This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EsdVp0yGxwpnQ_vJArQMr7hJdAk.roa File: EsdVp0yGxwpnQ_vJArQMr7hJdAk.roa (raw, json) Hash identifier: vW8lgV+ITULXXun0rwBFDlLEdbRVT1/omvaY74ZXMfA= Subject key identifier: 12:C7:55:A7:4C:86:C7:0A:67:43:FB:C9:02:B4:0C:AF:B8:49:74:09 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D51156A436ACB35D1306D57A4F4F1 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EsdVp0yGxwpnQ_vJArQMr7hJdAk.roa Signing time: Fri 02 Jan 2026 06:20:26 +0000 ROA not before: Fri 02 Jan 2026 06:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212483 IP address blocks: 2a0e:b107:1be0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 17:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:51:15:6a:43:6a:cb:35:d1:30:6d:57:a4:f4:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12c755a74c86c70a6743fbc902b40cafb8497409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e7:2e:05:ea:e3:51:19:a7:f0:2b:1e:d6:75: 49:4d:79:62:ef:18:33:36:a9:a5:30:9a:56:99:70: 56:b5:c5:01:96:a2:42:5e:e9:d4:1e:36:27:0c:81: 75:b5:96:38:59:d2:49:f1:3a:ab:2e:ac:0d:c9:a1: 53:32:45:80:0b:33:0c:c4:22:e8:c8:f0:d4:b6:ec: c8:05:e8:c4:ab:43:88:ac:c7:21:4b:37:b3:83:52: d4:76:42:45:e9:b1:36:d0:14:3f:fc:d6:50:1f:4f: 9b:c5:e7:9e:22:fb:65:68:21:d0:9b:16:eb:a9:e3: df:a8:d7:bc:45:f1:3e:28:ec:71:46:8d:5b:d0:8b: 20:ce:74:92:14:e9:ac:4c:60:94:1a:aa:f4:a2:c4: d6:92:87:ba:33:87:e1:95:ef:77:7e:dc:67:e4:41: 4b:63:87:47:d0:d6:e5:f5:91:16:2b:9c:ce:57:fa: ca:1b:8c:67:fe:60:54:93:07:c6:b8:64:29:e3:21: d1:f1:f8:e4:f5:43:03:4f:30:c4:f6:1e:11:93:51: 08:f2:e2:b8:68:83:ea:53:b3:a3:a8:0c:8c:ac:43: 42:21:e6:5f:75:11:fb:9a:28:53:16:66:79:82:78: 60:79:66:1f:7c:eb:1f:45:5c:4a:3c:9e:e2:bb:a7: ff:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C7:55:A7:4C:86:C7:0A:67:43:FB:C9:02:B4:0C:AF:B8:49:74:09 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EsdVp0yGxwpnQ_vJArQMr7hJdAk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1be0::/44 Signature Algorithm: sha256WithRSAEncryption 7d:e4:3a:aa:89:6b:c6:a3:e2:7b:64:06:c6:a1:57:06:d5:ac: 2b:6a:2c:e6:ef:7b:9a:e1:37:5c:f8:e0:20:43:22:1c:41:5b: fb:7e:24:aa:1b:33:9d:80:ad:b4:0e:2d:a5:13:5f:20:a0:01: 98:77:95:9c:5d:fa:8c:95:a8:c3:b3:03:ea:01:04:c7:89:c5: d9:53:2e:4e:09:61:e9:ec:e6:06:f8:a7:44:94:d9:83:e9:8c: 19:e9:e9:a4:99:f3:14:10:01:b6:aa:f6:fb:79:10:f8:a5:33: f9:d8:57:40:6b:a5:c5:4c:77:14:ba:5a:ff:2e:ac:0d:db:6a: e9:78:51:ed:61:cd:cb:99:4d:27:1b:eb:e8:52:e2:57:ec:df: 9c:87:9e:21:6a:46:71:1f:69:bc:bc:b9:d2:cd:0a:b3:3c:d3: 3b:12:27:f0:eb:bb:4b:b5:16:14:54:b0:1d:0f:ce:c3:69:1f: be:08:a0:c9:8b:15:cd:d8:62:fb:01:0f:06:f8:a2:9e:1a:ff: 7a:96:e7:3c:04:6a:cb:fa:2a:5c:0e:1e:3f:6d:6c:d1:bb:ba: f8:e2:f6:e1:a8:56:2e:b0:04:59:14:cb:a2:81:55:30:7b:7e: 0d:2b:dd:48:bf:a2:fb:05:35:0e:2d:6a:00:32:31:21:57:59: 32:c1:06:8f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XVEVakNqyzXRMG1XpPTxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmM3NTVhNzRjODZjNzBhNjc0M2ZiYzkwMmI0MGNhZmI4NDk3NDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOcuBerjURmn8Cse1nVJTXli7xgz NqmlMJpWmXBWtcUBlqJCXunUHjYnDIF1tZY4WdJJ8TqrLqwNyaFTMkWACzMMxCLo yPDUtuzIBejEq0OIrMchSzezg1LUdkJF6bE20BQ//NZQH0+bxeeeIvtlaCHQmxbr qePfqNe8RfE+KOxxRo1b0IsgznSSFOmsTGCUGqr0osTWkoe6M4fhle93ftxn5EFL Y4dH0Nbl9ZEWK5zOV/rKG4xn/mBUkwfGuGQp4yHR8fjk9UMDTzDE9h4Rk1EI8uK4 aIPqU7OjqAyMrENCIeZfdRH7mihTFmZ5gnhgeWYffOsfRVxKPJ7iu6f/RwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBLHVadMhscKZ0P7yQK0DK+4SXQJMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvRXNkVnAweUd4d3BuUV92SkFyUU1yN2hKZEFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxvg MA0GCSqGSIb3DQEBCwUAA4IBAQB95DqqiWvGo+J7ZAbGoVcG1awraizm73ua4Tdc +OAgQyIcQVv7fiSqGzOdgK20Di2lE18goAGYd5WcXfqMlajDswPqAQTHicXZUy5O CWHp7OYG+KdElNmD6YwZ6emkmfMUEAG2qvb7eRD4pTP52FdAa6XFTHcUulr/LqwN 22rpeFHtYc3LmU0nG+voUuJX7N+ch54hakZxH2m8vLnSzQqzPNM7Eifw67tLtRYU VLAdD87DaR++CKDJixXN2GL7AQ8G+KKeGv96luc8BGrL+ipcDh4/bWzRu7r44vbh qFYusARZFMuigVUwe34NK91Iv6L7BTUOLWoAMjEhV1kywQaP -----END CERTIFICATE-----Generated at Sat Jan 10 02:19:25 2026 by rpki-client