This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ED1JdHnYm-tqbHrq-ZMG6-jPYpY.roa File: ED1JdHnYm-tqbHrq-ZMG6-jPYpY.roa (raw, json) Hash identifier: Yl+Dqr43HSFJBzZ+Gbyltq+5PvTHno6VUhLAhtIlnUE= Subject key identifier: 10:3D:49:74:79:D8:9B:EB:6A:6C:7A:EA:F9:93:06:EB:E8:CF:62:96 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CF9687CB4BEAAAA1C42CE6FA29C8E Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ED1JdHnYm-tqbHrq-ZMG6-jPYpY.roa Signing time: Fri 02 Jan 2026 06:20:03 +0000 ROA not before: Fri 02 Jan 2026 06:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204374 IP address blocks: 2a0e:b107:ba0::/44 maxlen: 48 2a0e:b107:ba0::/48 maxlen: 48 2a0e:b107:ba1::/48 maxlen: 48 2a0e:b107:ba2::/48 maxlen: 48 2a0e:b107:ba3::/48 maxlen: 48 2a0e:b107:ba4::/48 maxlen: 48 2a0e:b107:ba5::/48 maxlen: 48 2a0e:b107:ba6::/48 maxlen: 48 2a0e:b107:ba7::/48 maxlen: 48 2a0e:b107:ba8::/48 maxlen: 48 2a0e:b107:ba9::/48 maxlen: 48 2a0e:b107:baa::/48 maxlen: 48 2a0e:b107:bab::/48 maxlen: 48 2a0e:b107:bac::/48 maxlen: 48 2a0e:b107:bad::/48 maxlen: 48 2a0e:b107:bae::/48 maxlen: 48 2a0e:b107:baf::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f9:68:7c:b4:be:aa:aa:1c:42:ce:6f:a2:9c:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=103d497479d89beb6a6c7aeaf99306ebe8cf6296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ce:32:80:b9:59:47:96:0e:e9:72:15:19:6a: 09:7d:d9:bf:68:c2:70:91:10:da:e4:57:23:71:09: 90:08:0d:24:2d:8e:70:e4:cb:a4:e7:9d:87:50:e4: 00:2f:1f:5d:5b:55:a6:30:bc:47:95:8e:3c:c5:71: c0:b8:47:41:e9:00:ec:24:7e:28:51:c0:6c:e1:93: a4:a4:30:f2:f5:cc:53:6a:a6:63:bb:8e:3c:dc:6b: ff:e9:34:b1:45:d3:e8:2f:f3:7d:af:4a:f3:b5:98: df:27:28:8a:8f:b5:45:27:b2:fa:a5:d0:fd:09:80: 30:38:b2:af:06:8b:81:d5:37:19:1a:cc:af:8d:f2: a6:37:6b:34:5c:55:fd:0c:54:d0:86:a7:f7:82:f9: af:ec:8c:76:7e:ed:40:ae:70:8b:fa:61:45:6e:f3: 3f:f7:e1:5a:7a:b6:7e:da:15:e7:9e:73:80:dd:e1: fd:22:81:ff:51:97:7f:1f:5d:24:02:63:60:69:e6: 94:34:f5:6b:2f:f1:b6:72:34:f0:13:4f:d8:21:67: b1:f2:bc:14:32:0f:a8:91:7a:43:e6:38:be:e4:ea: a7:f2:ef:e4:a3:06:b3:48:a3:8c:87:d6:67:43:9f: 09:4c:83:62:1f:2b:e4:19:d8:41:52:30:96:12:c4: 31:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3D:49:74:79:D8:9B:EB:6A:6C:7A:EA:F9:93:06:EB:E8:CF:62:96 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ED1JdHnYm-tqbHrq-ZMG6-jPYpY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:ba0::/44 Signature Algorithm: sha256WithRSAEncryption bd:60:ad:77:9b:c4:eb:bf:b5:20:83:9f:7a:2e:dd:52:6b:7b: e4:4a:c5:c6:99:86:ed:80:ca:f9:44:fc:a0:0a:16:3a:e6:da: 54:74:4f:a9:1d:69:30:93:00:99:32:80:a8:5b:21:7f:d9:dd: 37:45:79:99:a7:96:71:93:ba:e1:e8:27:d0:42:3b:1f:1a:cd: 19:7c:5c:66:0a:b2:77:8a:f8:93:f8:2e:22:d1:52:d9:93:f5: 93:10:49:f8:40:c6:c4:6b:21:c2:88:0d:1d:de:2d:e1:e4:83: 75:e7:f9:f7:16:6e:a9:bf:c1:4b:92:31:aa:2c:a8:6c:4b:93: ee:41:d1:6f:b1:cd:1f:df:14:4c:d8:65:7d:d0:3b:69:7c:2a: a9:55:8a:78:af:3f:2c:92:d6:85:6b:54:ff:5e:d7:91:5e:92: f6:25:5c:b0:69:2b:70:87:63:23:a0:7f:a1:8e:75:cc:0f:dd: 04:20:9b:2f:1d:dc:0f:e5:7d:ad:18:c8:57:8f:e1:5f:2d:5f: 26:67:1e:2b:76:10:a5:3b:ec:9d:9f:d4:0c:96:29:2e:97:87: 26:1b:70:1b:09:89:78:bf:92:45:e5:fe:db:59:60:51:19:14: 0d:9c:47:39:9c:6b:88:9f:63:a5:27:e3:b5:e5:a8:6c:f1:8c: 9d:f0:eb:87 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XPlofLS+qqocQs5vopyOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDNkNDk3NDc5ZDg5YmViNmE2YzdhZWFmOTkzMDZlYmU4Y2Y2Mjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM4ygLlZR5YO6XIVGWoJfdm/aMJw kRDa5FcjcQmQCA0kLY5w5Muk552HUOQALx9dW1WmMLxHlY48xXHAuEdB6QDsJH4o UcBs4ZOkpDDy9cxTaqZju4483Gv/6TSxRdPoL/N9r0rztZjfJyiKj7VFJ7L6pdD9 CYAwOLKvBouB1TcZGsyvjfKmN2s0XFX9DFTQhqf3gvmv7Ix2fu1ArnCL+mFFbvM/ 9+FaerZ+2hXnnnOA3eH9IoH/UZd/H10kAmNgaeaUNPVrL/G2cjTwE0/YIWex8rwU Mg+okXpD5ji+5Oqn8u/kowazSKOMh9ZnQ58JTINiHyvkGdhBUjCWEsQxYQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBA9SXR52Jvramx66vmTBuvoz2KWMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvRUQxSmRIblltLXRxYkhycS1aTUc2LWpQWXBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBwug MA0GCSqGSIb3DQEBCwUAA4IBAQC9YK13m8Trv7Ugg596Lt1Sa3vkSsXGmYbtgMr5 RPygChY65tpUdE+pHWkwkwCZMoCoWyF/2d03RXmZp5Zxk7rh6CfQQjsfGs0ZfFxm CrJ3iviT+C4i0VLZk/WTEEn4QMbEayHCiA0d3i3h5IN15/n3Fm6pv8FLkjGqLKhs S5PuQdFvsc0f3xRM2GV90DtpfCqpVYp4rz8sktaFa1T/XteRXpL2JVywaStwh2Mj oH+hjnXMD90EIJsvHdwP5X2tGMhXj+FfLV8mZx4rdhClO+ydn9QMlikul4cmG3Ab CYl4v5JF5f7bWWBRGRQNnEc5nGuIn2OlJ+O15ahs8Yyd8OuH -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:48 2026 by rpki-client