This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/P2DwwB8MUsXWp9yBbVz8cDWwVak.roa File: P2DwwB8MUsXWp9yBbVz8cDWwVak.roa (raw, json) Hash identifier: 6kL0sgMbnEacv3HFLej67gumdPMERw3W3FAd70QXjs8= Subject key identifier: 3F:60:F0:C0:1F:0C:52:C5:D6:A7:DC:81:6D:5C:FC:70:35:B0:55:A9 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D5513453CA0EC055736B001892C99 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/P2DwwB8MUsXWp9yBbVz8cDWwVak.roa Signing time: Fri 02 Jan 2026 06:20:27 +0000 ROA not before: Fri 02 Jan 2026 06:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212767 IP address blocks: 2a0e:b107:cc8::/48 maxlen: 48 2a10:2f00:14a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:55:13:45:3c:a0:ec:05:57:36:b0:01:89:2c:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f60f0c01f0c52c5d6a7dc816d5cfc7035b055a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2c:f4:1d:f7:27:d9:13:fd:b8:1d:f4:79:3c: 34:6c:2e:ff:ca:50:0d:be:47:df:67:79:83:1d:02: e5:43:12:e6:cb:75:3d:81:09:9f:e2:8b:b2:e4:19: 46:bb:f0:37:4d:1b:7b:e8:e7:0b:40:54:1f:59:32: dd:b8:b4:ef:ba:40:0d:77:4c:cd:cf:45:2d:70:34: b3:2d:a3:44:c3:2f:02:56:17:1f:5c:1c:10:79:42: 93:01:74:a2:32:88:2e:7e:c7:42:f9:3d:c7:6c:b4: 65:c1:dc:a6:75:8b:bf:cb:76:00:d8:04:6b:0d:1c: 6e:04:05:7f:64:3e:f9:58:f9:fd:7f:2e:7c:09:b9: e4:bd:f4:8e:9a:44:ce:66:84:af:5d:99:9a:78:c1: 6d:6d:50:59:8b:9c:83:17:42:d0:d0:0c:31:c2:16: 6e:89:26:e5:d6:c1:6e:83:ba:b8:31:9e:53:cf:6a: 6d:9f:29:80:55:f7:ec:0d:f1:7e:44:7f:2e:b9:24: 0f:ec:0a:63:3d:b4:95:66:ef:50:11:8f:8c:c3:e7: ad:b6:90:ac:d8:72:68:e9:e8:e8:8d:71:ee:31:a0: 88:ce:26:e0:80:c4:a1:83:6d:18:7f:6a:7e:ba:51: 34:a4:18:59:8f:bd:ed:dd:1a:d5:7a:52:b5:f3:06: 6d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:60:F0:C0:1F:0C:52:C5:D6:A7:DC:81:6D:5C:FC:70:35:B0:55:A9 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/P2DwwB8MUsXWp9yBbVz8cDWwVak.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:cc8::/48 2a10:2f00:14a::/48 Signature Algorithm: sha256WithRSAEncryption 82:84:6f:ee:d7:31:f3:0b:ad:b2:ca:7c:44:c0:cc:87:4c:79: d2:f6:66:27:1f:34:9b:95:a5:4d:56:aa:e3:6c:07:cf:f5:84: 06:85:16:14:e7:fc:ac:4a:0a:3e:4c:1f:40:3e:ff:f2:42:24: 48:72:af:30:22:d1:fe:08:b7:cd:6b:78:f9:71:ca:ec:7b:30: 97:dc:b8:12:76:94:97:bd:12:b8:df:f7:d3:24:68:e7:ca:19: 5c:f8:b8:cc:43:53:3a:e0:72:50:b2:e2:61:5b:20:9f:3d:40: d4:ba:e9:e5:dc:0e:c5:e7:96:81:f9:6c:cf:8a:10:b2:71:5f: 4d:b9:f7:c4:3e:ae:75:d1:d2:1e:7b:ed:10:a8:dc:dd:20:3f: a0:31:f6:4e:8d:95:cc:25:2f:48:26:8a:0e:c8:e1:40:cb:e3: 7c:83:7d:27:b6:2e:e5:95:8a:10:b3:e7:13:a6:6d:9b:69:47: 08:76:68:d0:66:d4:9b:ad:a1:ff:0d:a6:4a:ef:2f:68:25:ad: ee:40:64:ca:ed:9e:1f:e4:9b:36:4f:a9:d2:51:5f:7a:51:63: 83:be:dd:9f:29:14:31:4e:f9:36:fa:35:36:3c:de:cb:d5:7c: 2f:2d:df:b2:f1:62:0e:dd:e9:ed:54:27:e1:fd:ab:96:fb:e6: db:92:89:9b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XVUTRTyg7AVXNrABiSyZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjYwZjBjMDFmMGM1MmM1ZDZhN2RjODE2ZDVjZmM3MDM1YjA1NWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryz0Hfcn2RP9uB30eTw0bC7/ylAN vkffZ3mDHQLlQxLmy3U9gQmf4ouy5BlGu/A3TRt76OcLQFQfWTLduLTvukANd0zN z0UtcDSzLaNEwy8CVhcfXBwQeUKTAXSiMogufsdC+T3HbLRlwdymdYu/y3YA2ARr DRxuBAV/ZD75WPn9fy58CbnkvfSOmkTOZoSvXZmaeMFtbVBZi5yDF0LQ0AwxwhZu iSbl1sFug7q4MZ5Tz2ptnymAVffsDfF+RH8uuSQP7ApjPbSVZu9QEY+Mw+ettpCs 2HJo6ejojXHuMaCIzibggMShg20Yf2p+ulE0pBhZj73t3RrVelK18wZtzQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFD9g8MAfDFLF1qfcgW1c/HA1sFWpMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvUDJEd3dCOE1Vc1hXcDl5QmJWejhjRFd3VmFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg6xBwzI AwcAKhAvAAFKMA0GCSqGSIb3DQEBCwUAA4IBAQCChG/u1zHzC62yynxEwMyHTHnS 9mYnHzSblaVNVqrjbAfP9YQGhRYU5/ysSgo+TB9APv/yQiRIcq8wItH+CLfNa3j5 ccrsezCX3LgSdpSXvRK43/fTJGjnyhlc+LjMQ1M64HJQsuJhWyCfPUDUuunl3A7F 55aB+WzPihCycV9NuffEPq510dIee+0QqNzdID+gMfZOjZXMJS9IJooOyOFAy+N8 g30nti7llYoQs+cTpm2baUcIdmjQZtSbraH/DaZK7y9oJa3uQGTK7Z4f5Js2T6nS UV96UWODvt2fKRQxTvk2+jU2PN7L1XwvLd+y8WIO3entVCfh/auW++bbkomb -----END CERTIFICATE-----Generated at Fri Jan 9 13:12:00 2026 by rpki-client