This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/J3982VOWI8vhNF-yIzAZ8ABSaXQ.roa File: J3982VOWI8vhNF-yIzAZ8ABSaXQ.roa (raw, json) Hash identifier: Qex7Xu4Za4ijybBbLriNeEWi+o08X9gM8ChL4YYjOMg= Subject key identifier: 27:7F:7C:D9:53:96:23:CB:E1:34:5F:B2:23:30:19:F0:00:52:69:74 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D3BDACC8E2862A67D882EF9856428 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/J3982VOWI8vhNF-yIzAZ8ABSaXQ.roa Signing time: Fri 02 Jan 2026 06:20:20 +0000 ROA not before: Fri 02 Jan 2026 06:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211284 IP address blocks: 2a0e:b107:13e0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:3b:da:cc:8e:28:62:a6:7d:88:2e:f9:85:64:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=277f7cd9539623cbe1345fb2233019f000526974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:09:89:10:9a:46:ce:28:ac:a6:5c:3d:78:0d: 22:f3:43:97:ef:7f:ce:9e:90:26:50:68:b4:81:6d: 84:bc:1a:7c:b3:30:d9:57:d2:d5:f0:93:61:75:24: 57:4c:57:ac:b1:7a:f3:f9:79:c4:bd:d3:1f:43:12: 61:dd:55:79:0a:54:27:22:95:18:19:3b:ae:d0:ae: da:4a:38:90:cc:60:31:1c:b3:2a:89:36:ca:b3:7b: 2a:49:af:11:c4:00:52:bf:d6:70:7c:40:dc:d0:eb: fd:dc:fc:97:45:0a:d8:81:4f:ec:c7:16:1a:05:fc: f4:cc:2c:4a:29:9b:17:95:fe:a4:27:5d:35:45:2d: b4:00:5d:12:04:f3:1c:ab:68:6e:2b:26:f9:99:51: 47:fc:71:c3:bf:62:9f:79:4c:50:07:92:b0:95:7b: 24:17:c4:b3:43:41:c4:c4:bf:c5:b3:a0:a2:5b:b1: d2:28:a8:6e:8d:af:83:5a:84:3d:c6:91:5c:10:16: c6:04:d4:2e:4b:a9:c2:07:95:68:d4:80:4a:1e:38: 68:cc:7e:cc:92:df:41:b2:18:7e:31:18:75:f9:9f: 7c:fb:ba:7c:13:d8:c1:d0:da:66:26:37:5f:1d:32: e2:6d:d8:de:40:27:06:f9:17:e7:b0:f0:a8:d7:05: 2b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:7F:7C:D9:53:96:23:CB:E1:34:5F:B2:23:30:19:F0:00:52:69:74 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/J3982VOWI8vhNF-yIzAZ8ABSaXQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:13e0::/44 Signature Algorithm: sha256WithRSAEncryption 16:ed:30:e0:b3:22:d1:47:ba:2e:ec:09:9a:73:89:b3:03:76: 23:5c:fe:0f:2e:02:e7:32:d2:ab:f7:61:e2:a3:70:f3:cb:7d: 87:de:7c:a1:fc:f6:70:00:b7:0b:61:ca:ee:f3:30:48:93:9c: 75:ce:66:3f:a3:81:4a:b9:04:db:bc:40:01:6e:93:ff:b1:68: 5a:a5:e9:be:5a:da:94:4b:c2:6b:bf:a7:c3:c3:4a:8b:22:f3: 46:af:55:5b:bb:4f:d4:18:bc:b7:46:a7:84:ba:31:60:cf:a3: c9:27:21:af:af:49:c5:6a:39:2c:ba:97:c6:bb:45:fb:e5:2e: 3b:08:11:12:53:78:38:69:85:ad:00:d3:76:a5:9f:3d:e9:d9: 6e:f0:06:17:d7:b3:c7:b7:bf:cc:5b:0c:83:97:5b:bb:c0:36: b2:89:7d:53:1a:10:2e:ae:79:13:f8:c0:77:9d:a4:7d:ee:ad: ea:fa:88:5f:82:81:9a:6c:ae:e3:b9:aa:36:af:20:c6:ce:1c: b8:e0:8c:44:08:33:45:32:66:fe:b2:bb:a3:41:a1:98:10:25: f4:82:e1:d1:a9:5f:2a:72:8e:cf:ec:a3:1e:57:c3:c1:e9:10: 57:6c:d8:07:9f:53:9e:79:e5:42:af:c1:d9:91:32:d2:7a:22: 3c:71:4b:13 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XTvazI4oYqZ9iC75hWQoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzdmN2NkOTUzOTYyM2NiZTEzNDVmYjIyMzMwMTlmMDAwNTI2OTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgmJEJpGziisplw9eA0i80OX73/O npAmUGi0gW2EvBp8szDZV9LV8JNhdSRXTFessXrz+XnEvdMfQxJh3VV5ClQnIpUY GTuu0K7aSjiQzGAxHLMqiTbKs3sqSa8RxABSv9ZwfEDc0Ov93PyXRQrYgU/sxxYa Bfz0zCxKKZsXlf6kJ101RS20AF0SBPMcq2huKyb5mVFH/HHDv2KfeUxQB5KwlXsk F8SzQ0HExL/Fs6CiW7HSKKhuja+DWoQ9xpFcEBbGBNQuS6nCB5Vo1IBKHjhozH7M kt9Bshh+MRh1+Z98+7p8E9jB0NpmJjdfHTLibdjeQCcG+RfnsPCo1wUrcQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCd/fNlTliPL4TRfsiMwGfAAUml0MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvSjM5ODJWT1dJOHZoTkYteUl6QVo4QUJTYVhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxPg MA0GCSqGSIb3DQEBCwUAA4IBAQAW7TDgsyLRR7ou7Amac4mzA3YjXP4PLgLnMtKr 92Hio3Dzy32H3nyh/PZwALcLYcru8zBIk5x1zmY/o4FKuQTbvEABbpP/sWhapem+ WtqUS8Jrv6fDw0qLIvNGr1Vbu0/UGLy3RqeEujFgz6PJJyGvr0nFajksupfGu0X7 5S47CBESU3g4aYWtANN2pZ896dlu8AYX17PHt7/MWwyDl1u7wDayiX1TGhAurnkT +MB3naR97q3q+ohfgoGabK7juao2ryDGzhy44IxECDNFMmb+srujQaGYECX0guHR qV8qco7P7KMeV8PB6RBXbNgHn1OeeeVCr8HZkTLSeiI8cUsT -----END CERTIFICATE-----Generated at Fri Jan 9 13:11:39 2026 by rpki-client