This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/D43Og6hZM8AgQLlsDT1m1r5nY6c.roa File: D43Og6hZM8AgQLlsDT1m1r5nY6c.roa (raw, json) Hash identifier: ds6tmzyGH62khqsrgfF162n8oJclFr/BZX6/cAtK7A0= Subject key identifier: 0F:8D:CE:83:A8:59:33:C0:20:40:B9:6C:0D:3D:66:D6:BE:67:63:A7 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CFD4BA3FD0C8CE67D58DD2B81F924 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/D43Og6hZM8AgQLlsDT1m1r5nY6c.roa Signing time: Fri 02 Jan 2026 06:20:04 +0000 ROA not before: Fri 02 Jan 2026 06:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204750 IP address blocks: 2a0e:97c0:3d0::/44 maxlen: 48 2a0e:97c0:3d0::/48 maxlen: 48 2a0e:97c0:3d1::/48 maxlen: 48 2a0e:97c0:3d2::/48 maxlen: 48 2a0e:97c0:3d3::/48 maxlen: 48 2a0e:97c0:3d4::/48 maxlen: 48 2a0e:97c0:3d5::/48 maxlen: 48 2a0e:97c0:3d6::/48 maxlen: 48 2a0e:97c0:3d7::/48 maxlen: 48 2a0e:97c0:3d9::/48 maxlen: 48 2a0e:97c0:3df::/48 maxlen: 48 2a0e:97c0:3e8::/48 maxlen: 48 2a0e:97c0:3e9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:fd:4b:a3:fd:0c:8c:e6:7d:58:dd:2b:81:f9:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f8dce83a85933c02040b96c0d3d66d6be6763a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:48:05:d0:a8:31:42:58:b9:31:d1:bb:b1:02: bb:33:ad:5b:ca:8f:62:a0:7c:11:b6:78:67:34:dc: ee:ee:71:1d:f8:04:a6:d4:18:49:e7:ea:9e:da:cf: 3c:06:17:4c:fa:24:61:57:37:d4:b0:33:97:a8:ee: 52:c5:5f:63:15:ad:1b:91:f3:0a:0d:c6:f5:ae:1f: 37:55:18:85:9f:67:af:00:ff:27:92:69:93:83:c9: 06:42:ce:c4:26:b2:8e:1a:e3:95:2d:ad:99:73:b9: 46:a9:52:8a:8c:de:4a:30:f0:63:3b:49:44:73:8e: 69:7b:79:c9:5e:6b:19:44:25:a7:f7:7b:a8:6e:11: 61:73:12:82:c3:03:b0:34:92:9c:6a:38:f3:3f:99: 0b:34:72:90:b5:82:28:dc:92:3e:90:e6:2f:4e:5c: f5:7c:b6:4f:3b:a8:97:27:1a:46:ee:6a:e9:2e:8f: e0:70:9f:80:5d:d7:26:87:66:86:c0:1f:57:68:be: 1e:d9:8c:55:18:45:f6:8c:22:cf:16:f2:ba:28:5d: 90:e0:31:f8:44:c9:ab:27:76:13:7c:85:50:c3:8f: 1b:33:dd:d6:b8:c8:91:e1:cc:f9:d6:06:37:b3:2f: ba:74:60:b1:dd:ab:2a:df:5e:a7:f2:58:79:da:db: 97:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:8D:CE:83:A8:59:33:C0:20:40:B9:6C:0D:3D:66:D6:BE:67:63:A7 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/D43Og6hZM8AgQLlsDT1m1r5nY6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:3d0::/44 2a0e:97c0:3e8::/47 Signature Algorithm: sha256WithRSAEncryption 0d:af:1b:4f:62:ea:83:f4:07:88:bd:db:80:14:ed:4c:f2:db: 00:2e:f1:a5:18:71:81:1b:62:ca:f7:65:bd:3e:77:d3:02:4f: f9:b9:0b:94:b2:59:ac:1b:5b:af:c0:69:da:b2:9a:5f:07:18: b4:ec:23:f0:c1:6d:93:02:79:68:c6:50:55:d1:9a:62:f9:ff: 96:e6:06:30:f6:3a:99:5d:27:22:ba:92:d3:30:0e:b3:5d:fe: 69:e2:0e:dd:ca:78:3b:04:9e:d6:3f:d2:17:06:99:f6:5d:98: ef:9b:9a:db:a5:4f:d5:b5:59:f7:7a:d5:60:b0:80:9f:de:d2: f3:d1:a3:8d:4d:64:4a:10:af:4a:53:7c:aa:00:ef:2d:51:e6: 9f:51:29:24:fd:0b:c0:55:c5:75:35:12:cc:45:be:d3:d8:30: 46:a8:5b:a9:27:7c:47:80:8a:6f:ce:1f:40:2d:f2:0c:78:20: a7:54:9b:13:21:7c:10:e7:ab:ab:a7:e9:f1:20:67:71:d0:92: d5:43:9b:52:e4:0f:36:ec:a1:14:f0:f2:c7:c6:18:2c:e4:1a: 45:84:18:29:1c:fe:a1:2a:2b:0e:cc:d8:6e:8f:64:76:11:25: 11:6c:31:50:18:26:3e:ce:32:f4:7b:5c:34:4e:5c:fb:9b:7b: cc:56:53:9c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XP1Lo/0MjOZ9WN0rgfkkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjhkY2U4M2E4NTkzM2MwMjA0MGI5NmMwZDNkNjZkNmJlNjc2M2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kgF0KgxQli5MdG7sQK7M61byo9i oHwRtnhnNNzu7nEd+ASm1BhJ5+qe2s88BhdM+iRhVzfUsDOXqO5SxV9jFa0bkfMK Dcb1rh83VRiFn2evAP8nkmmTg8kGQs7EJrKOGuOVLa2Zc7lGqVKKjN5KMPBjO0lE c45pe3nJXmsZRCWn93uobhFhcxKCwwOwNJKcajjzP5kLNHKQtYIo3JI+kOYvTlz1 fLZPO6iXJxpG7mrpLo/gcJ+AXdcmh2aGwB9XaL4e2YxVGEX2jCLPFvK6KF2Q4DH4 RMmrJ3YTfIVQw48bM93WuMiR4cz51gY3sy+6dGCx3asq316n8lh52tuXcQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFA+NzoOoWTPAIEC5bA09Zta+Z2OnMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvRDQzT2c2aFpNOEFnUUxsc0RUMW0xcjVuWTZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg6XwAPQ AwcBKg6XwAPoMA0GCSqGSIb3DQEBCwUAA4IBAQANrxtPYuqD9AeIvduAFO1M8tsA LvGlGHGBG2LK92W9PnfTAk/5uQuUslmsG1uvwGnasppfBxi07CPwwW2TAnloxlBV 0Zpi+f+W5gYw9jqZXSciupLTMA6zXf5p4g7dyng7BJ7WP9IXBpn2XZjvm5rbpU/V tVn3etVgsICf3tLz0aONTWRKEK9KU3yqAO8tUeafUSkk/QvAVcV1NRLMRb7T2DBG qFupJ3xHgIpvzh9ALfIMeCCnVJsTIXwQ56urp+nxIGdx0JLVQ5tS5A827KEU8PLH xhgs5BpFhBgpHP6hKisOzNhuj2R2ESURbDFQGCY+zjL0e1w0Tlz7m3vMVlOc -----END CERTIFICATE-----Generated at Fri Jan 9 13:12:00 2026 by rpki-client