This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QmZnRe7yIRRvC0Q5xTr9Mzk71Fg.roa File: QmZnRe7yIRRvC0Q5xTr9Mzk71Fg.roa (raw, json) Hash identifier: py8Rtark7WsFkyWRKE40g+H0YLnwxMT1UfjCAlacxh8= Subject key identifier: 42:66:67:45:EE:F2:21:14:6F:0B:44:39:C5:3A:FD:33:39:3B:D4:58 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D415CF96C61E6C319904F4F486EA0 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QmZnRe7yIRRvC0Q5xTr9Mzk71Fg.roa Signing time: Fri 02 Jan 2026 06:20:22 +0000 ROA not before: Fri 02 Jan 2026 06:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211571 IP address blocks: 2a10:cc40:190::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 17:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:41:5c:f9:6c:61:e6:c3:19:90:4f:4f:48:6e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42666745eef221146f0b4439c53afd33393bd458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:71:fb:e8:b1:c4:e8:3c:99:41:1f:84:f9:3c: 48:a1:c9:b4:35:d6:75:ab:69:53:82:d1:b5:c2:b4: 3e:24:7e:12:d6:30:de:17:ed:d4:c6:56:f6:d9:a2: 8c:fd:92:0b:5c:f6:eb:6c:ea:cb:0c:25:8f:2b:9c: 56:42:bf:43:49:28:b7:7b:ce:64:82:47:d5:b1:ca: ca:cc:7b:e2:f2:86:e4:10:58:0a:3a:21:db:9e:b7: bd:c9:11:cb:45:94:cc:59:d4:4e:d8:d6:1d:ad:0b: af:ff:1f:85:7c:04:f7:2d:67:6f:dd:6c:a3:9e:19: 9e:b0:5c:9e:1c:63:a8:f8:ff:f1:44:6e:fa:bd:dc: 2a:62:67:8e:16:04:8d:b7:44:8d:e8:88:66:60:a7: 15:e4:89:bb:88:9b:c1:6a:2e:ab:f3:32:d0:d4:ab: 95:f2:ab:6f:62:b8:d7:3b:f6:e9:93:39:e3:bb:d2: fb:68:16:3d:90:67:85:cd:70:23:a1:18:ff:a7:5d: a0:e6:01:78:3b:3e:28:54:cb:33:86:de:a5:2f:dc: 98:ea:9a:06:44:87:d3:d0:8d:e9:c5:bb:ee:68:3c: d6:c7:c2:ff:2a:6f:df:43:a6:c7:6b:a6:66:04:2d: fa:22:e1:a1:c0:ae:4d:34:a3:86:2e:fc:4b:56:b0: d1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:66:67:45:EE:F2:21:14:6F:0B:44:39:C5:3A:FD:33:39:3B:D4:58 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QmZnRe7yIRRvC0Q5xTr9Mzk71Fg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:cc40:190::/44 Signature Algorithm: sha256WithRSAEncryption 93:f7:1e:f1:0b:ed:70:79:f9:72:22:b0:45:aa:3c:90:0b:5d: 5c:85:b5:4c:8f:7e:35:11:43:f3:f6:3a:8f:a0:15:3a:95:47: 9c:a3:b1:fe:d4:34:1a:f5:48:9b:2e:db:f7:47:ca:84:9d:4c: 5e:ec:bd:16:e3:24:41:ec:f2:15:bb:34:ab:bd:a3:c3:47:80: bb:0c:1c:92:91:09:81:d5:f6:e8:28:74:c6:39:38:ca:df:eb: ca:55:f0:1c:4e:87:10:11:69:73:13:61:63:7d:00:1a:f6:a8: c1:7c:19:ba:83:05:02:52:37:ba:56:1c:db:41:0b:f7:7d:94: c4:56:16:2a:91:ed:e1:90:64:40:f9:3e:8d:e0:8d:e0:7b:10: 0c:54:24:86:f3:a8:91:ee:ed:b8:55:af:6e:22:1e:80:b1:ad: ac:04:e6:9a:34:ce:7a:46:c9:14:4d:b3:c3:a4:99:23:a9:26: ca:fd:64:44:1c:54:61:d5:b9:5b:75:89:c1:ab:28:d7:68:99: b5:5a:eb:ef:8c:3c:69:dd:ab:3d:94:00:bd:07:7b:78:ac:6e: 94:5a:53:e9:2f:8e:a4:71:17:c8:42:d9:4e:a0:be:4e:70:f8: 18:ca:17:50:1a:7b:ce:5b:58:05:4c:05:fa:0b:39:82:6b:6c: de:9f:32:18 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XUFc+Wxh5sMZkE9PSG6gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjY2Njc0NWVlZjIyMTE0NmYwYjQ0MzljNTNhZmQzMzM5M2JkNDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HH76LHE6DyZQR+E+TxIocm0NdZ1 q2lTgtG1wrQ+JH4S1jDeF+3Uxlb22aKM/ZILXPbrbOrLDCWPK5xWQr9DSSi3e85k gkfVscrKzHvi8obkEFgKOiHbnre9yRHLRZTMWdRO2NYdrQuv/x+FfAT3LWdv3Wyj nhmesFyeHGOo+P/xRG76vdwqYmeOFgSNt0SN6IhmYKcV5Im7iJvBai6r8zLQ1KuV 8qtvYrjXO/bpkznju9L7aBY9kGeFzXAjoRj/p12g5gF4Oz4oVMszht6lL9yY6poG RIfT0I3pxbvuaDzWx8L/Km/fQ6bHa6ZmBC36IuGhwK5NNKOGLvxLVrDRfwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEJmZ0Xu8iEUbwtEOcU6/TM5O9RYMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvUW1ablJlN3lJUlJ2QzBRNXhUcjlNems3MUZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhDMQAGQ MA0GCSqGSIb3DQEBCwUAA4IBAQCT9x7xC+1weflyIrBFqjyQC11chbVMj341EUPz 9jqPoBU6lUeco7H+1DQa9UibLtv3R8qEnUxe7L0W4yRB7PIVuzSrvaPDR4C7DByS kQmB1fboKHTGOTjK3+vKVfAcTocQEWlzE2FjfQAa9qjBfBm6gwUCUje6VhzbQQv3 fZTEVhYqke3hkGRA+T6N4I3gexAMVCSG86iR7u24Va9uIh6Asa2sBOaaNM56RskU TbPDpJkjqSbK/WREHFRh1blbdYnBqyjXaJm1WuvvjDxp3as9lAC9B3t4rG6UWlPp L46kcRfIQtlOoL5OcPgYyhdQGnvOW1gFTAX6CzmCa2zenzIY -----END CERTIFICATE-----Generated at Sat Jan 10 02:19:30 2026 by rpki-client