This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Sm1QdWg0J95RwHGQ6pOuYLrzvQY.roa File: Sm1QdWg0J95RwHGQ6pOuYLrzvQY.roa (raw, json) Hash identifier: X41qKBwZ0dKQCInvqVeHCwT83hKX7ZqqXvNTFO+pkcw= Subject key identifier: 4A:6D:50:75:68:34:27:DE:51:C0:71:90:EA:93:AE:60:BA:F3:BD:06 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D1D66503DF48A6EFBC4DBF14C8A10 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Sm1QdWg0J95RwHGQ6pOuYLrzvQY.roa Signing time: Fri 02 Jan 2026 06:20:12 +0000 ROA not before: Fri 02 Jan 2026 06:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209533 IP address blocks: 2a0e:b107:2220::/45 maxlen: 48 2a0e:b107:2228::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:1d:66:50:3d:f4:8a:6e:fb:c4:db:f1:4c:8a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a6d5075683427de51c07190ea93ae60baf3bd06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5e:9b:d6:2f:dc:11:bf:34:68:79:da:93:a3: 35:b1:02:5d:e9:f5:05:8a:c1:26:62:73:e8:44:cb: 71:6a:56:3f:ae:21:6f:ce:45:83:76:fa:e6:a6:df: 43:5e:30:39:7b:bd:d9:a6:ef:86:9e:7d:80:c0:07: 4b:8b:17:3d:27:12:70:08:4d:8d:f3:9a:5c:d7:6d: 21:9a:61:f9:5f:d9:cd:83:3f:b4:5b:a3:09:23:3e: 35:67:a9:e9:f5:ce:a6:05:a6:f8:8e:2a:2a:bd:ba: 9a:f3:ce:0d:37:8b:d3:a7:47:d0:8d:5b:ec:cd:55: 41:82:a4:14:80:f7:8d:f6:7c:bf:88:5d:ae:17:fa: 84:e6:83:3a:04:66:7d:7f:bd:71:96:a3:e9:29:cf: 3d:c2:ad:d2:8a:06:2a:95:16:82:5d:ab:98:05:80: f3:26:97:ca:34:7b:5a:9b:8e:24:3a:6d:a4:ef:3b: b0:0c:38:69:95:ab:ec:b3:09:68:ba:7b:43:1a:a8: e1:ab:cd:93:df:07:66:4d:94:1c:4d:cd:da:a0:b7: 35:b1:c7:75:21:66:6e:06:e2:07:94:93:34:bd:09: 6d:90:d0:b4:21:bf:64:a6:ce:15:54:e0:3b:1a:a5: 0c:bb:3e:97:d7:4e:11:d0:26:60:6b:ed:46:4a:d8: ee:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:6D:50:75:68:34:27:DE:51:C0:71:90:EA:93:AE:60:BA:F3:BD:06 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Sm1QdWg0J95RwHGQ6pOuYLrzvQY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:2220::/44 Signature Algorithm: sha256WithRSAEncryption 5c:dc:d6:6e:c1:1f:c0:ca:1f:73:c6:c7:25:c2:71:85:b0:4e: 5d:eb:5d:3f:ad:f3:21:54:78:f7:b6:c1:23:86:16:6d:82:a0: 32:cb:51:ca:4b:85:87:9b:c1:aa:4d:56:67:1c:34:85:89:5b: c9:b7:4b:f8:18:84:c7:25:50:1a:98:b8:39:12:4c:d3:e6:df: f0:5b:0f:27:c4:e8:1e:59:b7:be:b3:ad:4f:c3:67:d1:0d:b3: 9e:2f:cb:83:55:f0:9f:57:26:1c:1e:33:02:f8:98:75:1e:d2: 7d:dd:13:70:a5:9c:07:05:9d:9e:72:88:36:ae:a4:02:ad:45: 6b:dd:5b:32:40:0f:dd:f8:9d:d0:f1:5b:40:5e:51:25:d5:48: ed:2a:21:59:df:b9:a5:18:af:75:7c:eb:be:c9:c8:06:84:c7: b3:6c:bc:f0:9c:c1:98:a6:55:4e:ae:c7:f1:c1:87:d7:e7:89: d8:1e:a9:f4:7c:5c:0e:f1:22:10:42:5f:bd:a9:23:3c:5d:61: 86:dc:b0:b0:31:86:80:5a:b8:2a:ce:5a:00:3f:df:08:0b:b5: 70:4f:45:8c:b3:41:2e:e7:ec:a3:da:1a:cc:0f:7e:8f:0e:bd: 22:2f:a3:70:fa:58:d6:c4:0e:47:cd:18:4e:ef:2a:7c:ef:5f: a4:39:3f:64 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XR1mUD30im77xNvxTIoQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTZkNTA3NTY4MzQyN2RlNTFjMDcxOTBlYTkzYWU2MGJhZjNiZDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5l6b1i/cEb80aHnak6M1sQJd6fUF isEmYnPoRMtxalY/riFvzkWDdvrmpt9DXjA5e73Zpu+Gnn2AwAdLixc9JxJwCE2N 85pc120hmmH5X9nNgz+0W6MJIz41Z6np9c6mBab4jioqvbqa884NN4vTp0fQjVvs zVVBgqQUgPeN9ny/iF2uF/qE5oM6BGZ9f71xlqPpKc89wq3SigYqlRaCXauYBYDz JpfKNHtam44kOm2k7zuwDDhplavsswlountDGqjhq82T3wdmTZQcTc3aoLc1scd1 IWZuBuIHlJM0vQltkNC0Ib9kps4VVOA7GqUMuz6X104R0CZga+1GStjumwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEptUHVoNCfeUcBxkOqTrmC6870GMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvU20xUWRXZzBKOTVSd0hHUTZwT3VZTHJ6dlFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xByIg MA0GCSqGSIb3DQEBCwUAA4IBAQBc3NZuwR/Ayh9zxsclwnGFsE5d610/rfMhVHj3 tsEjhhZtgqAyy1HKS4WHm8GqTVZnHDSFiVvJt0v4GITHJVAamLg5EkzT5t/wWw8n xOgeWbe+s61Pw2fRDbOeL8uDVfCfVyYcHjMC+Jh1HtJ93RNwpZwHBZ2ecog2rqQC rUVr3VsyQA/d+J3Q8VtAXlEl1UjtKiFZ37mlGK91fOu+ycgGhMezbLzwnMGYplVO rsfxwYfX54nYHqn0fFwO8SIQQl+9qSM8XWGG3LCwMYaAWrgqzloAP98IC7VwT0WM s0Eu5+yj2hrMD36PDr0iL6Nw+ljWxA5HzRhO7yp871+kOT9k -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:45 2026 by rpki-client