This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RPdQ3i5p3DiEt5aM1D1Q2foH57w.roa File: RPdQ3i5p3DiEt5aM1D1Q2foH57w.roa (raw, json) Hash identifier: 8Zvvv0n2aD0YLjeOgBoinx3gAWfARdWp/lYqM8rds3k= Subject key identifier: 44:F7:50:DE:2E:69:DC:38:84:B7:96:8C:D4:3D:50:D9:FA:07:E7:BC Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D734ADD27E06D542B17A901D064DD Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RPdQ3i5p3DiEt5aM1D1Q2foH57w.roa Signing time: Fri 02 Jan 2026 06:20:34 +0000 ROA not before: Fri 02 Jan 2026 06:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215011 IP address blocks: 2a06:de00:50::/44 maxlen: 48 2a0e:97c0:8a0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:73:4a:dd:27:e0:6d:54:2b:17:a9:01:d0:64:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44f750de2e69dc3884b7968cd43d50d9fa07e7bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:35:62:54:83:7c:b4:e0:dd:85:86:17:44:b0: 29:b9:f4:7b:83:80:26:c1:0a:2e:2e:38:9a:f2:4d: 4b:e8:ec:a9:d2:96:81:9c:a2:e5:f5:06:ad:2e:d1: d1:c9:82:cd:d6:5b:a1:b9:55:40:cf:6e:a0:29:9c: 42:ee:c4:fd:70:5c:09:6f:19:7f:24:f1:83:f7:b4: 77:d9:2a:c3:2b:0f:8f:e2:12:d2:e8:84:27:2c:aa: bb:f3:02:92:2c:ab:00:52:9b:0b:29:de:07:20:8e: b1:83:bf:0c:92:2c:e3:7f:70:d0:da:fc:81:ea:e6: 23:e5:f6:58:4c:14:a0:5f:f7:ca:92:6b:88:5d:9b: a5:03:8f:24:56:ec:25:b1:02:e4:03:7a:7a:78:6c: 3f:e0:97:60:e5:81:61:1c:e1:8d:b3:ee:af:da:25: d3:48:78:c7:ca:c0:1e:52:fc:db:5c:88:20:13:c9: 21:80:84:2e:79:ed:d3:60:5a:cb:1c:1d:09:07:14: 98:5d:1a:6a:06:9c:25:d3:27:d7:63:c5:31:3a:a4: 07:0b:b5:ca:dc:27:14:b5:be:2f:12:86:44:4c:53: be:9e:b3:ac:fe:25:88:7d:69:ff:eb:3a:eb:02:d8: dc:41:5a:3c:93:f6:e2:16:c7:7c:0d:57:24:67:d5: 80:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F7:50:DE:2E:69:DC:38:84:B7:96:8C:D4:3D:50:D9:FA:07:E7:BC X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RPdQ3i5p3DiEt5aM1D1Q2foH57w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:de00:50::/44 2a0e:97c0:8a0::/44 Signature Algorithm: sha256WithRSAEncryption 2b:7c:7d:f3:24:69:0b:f8:46:4a:fd:8c:7c:a1:cc:93:77:4f: 74:cb:37:1b:d1:a1:f9:ab:72:a6:b4:0d:73:4d:f8:84:e8:ca: b7:e9:5c:3b:3f:cf:28:85:b6:79:28:92:61:21:08:29:86:8d: 36:70:53:74:61:ca:47:1e:b2:a0:6f:d6:ef:7f:50:b2:66:f8: a4:e7:c9:fc:02:c2:ee:6e:26:ac:87:c3:ef:2b:8c:44:63:85: 95:b4:69:64:ba:f3:0f:e1:9e:79:f7:07:0f:50:70:52:f5:35: 49:1f:cc:69:18:da:7e:f9:46:fb:c4:0d:d5:93:b5:57:1a:5a: 02:bf:b5:d3:a9:23:10:95:90:cf:f5:32:ef:67:d0:60:e9:1c: 5b:4f:95:9c:25:43:8c:1e:2e:19:67:31:95:56:3d:ce:cc:a3: ad:d2:4d:2b:f6:84:5c:3b:bc:ac:7f:de:27:1f:91:05:e6:fd: 13:08:93:8a:a8:0e:82:8b:ad:70:12:fe:7f:06:38:b8:95:01: 85:82:c6:89:20:48:b0:32:fa:ce:39:23:07:6e:5e:ae:5a:6f: eb:0c:28:47:54:9a:99:4d:dd:8f:86:d3:a8:ac:3e:ba:8a:97: a4:81:9a:d3:87:7c:4d:6f:df:fd:31:48:a1:13:15:c5:58:5e: cf:17:cb:ab -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XXNK3SfgbVQrF6kB0GTdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGY3NTBkZTJlNjlkYzM4ODRiNzk2OGNkNDNkNTBkOWZhMDdlN2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTViVIN8tODdhYYXRLApufR7g4Am wQouLjia8k1L6Oyp0paBnKLl9QatLtHRyYLN1luhuVVAz26gKZxC7sT9cFwJbxl/ JPGD97R32SrDKw+P4hLS6IQnLKq78wKSLKsAUpsLKd4HII6xg78Mkizjf3DQ2vyB 6uYj5fZYTBSgX/fKkmuIXZulA48kVuwlsQLkA3p6eGw/4Jdg5YFhHOGNs+6v2iXT SHjHysAeUvzbXIggE8khgIQuee3TYFrLHB0JBxSYXRpqBpwl0yfXY8UxOqQHC7XK 3CcUtb4vEoZETFO+nrOs/iWIfWn/6zrrAtjcQVo8k/biFsd8DVckZ9WAqwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFET3UN4uadw4hLeWjNQ9UNn6B+e8MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvUlBkUTNpNXAzRGlFdDVhTTFEMVEyZm9INTd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgbeAABQ AwcEKg6XwAigMA0GCSqGSIb3DQEBCwUAA4IBAQArfH3zJGkL+EZK/Yx8ocyTd090 yzcb0aH5q3KmtA1zTfiE6Mq36Vw7P88ohbZ5KJJhIQgpho02cFN0YcpHHrKgb9bv f1CyZvik58n8AsLubiash8PvK4xEY4WVtGlkuvMP4Z559wcPUHBS9TVJH8xpGNp+ +Ub7xA3Vk7VXGloCv7XTqSMQlZDP9TLvZ9Bg6RxbT5WcJUOMHi4ZZzGVVj3OzKOt 0k0r9oRcO7ysf94nH5EF5v0TCJOKqA6Ci61wEv5/Bji4lQGFgsaJIEiwMvrOOSMH bl6uWm/rDChHVJqZTd2PhtOorD66ipekgZrTh3xNb9/9MUihExXFWF7PF8ur -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:10 2026 by rpki-client