This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AbNih7fCkdPuBhSxZbCWutHvZg0.roa File: AbNih7fCkdPuBhSxZbCWutHvZg0.roa (raw, json) Hash identifier: mJGRi+husJlIcDZ9UlnHxWLw2B4J0+5YroeK2CwHtBA= Subject key identifier: 01:B3:62:87:B7:C2:91:D3:EE:06:14:B1:65:B0:96:BA:D1:EF:66:0D Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D7BF3615962256501073AB00D80A2 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AbNih7fCkdPuBhSxZbCWutHvZg0.roa Signing time: Fri 02 Jan 2026 06:20:37 +0000 ROA not before: Fri 02 Jan 2026 06:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215576 IP address blocks: 2a0e:97c0:db0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:7b:f3:61:59:62:25:65:01:07:3a:b0:0d:80:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01b36287b7c291d3ee0614b165b096bad1ef660d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:da:47:f4:b4:c8:c9:b2:33:7a:9d:14:e0:5c: 4f:ee:b6:e0:fb:65:61:3a:0e:d2:b0:28:35:7e:b7: 46:07:ee:64:3c:02:2e:f9:92:bc:fe:c1:dd:fe:41: 2f:a0:5c:74:01:1a:61:64:d6:18:6d:9d:cb:fb:fc: 77:6b:2f:c5:80:dd:2a:7a:38:7e:4b:3d:af:4b:96: 25:11:35:43:cd:a1:5a:26:5f:6e:f4:4d:15:58:e4: 97:c3:0b:de:48:32:9c:71:86:f6:f8:9d:6d:a9:ab: 29:a2:ea:23:31:63:8f:68:7e:6d:a2:f4:4d:06:c2: c0:a9:b3:3e:f6:27:9f:ee:34:29:77:e0:3c:83:85: 05:d4:2b:d7:07:07:93:42:2d:7a:b0:45:42:5d:9b: 14:05:95:21:92:87:c0:10:33:ca:1a:b0:a8:9c:92: 1e:28:fc:c6:3f:4b:30:aa:24:5d:10:bd:a0:37:43: 17:01:1f:7f:4a:05:ae:c0:d3:37:b0:40:4e:a0:0a: 39:a1:60:fc:a9:21:27:b3:8b:4e:ee:59:ca:26:13: 2b:e6:72:cb:b4:2b:1f:13:4a:34:c7:21:ca:00:ef: 94:f3:17:69:c7:2b:c3:69:6a:cc:c6:9d:fe:a6:85: b2:98:b6:22:29:e9:19:be:dc:0f:78:66:3e:35:96: c1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B3:62:87:B7:C2:91:D3:EE:06:14:B1:65:B0:96:BA:D1:EF:66:0D X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AbNih7fCkdPuBhSxZbCWutHvZg0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:db0::/48 Signature Algorithm: sha256WithRSAEncryption 1b:6d:5d:78:4c:cb:a7:c1:c3:70:42:8f:d0:ab:68:d1:3a:d5: 59:ba:7f:6d:ae:01:8b:cb:1b:cc:d1:c4:bc:3c:38:13:41:e8: cb:56:60:d8:a2:48:ac:65:73:82:62:b5:19:d2:48:62:0c:9c: fa:b4:48:c1:74:70:46:de:a6:8b:47:11:b3:19:44:54:d5:6d: 62:d9:c0:1c:cf:c0:df:d2:5a:3a:cf:59:71:14:71:af:62:2d: 7b:8b:39:39:31:0d:e9:2d:27:1f:03:18:29:36:56:50:28:40: e8:a5:7b:3e:b0:a4:c5:06:1b:40:74:72:d1:db:31:2f:1f:ba: 10:02:a1:ad:b9:f0:28:0b:79:01:81:96:cd:d6:b2:33:48:f9: e8:04:1b:f9:ed:77:1d:0f:ef:a5:3c:95:43:a2:99:73:90:74: 13:9f:ae:f5:cb:91:1e:fa:c0:ed:ce:99:c3:d1:bf:3e:13:bf: 68:03:53:17:2a:5d:03:54:8f:e3:45:dc:4a:57:6e:b2:d5:80: 93:fd:43:96:ba:49:7c:9c:9a:5f:1a:cc:62:dc:5c:c7:e1:b6: 34:82:31:7f:4a:2b:a2:bd:c2:0c:f4:e3:23:0a:43:d2:b2:56: 7e:80:08:8f:9c:c2:ff:86:26:29:f6:49:2a:98:d4:90:4a:23: 20:4e:88:d3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XXvzYVliJWUBBzqwDYCiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWIzNjI4N2I3YzI5MWQzZWUwNjE0YjE2NWIwOTZiYWQxZWY2NjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytpH9LTIybIzep0U4FxP7rbg+2Vh Og7SsCg1frdGB+5kPAIu+ZK8/sHd/kEvoFx0ARphZNYYbZ3L+/x3ay/FgN0qejh+ Sz2vS5YlETVDzaFaJl9u9E0VWOSXwwveSDKccYb2+J1tqaspouojMWOPaH5tovRN BsLAqbM+9ief7jQpd+A8g4UF1CvXBweTQi16sEVCXZsUBZUhkofAEDPKGrConJIe KPzGP0swqiRdEL2gN0MXAR9/SgWuwNM3sEBOoAo5oWD8qSEns4tO7lnKJhMr5nLL tCsfE0o0xyHKAO+U8xdpxyvDaWrMxp3+poWymLYiKekZvtwPeGY+NZbBPwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAGzYoe3wpHT7gYUsWWwlrrR72YNMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvQWJOaWg3ZkNrZFB1QmhTeFpiQ1d1dEh2WmcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6XwA2w MA0GCSqGSIb3DQEBCwUAA4IBAQAbbV14TMunwcNwQo/Qq2jROtVZun9trgGLyxvM 0cS8PDgTQejLVmDYokisZXOCYrUZ0khiDJz6tEjBdHBG3qaLRxGzGURU1W1i2cAc z8Df0lo6z1lxFHGvYi17izk5MQ3pLScfAxgpNlZQKEDopXs+sKTFBhtAdHLR2zEv H7oQAqGtufAoC3kBgZbN1rIzSPnoBBv57XcdD++lPJVDoplzkHQTn671y5Ee+sDt zpnD0b8+E79oA1MXKl0DVI/jRdxKV26y1YCT/UOWukl8nJpfGsxi3FzH4bY0gjF/ SiuivcIM9OMjCkPSslZ+gAiPnML/hiYp9kkqmNSQSiMgTojT -----END CERTIFICATE-----Generated at Fri Jan 9 13:12:08 2026 by rpki-client