This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Kwq0ZMqWeOUEiB9EeKixnDnGqT0.roa File: Kwq0ZMqWeOUEiB9EeKixnDnGqT0.roa (raw, json) Hash identifier: /cIQrR70ujmBJgFowj7YKu95taCd/2Ur2iSjO/BY0IA= Subject key identifier: 2B:0A:B4:64:CA:96:78:E5:04:88:1F:44:78:A8:B1:9C:39:C6:A9:3D Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019AAFF4F170788F5F476BE965BB1AE8F62E Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Kwq0ZMqWeOUEiB9EeKixnDnGqT0.roa Signing time: Sun 23 Nov 2025 09:04:16 +0000 ROA not before: Sun 23 Nov 2025 09:04:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203579 IP address blocks: 2a0e:97c0:890::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 25 Nov 2025 12:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:af:f4:f1:70:78:8f:5f:47:6b:e9:65:bb:1a:e8:f6:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Nov 23 09:04:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2b0ab464ca9678e504881f4478a8b19c39c6a93d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:48:7c:ce:af:99:49:a9:48:6d:c1:f2:38:b7: 91:2f:e3:90:89:32:55:18:6e:38:66:ce:88:67:5d: f2:98:8f:63:e1:b4:34:72:96:cc:f3:21:d2:23:73: d4:a6:f5:cb:ae:9d:6a:32:b0:44:f1:8f:c6:76:9e: 9c:3d:bf:dd:dd:20:94:9d:0e:a4:e1:c2:12:e0:c3: f5:92:8e:3a:6f:c2:24:09:ee:7d:1f:6f:46:29:bf: fa:4f:90:58:91:cc:c8:f5:c5:9c:dd:99:23:60:41: 4f:a2:47:a2:09:d1:a4:fe:78:35:f6:01:a4:fd:15: ae:e0:ba:49:d4:2f:75:a6:98:08:71:19:46:4c:28: d3:9e:14:7b:0f:b1:f5:93:0d:7d:8b:05:c0:c8:94: 28:b2:c3:b7:42:ce:1f:b6:e4:13:ca:4d:4d:c3:23: b4:6d:f9:c6:e5:23:1b:de:95:f1:a3:6d:41:97:c5: e5:69:5f:9c:62:b9:a0:28:dc:6d:19:c5:65:cc:47: ec:58:a4:28:88:5b:5f:08:0b:72:db:64:52:fc:92: 01:2a:87:fa:31:05:3d:10:5a:39:f1:f8:90:a2:76: 64:b7:8d:a3:14:63:e8:bf:bb:c1:71:78:d8:eb:51: d4:2e:c8:d1:b4:05:ec:ee:34:c5:bb:68:d8:74:d9: a0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:0A:B4:64:CA:96:78:E5:04:88:1F:44:78:A8:B1:9C:39:C6:A9:3D X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Kwq0ZMqWeOUEiB9EeKixnDnGqT0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:890::/44 Signature Algorithm: sha256WithRSAEncryption 24:dd:a2:d1:7e:bb:8b:a0:57:e3:b4:ad:aa:88:f1:d0:3a:de: 7e:a0:4c:0d:f4:eb:5a:6a:0a:bb:17:af:54:4e:86:eb:42:a8: 63:0d:08:a2:99:16:03:6b:43:55:ac:e4:77:41:97:5d:6b:ef: bb:09:bc:4b:2e:a1:fb:3e:bf:45:b8:82:11:28:e7:80:e6:1f: 58:ba:51:ea:47:81:a6:b3:6d:40:da:8f:fd:ce:e8:98:47:1b: 89:65:d7:24:be:72:a2:e6:88:42:8d:c9:65:0f:04:b9:48:c2: 9e:73:8a:c0:9f:7c:97:75:19:30:18:4b:66:d2:66:60:c5:66: 22:e6:2e:60:8b:18:8d:99:97:22:f2:45:03:29:c9:91:6c:fa: 48:20:2f:23:e7:bd:f9:89:93:26:97:7d:66:2a:0f:f4:a7:b5: 42:f5:ee:0e:d5:6b:45:04:b1:1b:58:58:9c:bb:34:cf:71:51: 1a:69:5b:2d:6f:65:46:76:36:43:2c:52:ba:6c:06:fc:39:ee: 3c:ba:60:b3:41:b3:58:d0:96:e0:2c:e3:63:6a:ee:08:73:1a: 7f:86:f1:35:bd:e5:80:09:1f:ad:47:e2:ec:0f:c2:66:50:c3: 7c:b0:a5:b3:c5:c0:c0:b5:52:c0:22:c7:ce:71:32:b5:3d:55: 8b:ff:3c:d4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZqv9PFweI9fR2vpZbsa6PYuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjUxMTIzMDkwNDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjBhYjQ2NGNhOTY3OGU1MDQ4ODFmNDQ3OGE4YjE5YzM5YzZhOTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEh8zq+ZSalIbcHyOLeRL+OQiTJV GG44Zs6IZ13ymI9j4bQ0cpbM8yHSI3PUpvXLrp1qMrBE8Y/Gdp6cPb/d3SCUnQ6k 4cIS4MP1ko46b8IkCe59H29GKb/6T5BYkczI9cWc3ZkjYEFPokeiCdGk/ng19gGk /RWu4LpJ1C91ppgIcRlGTCjTnhR7D7H1kw19iwXAyJQossO3Qs4ftuQTyk1NwyO0 bfnG5SMb3pXxo21Bl8XlaV+cYrmgKNxtGcVlzEfsWKQoiFtfCAty22RS/JIBKof6 MQU9EFo58fiQonZkt42jFGPov7vBcXjY61HULsjRtAXs7jTFu2jYdNmgtwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCsKtGTKlnjlBIgfRHiosZw5xqk9MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvS3dxMFpNcVdlT1VFaUI5RWVLaXhuRG5HcVQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAiQ MA0GCSqGSIb3DQEBCwUAA4IBAQAk3aLRfruLoFfjtK2qiPHQOt5+oEwN9Otaagq7 F69UTobrQqhjDQiimRYDa0NVrOR3QZdda++7CbxLLqH7Pr9FuIIRKOeA5h9YulHq R4Gms21A2o/9zuiYRxuJZdckvnKi5ohCjcllDwS5SMKec4rAn3yXdRkwGEtm0mZg xWYi5i5gixiNmZci8kUDKcmRbPpIIC8j5735iZMml31mKg/0p7VC9e4O1WtFBLEb WFicuzTPcVEaaVstb2VGdjZDLFK6bAb8Oe48umCzQbNY0JbgLONjau4Icxp/hvE1 veWACR+tR+LsD8JmUMN8sKWzxcDAtVLAIsfOcTK1PVWL/zzU -----END CERTIFICATE-----Generated at Mon Nov 24 19:36:33 2025 by rpki-client