This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/M5IztYuhTA9tF3FxZrqLc9TJpjQ.roa File: M5IztYuhTA9tF3FxZrqLc9TJpjQ.roa (raw, json) Hash identifier: Pf/cVH/AC1JOPh3ZGl0q1vK5SAEZdxkCj7mB0RcTszw= Subject key identifier: 33:92:33:B5:8B:A1:4C:0F:6D:17:71:71:66:BA:8B:73:D4:C9:A6:34 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D74D36371C3B631CBBFDADF90A52B Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/M5IztYuhTA9tF3FxZrqLc9TJpjQ.roa Signing time: Fri 02 Jan 2026 06:20:35 +0000 ROA not before: Fri 02 Jan 2026 06:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215168 IP address blocks: 2a0e:97c0:7c0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:74:d3:63:71:c3:b6:31:cb:bf:da:df:90:a5:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=339233b58ba14c0f6d17717166ba8b73d4c9a634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3e:33:ce:c1:c5:28:01:3a:93:23:a0:e1:34: 7e:ca:61:1f:18:df:08:14:8f:53:3e:d6:9d:d9:10: 68:42:70:09:be:8d:89:3e:fe:4d:57:d6:10:b4:de: ee:29:17:c9:aa:7b:88:66:5f:f7:a3:55:7a:c6:c4: 60:88:92:c4:76:4d:d2:0d:a5:d9:7e:bb:13:91:52: 40:eb:e7:cf:35:d4:f2:1c:7e:c7:15:e1:15:98:44: 04:d1:dc:ec:4b:f3:bd:2c:c0:aa:e1:66:53:06:a9: 8c:8b:4f:20:df:be:63:d9:e7:7a:74:bb:8b:87:77: 56:29:be:61:8f:8d:2e:f5:57:c7:7a:f6:8b:d7:8f: 52:9c:dd:bf:ba:90:45:76:14:90:00:66:4f:1b:5f: 99:2a:cd:f7:89:63:44:94:ee:16:24:34:c6:2d:af: 7c:4c:fc:d5:8b:5e:1f:d1:b2:48:b6:b0:62:ba:8d: df:6a:9c:95:46:7c:f7:75:fc:85:27:c6:86:e9:17: 47:4e:b3:bd:03:2a:03:1e:12:7f:10:23:1a:22:4a: cd:3b:7c:e4:45:9b:3b:09:64:d1:e5:8b:e5:3e:4f: d2:5f:ac:c3:af:de:b2:ba:5d:d4:ac:f2:63:3e:18: bd:d1:1e:fd:90:52:f6:e6:59:e5:f2:00:9c:38:90: be:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:92:33:B5:8B:A1:4C:0F:6D:17:71:71:66:BA:8B:73:D4:C9:A6:34 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/M5IztYuhTA9tF3FxZrqLc9TJpjQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:7c0::/44 Signature Algorithm: sha256WithRSAEncryption c0:87:1f:e6:91:43:4a:ae:8d:65:ad:8b:fd:ab:dd:ec:f5:2d: 7a:b5:da:1b:8a:2a:66:60:99:db:e3:68:94:4f:a7:10:34:9a: 37:9b:1e:51:eb:bf:ee:e1:56:ed:f3:33:10:bc:39:21:64:67: dc:38:87:58:e7:ac:e2:e4:b4:19:2d:47:c1:17:a6:b3:1f:bc: 3b:c5:ff:00:d3:9a:19:fd:07:d7:1f:b1:a2:eb:70:fc:6c:36: 00:02:d5:16:9f:68:9e:d1:bd:7b:11:7b:8e:30:59:80:bd:f6: b6:62:50:84:26:c1:e9:1f:6e:7c:7f:31:7b:1d:22:6d:cc:14: 7b:a7:ae:64:5b:56:f3:07:52:18:33:02:57:0e:f6:74:e7:dc: ac:1c:65:1d:fd:05:3f:47:47:c6:e2:4b:cc:bf:8d:08:3d:d1: e8:fc:b1:11:89:c3:ea:d5:e0:55:44:e4:0d:7e:dc:ca:1f:56: 1f:8f:e6:38:e6:05:bd:8f:77:3e:93:c0:8f:ea:a0:f3:5f:3e: 61:25:da:7b:ac:1f:4f:0f:be:2f:7b:a4:db:77:f1:95:3b:1c: 6e:b9:16:8c:f8:a5:c9:4f:4f:eb:b6:72:fd:31:45:34:3e:92: 0d:34:e3:44:cb:3d:39:c8:bb:2b:b4:f4:45:21:8d:66:a6:1c: e9:4b:b4:f6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XXTTY3HDtjHLv9rfkKUrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzkyMzNiNThiYTE0YzBmNmQxNzcxNzE2NmJhOGI3M2Q0YzlhNjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyD4zzsHFKAE6kyOg4TR+ymEfGN8I FI9TPtad2RBoQnAJvo2JPv5NV9YQtN7uKRfJqnuIZl/3o1V6xsRgiJLEdk3SDaXZ frsTkVJA6+fPNdTyHH7HFeEVmEQE0dzsS/O9LMCq4WZTBqmMi08g375j2ed6dLuL h3dWKb5hj40u9VfHevaL149SnN2/upBFdhSQAGZPG1+ZKs33iWNElO4WJDTGLa98 TPzVi14f0bJItrBiuo3fapyVRnz3dfyFJ8aG6RdHTrO9AyoDHhJ/ECMaIkrNO3zk RZs7CWTR5YvlPk/SX6zDr96yul3UrPJjPhi90R79kFL25lnl8gCcOJC+FwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDOSM7WLoUwPbRdxcWa6i3PUyaY0MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvTTVJenRZdWhUQTl0RjNGeFpycUxjOVRKcGpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAfA MA0GCSqGSIb3DQEBCwUAA4IBAQDAhx/mkUNKro1lrYv9q93s9S16tdobiipmYJnb 42iUT6cQNJo3mx5R67/u4Vbt8zMQvDkhZGfcOIdY56zi5LQZLUfBF6azH7w7xf8A 05oZ/QfXH7Gi63D8bDYAAtUWn2ie0b17EXuOMFmAvfa2YlCEJsHpH258fzF7HSJt zBR7p65kW1bzB1IYMwJXDvZ059ysHGUd/QU/R0fG4kvMv40IPdHo/LERicPq1eBV ROQNftzKH1Yfj+Y45gW9j3c+k8CP6qDzXz5hJdp7rB9PD74ve6Tbd/GVOxxuuRaM +KXJT0/rtnL9MUU0PpINNONEyz05yLsrtPRFIY1mphzpS7T2 -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:48 2026 by rpki-client