This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9BioDXb-R9VvM38zo75saDbtwtk.roa File: 9BioDXb-R9VvM38zo75saDbtwtk.roa (raw, json) Hash identifier: vpr5eVQZ5HMQme5mFEO1ZGfNEnBBPEDuUX9I71aOfFo= Subject key identifier: F4:18:A8:0D:76:FE:47:D5:6F:33:7F:33:A3:BE:6C:68:36:ED:C2:D9 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D8F5E2B401420599AC8B772A787CB Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9BioDXb-R9VvM38zo75saDbtwtk.roa Signing time: Fri 02 Jan 2026 06:20:41 +0000 ROA not before: Fri 02 Jan 2026 06:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 2a0e:b107:7f7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:8f:5e:2b:40:14:20:59:9a:c8:b7:72:a7:87:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f418a80d76fe47d56f337f33a3be6c6836edc2d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5a:15:8d:43:fa:92:fb:cd:27:72:a8:e2:65: fa:89:3f:93:2a:d7:72:9d:cc:06:b4:45:ba:b4:2b: 6a:4f:f7:b3:92:c9:85:d6:29:6b:16:29:e9:e0:3a: 6b:86:68:3b:15:aa:81:38:68:be:93:14:2d:07:19: d8:79:d9:42:af:3f:5d:36:4e:f0:e5:6c:36:8f:6b: aa:5e:ab:95:85:bc:d1:93:a7:c4:4d:6a:06:d8:a9: 75:69:01:73:dc:1d:da:22:a8:38:2a:11:76:73:ef: 08:a3:19:9c:2b:0f:2f:a3:6b:50:dc:82:b4:e5:bf: 42:d7:28:a3:2e:00:ff:9f:71:b0:a5:39:31:69:ce: 9b:10:2f:bc:35:5f:8d:1c:7a:11:17:5d:2a:34:77: 5d:d2:5a:28:de:d5:96:43:6c:e6:e6:d5:a6:96:15: d1:cb:cc:73:2c:49:5e:3d:c2:37:b8:cc:fb:e0:42: 23:d2:4c:f6:ec:96:23:76:c7:75:5f:34:8e:ef:20: ce:c5:18:cb:8a:98:b8:d8:05:c0:3a:ee:ff:7d:57: 09:8b:d6:fe:0a:d2:cb:c4:27:9c:e5:fb:53:f8:84: 84:72:bc:c5:fa:21:e1:fa:63:9d:7e:36:8a:07:5a: 6b:d3:18:f5:b1:f7:81:60:61:14:5a:e7:1b:a1:85: b9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:18:A8:0D:76:FE:47:D5:6F:33:7F:33:A3:BE:6C:68:36:ED:C2:D9 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9BioDXb-R9VvM38zo75saDbtwtk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:7f7::/48 Signature Algorithm: sha256WithRSAEncryption 4f:76:80:00:5c:d1:c0:7d:47:f9:21:5b:5d:4e:5e:5b:d8:b9: 7d:58:d2:b6:18:46:2c:77:54:fd:ec:7b:ec:6d:fe:49:07:3e: 0b:53:7a:47:77:00:6f:ef:9f:08:85:54:20:f1:52:b1:71:b6: 49:92:04:7c:4c:6b:34:6c:98:b5:71:49:79:a4:0f:5b:09:7e: 9a:66:50:02:93:5e:fa:b3:b3:a1:63:65:d2:86:78:61:43:04: 89:fe:72:ad:5e:9f:e8:67:50:f0:b9:54:fc:cb:df:37:dd:97: a2:59:13:f8:c9:2e:1d:e7:c1:9d:90:a4:9a:4e:f5:7e:ce:45: ed:5a:e3:bf:39:4e:19:5c:fe:8e:c9:d8:8e:5d:f6:61:a4:3d: 25:c6:d9:f6:e3:dd:a4:43:40:d5:8c:f4:34:b0:99:66:61:ac: ba:45:d3:f8:f8:fa:9f:a6:f4:6e:d0:b8:2e:61:35:8c:26:1f: 97:f8:71:13:56:7d:80:4e:56:d8:37:40:33:dd:22:5c:4a:57: 8e:75:a5:a7:36:54:46:b6:1e:b8:c5:74:aa:c3:9b:37:1b:ed: 05:e1:67:73:15:18:68:c0:20:e5:69:94:7b:5e:38:4c:20:18: a1:85:38:a2:fa:18:75:31:38:9b:94:5f:16:92:1f:a8:58:96: ba:b1:87:49 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XY9eK0AUIFmayLdyp4fLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDE4YTgwZDc2ZmU0N2Q1NmYzMzdmMzNhM2JlNmM2ODM2ZWRjMmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1oVjUP6kvvNJ3Ko4mX6iT+TKtdy ncwGtEW6tCtqT/ezksmF1ilrFinp4Dprhmg7FaqBOGi+kxQtBxnYedlCrz9dNk7w 5Ww2j2uqXquVhbzRk6fETWoG2Kl1aQFz3B3aIqg4KhF2c+8IoxmcKw8vo2tQ3IK0 5b9C1yijLgD/n3GwpTkxac6bEC+8NV+NHHoRF10qNHdd0loo3tWWQ2zm5tWmlhXR y8xzLElePcI3uMz74EIj0kz27JYjdsd1XzSO7yDOxRjLipi42AXAOu7/fVcJi9b+ CtLLxCec5ftT+ISEcrzF+iHh+mOdfjaKB1pr0xj1sfeBYGEUWucboYW5gwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPQYqA12/kfVbzN/M6O+bGg27cLZMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvOUJpb0RYYi1SOVZ2TTM4em83NXNhRGJ0d3RrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBwf3 MA0GCSqGSIb3DQEBCwUAA4IBAQBPdoAAXNHAfUf5IVtdTl5b2Ll9WNK2GEYsd1T9 7Hvsbf5JBz4LU3pHdwBv758IhVQg8VKxcbZJkgR8TGs0bJi1cUl5pA9bCX6aZlAC k176s7OhY2XShnhhQwSJ/nKtXp/oZ1DwuVT8y9833ZeiWRP4yS4d58GdkKSaTvV+ zkXtWuO/OU4ZXP6OydiOXfZhpD0lxtn2492kQ0DVjPQ0sJlmYay6RdP4+PqfpvRu 0LguYTWMJh+X+HETVn2ATlbYN0Az3SJcSleOdaWnNlRGth64xXSqw5s3G+0F4Wdz FRhowCDlaZR7XjhMIBihhTii+hh1MTiblF8Wkh+oWJa6sYdJ -----END CERTIFICATE-----Generated at Fri Jan 9 06:24:37 2026 by rpki-client