This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/R1oo3XKJlNZC_0rqbye6Geg_zh8.roa File: R1oo3XKJlNZC_0rqbye6Geg_zh8.roa (raw, json) Hash identifier: Umbbmj0QCkXMq7JF73tNJdAeWtjZE8wWjEkTQWA2mBs= Subject key identifier: 47:5A:28:DD:72:89:94:D6:42:FF:4A:EA:6F:27:BA:19:E8:3F:CE:1F Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5C9F07D6738DEF07612247292CD4F9 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/R1oo3XKJlNZC_0rqbye6Geg_zh8.roa Signing time: Fri 02 Jan 2026 06:19:40 +0000 ROA not before: Fri 02 Jan 2026 06:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9886 IP address blocks: 2a0e:b107:f08::/45 maxlen: 45 2a10:2f00:12a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:9f:07:d6:73:8d:ef:07:61:22:47:29:2c:d4:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=475a28dd728994d642ff4aea6f27ba19e83fce1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bf:8c:d2:86:75:c3:c1:ca:92:8c:71:4c:58: 42:a9:4a:86:5d:2a:c0:a6:d2:10:76:f0:d3:38:27: dd:5c:22:b0:96:eb:1e:82:74:45:5d:af:0d:aa:9d: dc:ab:5b:c8:32:e9:b1:28:70:64:27:e3:1d:e6:61: 87:ef:6d:a0:13:00:24:03:29:6e:ba:b4:fb:5a:eb: e0:1f:1e:16:9b:08:c0:2f:a8:18:d8:59:00:3a:fc: 66:c8:07:c2:a7:92:0e:f5:24:e7:29:93:91:f4:1e: 38:e3:aa:1f:1b:0a:e8:8a:a5:3b:2e:66:f5:ee:8d: d9:fa:e9:39:f7:7d:47:51:61:44:5d:7e:84:3c:68: 92:db:80:c1:32:26:42:5d:6c:51:ac:84:55:14:fc: 5f:9d:19:93:95:c4:95:92:38:29:c3:09:ba:75:42: a7:0d:ba:89:5b:e7:52:da:b4:7b:31:b5:27:ff:71: 6e:4b:72:aa:f9:06:b1:13:80:45:05:57:0d:47:e0: 76:31:00:45:8b:ef:a7:cb:29:01:3c:f9:c2:0a:9f: 9a:60:d4:ca:49:e4:e2:a5:3d:34:7d:4c:38:a0:3e: 19:59:6e:7d:0f:a0:6e:c0:2d:3d:cf:38:f0:3c:7b: 32:ec:fc:58:5b:84:b8:1c:93:79:e6:df:59:7d:84: 25:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:5A:28:DD:72:89:94:D6:42:FF:4A:EA:6F:27:BA:19:E8:3F:CE:1F X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/R1oo3XKJlNZC_0rqbye6Geg_zh8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:f08::/45 2a10:2f00:12a::/48 Signature Algorithm: sha256WithRSAEncryption 15:c0:d0:b4:93:77:1b:ad:66:60:88:7b:97:28:72:b5:33:7b: 40:e7:56:16:82:68:c5:e2:bb:2e:e1:06:22:6a:22:2a:ca:14: 50:71:5f:06:55:c5:a8:e8:4b:eb:40:eb:16:ca:1f:0e:a9:ef: 18:3d:47:ea:ca:02:56:9e:6f:3f:79:62:96:18:6f:47:44:81: fd:c1:2f:f9:67:4e:da:d8:8e:de:0c:d6:02:4b:2b:a1:eb:54: 94:76:06:de:d3:0c:ca:af:e3:a3:ca:d4:b8:ac:ab:3b:9a:78: f9:d4:95:e4:4c:4e:d2:c2:07:da:51:1d:3f:ba:3a:10:bf:f7: 5b:fb:12:c7:c5:08:29:ff:96:4f:c9:b9:d1:4f:a2:65:a4:da: b3:6b:e1:42:31:e7:c5:25:c3:7b:ca:84:0e:aa:0b:3a:cc:ab: 94:7b:0b:65:5d:e1:42:3f:51:56:8b:bb:1f:34:1f:66:1d:8e: 00:48:8d:94:ac:d8:17:fd:86:57:76:de:28:7c:45:1d:00:a1: f9:45:6d:14:23:20:2b:c9:30:27:1a:c4:5a:0d:a5:ae:bd:e8: 41:36:7a:e0:6b:48:4d:10:c0:31:4a:00:e9:af:79:91:8b:c0: 17:67:2e:2c:10:25:75:2b:9b:78:34:2f:da:ec:c9:e0:06:29: 0c:da:59:16 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XJ8H1nON7wdhIkcpLNT5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzVhMjhkZDcyODk5NGQ2NDJmZjRhZWE2ZjI3YmExOWU4M2ZjZTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur+M0oZ1w8HKkoxxTFhCqUqGXSrA ptIQdvDTOCfdXCKwlusegnRFXa8Nqp3cq1vIMumxKHBkJ+Md5mGH722gEwAkAylu urT7WuvgHx4WmwjAL6gY2FkAOvxmyAfCp5IO9STnKZOR9B4446ofGwroiqU7Lmb1 7o3Z+uk5931HUWFEXX6EPGiS24DBMiZCXWxRrIRVFPxfnRmTlcSVkjgpwwm6dUKn DbqJW+dS2rR7MbUn/3FuS3Kq+QaxE4BFBVcNR+B2MQBFi++nyykBPPnCCp+aYNTK SeTipT00fUw4oD4ZWW59D6BuwC09zzjwPHsy7PxYW4S4HJN55t9ZfYQlPwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEdaKN1yiZTWQv9K6m8nuhnoP84fMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvUjFvbzNYS0psTlpDXzBycWJ5ZTZHZWdfemg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcDKg6xBw8I AwcAKhAvAAEqMA0GCSqGSIb3DQEBCwUAA4IBAQAVwNC0k3cbrWZgiHuXKHK1M3tA 51YWgmjF4rsu4QYiaiIqyhRQcV8GVcWo6EvrQOsWyh8Oqe8YPUfqygJWnm8/eWKW GG9HRIH9wS/5Z07a2I7eDNYCSyuh61SUdgbe0wzKr+OjytS4rKs7mnj51JXkTE7S wgfaUR0/ujoQv/db+xLHxQgp/5ZPybnRT6JlpNqza+FCMefFJcN7yoQOqgs6zKuU ewtlXeFCP1FWi7sfNB9mHY4ASI2UrNgX/YZXdt4ofEUdAKH5RW0UIyAryTAnGsRa DaWuvehBNnrga0hNEMAxSgDpr3mRi8AXZy4sECV1K5t4NC/a7MngBikM2lkW -----END CERTIFICATE-----Generated at Fri Jan 9 13:11:42 2026 by rpki-client