This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/79SjjLc2T0OT_fAeNmABmBJ7K3Q.roa File: 79SjjLc2T0OT_fAeNmABmBJ7K3Q.roa (raw, json) Hash identifier: 1iuYN3e+3/rkyJK7objFV7mOnrZZbPYbGDNAsrkMxWU= Subject key identifier: EF:D4:A3:8C:B7:36:4F:43:93:FD:F0:1E:36:60:01:98:12:7B:2B:74 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B4486EAE35DDCF15BA40D0DB55EEBEBA7 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/79SjjLc2T0OT_fAeNmABmBJ7K3Q.roa Signing time: Mon 22 Dec 2025 05:27:31 +0000 ROA not before: Mon 22 Dec 2025 05:27:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215980 IP address blocks: 2a0e:97c0:e30::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 13:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:86:ea:e3:5d:dc:f1:5b:a4:0d:0d:b5:5e:eb:eb:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Dec 22 05:27:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=efd4a38cb7364f4393fdf01e36600198127b2b74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:51:57:11:d4:af:dd:65:3d:47:aa:1c:07:83: eb:3a:78:e1:47:50:1d:71:97:dd:14:2b:9f:e9:5e: 4c:cf:97:6d:b0:c1:35:4f:53:1b:74:24:5a:d6:0e: 16:99:63:00:13:0b:b8:13:db:f9:82:19:d2:84:63: ca:ee:a4:fd:7a:6d:45:ff:4c:90:dc:41:ff:d1:ba: 73:d9:63:8d:13:14:90:ef:24:70:08:72:51:23:0f: e9:01:df:0e:e2:a6:97:57:ba:8f:24:c0:ab:9d:0f: ee:6e:aa:e2:aa:f6:a7:ae:ef:d6:d1:b4:dd:16:b0: ea:a1:c2:87:44:08:0f:28:bd:d8:59:6c:fd:f2:7d: 3a:7a:6c:7d:59:0f:54:73:d3:b4:4c:22:83:3d:1b: 2d:bd:9d:b6:aa:f1:8d:cb:9a:a7:56:75:9d:43:4c: 9d:2f:16:a5:79:cb:fc:b4:96:fc:fa:11:c2:89:3d: f9:8f:8a:35:fd:a1:d0:17:74:ea:78:68:f2:a7:7a: c3:46:c3:54:ff:2f:c0:04:ec:59:ee:2e:37:34:79: ed:64:5f:fa:91:6c:43:3f:5c:8a:34:f6:33:83:1c: d8:49:44:57:c6:67:0f:83:ca:5f:20:96:47:0f:40: ea:08:0a:06:38:af:d8:d6:e7:d7:ee:84:2d:eb:17: 1c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D4:A3:8C:B7:36:4F:43:93:FD:F0:1E:36:60:01:98:12:7B:2B:74 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/79SjjLc2T0OT_fAeNmABmBJ7K3Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:e30::/48 Signature Algorithm: sha256WithRSAEncryption 8a:4b:06:bc:9c:21:e6:c7:1b:36:1a:8e:9b:4f:ad:85:5d:d3: 44:d9:a6:cd:aa:14:27:e8:4d:21:62:2f:82:f9:20:54:71:92: 66:16:3e:f9:07:fb:15:29:da:30:42:92:2e:de:ae:67:42:32: dc:59:75:32:1d:85:22:53:bd:7d:53:3f:66:9c:5a:d4:31:37: a7:52:67:b4:05:99:ca:c5:d3:cc:46:2f:d3:c4:92:7e:eb:30: e0:12:54:23:63:22:c6:66:67:34:4d:0e:20:fc:77:be:e8:1a: 33:9f:cf:82:29:4c:86:73:1d:36:a5:d4:d9:ae:50:7a:5c:32: 8a:46:bd:16:e3:21:2e:ff:43:6f:a6:08:a9:45:60:7d:de:e7: 53:76:3f:2d:a2:e9:57:9b:d8:26:4f:f7:3c:be:ca:2d:67:22: 7c:ac:95:45:f4:78:b1:6f:91:aa:67:29:33:81:e6:71:de:34: 38:4c:89:a7:57:0f:69:98:85:87:05:81:d2:fe:c2:ed:d4:8d: 75:60:2f:f5:bf:63:2b:83:09:7c:6d:4f:d7:81:e1:81:99:32: 29:29:25:c0:74:32:03:e8:cb:35:f2:c2:d6:a0:4d:6e:bb:f7: e0:2e:df:d9:ee:02:fc:18:58:37:21:23:e6:89:0f:12:9f:19: 54:25:85:48 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZtEhurjXdzxW6QNDbVe6+unMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjUxMjIyMDUyNzMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmQ0YTM4Y2I3MzY0ZjQzOTNmZGYwMWUzNjYwMDE5ODEyN2IyYjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFFXEdSv3WU9R6ocB4PrOnjhR1Ad cZfdFCuf6V5Mz5dtsME1T1MbdCRa1g4WmWMAEwu4E9v5ghnShGPK7qT9em1F/0yQ 3EH/0bpz2WONExSQ7yRwCHJRIw/pAd8O4qaXV7qPJMCrnQ/ubqriqvanru/W0bTd FrDqocKHRAgPKL3YWWz98n06emx9WQ9Uc9O0TCKDPRstvZ22qvGNy5qnVnWdQ0yd Lxalecv8tJb8+hHCiT35j4o1/aHQF3TqeGjyp3rDRsNU/y/ABOxZ7i43NHntZF/6 kWxDP1yKNPYzgxzYSURXxmcPg8pfIJZHD0DqCAoGOK/Y1ufX7oQt6xcclwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFO/Uo4y3Nk9Dk/3wHjZgAZgSeyt0MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvNzlTampMYzJUME9UX2ZBZU5tQUJtQko3SzNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6XwA4w MA0GCSqGSIb3DQEBCwUAA4IBAQCKSwa8nCHmxxs2Go6bT62FXdNE2abNqhQn6E0h Yi+C+SBUcZJmFj75B/sVKdowQpIu3q5nQjLcWXUyHYUiU719Uz9mnFrUMTenUme0 BZnKxdPMRi/TxJJ+6zDgElQjYyLGZmc0TQ4g/He+6Bozn8+CKUyGcx02pdTZrlB6 XDKKRr0W4yEu/0NvpgipRWB93udTdj8toulXm9gmT/c8vsotZyJ8rJVF9Hixb5Gq ZykzgeZx3jQ4TImnVw9pmIWHBYHS/sLt1I11YC/1v2Mrgwl8bU/XgeGBmTIpKSXA dDID6Ms18sLWoE1uu/fgLt/Z7gL8GFg3ISPmiQ8SnxlUJYVI -----END CERTIFICATE-----Generated at Tue Dec 23 22:04:38 2025 by rpki-client