This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9jeBo4QzlCPbmPmDvKSgw9MQOF4.roa File: 9jeBo4QzlCPbmPmDvKSgw9MQOF4.roa (raw, json) Hash identifier: QaWngIWPkG1HY+W3DN1ug5euf97WUT7B/BDqYwKkwTg= Subject key identifier: F6:37:81:A3:84:33:94:23:DB:98:F9:83:BC:A4:A0:C3:D3:10:38:5E Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D0097490E6135183E33AA871E543F Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9jeBo4QzlCPbmPmDvKSgw9MQOF4.roa Signing time: Fri 02 Jan 2026 06:20:05 +0000 ROA not before: Fri 02 Jan 2026 06:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205212 IP address blocks: 2a0e:b107:2a0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:00:97:49:0e:61:35:18:3e:33:aa:87:1e:54:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f63781a384339423db98f983bca4a0c3d310385e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:84:ed:df:2d:ba:9b:5b:52:c6:09:dd:1c:4c: 5c:80:ed:5d:3a:2b:eb:9d:4a:8b:64:cb:31:6d:4a: 47:83:97:3c:f5:fa:ed:5d:87:07:f7:a8:07:b3:3c: 41:f7:fe:01:47:b5:ea:3e:58:37:06:ff:63:94:82: 9a:1e:b5:f9:40:96:e3:fb:92:9e:61:60:69:38:d6: d6:b4:2c:82:4f:63:58:e2:a7:f3:a3:c4:5b:94:8d: 2a:2a:2a:2a:5d:ac:37:d5:28:b7:fb:8e:f6:fb:97: 2d:cd:60:7f:82:88:f5:7c:51:4b:b2:b5:39:bf:c2: 72:44:39:c6:1f:19:22:8e:18:d3:1d:08:10:0e:8a: f0:e8:59:5d:76:a9:a0:4f:8b:33:fd:3a:e7:89:c2: 46:a3:28:df:12:d3:72:91:3f:93:76:c5:3e:24:e4: 9a:e9:18:a8:9a:f5:14:87:49:ef:70:4a:cb:f2:df: 96:6e:f0:70:a8:8d:96:24:f6:0f:76:c2:2d:1f:19: 15:9b:26:f9:a6:34:d2:47:98:75:17:56:ce:33:50: 98:0a:05:19:70:ed:5b:89:fe:f7:9d:c5:b0:89:9b: 76:da:33:a8:1e:75:7f:eb:c4:1d:48:26:98:6d:0a: fe:3c:20:5a:5d:27:0a:06:ec:45:fb:09:a4:c8:10: 06:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:37:81:A3:84:33:94:23:DB:98:F9:83:BC:A4:A0:C3:D3:10:38:5E X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9jeBo4QzlCPbmPmDvKSgw9MQOF4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:2a0::/44 Signature Algorithm: sha256WithRSAEncryption c2:f8:37:5e:94:20:9f:f9:db:43:9e:d2:b3:76:c8:86:58:b7: 05:fa:7a:33:36:10:40:27:f5:de:08:03:d1:45:06:0a:fc:6f: 25:c0:88:cd:69:a7:40:c2:3d:ac:3c:29:9e:87:9e:ed:d9:67: 46:f4:a9:56:3f:98:d1:f2:0a:be:07:f8:ca:9b:3a:f3:9e:4a: bf:4a:21:0b:ff:03:3c:fd:9c:b5:9c:07:13:5d:92:27:3f:89: 62:8a:b3:03:d4:5c:7c:2c:52:20:8e:77:6d:6c:f9:59:a9:2e: 79:b4:4b:ea:14:9d:49:da:fa:3f:a0:9b:cc:53:94:15:03:70: e7:6e:d6:4d:ec:ed:93:90:bc:ba:f3:c1:5b:64:c6:34:35:63: 01:b7:c4:f0:3b:51:ab:03:a0:32:8d:b8:b2:c1:90:bb:56:b2: bf:aa:22:f8:1b:f2:53:16:58:3a:ec:c0:7c:79:be:30:a2:f9: ec:4a:c8:3a:27:f7:5d:0e:20:00:4b:1f:96:af:ce:8d:84:fe: 61:b6:50:5c:4e:ab:aa:c2:f1:1e:44:29:a4:27:8d:49:2d:b5: 4a:21:0d:a1:a6:5e:c2:4c:56:da:29:2a:c3:bd:2f:e5:1d:ed: a2:34:90:db:75:65:11:2b:4d:17:50:7d:1c:01:d8:f7:83:4c: e2:8b:66:c0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XQCXSQ5hNRg+M6qHHlQ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjM3ODFhMzg0MzM5NDIzZGI5OGY5ODNiY2E0YTBjM2QzMTAzODVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoTt3y26m1tSxgndHExcgO1dOivr nUqLZMsxbUpHg5c89frtXYcH96gHszxB9/4BR7XqPlg3Bv9jlIKaHrX5QJbj+5Ke YWBpONbWtCyCT2NY4qfzo8RblI0qKioqXaw31Si3+472+5ctzWB/goj1fFFLsrU5 v8JyRDnGHxkijhjTHQgQDorw6FlddqmgT4sz/TrnicJGoyjfEtNykT+TdsU+JOSa 6RiomvUUh0nvcErL8t+WbvBwqI2WJPYPdsItHxkVmyb5pjTSR5h1F1bOM1CYCgUZ cO1bif73ncWwiZt22jOoHnV/68QdSCaYbQr+PCBaXScKBuxF+wmkyBAGHQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPY3gaOEM5Qj25j5g7ykoMPTEDheMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvOWplQm80UXpsQ1BibVBtRHZLU2d3OU1RT0Y0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBwKg MA0GCSqGSIb3DQEBCwUAA4IBAQDC+DdelCCf+dtDntKzdsiGWLcF+nozNhBAJ/Xe CAPRRQYK/G8lwIjNaadAwj2sPCmeh57t2WdG9KlWP5jR8gq+B/jKmzrznkq/SiEL /wM8/Zy1nAcTXZInP4liirMD1Fx8LFIgjndtbPlZqS55tEvqFJ1J2vo/oJvMU5QV A3DnbtZN7O2TkLy688FbZMY0NWMBt8TwO1GrA6AyjbiywZC7VrK/qiL4G/JTFlg6 7MB8eb4wovnsSsg6J/ddDiAASx+Wr86NhP5htlBcTquqwvEeRCmkJ41JLbVKIQ2h pl7CTFbaKSrDvS/lHe2iNJDbdWURK00XUH0cAdj3g0zii2bA -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:07 2026 by rpki-client