This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A34kzY2KfB8O3_xnfT2R5V15MXs.roa File: A34kzY2KfB8O3_xnfT2R5V15MXs.roa (raw, json) Hash identifier: 0zZAqEcqf2FPd3sTLN7fgcrtA0vRh5S7E6x+8QkHS2k= Subject key identifier: 03:7E:24:CD:8D:8A:7C:1F:0E:DF:FC:67:7D:3D:91:E5:5D:79:31:7B Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CD28490B70B14237FD9D35341AF26 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A34kzY2KfB8O3_xnfT2R5V15MXs.roa Signing time: Fri 02 Jan 2026 06:19:53 +0000 ROA not before: Fri 02 Jan 2026 06:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 149296 IP address blocks: 2a0e:b107:1840::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d2:84:90:b7:0b:14:23:7f:d9:d3:53:41:af:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=037e24cd8d8a7c1f0edffc677d3d91e55d79317b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bd:57:25:8b:97:4f:50:35:d5:eb:d6:af:92: b2:40:7f:2f:3a:61:f0:18:e9:cf:2c:72:48:f7:0d: a2:76:90:9d:23:f6:80:73:a7:15:c0:e5:6f:34:fd: 2f:06:02:fc:1e:a9:27:da:24:12:47:13:45:cf:7e: 94:f5:fe:90:66:cf:09:4e:26:82:2b:e8:14:00:7c: 9c:f9:ad:2c:89:b5:14:e8:ff:d4:d1:a2:af:3a:f7: b1:4f:3c:fc:bd:08:71:44:74:e7:0a:e7:df:a2:30: ba:a1:1d:b6:ac:9d:79:8e:fd:c2:10:c8:91:21:b5: 06:2f:2c:6a:6d:00:0a:e8:1c:e3:52:a3:28:39:27: 9f:90:a3:c8:5f:2a:e3:34:51:04:43:3a:ac:13:61: 84:70:56:e2:2c:62:51:fc:7b:c1:0f:aa:66:eb:09: ab:71:ae:18:87:b5:65:f6:18:f2:ff:8c:a0:e2:93: 49:bc:6d:86:04:82:d0:58:cb:07:90:d4:fd:a2:90: d4:bd:8d:41:51:55:04:16:90:b8:db:e1:34:8c:17: 34:66:f4:e8:73:0e:a4:47:34:6d:50:9c:2c:f0:50: 22:1b:4b:ef:aa:6f:fe:6f:9c:11:cb:ba:c2:ee:ff: 11:3e:b2:13:89:b4:df:e6:77:ec:b1:33:6e:b8:c3: 88:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7E:24:CD:8D:8A:7C:1F:0E:DF:FC:67:7D:3D:91:E5:5D:79:31:7B X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A34kzY2KfB8O3_xnfT2R5V15MXs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1840::/44 Signature Algorithm: sha256WithRSAEncryption 90:d5:c6:42:c2:43:30:11:ae:dc:f2:dc:fb:55:af:4a:23:cd: ca:6a:9d:a6:c3:2f:49:54:05:57:09:2b:05:72:dd:af:57:f8: 99:27:83:0d:f3:b9:f1:a9:2b:f4:48:7f:85:ec:fe:4f:fd:25: 7f:3a:52:56:17:4f:78:fe:86:ca:d9:c2:b1:94:3f:5c:81:5e: 69:18:f7:8b:a8:50:3b:8e:0f:75:d5:72:26:82:8f:e8:ba:00: 33:ab:1c:15:61:c9:32:b1:38:b5:4c:f3:d4:2d:e9:5f:9c:5f: 51:6a:ca:a1:94:32:86:98:6d:54:2c:cd:d6:89:a5:12:5a:d1: 7f:10:8f:0e:7b:a6:b7:b3:a7:f9:c4:fb:58:55:09:d9:b3:47: e7:20:18:e7:89:fd:d7:49:a3:e7:1a:04:da:d7:81:ac:09:0c: f1:b1:72:f8:83:82:81:57:7f:a7:38:7b:e8:d8:c8:e1:c2:3a: da:b4:3d:0e:e9:f7:a9:ff:d7:a2:61:37:cd:3e:15:a4:17:8d: 88:82:d1:0c:08:66:3e:ba:98:8f:8f:bd:78:3e:48:56:6d:70: eb:bb:67:21:59:cc:76:5d:79:66:78:e7:36:fe:a0:9f:0e:54: 0e:d2:d1:3e:31:19:df:ef:3f:66:67:54:a0:fa:3f:7f:a8:79: bb:a9:3c:d1 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XNKEkLcLFCN/2dNTQa8mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzdlMjRjZDhkOGE3YzFmMGVkZmZjNjc3ZDNkOTFlNTVkNzkzMTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApL1XJYuXT1A11evWr5KyQH8vOmHw GOnPLHJI9w2idpCdI/aAc6cVwOVvNP0vBgL8Hqkn2iQSRxNFz36U9f6QZs8JTiaC K+gUAHyc+a0sibUU6P/U0aKvOvexTzz8vQhxRHTnCuffojC6oR22rJ15jv3CEMiR IbUGLyxqbQAK6BzjUqMoOSefkKPIXyrjNFEEQzqsE2GEcFbiLGJR/HvBD6pm6wmr ca4Yh7Vl9hjy/4yg4pNJvG2GBILQWMsHkNT9opDUvY1BUVUEFpC42+E0jBc0ZvTo cw6kRzRtUJws8FAiG0vvqm/+b5wRy7rC7v8RPrITibTf5nfssTNuuMOItQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAN+JM2NinwfDt/8Z309keVdeTF7MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvQTM0a3pZMktmQjhPM194bmZUMlI1VjE1TVhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxhA MA0GCSqGSIb3DQEBCwUAA4IBAQCQ1cZCwkMwEa7c8tz7Va9KI83Kap2mwy9JVAVX CSsFct2vV/iZJ4MN87nxqSv0SH+F7P5P/SV/OlJWF094/obK2cKxlD9cgV5pGPeL qFA7jg911XImgo/ougAzqxwVYckysTi1TPPULelfnF9RasqhlDKGmG1ULM3WiaUS WtF/EI8Oe6a3s6f5xPtYVQnZs0fnIBjnif3XSaPnGgTa14GsCQzxsXL4g4KBV3+n OHvo2MjhwjratD0O6fep/9eiYTfNPhWkF42IgtEMCGY+upiPj714PkhWbXDru2ch Wcx2XXlmeOc2/qCfDlQO0tE+MRnf7z9mZ1Sg+j9/qHm7qTzR -----END CERTIFICATE-----Generated at Fri Jan 9 13:11:54 2026 by rpki-client