This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LEJhhqrBwtfdJrj-TaS6DhnQYxE.roa File: LEJhhqrBwtfdJrj-TaS6DhnQYxE.roa (raw, json) Hash identifier: PxBhZLO4W8hWqwIDk0VYgimXkYzBjz+FdVICcMW8wgQ= Subject key identifier: 2C:42:61:86:AA:C1:C2:D7:DD:26:B8:FE:4D:A4:BA:0E:19:D0:63:11 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D2ECEF111623E1C26AC831CE798B6 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LEJhhqrBwtfdJrj-TaS6DhnQYxE.roa Signing time: Fri 02 Jan 2026 06:20:17 +0000 ROA not before: Fri 02 Jan 2026 06:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210888 IP address blocks: 2a10:2f00:173::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 17:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:2e:ce:f1:11:62:3e:1c:26:ac:83:1c:e7:98:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c426186aac1c2d7dd26b8fe4da4ba0e19d06311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:96:6f:01:e5:49:2b:d4:8a:58:10:09:cf:e3: 14:41:33:6c:78:61:bd:fd:0f:a1:c7:cb:38:82:a3: 08:2c:81:12:ed:ff:19:ea:6b:b7:c8:53:d9:26:08: 32:98:23:87:2a:41:6a:52:39:d7:51:90:95:86:0d: 48:55:c6:5a:ba:a4:55:e9:eb:c4:8c:17:3a:87:2f: e2:bc:5c:c0:b5:fd:90:11:2c:9d:e8:12:0a:39:08: 6c:ae:4e:00:f6:11:15:61:57:c8:8a:74:50:68:e6: 71:05:ff:50:ae:33:e0:ac:13:7c:83:d2:b8:00:75: 50:db:67:27:55:a1:d3:1b:41:45:f0:12:10:9b:60: ef:e1:c9:bf:05:47:10:e3:3a:15:96:c2:70:42:ff: 11:df:69:eb:b8:4d:45:5c:3e:0f:42:a4:10:16:f5: 2b:5c:56:0a:37:bf:99:7b:ac:d1:7c:88:af:05:18: f8:36:71:56:02:14:d7:f6:11:c5:2e:81:df:bf:e4: 64:16:1b:e7:98:d3:53:1c:46:4b:e3:b9:e1:6a:73: ff:a7:d1:fc:c9:9a:9b:1d:a6:63:81:5b:2d:26:29: 04:84:ba:a1:5d:de:25:80:ea:d8:cb:39:64:77:98: 0c:a8:a5:8f:32:94:6a:c5:33:6d:70:78:6d:9c:c6: 5e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:42:61:86:AA:C1:C2:D7:DD:26:B8:FE:4D:A4:BA:0E:19:D0:63:11 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LEJhhqrBwtfdJrj-TaS6DhnQYxE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:2f00:173::/48 Signature Algorithm: sha256WithRSAEncryption b2:15:3b:d7:43:0f:06:f3:44:93:ae:a1:1e:14:82:11:1a:b2: dc:a6:20:c8:cd:1f:11:c1:29:cb:84:25:9c:61:2f:eb:42:47: 39:dc:c7:bd:de:ec:db:f1:eb:8c:94:a0:c1:99:97:cd:17:5b: fe:a4:20:71:be:38:9d:e8:76:4b:dc:7e:9f:37:f5:4b:6b:26: 8f:a5:b9:d3:d9:80:1e:7b:86:71:45:d7:8e:23:5f:91:e4:1e: f9:9f:39:f2:45:7c:ab:0f:74:90:31:1e:2a:ce:8d:00:fc:9d: 49:2d:8a:33:3f:fd:4e:57:8c:97:6e:c8:7c:6b:ae:d9:d6:40: ec:58:45:51:3b:ae:ab:db:a6:15:08:a7:26:2c:b8:d9:7e:55: 9d:e1:ef:ba:c6:0b:f3:97:a0:f9:4f:e3:e0:89:f3:66:24:5c: 3c:20:ea:e6:50:5b:7c:af:76:15:2f:e6:de:04:21:b0:a0:d7: 36:31:c5:e9:c9:a2:ce:74:01:d8:dd:da:fd:3e:9d:f5:92:a5: 88:86:74:52:7f:13:a3:74:6b:07:4f:b5:1d:88:c5:d9:2a:30: 37:db:a6:09:49:6a:c8:3a:5f:a6:73:4f:d5:80:80:eb:05:e0: 60:66:54:f5:0d:bf:a5:ed:75:38:7d:e8:5f:48:92:83:18:e6: db:37:d6:d6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XS7O8RFiPhwmrIMc55i2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzQyNjE4NmFhYzFjMmQ3ZGQyNmI4ZmU0ZGE0YmEwZTE5ZDA2MzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pZvAeVJK9SKWBAJz+MUQTNseGG9 /Q+hx8s4gqMILIES7f8Z6mu3yFPZJggymCOHKkFqUjnXUZCVhg1IVcZauqRV6evE jBc6hy/ivFzAtf2QESyd6BIKOQhsrk4A9hEVYVfIinRQaOZxBf9QrjPgrBN8g9K4 AHVQ22cnVaHTG0FF8BIQm2Dv4cm/BUcQ4zoVlsJwQv8R32nruE1FXD4PQqQQFvUr XFYKN7+Ze6zRfIivBRj4NnFWAhTX9hHFLoHfv+RkFhvnmNNTHEZL47nhanP/p9H8 yZqbHaZjgVstJikEhLqhXd4lgOrYyzlkd5gMqKWPMpRqxTNtcHhtnMZesQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCxCYYaqwcLX3Sa4/k2kug4Z0GMRMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvTEVKaGhxckJ3dGZkSnJqLVRhUzZEaG5RWXhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAvAAFz MA0GCSqGSIb3DQEBCwUAA4IBAQCyFTvXQw8G80STrqEeFIIRGrLcpiDIzR8RwSnL hCWcYS/rQkc53Me93uzb8euMlKDBmZfNF1v+pCBxvjid6HZL3H6fN/VLayaPpbnT 2YAee4ZxRdeOI1+R5B75nznyRXyrD3SQMR4qzo0A/J1JLYozP/1OV4yXbsh8a67Z 1kDsWEVRO66r26YVCKcmLLjZflWd4e+6xgvzl6D5T+PgifNmJFw8IOrmUFt8r3YV L+beBCGwoNc2McXpyaLOdAHY3dr9Pp31kqWIhnRSfxOjdGsHT7UdiMXZKjA326YJ SWrIOl+mc0/VgIDrBeBgZlT1Db+l7XU4fehfSJKDGObbN9bW -----END CERTIFICATE-----Generated at Sat Jan 10 02:19:31 2026 by rpki-client