This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TubBXgyquhlKwer37xgvlNlyXc8.roa File: TubBXgyquhlKwer37xgvlNlyXc8.roa (raw, json) Hash identifier: YdUmDHtdUBALcDAdmsw4mfcIlUAxydl5PSu+X5QkdLU= Subject key identifier: 4E:E6:C1:5E:0C:AA:BA:19:4A:C1:EA:F7:EF:18:2F:94:D9:72:5D:CF Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B661AD10464432DFBBA7795FC41EC4725 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TubBXgyquhlKwer37xgvlNlyXc8.roa Signing time: Sun 28 Dec 2025 17:56:31 +0000 ROA not before: Sun 28 Dec 2025 17:56:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39526 IP address blocks: 2a10:2f00:152::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 06:43:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:1a:d1:04:64:43:2d:fb:ba:77:95:fc:41:ec:47:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Dec 28 17:56:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4ee6c15e0caaba194ac1eaf7ef182f94d9725dcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:51:b8:fc:27:7d:81:81:d2:38:e7:02:aa:19: 33:aa:4d:43:99:fd:40:5b:c5:6b:dc:b9:60:2a:a1: 69:88:75:29:c5:9f:04:68:ec:fb:ad:05:ed:72:ed: 91:7a:58:6f:6b:76:1e:0c:39:35:ce:66:af:86:34: 58:a0:1e:d8:e3:1a:6c:24:99:f8:4b:48:52:39:da: a9:4a:37:51:eb:da:fb:aa:88:2b:a8:ce:b2:cb:86: 73:df:cb:97:e4:76:7e:e5:28:6f:1c:9d:ae:e0:f1: e1:00:ff:66:88:ed:3e:a0:30:2b:85:71:7e:fc:34: c0:17:14:82:5a:ba:82:4c:2b:37:f5:ae:79:09:d2: e7:6d:60:cc:a2:9e:da:17:cf:54:28:f9:a3:03:04: 78:f3:6b:5e:f6:7f:aa:45:e9:d2:21:fb:11:62:5a: 7f:93:d2:b4:19:84:4c:42:64:2a:e7:4c:65:b3:20: bb:5f:29:30:2d:d2:c9:cd:a1:1c:bc:ed:fc:ae:52: 81:3d:47:f0:5d:00:26:d9:f6:00:9a:b7:26:cb:d5: e2:4e:be:c0:0a:2e:63:b6:1d:70:4e:47:f4:6d:36: 19:32:c8:4d:37:b4:5e:a0:46:d3:70:0b:2e:e0:71: f0:92:09:d7:ee:cc:aa:6c:1c:b0:1d:2b:1e:b4:d1: 75:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E6:C1:5E:0C:AA:BA:19:4A:C1:EA:F7:EF:18:2F:94:D9:72:5D:CF X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TubBXgyquhlKwer37xgvlNlyXc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:2f00:152::/48 Signature Algorithm: sha256WithRSAEncryption 8f:3f:9a:24:33:1b:9f:29:a5:92:65:32:2d:08:b2:67:ec:23: 54:c1:c2:c4:c8:d3:87:d7:bb:22:21:4e:0f:a4:c6:cc:13:9e: 95:a4:0f:d4:a5:30:a8:a2:37:ee:1d:ec:81:4d:aa:96:7a:c1: f8:60:38:86:86:70:5d:45:a6:20:0d:c1:f9:47:d1:20:6b:b3: 5f:6e:d5:01:15:c6:ff:b5:c2:4d:e7:21:f7:fd:9a:e3:23:f3: 37:b0:36:39:e7:42:83:cb:99:fa:19:f0:32:ac:b5:a3:35:c8: cc:05:c4:e4:36:2f:3c:cc:1b:cd:95:63:92:72:90:ac:8c:cc: 4f:36:b0:f0:07:38:0e:96:e3:34:81:da:10:8a:90:2e:87:ab: 1f:f0:d9:bc:5b:5d:41:00:2a:22:bf:21:dc:20:14:fc:51:75: 02:9f:24:0d:f0:63:d3:62:6e:b4:c1:df:6f:e3:c3:6a:2b:b7: f4:66:db:37:da:a0:ba:a7:87:4a:90:97:dd:3c:f0:bd:1b:4c: 86:5d:ec:fa:c7:c3:9a:ca:7f:e6:72:3e:cf:06:d0:c2:a4:f0: e2:a4:f4:83:6d:3b:6b:3b:f5:e9:b7:fa:32:e8:d9:46:67:03: e2:41:94:78:a0:ed:81:ee:5a:a2:44:fb:01:d9:b5:89:6f:f2: a0:a9:e0:c1 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZtmGtEEZEMt+7p3lfxB7EclMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjUxMjI4MTc1NjMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWU2YzE1ZTBjYWFiYTE5NGFjMWVhZjdlZjE4MmY5NGQ5NzI1ZGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1G4/Cd9gYHSOOcCqhkzqk1Dmf1A W8Vr3LlgKqFpiHUpxZ8EaOz7rQXtcu2Relhva3YeDDk1zmavhjRYoB7Y4xpsJJn4 S0hSOdqpSjdR69r7qogrqM6yy4Zz38uX5HZ+5ShvHJ2u4PHhAP9miO0+oDArhXF+ /DTAFxSCWrqCTCs39a55CdLnbWDMop7aF89UKPmjAwR482te9n+qRenSIfsRYlp/ k9K0GYRMQmQq50xlsyC7XykwLdLJzaEcvO38rlKBPUfwXQAm2fYAmrcmy9XiTr7A Ci5jth1wTkf0bTYZMshNN7ReoEbTcAsu4HHwkgnX7syqbBywHSsetNF1FwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFE7mwV4MqroZSsHq9+8YL5TZcl3PMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvVHViQlhneXF1aGxLd2VyMzd4Z3ZsTmx5WGM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAvAAFS MA0GCSqGSIb3DQEBCwUAA4IBAQCPP5okMxufKaWSZTItCLJn7CNUwcLEyNOH17si IU4PpMbME56VpA/UpTCoojfuHeyBTaqWesH4YDiGhnBdRaYgDcH5R9Ega7NfbtUB Fcb/tcJN5yH3/ZrjI/M3sDY550KDy5n6GfAyrLWjNcjMBcTkNi88zBvNlWOScpCs jMxPNrDwBzgOluM0gdoQipAuh6sf8Nm8W11BACoivyHcIBT8UXUCnyQN8GPTYm60 wd9v48NqK7f0Zts32qC6p4dKkJfdPPC9G0yGXez6x8Oayn/mcj7PBtDCpPDipPSD bTtrO/Xpt/oy6NlGZwPiQZR4oO2B7lqiRPsB2bWJb/KgqeDB -----END CERTIFICATE-----Generated at Wed Dec 31 12:45:33 2025 by rpki-client