This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/91wWYqzvj68rcpb4TQ7BLNsrswQ.roa File: 91wWYqzvj68rcpb4TQ7BLNsrswQ.roa (raw, json) Hash identifier: prtR0cMIEN4IDK68pvpoTDDDTMsNtQs0g752BbRZE+w= Subject key identifier: F7:5C:16:62:AC:EF:8F:AF:2B:72:96:F8:4D:0E:C1:2C:DB:2B:B3:04 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019BB7B699138726D69502DB1401DF3EC793 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/91wWYqzvj68rcpb4TQ7BLNsrswQ.roa Signing time: Tue 13 Jan 2026 14:15:55 +0000 ROA not before: Tue 13 Jan 2026 14:15:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213641 IP address blocks: 2a0e:97c0:680::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 20:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b7:b6:99:13:87:26:d6:95:02:db:14:01:df:3e:c7:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 13 14:15:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f75c1662acef8faf2b7296f84d0ec12cdb2bb304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d8:72:ce:a5:cc:09:dc:80:5a:8f:21:ed:b3: 76:48:4a:bc:8d:bb:d4:4a:4b:0a:48:47:df:49:97: 46:75:7a:5f:82:dc:9a:89:52:4e:bd:c2:ee:18:67: 54:43:a7:63:cc:03:ad:74:2a:15:c3:f0:2e:4b:72: f8:54:98:8f:76:3f:fc:79:b1:c9:f8:28:19:f7:8b: 80:be:06:dd:38:86:af:80:a8:0c:18:a6:0a:27:c7: b5:79:d5:90:8d:cd:5c:ec:c7:09:13:20:83:18:1a: 91:73:82:64:16:6b:b6:d6:88:39:e0:dd:c0:c0:63: 39:da:fb:44:97:c4:d7:4a:2e:a8:aa:48:b3:a3:98: 83:3f:8f:27:f2:30:46:c9:f2:15:e2:c5:53:6e:4d: b0:fe:9e:08:22:3f:ab:2a:70:1c:6e:76:1c:37:6c: 88:e0:97:cd:7b:37:c0:30:70:af:9c:e6:bc:ec:b4: cf:cb:c2:24:b3:40:15:e6:f8:d5:6e:5a:e2:62:ac: 60:f0:df:22:42:1f:30:1a:3e:97:12:55:82:81:4e: b4:15:17:d2:6d:14:0a:5c:36:7d:22:1a:57:3b:06: ab:9c:f6:34:47:76:75:ad:a0:2d:9d:5e:d5:cd:cc: b7:b0:ef:a2:b2:43:bd:59:72:b9:e7:6e:a7:74:ca: 34:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:5C:16:62:AC:EF:8F:AF:2B:72:96:F8:4D:0E:C1:2C:DB:2B:B3:04 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/91wWYqzvj68rcpb4TQ7BLNsrswQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:680::/48 Signature Algorithm: sha256WithRSAEncryption 2f:c6:36:0f:9f:3d:31:9d:a1:78:73:71:52:3f:bf:63:ed:87: c3:f4:2c:26:90:70:93:e1:15:a8:f3:8b:33:56:cd:9c:4a:1e: a2:d3:db:d6:33:16:78:e3:65:c9:16:e5:85:5f:87:31:53:e7: a1:a0:4c:3f:05:d7:94:97:d1:c4:ab:cb:63:66:5b:d2:2b:e5: 25:17:c4:88:0c:03:1c:53:48:b5:4f:c7:a6:8d:9f:d2:b5:43: 81:25:5d:27:5b:49:f9:ee:1e:2f:85:31:e5:30:76:9d:a8:29: ee:8e:54:fa:a1:9a:cb:1c:15:5b:f3:e4:4a:8e:4e:22:b3:4a: e6:5c:6b:96:ea:21:9a:ed:20:08:47:0d:7c:96:4d:76:54:d1: 26:33:8f:de:14:60:7a:e2:ce:98:47:a7:29:11:a6:bc:4f:5e: ee:78:36:8b:0f:f4:dd:d1:8e:55:39:57:16:6e:cd:31:3a:9f: 3c:ed:f2:96:dd:07:2c:94:77:cd:f3:99:77:f6:9b:7c:5d:96: 59:92:9f:7c:88:9b:a6:f9:ae:46:35:7b:e0:cb:a9:0b:1d:10: e0:a7:09:55:fd:3d:dc:69:f4:15:9f:c4:58:2f:cd:d6:30:8a: fe:5a:8b:d2:30:14:eb:25:5d:96:b1:50:d4:50:88:92:fd:b5: 78:90:59:9e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZu3tpkThybWlQLbFAHfPseTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTEzMTQxNTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzVjMTY2MmFjZWY4ZmFmMmI3Mjk2Zjg0ZDBlYzEyY2RiMmJiMzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9hyzqXMCdyAWo8h7bN2SEq8jbvU SksKSEffSZdGdXpfgtyaiVJOvcLuGGdUQ6djzAOtdCoVw/AuS3L4VJiPdj/8ebHJ +CgZ94uAvgbdOIavgKgMGKYKJ8e1edWQjc1c7McJEyCDGBqRc4JkFmu21og54N3A wGM52vtEl8TXSi6oqkizo5iDP48n8jBGyfIV4sVTbk2w/p4IIj+rKnAcbnYcN2yI 4JfNezfAMHCvnOa87LTPy8Iks0AV5vjVblriYqxg8N8iQh8wGj6XElWCgU60FRfS bRQKXDZ9IhpXOwarnPY0R3Z1raAtnV7Vzcy3sO+iskO9WXK5526ndMo0hQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPdcFmKs74+vK3KW+E0OwSzbK7MEMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvOTF3V1lxenZqNjhyY3BiNFRRN0JMTnNyc3dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6XwAaA MA0GCSqGSIb3DQEBCwUAA4IBAQAvxjYPnz0xnaF4c3FSP79j7YfD9CwmkHCT4RWo 84szVs2cSh6i09vWMxZ442XJFuWFX4cxU+ehoEw/BdeUl9HEq8tjZlvSK+UlF8SI DAMcU0i1T8emjZ/StUOBJV0nW0n57h4vhTHlMHadqCnujlT6oZrLHBVb8+RKjk4i s0rmXGuW6iGa7SAIRw18lk12VNEmM4/eFGB64s6YR6cpEaa8T17ueDaLD/Td0Y5V OVcWbs0xOp887fKW3QcslHfN85l39pt8XZZZkp98iJum+a5GNXvgy6kLHRDgpwlV /T3cafQVn8RYL83WMIr+WovSMBTrJV2WsVDUUIiS/bV4kFme -----END CERTIFICATE-----Generated at Fri Jan 16 03:06:19 2026 by rpki-client