This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/72mIIXlY7wAsCYJHPOLXKI86I8M.roa File: 72mIIXlY7wAsCYJHPOLXKI86I8M.roa (raw, json) Hash identifier: b4raOdx3SCo8D6LNsQ8W4FSbWeXX93pO/VUXXj0Lj5Y= Subject key identifier: EF:69:88:21:79:58:EF:00:2C:09:82:47:3C:E2:D7:28:8F:3A:23:C3 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D5462CC9097F72BEDA5C9A75AE0C7 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/72mIIXlY7wAsCYJHPOLXKI86I8M.roa Signing time: Fri 02 Jan 2026 06:20:26 +0000 ROA not before: Fri 02 Jan 2026 06:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212703 IP address blocks: 2a10:2f00:14d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:54:62:cc:90:97:f7:2b:ed:a5:c9:a7:5a:e0:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef6988217958ef002c0982473ce2d7288f3a23c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:eb:3d:e5:cd:c1:e4:1e:56:5b:93:f3:50:f5: c5:30:9c:ac:30:a8:57:2a:78:11:8c:47:20:01:5c: 30:eb:2c:23:d6:52:06:f0:66:22:60:2f:64:31:29: 04:a0:0f:ea:a2:ad:d4:47:ce:5d:4d:15:c2:4d:17: 01:91:f5:cf:10:f2:ed:f6:67:fa:f3:04:91:1b:7f: 5c:b3:fa:78:56:bc:3c:4e:16:a2:14:7c:e6:11:e7: 2a:de:75:96:4f:7c:61:ab:c7:de:16:d1:f8:0f:ed: e8:4d:7b:cb:47:3b:a2:01:1c:fa:74:1a:62:b7:a1: e0:eb:ae:54:b3:65:a2:e4:90:b1:2e:4a:86:2e:52: d5:f0:c6:80:db:d4:12:60:07:a4:ec:ad:94:0a:2e: 74:5c:73:9b:75:17:a1:2b:d7:b4:a5:f6:76:0a:12: 51:53:1e:49:88:cc:61:0c:af:bd:bc:61:c2:6e:6d: 00:47:c3:5a:1a:da:c5:0a:f1:16:d2:c9:d2:a5:cf: ab:23:24:95:53:c9:c5:7e:18:2c:1f:42:f4:32:f5: ed:f2:f8:47:e6:fe:3c:b8:03:f7:be:e4:21:dc:d7: 73:fa:22:9a:d9:85:aa:df:d5:4f:b5:a4:8e:45:1d: 8d:f6:b0:3b:73:11:e6:d8:15:c9:99:b0:bd:36:f6: 6c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:69:88:21:79:58:EF:00:2C:09:82:47:3C:E2:D7:28:8F:3A:23:C3 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/72mIIXlY7wAsCYJHPOLXKI86I8M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:2f00:14d::/48 Signature Algorithm: sha256WithRSAEncryption 75:63:14:57:9d:f3:ad:4d:8b:34:94:0d:87:09:c0:7e:0e:8e: 3b:6c:6a:1e:2d:2f:7b:fe:9c:da:74:08:79:f8:a3:56:95:5c: 05:18:da:ce:cc:58:d2:e4:cc:75:38:04:fd:00:44:66:d7:f6: 46:04:77:78:d1:34:0b:0e:19:1e:a7:be:bc:19:ad:f4:44:94: c8:3c:55:b3:21:f6:54:88:f1:19:e0:03:f5:53:cc:0f:88:db: 2d:34:00:a0:0d:59:a0:c1:d9:37:1f:52:6f:2d:71:a5:b7:d3: ba:06:5c:e5:a9:98:7b:32:12:4f:a6:34:7e:1c:1d:42:ba:d5: 0b:5d:5f:f8:a4:0c:e8:b8:4d:b1:4c:14:b7:83:ce:6c:c3:6d: 8d:ef:61:91:21:38:d4:8d:d8:7b:c2:b0:f0:01:6f:23:04:66: b2:2d:f3:a0:42:25:d4:45:cb:09:72:fd:e3:2b:e7:ff:b4:1d: 1b:64:55:89:2e:28:14:61:12:73:95:bf:8b:df:88:96:f5:25: b7:37:e3:6a:63:60:66:5a:ac:a8:4e:c3:41:f2:cf:39:c1:b4: 25:12:d5:b2:98:f6:33:18:da:63:a4:d1:24:6f:90:84:d9:74: e6:ef:a6:93:6d:8a:6c:ae:58:cf:3b:75:5b:7b:5b:3e:cc:5e: 04:ad:6e:14 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XVRizJCX9yvtpcmnWuDHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjY5ODgyMTc5NThlZjAwMmMwOTgyNDczY2UyZDcyODhmM2EyM2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzus95c3B5B5WW5PzUPXFMJysMKhX KngRjEcgAVww6ywj1lIG8GYiYC9kMSkEoA/qoq3UR85dTRXCTRcBkfXPEPLt9mf6 8wSRG39cs/p4Vrw8ThaiFHzmEecq3nWWT3xhq8feFtH4D+3oTXvLRzuiARz6dBpi t6Hg665Us2Wi5JCxLkqGLlLV8MaA29QSYAek7K2UCi50XHObdRehK9e0pfZ2ChJR Ux5JiMxhDK+9vGHCbm0AR8NaGtrFCvEW0snSpc+rIySVU8nFfhgsH0L0MvXt8vhH 5v48uAP3vuQh3Ndz+iKa2YWq39VPtaSORR2N9rA7cxHm2BXJmbC9NvZsOwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFO9piCF5WO8ALAmCRzzi1yiPOiPDMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvNzJtSUlYbFk3d0FzQ1lKSFBPTFhLSTg2SThNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAvAAFN MA0GCSqGSIb3DQEBCwUAA4IBAQB1YxRXnfOtTYs0lA2HCcB+Do47bGoeLS97/pza dAh5+KNWlVwFGNrOzFjS5Mx1OAT9AERm1/ZGBHd40TQLDhkep768Ga30RJTIPFWz IfZUiPEZ4AP1U8wPiNstNACgDVmgwdk3H1JvLXGlt9O6BlzlqZh7MhJPpjR+HB1C utULXV/4pAzouE2xTBS3g85sw22N72GRITjUjdh7wrDwAW8jBGayLfOgQiXURcsJ cv3jK+f/tB0bZFWJLigUYRJzlb+L34iW9SW3N+NqY2BmWqyoTsNB8s85wbQlEtWy mPYzGNpjpNEkb5CE2XTm76aTbYpsrljPO3Vbe1s+zF4ErW4U -----END CERTIFICATE-----Generated at Fri Jan 9 13:12:06 2026 by rpki-client