This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Jdh3KWF7dLUp7vQ9X399ziPo99U.roa File: Jdh3KWF7dLUp7vQ9X399ziPo99U.roa (raw, json) Hash identifier: 8pyuA+cmIcDRJPwCHqq7Pvf/XA/zRSE7xmFZWPwlXXk= Subject key identifier: 25:D8:77:29:61:7B:74:B5:29:EE:F4:3D:5F:7F:7D:CE:23:E8:F7:D5 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D2E9CA7B852979D869180E2EADFEA Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Jdh3KWF7dLUp7vQ9X399ziPo99U.roa Signing time: Fri 02 Jan 2026 06:20:17 +0000 ROA not before: Fri 02 Jan 2026 06:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210864 IP address blocks: 2a0e:b107:1a00::/48 maxlen: 48 2a0e:b107:1a01::/48 maxlen: 48 2a0e:b107:1a02::/48 maxlen: 48 2a0e:b107:1a03::/48 maxlen: 48 2a0e:b107:1a04::/48 maxlen: 48 2a0e:b107:1a05::/48 maxlen: 48 2a0e:b107:1a06::/48 maxlen: 48 2a0e:b107:1a07::/48 maxlen: 48 2a0e:b107:1a08::/48 maxlen: 48 2a0e:b107:1a09::/48 maxlen: 48 2a0e:b107:1a0a::/48 maxlen: 48 2a0e:b107:1a0b::/48 maxlen: 48 2a0e:b107:1a0c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 17:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:2e:9c:a7:b8:52:97:9d:86:91:80:e2:ea:df:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25d87729617b74b529eef43d5f7f7dce23e8f7d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1a:df:7f:ff:30:a0:94:31:f3:d4:10:db:aa: ca:bd:27:11:60:00:31:3c:8d:91:6a:44:d4:cb:58: 42:41:75:45:bb:d6:60:58:20:a8:a3:dc:56:09:56: 66:44:0c:d7:6e:d5:03:66:87:4e:d1:23:b8:b8:08: 63:0a:6b:b5:86:5d:ad:49:9b:2b:24:bf:9a:58:41: 1d:f2:ca:60:29:f1:e1:dd:a8:e4:93:7a:f7:06:3a: b4:d8:31:1b:44:e2:df:82:0d:88:8b:16:ba:5f:f7: 7c:ff:2c:b7:c4:38:5a:4f:bd:03:16:fe:eb:61:b7: 94:11:3a:ed:88:30:04:34:93:32:63:5a:1b:aa:54: e8:4c:4d:dd:00:df:b1:22:3f:df:7c:0f:ac:3b:1c: 91:ed:2b:23:c6:c8:45:1d:b8:bf:6f:cc:01:74:5c: f1:12:44:2d:af:57:91:be:c6:51:54:b9:82:b4:70: 0e:1d:c9:bd:3e:cc:7e:37:59:b9:e7:73:ad:14:f0: 42:2d:05:7b:fe:59:69:5c:bf:93:82:79:80:fd:b0: 2f:94:16:55:a6:1e:8b:2d:6d:c6:7a:bf:bd:27:24: dd:1a:df:e8:cd:73:32:b0:be:cf:07:20:76:fb:f8: 3b:2e:04:2e:90:34:de:85:a0:d9:46:7e:64:c4:ff: 85:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D8:77:29:61:7B:74:B5:29:EE:F4:3D:5F:7F:7D:CE:23:E8:F7:D5 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Jdh3KWF7dLUp7vQ9X399ziPo99U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1a00::-2a0e:b107:1a0c:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 88:b7:f6:f1:e1:95:be:0b:90:32:48:02:9a:8e:51:17:42:1f: 17:8d:5b:47:90:45:ee:71:be:e1:d7:df:d1:a3:1c:f4:80:20: 7c:86:a4:00:d4:ac:74:e9:f1:5e:23:ae:8a:c9:3c:e9:a5:75: 65:67:f5:69:f4:83:da:18:77:f6:6a:52:3a:74:ef:03:a1:27: 88:79:98:6f:9b:46:8b:d9:9d:e7:f9:78:e3:3c:35:7f:02:06: b7:e2:81:3c:a0:30:b4:87:40:a9:1e:6f:55:94:bd:c5:61:78: c6:21:b0:15:bf:d5:97:ed:57:ad:b3:e8:3f:5d:3a:cd:e0:45: 7b:54:e7:4e:c8:a5:8b:f9:7c:40:55:72:20:e4:1d:ce:bf:ad: f6:1b:89:3a:9c:12:03:f7:99:32:af:ea:33:51:72:96:e7:0e: e5:a7:1d:5a:fc:e6:f7:83:76:41:30:34:56:6e:a1:92:66:a4: 44:60:8f:76:fc:df:e6:cb:95:e5:a7:82:98:c6:56:15:a8:8d: d3:6f:59:75:00:d7:ec:6e:91:be:ca:4a:ad:25:c8:6d:5f:39: 67:16:3b:73:0f:8e:c9:9b:9b:d7:a0:8f:44:3e:17:ac:b3:93: c2:9e:30:3c:30:54:e9:24:31:bc:11:43:be:73:e6:c1:83:11: 65:f4:73:88 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt9XS6cp7hSl52GkYDi6t/qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWQ4NzcyOTYxN2I3NGI1MjllZWY0M2Q1ZjdmN2RjZTIzZThmN2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxrff/8woJQx89QQ26rKvScRYAAx PI2RakTUy1hCQXVFu9ZgWCCoo9xWCVZmRAzXbtUDZodO0SO4uAhjCmu1hl2tSZsr JL+aWEEd8spgKfHh3ajkk3r3Bjq02DEbROLfgg2Iixa6X/d8/yy3xDhaT70DFv7r YbeUETrtiDAENJMyY1obqlToTE3dAN+xIj/ffA+sOxyR7SsjxshFHbi/b8wBdFzx EkQtr1eRvsZRVLmCtHAOHcm9Psx+N1m553OtFPBCLQV7/llpXL+TgnmA/bAvlBZV ph6LLW3Ger+9JyTdGt/ozXMysL7PByB2+/g7LgQukDTehaDZRn5kxP+FxQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFCXYdylhe3S1Ke70PV9/fc4j6PfVMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvSmRoM0tXRjdkTFVwN3ZROVgzOTl6aVBvOTlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATMBEDBgEqDrEH GgMHACoOsQcaDDANBgkqhkiG9w0BAQsFAAOCAQEAiLf28eGVvguQMkgCmo5RF0If F41bR5BF7nG+4dff0aMc9IAgfIakANSsdOnxXiOuisk86aV1ZWf1afSD2hh39mpS OnTvA6EniHmYb5tGi9md5/l44zw1fwIGt+KBPKAwtIdAqR5vVZS9xWF4xiGwFb/V l+1XrbPoP106zeBFe1TnTsili/l8QFVyIOQdzr+t9huJOpwSA/eZMq/qM1FylucO 5acdWvzm94N2QTA0Vm6hkmakRGCPdvzf5suV5aeCmMZWFaiN029ZdQDX7G6RvspK rSXIbV85ZxY7cw+OyZub16CPRD4XrLOTwp4wPDBU6SQxvBFDvnPmwYMRZfRziA== -----END CERTIFICATE-----Generated at Sat Jan 10 02:31:47 2026 by rpki-client