This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EnCCnm6SpZKoCGzMXee9ntcd_Uw.roa File: EnCCnm6SpZKoCGzMXee9ntcd_Uw.roa (raw, json) Hash identifier: EF6iPkUSmxy4ye9W0wNRWEZmdpQc9hJuIVaZ0VdVCmg= Subject key identifier: 12:70:82:9E:6E:92:A5:92:A8:08:6C:CC:5D:E7:BD:9E:D7:1D:FD:4C Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CA7226C536A935BFC69F2A3C82968 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EnCCnm6SpZKoCGzMXee9ntcd_Uw.roa Signing time: Fri 02 Jan 2026 06:19:42 +0000 ROA not before: Fri 02 Jan 2026 06:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33842 IP address blocks: 109.61.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:a7:22:6c:53:6a:93:5b:fc:69:f2:a3:c8:29:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1270829e6e92a592a8086ccc5de7bd9ed71dfd4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f1:ae:07:a5:f8:c1:da:25:bf:e1:63:08:4e: ce:05:b7:3f:b7:e1:3e:c5:f8:68:cd:76:2c:a9:ce: d6:42:d9:52:ec:c7:cc:65:38:5a:50:e8:fa:59:bc: 5d:2f:3f:0d:34:f3:6d:36:56:1b:f2:d8:26:85:67: 8f:d8:0a:60:6a:3f:03:e3:7f:46:07:d1:ff:dc:b4: e8:d8:c1:0b:db:2d:71:09:c0:dd:9d:d5:2a:95:f4: 38:a1:a2:0a:db:a9:fe:3c:8f:cd:23:52:f3:2a:88: 0e:bd:b1:f5:fd:42:fa:63:fa:ce:5e:0e:ee:3b:c7: d7:53:61:18:94:82:ff:6b:8f:81:da:fc:b1:7b:02: 1a:a5:bd:7c:c2:29:1a:fa:9b:21:91:c3:ee:5e:c1: 1c:a3:8e:6e:4e:37:f1:e2:d9:ac:10:34:69:fc:73: 02:b1:58:1c:cf:3e:f1:e3:65:e8:c1:58:ec:1a:89: 9b:b4:1f:d6:de:7a:6f:06:5f:c9:a1:9d:e8:28:6b: a9:c1:ff:12:bd:61:74:ed:a8:06:bc:05:b5:e2:58: 9f:38:09:b5:7f:6f:7f:29:9a:97:12:bf:84:29:2c: ec:28:34:8f:d3:97:2d:d4:9c:5c:1e:e6:27:ee:5d: db:05:e6:a2:2b:f1:c0:77:b0:e4:6c:7e:a6:be:0a: 6c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:70:82:9E:6E:92:A5:92:A8:08:6C:CC:5D:E7:BD:9E:D7:1D:FD:4C X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EnCCnm6SpZKoCGzMXee9ntcd_Uw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.61.108.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:b7:ca:a3:41:db:60:f9:fd:5a:e3:e2:3f:a7:aa:57:dc:d5: 05:86:d3:23:71:3b:5c:64:25:14:42:4a:c5:a7:9b:7e:82:ec: 61:2f:dc:ef:3d:52:aa:b3:42:71:ad:c3:5c:12:2b:20:96:8b: bc:76:c0:ae:a1:d2:97:45:11:f2:1e:9b:7e:b9:db:5d:33:1b: 44:6b:19:33:5a:a8:72:89:95:4e:cb:db:f9:b7:9b:29:33:7e: 7b:d1:e9:67:88:9d:70:03:bf:1d:22:5d:64:a7:3b:fd:b3:c4: 0e:59:20:f6:25:05:cc:6b:f6:8a:e4:24:53:05:24:d2:fd:ed: 36:6f:96:e6:2e:00:f3:6d:b0:16:ae:b8:77:ed:bf:cc:0e:02: 84:22:5a:55:e9:7a:7a:5f:73:a5:90:20:c6:58:b1:08:a8:b3: 9d:72:45:57:9c:cc:db:28:37:bb:3c:ee:06:ac:f7:de:9a:86: a9:81:da:c2:53:b7:c0:47:e1:5a:7a:d4:61:66:51:9d:6a:6b: 02:58:d2:0f:31:cd:c9:b2:7d:3a:de:c9:d1:58:ec:00:79:d6: b8:db:63:5e:65:3e:fd:37:b9:71:23:ac:f5:44:14:5c:a9:85: 82:23:c9:46:40:57:94:3c:09:ae:3c:d4:e4:e1:e9:5f:f5:2e: ad:05:02:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XKcibFNqk1v8afKjyCloMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjcwODI5ZTZlOTJhNTkyYTgwODZjY2M1ZGU3YmQ5ZWQ3MWRmZDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfGuB6X4wdolv+FjCE7OBbc/t+E+ xfhozXYsqc7WQtlS7MfMZThaUOj6WbxdLz8NNPNtNlYb8tgmhWeP2Apgaj8D439G B9H/3LTo2MEL2y1xCcDdndUqlfQ4oaIK26n+PI/NI1LzKogOvbH1/UL6Y/rOXg7u O8fXU2EYlIL/a4+B2vyxewIapb18wika+pshkcPuXsEco45uTjfx4tmsEDRp/HMC sVgczz7x42XowVjsGombtB/W3npvBl/JoZ3oKGupwf8SvWF07agGvAW14lifOAm1 f29/KZqXEr+EKSzsKDSP05ct1JxcHuYn7l3bBeaiK/HAd7DkbH6mvgpsQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBJwgp5ukqWSqAhszF3nvZ7XHf1MMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvRW5DQ25tNlNwWktvQ0d6TVhlZTludGNkX1V3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbT1sMA0G CSqGSIb3DQEBCwUAA4IBAQBPt8qjQdtg+f1a4+I/p6pX3NUFhtMjcTtcZCUUQkrF p5t+guxhL9zvPVKqs0JxrcNcEisglou8dsCuodKXRRHyHpt+udtdMxtEaxkzWqhy iZVOy9v5t5spM3570elniJ1wA78dIl1kpzv9s8QOWSD2JQXMa/aK5CRTBSTS/e02 b5bmLgDzbbAWrrh37b/MDgKEIlpV6Xp6X3OlkCDGWLEIqLOdckVXnMzbKDe7PO4G rPfemoapgdrCU7fAR+FaetRhZlGdamsCWNIPMc3Jsn063snRWOwAeda422NeZT79 N7lxI6z1RBRcqYWCI8lGQFeUPAmuPNTk4elf9S6tBQJD -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:26 2026 by rpki-client