This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RGz4KMAzZlt8kzWinBVp5UJvwq4.roa File: RGz4KMAzZlt8kzWinBVp5UJvwq4.roa (raw, json) Hash identifier: hP9q4OS9YQeINabA/GoaJ6WR0YjIdUiXhBPUe24ZwVw= Subject key identifier: 44:6C:F8:28:C0:33:66:5B:7C:93:35:A2:9C:15:69:E5:42:6F:C2:AE Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D81FE880511C6AB2A7AAF2FD0DEB2 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RGz4KMAzZlt8kzWinBVp5UJvwq4.roa Signing time: Fri 02 Jan 2026 06:20:38 +0000 ROA not before: Fri 02 Jan 2026 06:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215788 IP address blocks: 2a0e:97c0:e90::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:81:fe:88:05:11:c6:ab:2a:7a:af:2f:d0:de:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=446cf828c033665b7c9335a29c1569e5426fc2ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d6:b8:a1:73:35:dc:85:88:e3:62:b8:6f:6b: ec:c4:f6:16:7a:f2:7b:9c:c1:f9:46:5b:17:d3:66: 5d:3b:c9:63:9e:92:44:9a:54:f9:f8:55:ad:10:d1: 2d:ce:c5:12:9d:6d:ce:a9:82:32:f2:60:9d:8f:99: d5:62:9c:d7:8b:72:ea:bf:6c:25:66:97:d2:27:9f: d7:88:ab:1b:cb:95:dc:f3:61:2b:f0:80:8f:ed:62: e4:79:de:74:ca:50:b4:ea:09:17:57:15:3a:96:9f: 8a:8b:47:0f:3e:5f:e6:b4:c3:db:3a:8f:ac:8e:56: 0b:39:0f:92:ad:7e:b9:32:d8:d0:38:45:fe:de:76: 1e:c9:7b:0f:46:5e:2c:d9:f6:36:5f:5c:aa:3c:01: cb:1e:57:ac:23:db:35:ca:d1:fa:73:c7:e5:93:c0: 90:43:76:95:23:c6:2d:be:1d:0a:b7:61:2c:ab:5f: df:5e:e7:c6:d5:f9:0c:06:9e:39:82:18:a2:43:a1: cf:b7:1f:93:1a:a6:7b:ee:02:97:bb:2c:0c:54:dc: 6b:76:b1:8a:56:99:cd:1f:8b:6d:ca:4a:3a:54:29: f4:01:d0:e9:4c:5a:08:e0:a7:26:3c:ff:83:7a:0d: 7a:71:ff:bf:70:7c:53:e8:c3:d0:cd:98:e0:97:8b: c0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6C:F8:28:C0:33:66:5B:7C:93:35:A2:9C:15:69:E5:42:6F:C2:AE X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RGz4KMAzZlt8kzWinBVp5UJvwq4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:e90::/48 Signature Algorithm: sha256WithRSAEncryption 80:ac:44:7b:43:86:08:83:c9:74:4a:65:c3:a2:f8:3e:b5:d1: 8d:96:84:46:7b:2c:d9:fe:b5:14:43:2f:27:27:e6:85:85:32: 41:25:bd:82:cb:4d:ff:ef:00:63:f6:45:71:d4:c8:32:7e:02: 44:2b:4a:a6:0f:07:16:ff:7d:e7:c3:1e:24:96:3e:21:ee:84: eb:66:b6:f2:34:33:c8:4f:62:89:0d:9d:77:96:64:24:03:3d: 41:d3:4b:c5:39:83:dd:02:24:db:92:f2:40:09:a6:e5:9c:e8: ab:00:94:d6:54:b1:17:99:55:c5:e2:3a:42:ab:bd:21:8f:b5: bf:ba:8b:51:a6:d6:c6:c5:07:83:99:93:6c:0f:b9:bc:a5:7a: fb:00:a7:ac:a9:75:62:19:08:85:6d:7b:90:0c:58:e4:a5:dd: 4f:38:31:89:d8:4c:dd:23:50:e8:c9:76:4d:72:84:ad:b6:12: 18:e7:7e:6e:a6:b5:ca:65:f8:95:5c:c9:83:ee:36:b6:43:11: 81:8c:ba:e4:6a:be:90:b9:a4:82:1a:2c:72:a5:37:70:48:ae: cf:af:ce:3e:49:42:97:8a:59:6f:41:f5:cd:04:78:6d:f7:25: b7:d4:de:c0:b3:92:33:7e:57:3f:b6:02:45:f7:50:3a:90:31: ae:0b:f8:53 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XYH+iAURxqsqeq8v0N6yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDZjZjgyOGMwMzM2NjViN2M5MzM1YTI5YzE1NjllNTQyNmZjMmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9a4oXM13IWI42K4b2vsxPYWevJ7 nMH5RlsX02ZdO8ljnpJEmlT5+FWtENEtzsUSnW3OqYIy8mCdj5nVYpzXi3Lqv2wl ZpfSJ5/XiKsby5Xc82Er8ICP7WLked50ylC06gkXVxU6lp+Ki0cPPl/mtMPbOo+s jlYLOQ+SrX65MtjQOEX+3nYeyXsPRl4s2fY2X1yqPAHLHlesI9s1ytH6c8flk8CQ Q3aVI8Ytvh0Kt2Esq1/fXufG1fkMBp45ghiiQ6HPtx+TGqZ77gKXuywMVNxrdrGK VpnNH4ttyko6VCn0AdDpTFoI4KcmPP+Deg16cf+/cHxT6MPQzZjgl4vAnQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFERs+CjAM2ZbfJM1opwVaeVCb8KuMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvUkd6NEtNQXpabHQ4a3pXaW5CVnA1VUp2d3E0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6XwA6Q MA0GCSqGSIb3DQEBCwUAA4IBAQCArER7Q4YIg8l0SmXDovg+tdGNloRGeyzZ/rUU Qy8nJ+aFhTJBJb2Cy03/7wBj9kVx1MgyfgJEK0qmDwcW/33nwx4klj4h7oTrZrby NDPIT2KJDZ13lmQkAz1B00vFOYPdAiTbkvJACablnOirAJTWVLEXmVXF4jpCq70h j7W/uotRptbGxQeDmZNsD7m8pXr7AKesqXViGQiFbXuQDFjkpd1PODGJ2EzdI1Do yXZNcoStthIY535uprXKZfiVXMmD7ja2QxGBjLrkar6QuaSCGixypTdwSK7Pr84+ SUKXillvQfXNBHht9yW31N7As5Izflc/tgJF91A6kDGuC/hT -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:06 2026 by rpki-client