:3c:9e:cd:1c:8a:cd:aa:25:26: 05:75:7c:ee:31:22:1a:63:97:b6:02:95:4c:e6:56:eb:a2:65: 16:33:93:c2:f8:4e:9a:0c:4d:e7:1d:a3:43:62:20:92:ab:ef: 55:b8:ae:29:0b:57:d4:f1:2a:9c:27:29:d0:2f:eb:be:27:b6: f4:4d:16:17:e1:d5:54:25:65:6b:24:1f:11:2f:9f:49:7d:25: 44:3d:73:8f:bc:f0:80:49:a5:89:fc:8a:49:82:3c:fa:72:83: 28:74:d9:7d:91:e1:e2:7d:4f:59:15:88:40:a0:20:b2:63:c1: 1b:5c:b3:3a:95:d7:ad:58:b1:7b:f4:34:bb:86:bb:b3:57:c7: 0c:1a:b3:ca:13:b0:51:a7:c6:47:4a:fc:a2:30:50:6c:18:77: 5b:74:10:de:20:df:f8:ff:b8:a2:12:73:92:7b:0b:8e:c7:7f: ec:cb:d6:02 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9XU5/ZJUUz5b50XE3ryJYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjY2ZTVjZjg1NTY2Y2YxZWFmYThmMDNiYWY1ZDgzZjdiMWMyMjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRBFTBTdaErAdo/QvJR2ZUWw3Jj7 G8+FaOd8LB/t23Zc5rMCHH3HlVe568GlxSmAh+K8dYVT+mHs0BN552NiqZ8yaPaw 4PGo+jMVYgCKTIqlU8BGMmpmzwwOeSwiMxV+y7OdEq1fs/lMhTLPp/TP9W3MeC44 AEP7BY755bcdUdV6I3+ym9Osna3IL7f6Hzjlp2kJtvCb8E8LVV2/LTOCZ91Buion hVqE2owNRhIigtS1nDzI2eEgQedNP3tlVktNVVW2qvE/VRWXI1T0bK1bjL5bYmTi L/9p4MQ1H1AK3F35vaB2PC+RZeiSeN2mWdD2Mtk3ORJmA03uf5dFBtTv2wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOJm5c+FVmzx6vqPA7r12D97HCIyMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvNG1ibHo0VldiUEhxLW84RHV2WFlQM3NjSWpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcEKg6xBw9Q AwcEKg6xBxIQAwcEKg6xBxUQMA0GCSqGSIb3DQEBCwUAA4IBAQAIuA45TG+Lwsxc hEJwg1YAOYzuPutRY2UgnqiELxKNCHhkI9MT5MGWPZ4GXA6MWDqL0JqMcbvzH9Ao z9TuwLe2rVkctGjUmx1tG3I3vDxJUiE8ns0cis2qJSYFdXzuMSIaY5e2ApVM5lbr omUWM5PC+E6aDE3nHaNDYiCSq+9VuK4pC1fU8SqcJynQL+u+J7b0TRYX4dVUJWVr JB8RL59JfSVEPXOPvPCASaWJ/IpJgjz6coModNl9keHifU9ZFYhAoCCyY8EbXLM6 ldetWLF79DS7hruzV8cMGrPKE7BRp8ZHSvyiMFBsGHdbdBDeIN/4/7iiEnOSewuO x3/sy9YC -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:10 2026 by rpki-client