This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5lLeyCS0gdiF6uU_W2k34idQBR0.roa File: 5lLeyCS0gdiF6uU_W2k34idQBR0.roa (raw, json) Hash identifier: mO2VoYrFL547ROykvFmVAE1ClOHSIF3lN2rqGunJ/qY= Subject key identifier: E6:52:DE:C8:24:B4:81:D8:85:EA:E5:3F:5B:69:37:E2:27:50:05:1D Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D63A05EBE107692344E9C9AE2AE68 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5lLeyCS0gdiF6uU_W2k34idQBR0.roa Signing time: Fri 02 Jan 2026 06:20:30 +0000 ROA not before: Fri 02 Jan 2026 06:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213426 IP address blocks: 2a06:de00:1f00::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:63:a0:5e:be:10:76:92:34:4e:9c:9a:e2:ae:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e652dec824b481d885eae53f5b6937e22750051d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:91:0c:a3:c9:53:d7:6a:ab:72:3f:2c:ca:86: 19:f1:bf:1b:8a:0c:c4:dc:d3:d9:73:cc:37:24:c1: 21:41:60:16:f6:71:6a:9b:80:af:6c:df:7e:68:60: cc:a0:52:b8:e0:b9:d4:6b:44:7c:61:39:f7:96:a4: 6d:65:3d:91:11:f0:d4:33:55:20:db:ac:d1:50:92: 12:91:f9:2f:98:f2:07:bf:78:1d:c8:ed:33:2e:35: 41:4b:13:cf:58:6c:1a:80:ad:ad:94:24:37:0f:64: d0:ef:42:fe:3f:97:b5:c3:88:36:f2:30:de:6d:d8: d8:2b:af:dc:65:f4:80:36:81:f4:1d:a0:7e:c6:37: ef:95:38:53:8c:a1:a3:9c:cd:87:b4:a0:9e:cc:b9: 15:a9:d2:81:18:39:15:24:ba:ed:04:bd:9c:0e:10: df:d4:75:54:48:bc:28:b6:ce:f4:65:eb:d7:17:0f: 7a:89:57:ef:bb:ff:67:62:71:36:4c:a2:eb:aa:61: 21:66:d3:8d:73:03:40:a8:7d:87:67:79:d1:78:8f: 81:24:61:29:aa:64:e5:bc:ef:cf:a7:8a:da:c3:7f: f4:48:41:1c:a4:d3:c8:b0:12:21:c6:a0:53:d0:d7: 5f:99:6f:e1:76:86:83:60:e5:7f:54:93:b1:76:4b: d2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:52:DE:C8:24:B4:81:D8:85:EA:E5:3F:5B:69:37:E2:27:50:05:1D X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5lLeyCS0gdiF6uU_W2k34idQBR0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:de00:1f00::/44 Signature Algorithm: sha256WithRSAEncryption 6d:e5:8e:24:b7:53:03:f3:4f:c8:f5:16:1c:e9:98:9c:25:a9: 2e:da:a2:33:8c:cd:9a:8c:c3:56:56:d7:32:de:72:ea:63:58: 0c:ca:4e:1a:45:b4:b1:7f:a0:84:e8:f1:3a:d0:65:bf:ed:e4: 6f:3f:71:b7:9a:12:c1:97:f5:8d:bd:ef:3c:fb:09:3b:ff:5f: 1c:2f:c9:a2:2f:8e:15:13:c4:ee:0d:e4:f1:29:84:4c:24:28: aa:5d:f1:e7:9a:d6:94:5b:98:d9:58:c3:47:b0:54:6a:89:31: d3:8c:5c:02:f4:e5:8d:be:62:45:32:d4:9f:da:e9:cd:2f:85: 4e:8f:bd:3f:04:73:a4:9d:5e:3e:8e:91:1b:9f:d5:f2:a7:2c: 4f:d6:9e:f8:78:dc:73:c0:55:1b:81:6c:3d:ed:97:0d:7d:f3: cc:bb:8f:d7:f5:7d:7e:12:e8:90:fe:a9:45:2f:50:9e:eb:5b: 69:77:5c:41:72:ca:06:20:ac:43:51:11:06:70:aa:46:78:d3: ff:b3:4c:7c:0a:21:4a:84:9a:4c:cb:84:55:04:59:39:c2:da: 0b:a6:d0:37:f6:ab:05:b6:e8:30:74:9b:ce:9b:3f:9d:d9:95: 86:23:f2:5b:3d:91:db:dd:90:3a:36:62:c9:cd:b7:7d:50:fa: 5b:d5:7c:05 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XWOgXr4QdpI0Tpya4q5oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjUyZGVjODI0YjQ4MWQ4ODVlYWU1M2Y1YjY5MzdlMjI3NTAwNTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JEMo8lT12qrcj8syoYZ8b8bigzE 3NPZc8w3JMEhQWAW9nFqm4CvbN9+aGDMoFK44LnUa0R8YTn3lqRtZT2REfDUM1Ug 26zRUJISkfkvmPIHv3gdyO0zLjVBSxPPWGwagK2tlCQ3D2TQ70L+P5e1w4g28jDe bdjYK6/cZfSANoH0HaB+xjfvlThTjKGjnM2HtKCezLkVqdKBGDkVJLrtBL2cDhDf 1HVUSLwots70ZevXFw96iVfvu/9nYnE2TKLrqmEhZtONcwNAqH2HZ3nReI+BJGEp qmTlvO/Pp4raw3/0SEEcpNPIsBIhxqBT0NdfmW/hdoaDYOV/VJOxdkvSVwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOZS3sgktIHYherlP1tpN+InUAUdMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvNWxMZXlDUzBnZGlGNnVVX1cyazM0aWRRQlIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgbeAB8A MA0GCSqGSIb3DQEBCwUAA4IBAQBt5Y4kt1MD80/I9RYc6ZicJaku2qIzjM2ajMNW Vtcy3nLqY1gMyk4aRbSxf6CE6PE60GW/7eRvP3G3mhLBl/WNve88+wk7/18cL8mi L44VE8TuDeTxKYRMJCiqXfHnmtaUW5jZWMNHsFRqiTHTjFwC9OWNvmJFMtSf2unN L4VOj70/BHOknV4+jpEbn9XypyxP1p74eNxzwFUbgWw97ZcNffPMu4/X9X1+EuiQ /qlFL1Ce61tpd1xBcsoGIKxDUREGcKpGeNP/s0x8CiFKhJpMy4RVBFk5wtoLptA3 9qsFtugwdJvOmz+d2ZWGI/JbPZHb3ZA6NmLJzbd9UPpb1XwF -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:21 2026 by rpki-client