This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JHTvRQgTslLd5Db71GyGqc2VZyk.roa File: JHTvRQgTslLd5Db71GyGqc2VZyk.roa (raw, json) Hash identifier: pMkIoYK6e6oT70rp7/Z3+2qxu5lnE48e1PixZKuYmJQ= Subject key identifier: 24:74:EF:45:08:13:B2:52:DD:E4:36:FB:D4:6C:86:A9:CD:95:67:29 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019C1AD1550814A4013CC0EE5DF2365887F6 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JHTvRQgTslLd5Db71GyGqc2VZyk.roa Signing time: Sun 01 Feb 2026 20:07:32 +0000 ROA not before: Sun 01 Feb 2026 20:07:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202673 IP address blocks: 2a0e:97c0:4a0::/44 maxlen: 48 2a0e:97c0:c40::/44 maxlen: 48 2a0e:97c0:c43::/48 maxlen: 48 2a0e:97c0:c46::/48 maxlen: 48 2a0e:97c0:c47::/48 maxlen: 48 2a0e:97c0:c4a::/48 maxlen: 48 2a0e:97c0:c4b::/48 maxlen: 48 2a0e:97c0:c4f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 19:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1a:d1:55:08:14:a4:01:3c:c0:ee:5d:f2:36:58:87:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Feb 1 20:07:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2474ef450813b252dde436fbd46c86a9cd956729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:df:4d:44:67:2c:17:fd:5c:ea:03:a4:e7:dd: 4f:65:55:04:79:33:b8:e6:c0:35:f5:c7:7c:ec:38: f0:79:1e:dd:48:4b:ca:96:94:d4:c5:c0:2c:a4:fb: e2:6c:59:90:53:57:94:f2:53:25:29:bf:66:2d:19: f0:56:10:a3:1b:e8:2c:88:f4:b2:b6:a6:48:42:1a: 00:ca:1b:e0:09:d0:c2:56:ac:1a:55:ab:69:00:4e: 1c:dd:43:cb:43:c7:60:36:1b:fa:ee:43:0c:3b:11: 0a:8e:b5:80:1f:26:d9:9f:f4:75:72:b1:25:81:51: 3c:a1:14:74:e8:7e:c3:95:21:a3:15:85:05:ce:c8: ff:3d:0b:2b:c1:2a:4e:19:d9:bf:75:d8:31:14:0f: 4f:83:e3:4c:92:8d:63:d0:df:1f:c2:1c:72:54:20: fa:d0:45:3e:47:e1:36:73:7e:61:6d:a1:df:b7:36: bb:0e:9d:7d:c9:a9:d4:a2:b6:e3:5e:bb:a0:fd:ea: 71:80:a6:70:53:56:46:bb:2e:04:97:e9:a9:22:67: 73:8a:07:aa:5d:22:6a:45:4b:1e:8d:3a:9b:f0:55: 21:03:49:be:5e:e4:94:d8:cc:1e:4e:b9:8a:06:f1: 14:c9:3c:a8:22:78:cd:b7:9b:e9:45:ac:d1:20:8e: e1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:74:EF:45:08:13:B2:52:DD:E4:36:FB:D4:6C:86:A9:CD:95:67:29 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JHTvRQgTslLd5Db71GyGqc2VZyk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:4a0::/44 2a0e:97c0:c40::/44 Signature Algorithm: sha256WithRSAEncryption 42:75:60:64:32:c0:71:90:54:b1:1e:64:b1:7d:6a:f4:ed:61: 6d:81:61:98:a3:39:1f:8b:b5:ab:9c:e6:5b:4c:69:87:44:b5: 2f:d1:72:6d:d7:c0:ca:90:5b:6c:f3:1a:1d:1e:7d:aa:8f:74: 8f:f8:74:01:32:28:96:06:d5:0f:37:2d:96:ba:b3:f7:e0:05: 67:61:ac:aa:ca:ca:ef:a5:67:dd:20:cf:96:0b:12:7d:67:d9: 14:c0:fc:48:37:1e:f2:ff:a4:d4:cb:24:c0:5f:5a:1f:f4:5d: 86:e1:c4:a3:e5:6d:bb:80:d6:fc:18:5d:84:57:25:8d:dd:e5: 22:b8:06:74:4b:ac:fa:5b:64:07:8b:df:ac:f2:56:6e:b7:09: 13:4a:3b:cb:3f:2d:63:6d:49:74:87:73:a5:68:f5:1f:65:67: 2f:f8:24:b0:f0:f3:dd:b1:e2:ac:2f:df:60:d7:15:02:00:39: 87:78:72:5c:60:3e:f6:1e:71:a6:cd:b4:c5:a1:86:3e:fc:f1: d7:2d:c1:d3:6b:c1:1b:03:17:51:48:3e:0b:9d:66:cd:4c:82: 2b:be:c3:c7:c6:f0:28:1d:16:35:ef:b0:6e:a2:13:44:56:43: 62:48:46:4e:0c:e4:78:80:3d:1d:8a:32:e3:c8:50:9b:3f:38: d3:f7:77:ec -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZwa0VUIFKQBPMDuXfI2WIf2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMjAxMjAwNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDc0ZWY0NTA4MTNiMjUyZGRlNDM2ZmJkNDZjODZhOWNkOTU2NzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1t9NRGcsF/1c6gOk591PZVUEeTO4 5sA19cd87DjweR7dSEvKlpTUxcAspPvibFmQU1eU8lMlKb9mLRnwVhCjG+gsiPSy tqZIQhoAyhvgCdDCVqwaVatpAE4c3UPLQ8dgNhv67kMMOxEKjrWAHybZn/R1crEl gVE8oRR06H7DlSGjFYUFzsj/PQsrwSpOGdm/ddgxFA9Pg+NMko1j0N8fwhxyVCD6 0EU+R+E2c35hbaHftza7Dp19yanUorbjXrug/epxgKZwU1ZGuy4El+mpImdzigeq XSJqRUsejTqb8FUhA0m+XuSU2MweTrmKBvEUyTyoInjNt5vpRazRII7hgwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCR070UIE7JS3eQ2+9RshqnNlWcpMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvSkhUdlJRZ1RzbExkNURiNzFHeUdxYzJWWnlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg6XwASg AwcEKg6XwAxAMA0GCSqGSIb3DQEBCwUAA4IBAQBCdWBkMsBxkFSxHmSxfWr07WFt gWGYozkfi7WrnOZbTGmHRLUv0XJt18DKkFts8xodHn2qj3SP+HQBMiiWBtUPNy2W urP34AVnYayqysrvpWfdIM+WCxJ9Z9kUwPxINx7y/6TUyyTAX1of9F2G4cSj5W27 gNb8GF2EVyWN3eUiuAZ0S6z6W2QHi9+s8lZutwkTSjvLPy1jbUl0h3OlaPUfZWcv +CSw8PPdseKsL99g1xUCADmHeHJcYD72HnGmzbTFoYY+/PHXLcHTa8EbAxdRSD4L nWbNTIIrvsPHxvAoHRY177BuohNEVkNiSEZODOR4gD0dijLjyFCbPzjT93fs -----END CERTIFICATE-----Generated at Sun Feb 1 23:51:11 2026 by rpki-client