This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/M7YeizK5mOrTeeleuvxv7CsEZ5s.roa File: M7YeizK5mOrTeeleuvxv7CsEZ5s.roa (raw, json) Hash identifier: 5MtgPGgPoQzg1lpwMytFDP2DutTqtQgcwKvlL7qYaak= Subject key identifier: 33:B6:1E:8B:32:B9:98:EA:D3:79:E9:5E:BA:FC:6F:EC:2B:04:67:9B Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CF2CB83B4EB8189BAB7AB15B03317 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/M7YeizK5mOrTeeleuvxv7CsEZ5s.roa Signing time: Fri 02 Jan 2026 06:20:02 +0000 ROA not before: Fri 02 Jan 2026 06:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203145 IP address blocks: 2a06:de07:8120::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f2:cb:83:b4:eb:81:89:ba:b7:ab:15:b0:33:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33b61e8b32b998ead379e95ebafc6fec2b04679b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9e:f9:5f:4c:0b:b6:aa:a9:9c:6f:fa:7b:9a: 93:d5:95:fa:8c:c5:77:67:2f:f9:64:f6:95:05:65: bd:56:63:a4:a3:91:86:fc:25:06:43:4c:20:ad:b6: cf:19:05:14:e5:8c:12:92:ae:c9:e2:b0:e0:d0:62: a9:b8:15:2d:ec:d7:57:a3:60:66:9f:f4:f2:69:48: 76:5a:08:b8:64:f9:d8:cc:d3:c5:3b:bc:ee:8b:21: ab:3a:6a:4d:47:ba:0a:7c:ab:7e:77:6d:37:fd:6a: 82:ca:06:b9:51:31:e5:5b:7e:30:24:52:21:2d:9a: 43:5a:dc:8a:a5:ae:f8:35:98:06:a5:ee:96:85:29: 66:cb:d9:a1:37:7e:99:ab:df:d3:fc:88:52:f2:37: a4:b8:c7:e2:9f:4f:99:f0:bb:66:c1:cd:51:90:2b: d8:34:f3:a1:2d:94:a7:cb:98:a7:30:59:27:79:ef: de:10:d5:19:93:1c:bb:c7:5d:63:e0:17:23:7f:e3: 2b:93:5d:b9:5d:fa:9d:43:a6:a4:fa:ff:4e:50:c4: 44:d7:20:31:44:32:68:5d:2b:4b:30:58:33:66:1c: 65:7c:e3:8f:37:3f:a8:04:04:7f:ed:55:09:6b:9d: 96:56:8f:0b:d5:09:b5:1b:6c:b2:df:08:07:7c:b5: 34:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B6:1E:8B:32:B9:98:EA:D3:79:E9:5E:BA:FC:6F:EC:2B:04:67:9B X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/M7YeizK5mOrTeeleuvxv7CsEZ5s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:de07:8120::/44 Signature Algorithm: sha256WithRSAEncryption 24:95:cc:dc:d1:72:1b:fa:18:fd:8a:82:3c:e9:57:1e:43:23: 5a:2b:28:23:4d:06:cc:82:f5:70:3d:18:ff:f5:43:ad:24:be: 71:0f:e3:61:cf:5f:64:ad:69:9c:61:c9:7a:35:12:34:2d:83: 1c:a8:68:ec:1c:3a:dc:ab:4b:c1:0f:2b:bb:79:cf:2b:20:18: b9:bb:24:b3:cd:7c:ea:5d:a0:1f:3d:44:fe:b8:00:8b:46:23: 9a:8b:59:c9:88:53:27:8c:d2:23:ee:af:bd:44:c8:42:d1:63: 17:fd:b1:17:97:e7:8d:f1:22:2a:73:9a:ea:1c:3a:c2:c9:1b: b9:36:e5:83:d2:a3:5a:aa:66:0a:19:6d:e5:df:ab:0e:f3:c6: 32:30:06:37:de:63:b0:85:46:8a:ed:f1:fb:f7:3f:01:20:ef: 23:b8:cf:f5:54:95:aa:19:3c:e9:8a:1e:f1:4c:6b:b1:7b:e1: a2:ae:21:b0:71:26:a8:d2:5f:75:04:12:7d:77:af:4a:45:72: 9a:f7:d5:00:74:7f:f6:91:2c:0b:96:f0:7a:5b:5b:60:cd:d6: 8a:12:bb:8e:41:5a:cb:62:3b:eb:e9:5d:5a:c0:ac:a4:60:01: 20:fd:40:0b:a8:15:62:8a:53:2a:88:c4:db:1b:f0:08:c1:b0: 71:0d:4e:a0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XPLLg7TrgYm6t6sVsDMXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2I2MWU4YjMyYjk5OGVhZDM3OWU5NWViYWZjNmZlYzJiMDQ2NzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ75X0wLtqqpnG/6e5qT1ZX6jMV3 Zy/5ZPaVBWW9VmOko5GG/CUGQ0wgrbbPGQUU5YwSkq7J4rDg0GKpuBUt7NdXo2Bm n/TyaUh2Wgi4ZPnYzNPFO7zuiyGrOmpNR7oKfKt+d203/WqCyga5UTHlW34wJFIh LZpDWtyKpa74NZgGpe6WhSlmy9mhN36Zq9/T/IhS8jekuMfin0+Z8Ltmwc1RkCvY NPOhLZSny5inMFknee/eENUZkxy7x11j4Bcjf+Mrk125XfqdQ6ak+v9OUMRE1yAx RDJoXStLMFgzZhxlfOOPNz+oBAR/7VUJa52WVo8L1Qm1G2yy3wgHfLU0mwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDO2HosyuZjq03npXrr8b+wrBGebMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvTTdZZWl6SzVtT3JUZWVsZXV2eHY3Q3NFWjVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgbeB4Eg MA0GCSqGSIb3DQEBCwUAA4IBAQAklczc0XIb+hj9ioI86VceQyNaKygjTQbMgvVw PRj/9UOtJL5xD+Nhz19krWmcYcl6NRI0LYMcqGjsHDrcq0vBDyu7ec8rIBi5uySz zXzqXaAfPUT+uACLRiOai1nJiFMnjNIj7q+9RMhC0WMX/bEXl+eN8SIqc5rqHDrC yRu5NuWD0qNaqmYKGW3l36sO88YyMAY33mOwhUaK7fH79z8BIO8juM/1VJWqGTzp ih7xTGuxe+GiriGwcSao0l91BBJ9d69KRXKa99UAdH/2kSwLlvB6W1tgzdaKEruO QVrLYjvr6V1awKykYAEg/UALqBViilMqiMTbG/AIwbBxDU6g -----END CERTIFICATE-----Generated at Fri Jan 9 13:12:05 2026 by rpki-client