This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/N0PNd4D5Ra4exVtkkMJsZOZhZ2E.roa File: N0PNd4D5Ra4exVtkkMJsZOZhZ2E.roa (raw, json) Hash identifier: HhFUcl7dXRwr8GJSwNuFpdFKwHUYPDAsQwnOWG9Egcs= Subject key identifier: 37:43:CD:77:80:F9:45:AE:1E:C5:5B:64:90:C2:6C:64:E6:61:67:61 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CCE106A8427C99AB91693DFA3C7CC Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/N0PNd4D5Ra4exVtkkMJsZOZhZ2E.roa Signing time: Fri 02 Jan 2026 06:19:52 +0000 ROA not before: Fri 02 Jan 2026 06:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142130 IP address blocks: 2a0e:b107:1200::/48 maxlen: 48 2a0e:b107:1201::/48 maxlen: 48 2a0e:b107:1202::/48 maxlen: 48 2a0e:b107:1204::/48 maxlen: 48 2a0e:b107:120f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ce:10:6a:84:27:c9:9a:b9:16:93:df:a3:c7:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3743cd7780f945ae1ec55b6490c26c64e6616761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b3:a6:84:d8:cf:75:5a:8a:99:dc:5d:00:9c: b8:b3:4d:51:cd:b7:ef:6c:2a:94:a2:33:aa:20:2c: 2d:72:cf:b1:d3:06:5d:59:df:7c:68:58:6c:a4:2a: a7:4e:7e:cb:8d:3f:c1:3a:ee:4f:6d:7f:7f:e8:5c: c0:34:99:45:72:d1:15:70:45:6b:fe:9d:3d:26:ed: a0:7b:43:02:b9:2b:ce:66:8e:49:c7:2a:26:4e:07: 04:20:a9:5c:a7:27:b6:78:c2:ae:5c:e6:f8:79:bc: 77:9f:01:6a:a7:fc:1c:b1:6e:bf:01:d1:28:e0:e3: 6e:31:10:4e:1d:16:89:33:ba:7e:33:34:09:c5:02: 97:c1:1f:a2:a2:2d:98:39:61:c9:01:06:26:7d:0f: 89:c3:72:15:a2:6a:e1:5f:db:98:08:7c:d1:fc:fc: 2e:26:e2:d3:64:37:a8:98:e0:d8:94:64:c2:6b:9a: 69:d3:c3:3d:f8:c1:e5:16:1d:22:d0:9b:e9:4d:a9: 33:ff:9b:9d:86:10:6d:4e:de:77:23:e3:2d:91:3e: 10:75:ca:74:a4:c8:64:9c:5a:7a:ae:16:e4:0d:a7: a5:56:a9:b1:61:35:12:0e:e5:a3:90:f7:ff:b5:a7: 84:61:9f:31:db:39:8f:65:41:cd:d9:e3:12:5c:dd: 11:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:43:CD:77:80:F9:45:AE:1E:C5:5B:64:90:C2:6C:64:E6:61:67:61 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/N0PNd4D5Ra4exVtkkMJsZOZhZ2E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1200::-2a0e:b107:1202:ffff:ffff:ffff:ffff:ffff 2a0e:b107:1204::/48 2a0e:b107:120f::/48 Signature Algorithm: sha256WithRSAEncryption 44:1f:aa:6a:3a:ab:84:2f:42:8e:ac:43:d6:15:7b:76:f1:70: 99:e2:be:d0:d7:17:a0:fe:e5:e0:89:d6:1c:e7:2f:7f:1e:f0: 0c:b2:5a:c6:a5:0a:ac:b4:8d:9b:f5:f0:bc:d7:83:27:0e:09: 5c:b1:dc:aa:0a:de:3c:31:ac:8b:c8:ef:7d:14:a4:82:b4:ca: 2c:bc:48:d4:21:5b:e9:d9:07:95:7d:0f:4b:46:1c:33:c4:6d: 35:a6:75:00:fc:c4:1d:65:b5:ad:65:5c:5f:c8:7b:71:78:a6: a9:bd:23:f1:4b:39:2a:a0:26:56:1c:13:6e:ec:b7:18:7d:e7: 7e:84:42:cf:98:e7:be:fb:c9:6b:4a:fa:c8:d6:8f:93:e3:b4: 3b:22:62:3e:75:74:bb:1f:16:09:a7:e6:4c:fc:47:f9:50:13: 37:ae:76:85:e5:01:5e:9d:5c:5c:10:a9:3c:62:e4:6d:0e:52: f3:7d:b2:b4:28:23:59:63:80:b3:c8:88:78:44:67:4d:0e:21: d4:76:64:15:6c:39:b8:cf:3f:d5:ce:45:b4:47:a5:24:92:52: 67:db:97:c8:b3:72:01:7b:df:18:b5:1c:5c:4c:d8:ef:3e:41: da:4f:f0:99:4d:69:40:61:ca:4f:70:d0:0e:ad:00:b9:f2:3e: 5d:eb:cd:32 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt9XM4QaoQnyZq5FpPfo8fMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzQzY2Q3NzgwZjk0NWFlMWVjNTViNjQ5MGMyNmM2NGU2NjE2NzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrOmhNjPdVqKmdxdAJy4s01Rzbfv bCqUojOqICwtcs+x0wZdWd98aFhspCqnTn7LjT/BOu5PbX9/6FzANJlFctEVcEVr /p09Ju2ge0MCuSvOZo5JxyomTgcEIKlcpye2eMKuXOb4ebx3nwFqp/wcsW6/AdEo 4ONuMRBOHRaJM7p+MzQJxQKXwR+ioi2YOWHJAQYmfQ+Jw3IVomrhX9uYCHzR/Pwu JuLTZDeomODYlGTCa5pp08M9+MHlFh0i0JvpTakz/5udhhBtTt53I+MtkT4Qdcp0 pMhknFp6rhbkDaelVqmxYTUSDuWjkPf/taeEYZ8x2zmPZUHN2eMSXN0R0QIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFDdDzXeA+UWuHsVbZJDCbGTmYWdhMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvTjBQTmQ0RDVSYTRleFZ0a2tNSnNaT1poWjJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTArBAIAAjAlMBEDBgEqDrEH EgMHACoOsQcSAgMHACoOsQcSBAMHACoOsQcSDzANBgkqhkiG9w0BAQsFAAOCAQEA RB+qajqrhC9CjqxD1hV7dvFwmeK+0NcXoP7l4InWHOcvfx7wDLJaxqUKrLSNm/Xw vNeDJw4JXLHcqgrePDGsi8jvfRSkgrTKLLxI1CFb6dkHlX0PS0YcM8RtNaZ1APzE HWW1rWVcX8h7cXimqb0j8Us5KqAmVhwTbuy3GH3nfoRCz5jnvvvJa0r6yNaPk+O0 OyJiPnV0ux8WCafmTPxH+VATN652heUBXp1cXBCpPGLkbQ5S832ytCgjWWOAs8iI eERnTQ4h1HZkFWw5uM8/1c5FtEelJJJSZ9uXyLNyAXvfGLUcXEzY7z5B2k/wmU1p QGHKT3DQDq0AufI+XevNMg== -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:07 2026 by rpki-client