This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/IAyr2z6ZgeRvBb010EO-21nG2Sg.roa File: IAyr2z6ZgeRvBb010EO-21nG2Sg.roa (raw, json) Hash identifier: l0S69LBF6YWSuHcGhQgs/gFJHP78PnRFKkOI98hv2rA= Subject key identifier: 20:0C:AB:DB:3E:99:81:E4:6F:05:BD:35:D0:43:BE:DB:59:C6:D9:28 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CC08B9DFCE88D8BC74EDAF198E7AB Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/IAyr2z6ZgeRvBb010EO-21nG2Sg.roa Signing time: Fri 02 Jan 2026 06:19:49 +0000 ROA not before: Fri 02 Jan 2026 06:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59922 IP address blocks: 2a0e:97c0:f20::/44 maxlen: 48 2a0e:b107:13de::/48 maxlen: 48 2a10:cc44:110::/44 maxlen: 48 2a10:cc44:110::/48 maxlen: 48 2a10:cc44:112::/48 maxlen: 48 2a10:ccc4:2020::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:c0:8b:9d:fc:e8:8d:8b:c7:4e:da:f1:98:e7:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=200cabdb3e9981e46f05bd35d043bedb59c6d928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:32:60:16:7d:29:38:50:98:a2:d8:bb:bc:9a: 60:19:f4:fc:91:ea:ea:7b:00:58:76:1f:e4:72:6e: b0:05:c1:01:88:11:b2:4c:68:d3:a7:5e:e1:12:d5: f8:83:28:7c:f5:69:43:8e:82:d3:6a:6b:ec:b7:70: 8f:72:f5:0c:44:3c:db:95:a0:cf:d0:f7:bd:cc:a2: bf:14:0b:05:18:11:fc:21:e2:b5:d4:c2:36:38:99: c3:2a:fb:e6:87:7b:d1:36:80:93:a8:04:38:9c:5f: 1b:34:91:be:79:1e:26:c1:f4:7a:cf:83:c7:f9:eb: b1:02:a1:bf:0b:5f:70:5c:25:c2:d3:27:4e:81:74: 45:08:5f:04:ba:1f:4c:c1:16:2b:74:6b:18:8b:26: a4:9c:fc:53:b3:ed:f1:66:15:38:b4:d2:96:21:c0: 02:e6:2c:82:69:b7:ac:5c:60:8b:8e:c8:9c:37:e0: 80:3e:63:0a:07:5d:f5:9e:1d:26:7d:b5:0f:bc:23: 26:9a:ee:c6:41:4c:49:9f:55:d0:bf:51:3d:ea:0c: 1e:fc:a3:9a:3c:88:b6:2f:52:be:fd:27:ac:45:cb: 25:d7:7b:e2:00:36:b2:04:a4:f4:8e:fb:bd:56:4b: f8:47:ef:fb:6d:b5:15:d7:b0:ef:6b:57:44:9e:e3: a2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0C:AB:DB:3E:99:81:E4:6F:05:BD:35:D0:43:BE:DB:59:C6:D9:28 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/IAyr2z6ZgeRvBb010EO-21nG2Sg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:f20::/44 2a0e:b107:13de::/48 2a10:cc44:110::/44 2a10:ccc4:2020::/44 Signature Algorithm: sha256WithRSAEncryption 91:d0:a8:d8:90:cc:65:f1:e9:b6:5d:cc:32:e8:6b:c9:14:5f: 76:b0:06:b4:a5:d7:9e:dc:85:36:77:fb:a2:12:0d:15:4a:e8: 78:dc:54:be:e9:5b:7a:79:98:77:c0:2c:27:f6:8c:c6:c3:bb: db:7d:78:86:f1:2d:cf:7d:7d:fb:a4:64:30:ad:49:4d:a1:28: 4b:7b:a4:1d:fe:ac:bc:6d:b0:fe:80:1a:4c:50:99:ad:af:be: 03:05:fb:bf:af:5b:aa:14:1e:9b:c6:55:0f:b4:9b:f9:fc:bd: 66:00:d2:4f:aa:cd:86:4c:d0:75:98:9e:b7:e6:4f:fd:c2:c0: d5:43:fc:a0:c6:fd:c3:83:4f:2b:53:2d:dd:9c:7e:ae:61:9a: 78:4c:d2:cd:01:48:b7:e4:c1:15:8b:05:fe:da:8f:05:f4:a5: a9:b5:b6:9a:c8:98:88:a2:ce:cf:74:e3:34:0a:c8:4b:2a:54: 33:e3:71:02:6e:4f:01:26:c4:66:c8:f4:80:fc:c4:af:94:ab: 04:64:44:99:24:f8:88:d6:7b:18:c9:19:ce:8a:83:64:ab:6a: 08:3c:c6:a3:32:62:34:32:08:2e:eb:2e:0a:af:27:20:71:36: 9c:0f:0c:95:28:8b:b5:43:d7:bb:39:09:ff:2a:21:91:70:bb: 42:9b:3c:6f -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt9XMCLnfzojYvHTtrxmOerMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDBjYWJkYjNlOTk4MWU0NmYwNWJkMzVkMDQzYmVkYjU5YzZkOTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzJgFn0pOFCYoti7vJpgGfT8kerq ewBYdh/kcm6wBcEBiBGyTGjTp17hEtX4gyh89WlDjoLTamvst3CPcvUMRDzblaDP 0Pe9zKK/FAsFGBH8IeK11MI2OJnDKvvmh3vRNoCTqAQ4nF8bNJG+eR4mwfR6z4PH +euxAqG/C19wXCXC0ydOgXRFCF8Euh9MwRYrdGsYiyaknPxTs+3xZhU4tNKWIcAC 5iyCabesXGCLjsicN+CAPmMKB131nh0mfbUPvCMmmu7GQUxJn1XQv1E96gwe/KOa PIi2L1K+/SesRcsl13viADayBKT0jvu9Vkv4R+/7bbUV17Dva1dEnuOiPQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFCAMq9s+mYHkbwW9NdBDvttZxtkoMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvSUF5cjJ6NlpnZVJ2QmIwMTBFTy0yMW5HMlNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcEKg6XwA8g AwcAKg6xBxPeAwcEKhDMRAEQAwcEKhDMxCAgMA0GCSqGSIb3DQEBCwUAA4IBAQCR 0KjYkMxl8em2Xcwy6GvJFF92sAa0pdee3IU2d/uiEg0VSuh43FS+6Vt6eZh3wCwn 9ozGw7vbfXiG8S3PfX37pGQwrUlNoShLe6Qd/qy8bbD+gBpMUJmtr74DBfu/r1uq FB6bxlUPtJv5/L1mANJPqs2GTNB1mJ635k/9wsDVQ/ygxv3Dg08rUy3dnH6uYZp4 TNLNAUi35MEViwX+2o8F9KWptbaayJiIos7PdOM0CshLKlQz43ECbk8BJsRmyPSA /MSvlKsEZESZJPiI1nsYyRnOioNkq2oIPMajMmI0Mggu6y4KrycgcTacDwyVKIu1 Q9e7OQn/KiGRcLtCmzxv -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:08 2026 by rpki-client