This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Hd5mWoFKwR1yIPaU01uB7Bs-UO4.roa File: Hd5mWoFKwR1yIPaU01uB7Bs-UO4.roa (raw, json) Hash identifier: Eof1qOi5/NUhGivO7cxhaDfPXpFxqo0FvSR0hp0zmyU= Subject key identifier: 1D:DE:66:5A:81:4A:C1:1D:72:20:F6:94:D3:5B:81:EC:1B:3E:50:EE Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D2B579FBD8E514C134AE8B942D3D9 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Hd5mWoFKwR1yIPaU01uB7Bs-UO4.roa Signing time: Fri 02 Jan 2026 06:20:16 +0000 ROA not before: Fri 02 Jan 2026 06:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210662 IP address blocks: 2a10:cc47:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:2b:57:9f:bd:8e:51:4c:13:4a:e8:b9:42:d3:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1dde665a814ac11d7220f694d35b81ec1b3e50ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3a:98:10:2c:99:5d:58:ab:11:b0:a0:e5:1f: a6:4d:87:04:19:f4:43:26:50:a0:09:90:9c:f3:cc: 49:72:54:c4:4d:40:34:87:30:6c:1a:81:a1:6a:8d: 48:7d:c2:3f:9d:11:fb:6d:00:d0:10:9f:31:f5:47: f3:e4:68:b2:88:3f:ab:c5:88:c5:ad:09:30:2c:c8: 20:a3:b5:44:9b:1e:75:a8:b9:da:90:53:b9:9b:ac: f0:b3:78:b2:9a:28:df:67:0b:76:c8:44:c5:7f:fd: 27:51:70:c0:dd:ac:50:72:4b:b7:c0:1b:e2:d0:dd: a6:5f:8f:0e:6f:fa:70:ad:04:74:3b:9c:cd:37:5a: 25:1f:e2:14:fd:bd:c3:62:b9:d4:65:dd:10:ae:b5: 83:31:6e:44:ff:66:9f:73:bc:c7:f1:72:3e:d9:15: 53:9a:b5:e0:53:a8:5c:15:75:2a:90:f5:7c:18:22: 02:0f:e5:03:b4:5b:a6:fc:70:ba:5e:a1:e4:a5:48: 10:f0:8b:d9:58:b7:6d:c6:04:06:77:5b:56:07:44: df:c5:34:64:77:30:d6:4e:0b:eb:97:e4:e9:40:62: c6:94:3b:74:a8:ae:83:0d:63:c0:a8:fd:af:ae:a7: fe:69:a7:9c:50:a6:0d:b6:42:ad:f4:ee:3a:04:13: 1d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DE:66:5A:81:4A:C1:1D:72:20:F6:94:D3:5B:81:EC:1B:3E:50:EE X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Hd5mWoFKwR1yIPaU01uB7Bs-UO4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:cc47:1000::/36 Signature Algorithm: sha256WithRSAEncryption 52:d6:80:65:d8:3c:3f:b9:da:a5:5c:91:79:22:55:fe:01:e2: 36:64:90:3b:c3:8d:45:40:c7:7f:9c:a4:56:e1:88:d2:a2:84: bc:ce:a4:be:ac:90:07:fe:47:6c:39:c7:1b:1f:79:68:3d:63: 61:1b:c0:ea:15:2f:42:1b:bc:a7:26:b1:eb:21:f7:e8:57:e7: 87:f5:58:da:c4:7e:2c:f9:90:e2:ea:38:7c:f5:04:c4:4c:4d: 4d:5b:fb:1a:52:c0:75:66:02:33:40:df:fe:7f:9a:5d:d7:c7: 30:9e:e1:71:41:92:38:e4:f2:5b:e0:74:90:76:c0:7e:2d:bb: 88:15:41:32:f0:59:34:01:dc:ec:41:b3:de:00:e8:9b:9b:b2: d0:05:9e:2b:4b:b0:1d:0c:2b:42:c0:f6:b3:a3:a1:d9:e8:a4: 76:53:0a:d8:e1:b8:50:fa:8c:20:95:75:16:d5:44:12:c4:b9: 37:f8:56:6b:bd:76:2d:3b:e1:51:55:23:79:8b:7e:c9:6c:c3: 9c:21:e8:37:e3:75:bd:a7:8e:58:75:3e:af:06:1a:2f:c8:c5: 54:4e:fe:22:96:b2:57:75:41:c5:5c:f6:4d:07:22:42:f1:2a: 97:18:02:22:46:4c:1a:a2:b5:3a:87:e2:13:33:68:44:57:a6: c3:0a:0c:7a -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt9XStXn72OUUwTSui5QtPZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGRlNjY1YTgxNGFjMTFkNzIyMGY2OTRkMzViODFlYzFiM2U1MGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzqYECyZXVirEbCg5R+mTYcEGfRD JlCgCZCc88xJclTETUA0hzBsGoGhao1IfcI/nRH7bQDQEJ8x9Ufz5GiyiD+rxYjF rQkwLMggo7VEmx51qLnakFO5m6zws3iymijfZwt2yETFf/0nUXDA3axQcku3wBvi 0N2mX48Ob/pwrQR0O5zNN1olH+IU/b3DYrnUZd0QrrWDMW5E/2afc7zH8XI+2RVT mrXgU6hcFXUqkPV8GCICD+UDtFum/HC6XqHkpUgQ8IvZWLdtxgQGd1tWB0TfxTRk dzDWTgvrl+TpQGLGlDt0qK6DDWPAqP2vrqf+aaecUKYNtkKt9O46BBMd0wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFB3eZlqBSsEdciD2lNNbgewbPlDuMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvSGQ1bVdvRkt3UjF5SVBhVTAxdUI3QnMtVU80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKhDMRxAw DQYJKoZIhvcNAQELBQADggEBAFLWgGXYPD+52qVckXkiVf4B4jZkkDvDjUVAx3+c pFbhiNKihLzOpL6skAf+R2w5xxsfeWg9Y2EbwOoVL0IbvKcmsesh9+hX54f1WNrE fiz5kOLqOHz1BMRMTU1b+xpSwHVmAjNA3/5/ml3XxzCe4XFBkjjk8lvgdJB2wH4t u4gVQTLwWTQB3OxBs94A6JubstAFnitLsB0MK0LA9rOjodnopHZTCtjhuFD6jCCV dRbVRBLEuTf4Vmu9di074VFVI3mLfslsw5wh6Dfjdb2njlh1Pq8GGi/IxVRO/iKW sld1QcVc9k0HIkLxKpcYAiJGTBqitTqH4hMzaERXpsMKDHo= -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:08 2026 by rpki-client