This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/88di9ylcB3C7O4VR3ycy9i5ylKE.roa File: 88di9ylcB3C7O4VR3ycy9i5ylKE.roa (raw, json) Hash identifier: PtWuJj5dJP6VGIDWttRVKWHIk9M0UjZa2zejVwJNAu0= Subject key identifier: F3:C7:62:F7:29:5C:07:70:BB:3B:85:51:DF:27:32:F6:2E:72:94:A1 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CB214D9BC081F738FE49E5B6356CA Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/88di9ylcB3C7O4VR3ycy9i5ylKE.roa Signing time: Fri 02 Jan 2026 06:19:45 +0000 ROA not before: Fri 02 Jan 2026 06:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48002 IP address blocks: 2a0e:b107:1450::/48 maxlen: 48 2a0e:b107:1452::/48 maxlen: 48 2a0e:b107:1454::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b2:14:d9:bc:08:1f:73:8f:e4:9e:5b:63:56:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3c762f7295c0770bb3b8551df2732f62e7294a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:34:5a:f2:3a:d4:5b:43:ad:8b:b5:e5:7d:d1: 07:ec:e8:52:62:09:dd:e6:f5:b2:7c:9e:dc:cb:b0: 48:3d:ea:ca:52:62:66:24:84:b7:64:6e:5b:4b:e7: 65:94:a9:0e:63:47:3f:99:56:04:0d:31:3a:ae:77: b6:2d:d8:99:b4:0d:cb:44:8c:59:ad:0e:00:fe:d2: 79:2e:04:ed:5f:09:4b:bb:b3:71:33:57:08:5b:73: 9d:e5:ed:c2:df:e6:29:9d:b8:26:7a:e4:c0:ee:4a: 34:b3:fb:8c:03:b7:92:78:2c:09:97:ca:31:53:38: 37:02:28:2c:e6:72:70:5b:27:0b:f5:e9:22:b2:cf: e1:c5:47:7f:88:8e:39:3d:e4:57:fa:37:65:1f:58: bb:59:a6:aa:39:d7:0e:90:44:a9:52:14:f1:20:b7: 57:ae:4d:b7:a2:a4:51:43:ff:11:35:bd:94:94:a4: 4b:00:dd:9d:1c:55:42:42:a7:b4:1a:25:02:fe:bc: 6e:5d:61:37:cc:83:45:d0:c9:53:66:eb:3a:8a:36: b7:f3:cb:f0:77:45:22:e8:f8:04:a5:d0:04:63:dc: 5f:96:c3:20:e2:0a:40:b4:76:fd:1b:76:2e:75:af: 1d:26:78:d8:c8:7b:6c:07:03:67:64:67:ba:7a:59: 8e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C7:62:F7:29:5C:07:70:BB:3B:85:51:DF:27:32:F6:2E:72:94:A1 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/88di9ylcB3C7O4VR3ycy9i5ylKE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1450::/48 2a0e:b107:1452::/48 2a0e:b107:1454::/48 Signature Algorithm: sha256WithRSAEncryption 9e:94:78:be:94:fa:ff:cb:fe:7f:7c:63:a9:d8:53:57:84:f3: 45:f2:2b:62:5d:fd:0f:22:2b:08:25:30:bf:ff:50:cf:fe:53: 13:7c:4e:ad:90:26:22:4c:1c:d3:5b:dd:ce:03:c4:52:32:3a: 38:3f:62:75:e8:d7:5d:de:33:46:d0:8a:98:c8:50:68:32:9d: 41:17:a9:c8:55:62:5a:7a:4c:f5:18:06:b8:7e:8b:1b:d5:86: 31:54:0a:02:af:da:ae:a0:64:ba:97:df:22:cf:e9:c5:ab:5e: 5f:af:d7:8e:dc:6c:af:bd:92:bf:cc:a0:01:ba:92:55:ae:9b: 57:06:19:e1:70:67:a5:16:c5:a4:3f:84:c6:ca:1e:0d:7b:60: 12:7f:cb:30:66:1b:4e:dc:17:8d:dc:30:a8:18:cf:91:99:8a: fd:69:a1:c4:b3:f3:b6:2e:b2:47:4b:5d:a3:a8:3f:9b:53:28: ab:85:16:d7:71:97:f9:af:aa:8f:20:0d:c2:62:81:14:b3:b9: 59:ab:45:26:a4:e2:36:e5:2a:d1:70:a4:c1:2e:65:74:f6:81: c6:10:2d:b3:5e:3d:40:c6:1d:6a:6d:34:23:19:14:e8:32:c8: e3:fa:54:5a:99:9c:6a:a6:bb:87:9b:71:a4:67:2c:92:04:70: 5e:66:46:cb -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9XLIU2bwIH3OP5J5bY1bKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2M3NjJmNzI5NWMwNzcwYmIzYjg1NTFkZjI3MzJmNjJlNzI5NGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTRa8jrUW0Oti7XlfdEH7OhSYgnd 5vWyfJ7cy7BIPerKUmJmJIS3ZG5bS+dllKkOY0c/mVYEDTE6rne2LdiZtA3LRIxZ rQ4A/tJ5LgTtXwlLu7NxM1cIW3Od5e3C3+YpnbgmeuTA7ko0s/uMA7eSeCwJl8ox Uzg3Aigs5nJwWycL9ekiss/hxUd/iI45PeRX+jdlH1i7WaaqOdcOkESpUhTxILdX rk23oqRRQ/8RNb2UlKRLAN2dHFVCQqe0GiUC/rxuXWE3zINF0MlTZus6ija388vw d0Ui6PgEpdAEY9xflsMg4gpAtHb9G3Yuda8dJnjYyHtsBwNnZGe6elmOTQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFPPHYvcpXAdwuzuFUd8nMvYucpShMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvODhkaTl5bGNCM0M3TzRWUjN5Y3k5aTV5bEtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAKg6xBxRQ AwcAKg6xBxRSAwcAKg6xBxRUMA0GCSqGSIb3DQEBCwUAA4IBAQCelHi+lPr/y/5/ fGOp2FNXhPNF8itiXf0PIisIJTC//1DP/lMTfE6tkCYiTBzTW93OA8RSMjo4P2J1 6Ndd3jNG0IqYyFBoMp1BF6nIVWJaekz1GAa4fosb1YYxVAoCr9quoGS6l98iz+nF q15fr9eO3GyvvZK/zKABupJVrptXBhnhcGelFsWkP4TGyh4Ne2ASf8swZhtO3BeN 3DCoGM+RmYr9aaHEs/O2LrJHS12jqD+bUyirhRbXcZf5r6qPIA3CYoEUs7lZq0Um pOI25SrRcKTBLmV09oHGEC2zXj1Axh1qbTQjGRToMsjj+lRamZxqpruHm3GkZyyS BHBeZkbL -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:46 2026 by rpki-client