This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Px3RLR4wux1WXQkC8zVfZKLQeaI.roa File: Px3RLR4wux1WXQkC8zVfZKLQeaI.roa (raw, json) Hash identifier: En8jGXJ95qMR43fiS9ZtLhGvyf403OtjdNGMHhE7V24= Subject key identifier: 3F:1D:D1:2D:1E:30:BB:1D:56:5D:09:02:F3:35:5F:64:A2:D0:79:A2 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D07BAF64982C71AFB19768D2736A7 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Px3RLR4wux1WXQkC8zVfZKLQeaI.roa Signing time: Fri 02 Jan 2026 06:20:07 +0000 ROA not before: Fri 02 Jan 2026 06:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207317 IP address blocks: 2a10:2f00:11a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:07:ba:f6:49:82:c7:1a:fb:19:76:8d:27:36:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f1dd12d1e30bb1d565d0902f3355f64a2d079a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:aa:76:1b:c2:60:be:e4:40:8b:1a:12:38:5f: 0e:2f:d9:69:34:70:4d:61:96:ae:63:07:4e:52:5f: 94:4f:2c:72:2d:37:85:28:e0:8e:32:bb:c0:07:21: 63:65:93:f6:ea:9c:50:e3:72:42:3c:1d:de:a3:40: 55:33:af:77:bd:fe:a9:50:30:62:a4:40:7f:a2:38: 1f:56:00:26:0d:00:e3:0d:3d:d6:ba:8e:e8:b6:28: bc:3d:10:72:34:49:a8:c0:00:3c:c5:fa:3a:7c:94: 63:83:ef:ce:56:09:81:84:ab:28:98:8d:10:df:e3: 86:30:e5:ae:86:42:c4:11:97:6b:2f:a3:0a:c2:4c: 47:d3:63:f2:09:53:5a:07:99:1a:91:2b:c8:98:ca: 5b:27:e7:f7:e7:85:2f:cd:25:83:37:56:5d:03:50: e2:2b:c7:06:dc:7f:0a:47:d2:f1:4e:df:29:cc:c5: 25:6a:4f:58:92:16:a5:f5:2f:ae:4f:0c:d9:71:dd: 2a:0d:f7:fd:d6:44:89:bb:ec:1b:ff:a1:11:01:00: 7d:ab:29:a4:46:bb:72:eb:d6:78:09:86:34:78:d4: 8a:a2:f8:62:8f:b4:f2:42:93:c2:f8:eb:8d:19:6f: 64:33:60:b4:f7:69:c3:a5:64:59:d1:27:12:af:e5: f3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:1D:D1:2D:1E:30:BB:1D:56:5D:09:02:F3:35:5F:64:A2:D0:79:A2 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Px3RLR4wux1WXQkC8zVfZKLQeaI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:2f00:11a::/48 Signature Algorithm: sha256WithRSAEncryption 5f:96:4d:bd:0f:6d:53:ee:e6:f4:14:de:48:69:07:4e:71:9a: b1:8b:bb:52:df:26:58:39:5c:43:03:af:13:88:ad:ce:d5:f9: c5:12:a0:c2:d0:1e:5a:92:10:54:49:0d:46:05:b9:8c:71:34: b5:94:f6:d3:05:ac:3d:34:cd:f7:89:a2:da:91:b5:6a:d2:2f: e4:7d:1c:e1:72:17:27:4a:cd:06:93:d5:5c:4b:e4:b8:04:60: b8:04:6a:63:06:33:cb:d1:b7:c8:09:ab:38:06:80:0c:8e:1f: 28:f8:11:fc:6e:b8:bf:c4:cd:e9:ec:2c:b3:f5:42:70:d2:65: a4:48:b6:4f:2b:bc:59:82:aa:a4:17:15:2f:e1:34:71:2c:00: 65:31:aa:f9:74:1d:7e:2e:86:8f:39:b7:3b:82:46:e9:59:c8: 20:3e:18:ca:90:3e:81:05:ab:8f:64:56:9c:17:9d:6b:93:1c: 7b:94:3b:91:e0:e2:d1:05:81:3f:8a:35:6d:4d:84:7e:27:07: 81:52:a0:11:fe:12:27:99:a8:1f:ac:5b:35:43:84:f1:9f:04: a7:0e:bf:26:9e:55:55:74:04:ad:8f:1f:d7:14:63:1c:4f:2b: 62:a5:f1:ee:3c:de:96:d3:b6:0a:f5:7c:cf:b2:56:46:9f:05: 50:0f:b0:4d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XQe69kmCxxr7GXaNJzanMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjFkZDEyZDFlMzBiYjFkNTY1ZDA5MDJmMzM1NWY2NGEyZDA3OWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuap2G8JgvuRAixoSOF8OL9lpNHBN YZauYwdOUl+UTyxyLTeFKOCOMrvAByFjZZP26pxQ43JCPB3eo0BVM693vf6pUDBi pEB/ojgfVgAmDQDjDT3Wuo7otii8PRByNEmowAA8xfo6fJRjg+/OVgmBhKsomI0Q 3+OGMOWuhkLEEZdrL6MKwkxH02PyCVNaB5kakSvImMpbJ+f354UvzSWDN1ZdA1Di K8cG3H8KR9LxTt8pzMUlak9Ykhal9S+uTwzZcd0qDff91kSJu+wb/6ERAQB9qymk Rrty69Z4CYY0eNSKovhij7TyQpPC+OuNGW9kM2C092nDpWRZ0ScSr+XzbwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFD8d0S0eMLsdVl0JAvM1X2Si0HmiMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvUHgzUkxSNHd1eDFXWFFrQzh6VmZaS0xRZWFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAvAAEa MA0GCSqGSIb3DQEBCwUAA4IBAQBflk29D21T7ub0FN5IaQdOcZqxi7tS3yZYOVxD A68TiK3O1fnFEqDC0B5akhBUSQ1GBbmMcTS1lPbTBaw9NM33iaLakbVq0i/kfRzh chcnSs0Gk9VcS+S4BGC4BGpjBjPL0bfICas4BoAMjh8o+BH8bri/xM3p7Cyz9UJw 0mWkSLZPK7xZgqqkFxUv4TRxLABlMar5dB1+LoaPObc7gkbpWcggPhjKkD6BBauP ZFacF51rkxx7lDuR4OLRBYE/ijVtTYR+JweBUqAR/hInmagfrFs1Q4TxnwSnDr8m nlVVdAStjx/XFGMcTytipfHuPN6W07YK9XzPslZGnwVQD7BN -----END CERTIFICATE-----Generated at Fri Jan 9 13:12:01 2026 by rpki-client