This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CiHoLUncmVVJLBpNB96KMR9jGFo.roa File: CiHoLUncmVVJLBpNB96KMR9jGFo.roa (raw, json) Hash identifier: WMjiyNVBlMp3HFhnfiQ6vkdL5vs9Yf7Odoad2PcqVmk= Subject key identifier: 0A:21:E8:2D:49:DC:99:55:49:2C:1A:4D:07:DE:8A:31:1F:63:18:5A Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CEAA2461F122D5039C7DEF79BB4A9 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CiHoLUncmVVJLBpNB96KMR9jGFo.roa Signing time: Fri 02 Jan 2026 06:19:59 +0000 ROA not before: Fri 02 Jan 2026 06:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202002 IP address blocks: 2a0e:b107:1d11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ea:a2:46:1f:12:2d:50:39:c7:de:f7:9b:b4:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a21e82d49dc9955492c1a4d07de8a311f63185a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2b:e8:5a:8d:46:cf:b4:d1:b4:16:68:a8:f7: c9:06:bc:67:df:f1:a4:90:d4:21:cd:da:11:ec:41: 84:c0:3a:7d:41:90:42:af:f5:54:85:e2:df:b3:9b: f2:5f:19:a8:6c:cc:ae:57:b5:5b:22:b8:36:ff:7e: 0d:d2:57:a6:ee:d0:73:93:49:9e:bd:db:11:aa:59: 8b:17:e3:91:9e:af:5c:18:9f:9c:fe:1b:25:44:03: ba:be:5a:08:20:f6:ad:13:ee:57:06:27:8a:1a:ec: d4:1c:f3:87:ba:f3:3a:7c:b9:98:7a:55:d4:cb:fa: b1:84:28:b1:ce:e1:96:1c:82:89:a0:d2:83:29:24: 85:c8:5b:2a:ff:56:3e:1b:25:1c:3d:57:4d:ac:81: bd:34:6d:67:a3:dd:46:e4:70:03:df:c4:0d:e7:df: 7b:5f:c2:bd:8b:09:a4:e8:f6:b5:93:fd:94:42:f2: 88:5d:e2:6e:74:a6:de:cc:96:b0:e4:41:96:3b:4a: 07:91:b5:25:b9:45:76:f2:34:34:a7:db:ed:8b:b9: 2d:3c:c1:69:df:6f:34:50:ec:10:de:c3:0c:bc:b5: e1:69:0c:3c:47:50:8e:e1:a9:39:d0:a5:11:e1:1b: 65:5a:17:66:6f:e2:50:17:b1:03:e9:7b:bc:d2:39: f7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:21:E8:2D:49:DC:99:55:49:2C:1A:4D:07:DE:8A:31:1F:63:18:5A X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CiHoLUncmVVJLBpNB96KMR9jGFo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1d11::/48 Signature Algorithm: sha256WithRSAEncryption 9b:90:d6:86:31:d2:86:f0:a1:93:b0:2f:3e:3b:f4:43:98:10: dd:10:6d:73:bd:cf:d8:4c:ac:59:8d:ef:28:51:37:60:e7:d4: 53:6f:24:7b:81:9f:6c:a0:4e:fb:95:5a:21:99:e8:84:e5:25: c5:87:5c:ac:4b:4d:3c:7d:f0:42:02:71:4d:6d:ee:a1:9f:e7: 7c:4f:a2:d5:09:55:01:e0:07:a5:f1:dd:d8:2f:8d:61:eb:d7: 8c:d7:0f:e8:5c:28:de:f1:6a:61:95:c2:68:95:37:a6:e7:34: c7:47:c2:fa:c6:08:f5:a3:17:f2:4a:f8:8f:68:e6:e7:b0:55: a0:2b:b7:03:cb:02:4b:da:51:e2:53:e6:3f:b0:d3:62:e1:f7: 16:a4:93:f4:7c:50:7b:ae:f6:81:55:f8:30:b9:02:08:29:83: 73:9f:36:85:d0:c6:86:3a:b6:f6:46:7a:60:08:ef:7e:24:b8: 4f:87:26:36:76:ce:1d:1a:d7:b6:5c:ab:2f:a1:9a:73:2d:f4: 2f:4f:9f:c3:2c:f2:2e:50:9b:65:fb:df:ab:f5:a7:bc:25:8b: b9:f4:49:e6:6e:96:24:62:8e:1f:c1:f7:f7:71:b2:4a:d4:44: f8:cf:c5:5f:c3:61:f9:b2:87:1e:87:76:7c:ad:06:5c:19:d0: 2a:28:a7:05 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XOqiRh8SLVA5x973m7SpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTIxZTgyZDQ5ZGM5OTU1NDkyYzFhNGQwN2RlOGEzMTFmNjMxODVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yvoWo1Gz7TRtBZoqPfJBrxn3/Gk kNQhzdoR7EGEwDp9QZBCr/VUheLfs5vyXxmobMyuV7VbIrg2/34N0lem7tBzk0me vdsRqlmLF+ORnq9cGJ+c/hslRAO6vloIIPatE+5XBieKGuzUHPOHuvM6fLmYelXU y/qxhCixzuGWHIKJoNKDKSSFyFsq/1Y+GyUcPVdNrIG9NG1no91G5HAD38QN5997 X8K9iwmk6Pa1k/2UQvKIXeJudKbezJaw5EGWO0oHkbUluUV28jQ0p9vti7ktPMFp 3280UOwQ3sMMvLXhaQw8R1CO4ak50KUR4RtlWhdmb+JQF7ED6Xu80jn3fwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAoh6C1J3JlVSSwaTQfeijEfYxhaMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvQ2lIb0xVbmNtVlZKTEJwTkI5NktNUjlqR0ZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBx0R MA0GCSqGSIb3DQEBCwUAA4IBAQCbkNaGMdKG8KGTsC8+O/RDmBDdEG1zvc/YTKxZ je8oUTdg59RTbyR7gZ9soE77lVohmeiE5SXFh1ysS008ffBCAnFNbe6hn+d8T6LV CVUB4Ael8d3YL41h69eM1w/oXCje8WphlcJolTem5zTHR8L6xgj1oxfySviPaObn sFWgK7cDywJL2lHiU+Y/sNNi4fcWpJP0fFB7rvaBVfgwuQIIKYNznzaF0MaGOrb2 RnpgCO9+JLhPhyY2ds4dGte2XKsvoZpzLfQvT5/DLPIuUJtl+9+r9ae8JYu59Enm bpYkYo4fwff3cbJK1ET4z8Vfw2H5soceh3Z8rQZcGdAqKKcF -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:27 2026 by rpki-client