This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PyVbXEsJN8S-xQb-Agxh7kXJss8.roa File: PyVbXEsJN8S-xQb-Agxh7kXJss8.roa (raw, json) Hash identifier: 3CDlr25nm/LKVsGzlh59hnIyR/sV7pLP9FW+9f6uxaQ= Subject key identifier: 3F:25:5B:5C:4B:09:37:C4:BE:C5:06:FE:02:0C:61:EE:45:C9:B2:CF Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CCF73E789AB13AD3CA4BA86A1E8CE Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PyVbXEsJN8S-xQb-Agxh7kXJss8.roa Signing time: Fri 02 Jan 2026 06:19:53 +0000 ROA not before: Fri 02 Jan 2026 06:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142289 IP address blocks: 2a0e:b107:15f0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:cf:73:e7:89:ab:13:ad:3c:a4:ba:86:a1:e8:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f255b5c4b0937c4bec506fe020c61ee45c9b2cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:da:9c:c1:1b:78:68:69:eb:10:6e:f9:64:f2: 73:d8:02:8f:81:d9:72:1d:39:d3:77:c2:31:fd:1d: b2:8d:64:53:f7:82:a2:4b:0a:d6:e3:b4:14:bc:f7: 28:eb:79:a1:f8:c6:89:b9:35:eb:64:43:76:5a:5e: 4d:6f:1a:34:cf:62:44:cc:d5:a4:07:e4:ad:25:8e: 42:37:b9:0a:1b:9c:b8:ce:d6:33:70:ab:18:07:51: 7d:27:1d:11:46:5f:e2:2c:65:8f:cc:f8:27:7d:27: a7:d0:c8:ab:68:05:57:a2:2a:e6:04:dd:22:20:d5: 9f:88:29:e0:8b:cd:12:a0:c1:dd:e1:0e:f8:4e:2a: 9c:3e:11:b0:79:c5:56:33:1e:c2:78:bf:7f:22:68: ae:52:cf:16:42:df:62:a1:a1:22:55:12:32:60:13: e1:c5:40:c8:01:3f:a5:d1:d1:2d:c8:aa:07:a3:34: 1c:de:22:82:68:51:2d:e5:75:22:71:9d:47:5a:7c: 9e:d5:d4:75:a7:6e:2a:42:ab:39:bf:50:1e:c4:e2: 12:7d:9d:ed:de:f3:17:c7:99:95:69:63:cf:9e:5b: 88:2d:24:f7:19:58:9b:1c:99:31:fc:4f:76:d2:d8: e1:98:ca:54:f2:b5:a9:01:e9:a2:a7:ae:9c:b4:5a: e8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:25:5B:5C:4B:09:37:C4:BE:C5:06:FE:02:0C:61:EE:45:C9:B2:CF X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PyVbXEsJN8S-xQb-Agxh7kXJss8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:15f0::/44 Signature Algorithm: sha256WithRSAEncryption 63:70:80:0b:2f:ba:2b:15:f6:21:f6:80:89:eb:d1:8a:8f:5a: 30:a6:03:10:f7:8a:c4:a5:5f:b2:6b:20:0c:f2:98:9e:38:f9: 33:ea:62:86:63:2f:d9:3a:79:ff:fa:d8:e3:97:4a:e5:4f:0b: 92:fa:78:bc:72:db:cb:fb:70:d4:a7:9c:fa:dd:e7:22:e7:6b: 66:9b:98:19:db:a3:26:63:f3:e1:08:ea:3f:48:ed:e9:0f:1e: 1d:e2:81:83:ab:1e:98:05:8d:36:9e:ea:b3:62:86:1b:b5:5a: fd:69:66:a8:d3:4e:7c:61:34:17:13:5d:0e:e1:d7:4f:ac:7a: c5:69:3c:db:20:ef:b8:57:a8:41:ac:f4:f0:6c:fd:86:d4:ae: b5:b0:ca:7e:64:30:f2:b2:39:1d:56:0e:fa:1d:f6:b5:f9:79: 9c:0f:00:e8:64:c5:ab:c0:4b:41:8e:56:05:a9:e2:fb:88:48: c2:f5:25:94:5b:3f:4c:97:c8:da:ff:01:4e:78:86:92:9c:0a: 3d:e2:1c:8e:0b:3a:a6:e1:2a:2d:ee:d3:23:ea:b0:4d:8e:b4: 73:e6:77:af:bd:6f:1b:ed:dd:68:ac:6b:c2:5f:0f:36:7a:61: 62:6a:15:c8:1d:0a:df:9e:ad:29:46:43:2f:eb:e8:62:47:89: 51:db:8e:00 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XM9z54mrE608pLqGoejOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjI1NWI1YzRiMDkzN2M0YmVjNTA2ZmUwMjBjNjFlZTQ1YzliMmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptqcwRt4aGnrEG75ZPJz2AKPgdly HTnTd8Ix/R2yjWRT94KiSwrW47QUvPco63mh+MaJuTXrZEN2Wl5Nbxo0z2JEzNWk B+StJY5CN7kKG5y4ztYzcKsYB1F9Jx0RRl/iLGWPzPgnfSen0MiraAVXoirmBN0i INWfiCngi80SoMHd4Q74TiqcPhGwecVWMx7CeL9/ImiuUs8WQt9ioaEiVRIyYBPh xUDIAT+l0dEtyKoHozQc3iKCaFEt5XUicZ1HWnye1dR1p24qQqs5v1AexOISfZ3t 3vMXx5mVaWPPnluILST3GVibHJkx/E920tjhmMpU8rWpAemip66ctFro9wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFD8lW1xLCTfEvsUG/gIMYe5FybLPMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvUHlWYlhFc0pOOFMteFFiLUFneGg3a1hKc3M4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxXw MA0GCSqGSIb3DQEBCwUAA4IBAQBjcIALL7orFfYh9oCJ69GKj1owpgMQ94rEpV+y ayAM8pieOPkz6mKGYy/ZOnn/+tjjl0rlTwuS+ni8ctvL+3DUp5z63eci52tmm5gZ 26MmY/PhCOo/SO3pDx4d4oGDqx6YBY02nuqzYoYbtVr9aWao0058YTQXE10O4ddP rHrFaTzbIO+4V6hBrPTwbP2G1K61sMp+ZDDysjkdVg76Hfa1+XmcDwDoZMWrwEtB jlYFqeL7iEjC9SWUWz9Ml8ja/wFOeIaSnAo94hyOCzqm4Sot7tMj6rBNjrRz5nev vW8b7d1orGvCXw82emFiahXIHQrfnq0pRkMv6+hiR4lR244A -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:23 2026 by rpki-client