This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/P49yHmCTlIjZOMqJDWwtLjGBbrI.roa File: P49yHmCTlIjZOMqJDWwtLjGBbrI.roa (raw, json) Hash identifier: sZW+QZ+clP8jT8nJx1XYZHTYL+NnX9QHDPgvwQLPTPI= Subject key identifier: 3F:8F:72:1E:60:93:94:88:D9:38:CA:89:0D:6C:2D:2E:31:81:6E:B2 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CC438CF6EBC26ADE7BD98E4B9E559 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/P49yHmCTlIjZOMqJDWwtLjGBbrI.roa Signing time: Fri 02 Jan 2026 06:19:50 +0000 ROA not before: Fri 02 Jan 2026 06:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63279 IP address blocks: 2a0e:b107:a00::/44 maxlen: 48 2a0e:b107:a20::/44 maxlen: 48 2a0e:b107:b20::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:c4:38:cf:6e:bc:26:ad:e7:bd:98:e4:b9:e5:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f8f721e60939488d938ca890d6c2d2e31816eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:83:66:b2:e0:90:7b:97:25:fa:b1:85:2e:ab: 4e:1d:79:a7:98:a8:94:5c:e2:f3:1f:40:6b:be:92: f4:2b:fb:60:5f:03:d7:45:d5:11:0a:4e:50:73:4e: f6:ff:82:5d:3f:2d:8d:c0:a5:6e:96:d1:69:b1:d7: fc:99:50:f7:16:29:71:a7:14:87:81:bb:4f:97:b2: b4:18:93:2f:5a:54:b8:70:4b:ef:f0:12:83:aa:7d: d9:e0:84:d5:07:37:62:02:b5:7a:65:51:ef:58:95: c4:ea:b0:09:4a:ab:3e:bb:2d:12:18:46:65:35:22: af:9d:51:bc:ee:66:53:b3:6c:c4:8c:36:90:33:0d: 11:4c:e1:66:b7:3f:a2:ec:bb:38:ed:eb:4d:21:52: a0:90:32:a3:cd:57:94:3b:16:89:3a:5e:cd:de:33: 0f:6f:e8:40:0b:c1:36:61:b4:a6:e1:76:96:d0:0d: 2b:73:90:3b:f8:a5:20:b0:ff:90:cd:e8:f4:32:d1: 4a:61:2a:0a:8e:b5:ea:26:52:25:5b:f7:89:a0:fd: dc:f6:89:6a:c3:34:8d:82:da:11:93:11:25:14:0e: 01:9c:a6:4d:c2:9c:9d:bf:8c:1e:b6:e6:72:f5:73: 29:ca:67:90:c7:cf:db:01:6f:7e:dd:ec:3c:67:8d: 17:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:8F:72:1E:60:93:94:88:D9:38:CA:89:0D:6C:2D:2E:31:81:6E:B2 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/P49yHmCTlIjZOMqJDWwtLjGBbrI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:a00::/44 2a0e:b107:a20::/44 2a0e:b107:b20::/44 Signature Algorithm: sha256WithRSAEncryption 1a:55:56:ce:12:c3:30:f9:24:ab:6a:b0:30:d1:1f:bd:f1:2c: 04:12:da:41:19:a2:82:5e:91:52:e4:99:95:f3:71:97:09:2d: 05:cf:60:53:78:32:0a:b6:2e:fe:b4:ac:e6:64:81:a8:03:2f: fa:9b:00:b8:9e:4c:a9:f8:59:a4:59:9a:50:97:0f:c9:3f:4a: da:05:23:b7:70:c9:84:e8:5d:64:9f:c7:c5:28:f8:f4:30:c1: 40:20:0f:a1:9d:f2:c1:10:97:3b:89:bd:19:ea:eb:03:4d:f9: e9:4e:bc:84:ba:bf:67:12:95:17:0a:63:1e:62:5a:1d:9d:24: 5f:85:91:b9:e6:34:da:4d:3d:eb:24:1c:aa:68:d5:40:82:8c: 63:31:05:61:74:98:3c:09:ec:22:d5:50:ef:b8:3a:83:0b:11: 3e:a3:fd:9d:1a:76:7a:fc:11:4e:20:bd:36:bc:58:3f:6e:b7: ea:17:d7:79:1c:07:74:10:0d:e9:9a:72:7a:1d:26:63:be:ec: a7:9b:b3:87:b8:37:4a:5a:26:51:85:1e:a1:61:ac:37:11:59: f8:ea:6b:1f:95:25:b8:3a:c0:e3:21:4b:eb:4e:d9:db:26:6c: 83:c0:77:cb:c8:f8:a6:42:1d:3a:0b:2a:94:f3:f5:ab:14:86: 11:7c:c2:bb -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9XMQ4z268Jq3nvZjkueVZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjhmNzIxZTYwOTM5NDg4ZDkzOGNhODkwZDZjMmQyZTMxODE2ZWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYNmsuCQe5cl+rGFLqtOHXmnmKiU XOLzH0BrvpL0K/tgXwPXRdURCk5Qc072/4JdPy2NwKVultFpsdf8mVD3FilxpxSH gbtPl7K0GJMvWlS4cEvv8BKDqn3Z4ITVBzdiArV6ZVHvWJXE6rAJSqs+uy0SGEZl NSKvnVG87mZTs2zEjDaQMw0RTOFmtz+i7Ls47etNIVKgkDKjzVeUOxaJOl7N3jMP b+hAC8E2YbSm4XaW0A0rc5A7+KUgsP+Qzej0MtFKYSoKjrXqJlIlW/eJoP3c9olq wzSNgtoRkxElFA4BnKZNwpydv4wetuZy9XMpymeQx8/bAW9+3ew8Z40XiQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFD+Pch5gk5SI2TjKiQ1sLS4xgW6yMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvUDQ5eUhtQ1RsSWpaT01xSkRXd3RMakdCYnJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcEKg6xBwoA AwcEKg6xBwogAwcEKg6xBwsgMA0GCSqGSIb3DQEBCwUAA4IBAQAaVVbOEsMw+SSr arAw0R+98SwEEtpBGaKCXpFS5JmV83GXCS0Fz2BTeDIKti7+tKzmZIGoAy/6mwC4 nkyp+FmkWZpQlw/JP0raBSO3cMmE6F1kn8fFKPj0MMFAIA+hnfLBEJc7ib0Z6usD TfnpTryEur9nEpUXCmMeYlodnSRfhZG55jTaTT3rJByqaNVAgoxjMQVhdJg8Cewi 1VDvuDqDCxE+o/2dGnZ6/BFOIL02vFg/brfqF9d5HAd0EA3pmnJ6HSZjvuynm7OH uDdKWiZRhR6hYaw3EVn46msflSW4OsDjIUvrTtnbJmyDwHfLyPimQh06CyqU8/Wr FIYRfMK7 -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:09 2026 by rpki-client