This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/K4sPP0zd-wUaenzgFMxgq_iZpAg.roa File: K4sPP0zd-wUaenzgFMxgq_iZpAg.roa (raw, json) Hash identifier: I//Y3Q1mYVXJmGoSLmeiS4IEy86RVGjkQo1k92C3Sho= Subject key identifier: 2B:8B:0F:3F:4C:DD:FB:05:1A:7A:7C:E0:14:CC:60:AB:F8:99:A4:08 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D4110062BF1CF725FA23ABABE7D81 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/K4sPP0zd-wUaenzgFMxgq_iZpAg.roa Signing time: Fri 02 Jan 2026 06:20:22 +0000 ROA not before: Fri 02 Jan 2026 06:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211553 IP address blocks: 2a0e:97c0:2b0::/48 maxlen: 48 2a0e:97c0:2bf::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 17:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:41:10:06:2b:f1:cf:72:5f:a2:3a:ba:be:7d:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b8b0f3f4cddfb051a7a7ce014cc60abf899a408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:aa:f3:59:5f:c3:13:c9:a4:67:79:8e:89:80: c0:58:19:a7:c1:91:57:a2:a5:05:93:31:d5:12:7e: 59:aa:07:ca:71:b8:07:ed:48:9a:29:09:05:38:72: 21:3f:ac:75:22:e4:92:9c:84:ba:89:06:73:a1:54: c2:2d:cd:90:a3:16:14:eb:3c:b4:01:23:53:f0:43: fe:f4:7b:b9:a9:f3:53:10:d4:8d:57:56:9d:42:14: e2:ff:dd:a5:f2:cf:20:9f:30:64:9b:aa:10:05:b8: 9d:c7:2f:f0:90:b4:c9:32:47:0f:7f:1a:61:f2:cf: d4:09:03:42:72:76:71:15:dc:d4:78:5c:fb:11:e6: 18:ee:10:96:24:a7:e2:63:a9:5f:21:83:ce:bf:ea: b7:42:a8:bf:c3:82:69:28:b0:46:41:55:e0:93:e6: 66:65:08:b8:6c:47:9d:9e:39:43:a7:c4:97:2c:de: bf:57:80:8b:b7:54:e0:1b:14:03:4b:8b:19:3f:0c: 1e:09:23:69:24:e7:ce:ae:32:49:a1:20:1a:f1:c5: b7:dc:b9:99:c0:42:36:57:1b:77:fe:6a:77:04:b8: 81:ab:9b:3d:9d:0d:98:e8:00:4f:18:dd:60:10:92: 1d:36:ea:fb:35:dc:a4:9e:65:11:e8:76:c0:ca:14: 93:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:8B:0F:3F:4C:DD:FB:05:1A:7A:7C:E0:14:CC:60:AB:F8:99:A4:08 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/K4sPP0zd-wUaenzgFMxgq_iZpAg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:2b0::/48 2a0e:97c0:2bf::/48 Signature Algorithm: sha256WithRSAEncryption 04:bb:fd:0d:ec:7a:05:41:16:5f:29:3f:6d:4c:ec:58:70:04: 21:96:4c:44:c4:71:64:ee:38:e7:f9:57:27:19:d4:96:13:8b: c8:f5:a8:8d:b7:cb:5f:b5:f7:5d:ad:e9:e3:1d:1f:64:89:bd: 1a:33:7f:30:16:23:20:90:02:fb:e3:fe:44:2c:5a:f5:b5:6e: 24:8f:79:05:1f:d8:78:36:d9:03:13:c6:dc:74:9c:c8:17:ae: bb:00:71:c4:5e:2c:50:5a:eb:15:ec:a1:99:28:03:50:35:03: a7:71:c2:ff:62:99:21:b4:b0:d4:19:72:bc:78:21:1a:0f:c9: 1e:4b:bd:9a:01:36:17:3f:2c:bf:6a:99:7e:94:36:da:26:4b: 45:f3:f2:45:7d:6a:55:37:81:1f:e3:f4:50:58:49:be:db:54: d0:df:66:6f:56:57:4c:d2:95:aa:5f:05:01:6f:fc:7b:c1:71: 66:8d:f8:30:1a:42:79:30:db:e8:6b:90:0e:25:82:fb:fb:9a: 97:97:04:02:a9:45:fd:72:2f:45:0f:5a:82:e6:ee:8f:54:53: f1:84:26:f9:c2:00:7e:58:7e:a6:a1:dc:8b:28:65:fb:28:b1: e4:15:1b:2a:3f:87:9a:05:ec:c6:ef:d3:16:02:0b:7e:2d:e4: 90:88:78:91 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XUEQBivxz3Jfojq6vn2BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjhiMGYzZjRjZGRmYjA1MWE3YTdjZTAxNGNjNjBhYmY4OTlhNDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qrzWV/DE8mkZ3mOiYDAWBmnwZFX oqUFkzHVEn5ZqgfKcbgH7UiaKQkFOHIhP6x1IuSSnIS6iQZzoVTCLc2QoxYU6zy0 ASNT8EP+9Hu5qfNTENSNV1adQhTi/92l8s8gnzBkm6oQBbidxy/wkLTJMkcPfxph 8s/UCQNCcnZxFdzUeFz7EeYY7hCWJKfiY6lfIYPOv+q3Qqi/w4JpKLBGQVXgk+Zm ZQi4bEednjlDp8SXLN6/V4CLt1TgGxQDS4sZPwweCSNpJOfOrjJJoSAa8cW33LmZ wEI2Vxt3/mp3BLiBq5s9nQ2Y6ABPGN1gEJIdNur7NdyknmUR6HbAyhSTeQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCuLDz9M3fsFGnp84BTMYKv4maQIMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvSzRzUFAwemQtd1VhZW56Z0ZNeGdxX2lacEFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg6XwAKw AwcAKg6XwAK/MA0GCSqGSIb3DQEBCwUAA4IBAQAEu/0N7HoFQRZfKT9tTOxYcAQh lkxExHFk7jjn+VcnGdSWE4vI9aiNt8tftfddrenjHR9kib0aM38wFiMgkAL74/5E LFr1tW4kj3kFH9h4NtkDE8bcdJzIF667AHHEXixQWusV7KGZKANQNQOnccL/Ypkh tLDUGXK8eCEaD8keS72aATYXPyy/apl+lDbaJktF8/JFfWpVN4Ef4/RQWEm+21TQ 32ZvVldM0pWqXwUBb/x7wXFmjfgwGkJ5MNvoa5AOJYL7+5qXlwQCqUX9ci9FD1qC 5u6PVFPxhCb5wgB+WH6modyLKGX7KLHkFRsqP4eaBezG79MWAgt+LeSQiHiR -----END CERTIFICATE-----Generated at Sat Jan 10 02:18:48 2026 by rpki-client