This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PR6kL6HzOhzupqx3bWqS3CH_x0s.roa File: PR6kL6HzOhzupqx3bWqS3CH_x0s.roa (raw, json) Hash identifier: MYIrnScRxLUm26xR1criuh+Q3HqO87ZT5xLr7n2kaJA= Subject key identifier: 3D:1E:A4:2F:A1:F3:3A:1C:EE:A6:AC:77:6D:6A:92:DC:21:FF:C7:4B Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D741E928F774CD28C8FD4FAE885E5 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PR6kL6HzOhzupqx3bWqS3CH_x0s.roa Signing time: Fri 02 Jan 2026 06:20:35 +0000 ROA not before: Fri 02 Jan 2026 06:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215051 IP address blocks: 2a0e:97c0:c49::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 17:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:74:1e:92:8f:77:4c:d2:8c:8f:d4:fa:e8:85:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d1ea42fa1f33a1ceea6ac776d6a92dc21ffc74b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:75:6c:da:d0:37:b9:1e:94:df:d4:fa:e9:ad: e9:0d:40:36:a9:16:26:a9:b6:5f:0e:e0:0c:f7:59: 3e:d8:bb:3e:ae:c4:13:3f:4f:53:4c:04:76:2c:fc: 6c:aa:ec:18:b6:ac:ee:4f:64:e5:41:94:54:ad:2c: d7:a7:3d:cc:20:4b:bb:f4:e9:8e:ce:4f:1f:a3:9f: f6:fc:c8:48:7b:eb:d2:b0:f7:74:3d:33:1f:9d:9d: 4b:93:e3:f6:7d:b5:97:ee:b8:47:92:e2:21:d2:3f: 9d:6f:ac:a4:3d:9e:22:a1:7f:ec:3f:b7:02:c4:c4: 26:96:eb:16:2d:c4:de:0c:71:35:31:30:16:8e:7b: 1b:0e:5c:00:ac:66:dc:06:b9:4f:1a:ba:13:60:c0: 5b:3f:b8:02:bb:dd:19:c4:97:ae:9f:d7:4c:5f:94: ba:b2:84:09:10:5d:2b:0c:3e:99:00:2a:9f:ce:09: d4:dd:6a:d3:5f:ff:fa:c9:ec:40:1f:1c:1d:41:60: 44:8b:57:cc:67:ad:40:d2:82:f2:a3:f7:76:6d:a3: c4:06:54:49:72:bc:89:9e:76:51:15:d6:e3:4b:57: 86:df:1f:67:22:b0:ac:c7:6a:17:5d:14:51:16:56: ea:21:5f:60:3d:86:be:3d:5e:58:25:70:78:17:df: a7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:1E:A4:2F:A1:F3:3A:1C:EE:A6:AC:77:6D:6A:92:DC:21:FF:C7:4B X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PR6kL6HzOhzupqx3bWqS3CH_x0s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:c49::/48 Signature Algorithm: sha256WithRSAEncryption 0f:34:0f:2b:dd:f3:9f:ae:b6:12:69:70:45:b5:ed:99:2a:04: b2:83:fe:7d:e4:40:26:1c:d9:57:ba:c1:9e:b0:f9:0f:1f:64: d9:50:f0:c4:89:32:64:72:6d:4a:ec:f1:b6:40:56:7f:53:cc: 3c:72:78:07:db:8f:e0:88:e2:ad:44:91:68:84:85:39:f3:52: 1f:52:a3:e5:93:67:52:b5:67:29:ba:5a:18:5b:e9:c2:a0:9f: 6d:b1:e5:77:6d:85:b5:a1:44:e0:7f:72:66:16:e0:0e:ec:ed: f7:c5:15:ab:c1:27:0c:45:b5:96:b3:45:07:2b:a9:0c:fb:94: de:e7:b7:31:d2:95:fc:0a:48:59:76:8b:25:6e:b7:0b:c8:76: ed:88:4d:d0:21:81:ac:53:d7:ba:eb:61:bc:5c:ad:e0:30:aa: 8b:40:e5:55:1e:f5:f7:44:e7:5b:92:63:95:e9:c3:1f:af:c3: 45:28:91:09:a6:8f:da:ea:11:04:9f:aa:cf:4a:e8:c4:a2:57: f5:97:21:f1:19:f2:ed:55:5c:f5:92:53:c3:fd:29:67:6f:31: 3d:2b:50:aa:2f:0a:fa:c9:21:d3:86:7c:2c:c3:4b:68:d6:9f: 1a:3f:dd:0a:e0:a1:41:81:aa:13:57:f8:5c:6a:b2:8f:c6:90: 62:82:9d:8a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XXQeko93TNKMj9T66IXlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDFlYTQyZmExZjMzYTFjZWVhNmFjNzc2ZDZhOTJkYzIxZmZjNzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnVs2tA3uR6U39T66a3pDUA2qRYm qbZfDuAM91k+2Ls+rsQTP09TTAR2LPxsquwYtqzuT2TlQZRUrSzXpz3MIEu79OmO zk8fo5/2/MhIe+vSsPd0PTMfnZ1Lk+P2fbWX7rhHkuIh0j+db6ykPZ4ioX/sP7cC xMQmlusWLcTeDHE1MTAWjnsbDlwArGbcBrlPGroTYMBbP7gCu90ZxJeun9dMX5S6 soQJEF0rDD6ZACqfzgnU3WrTX//6yexAHxwdQWBEi1fMZ61A0oLyo/d2baPEBlRJ cryJnnZRFdbjS1eG3x9nIrCsx2oXXRRRFlbqIV9gPYa+PV5YJXB4F9+nGQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFD0epC+h8zoc7qasd21qktwh/8dLMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvUFI2a0w2SHpPaHp1cHF4M2JXcVMzQ0hfeDBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6XwAxJ MA0GCSqGSIb3DQEBCwUAA4IBAQAPNA8r3fOfrrYSaXBFte2ZKgSyg/595EAmHNlX usGesPkPH2TZUPDEiTJkcm1K7PG2QFZ/U8w8cngH24/giOKtRJFohIU581IfUqPl k2dStWcpuloYW+nCoJ9tseV3bYW1oUTgf3JmFuAO7O33xRWrwScMRbWWs0UHK6kM +5Te57cx0pX8CkhZdoslbrcLyHbtiE3QIYGsU9e662G8XK3gMKqLQOVVHvX3ROdb kmOV6cMfr8NFKJEJpo/a6hEEn6rPSujEolf1lyHxGfLtVVz1klPD/SlnbzE9K1Cq Lwr6ySHThnwsw0to1p8aP90K4KFBgaoTV/hcarKPxpBigp2K -----END CERTIFICATE-----Generated at Sat Jan 10 02:18:48 2026 by rpki-client