This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/U5OuwJginDzgDLK_3FmH6KVNRv4.roa File: U5OuwJginDzgDLK_3FmH6KVNRv4.roa (raw, json) Hash identifier: w4GtCes13H1ld0RdLdL6foUeUbOTlNtmQLfIHkFKM+g= Subject key identifier: 53:93:AE:C0:98:22:9C:3C:E0:0C:B2:BF:DC:59:87:E8:A5:4D:46:FE Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019BFBF8EBEBC0AA71F0B0E9D6DDC7D42926 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/U5OuwJginDzgDLK_3FmH6KVNRv4.roa Signing time: Mon 26 Jan 2026 20:22:33 +0000 ROA not before: Mon 26 Jan 2026 20:22:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 149977 IP address blocks: 2a0f:e404:105::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:f8:eb:eb:c0:aa:71:f0:b0:e9:d6:dd:c7:d4:29:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 26 20:22:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5393aec098229c3ce00cb2bfdc5987e8a54d46fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:43:83:d1:19:14:47:5e:8d:ae:f7:0d:43:b1: 5a:7c:22:10:76:40:87:08:18:7c:4b:1a:c3:72:f6: fb:57:59:8d:6d:3d:94:50:c4:8e:7f:24:d4:66:e4: 55:0b:62:0b:f5:1c:2a:8d:4a:a0:8d:f0:3c:4e:e4: 7f:77:37:f1:68:eb:0b:6b:e4:28:63:3d:35:91:56: ca:f7:84:90:3a:d7:d9:59:93:e2:ec:ad:08:58:c8: 76:e8:db:73:b8:e5:13:45:cf:11:b0:5e:4f:c9:23: c2:c3:84:15:fe:fa:32:59:8b:fe:9f:1c:bf:fe:67: ae:20:69:68:95:64:49:ac:5b:f4:ca:b2:40:83:29: 5c:ec:5c:22:58:58:16:f8:04:ae:3d:37:9f:f7:18: 5d:c6:9e:c5:10:2c:00:29:a2:c1:10:6f:c3:f2:02: fa:0d:73:e9:5c:f9:5d:51:64:b3:4e:f8:a7:b4:15: 6a:e7:27:3a:28:e7:20:33:2f:a1:a2:fd:f9:0f:41: ce:c7:8d:0e:40:ff:a8:a1:0a:cf:92:b4:c7:2b:9e: 99:05:a2:ec:73:2a:73:bc:0b:13:1c:1a:8f:fc:62: 7e:40:a5:82:b1:b6:33:01:39:34:d4:0a:72:fc:83: 1b:32:22:0f:89:d4:20:63:d3:cf:a0:70:49:d8:b9: bf:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:93:AE:C0:98:22:9C:3C:E0:0C:B2:BF:DC:59:87:E8:A5:4D:46:FE X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/U5OuwJginDzgDLK_3FmH6KVNRv4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:e404:105::/48 Signature Algorithm: sha256WithRSAEncryption 06:7d:2b:2b:74:11:a1:71:cb:81:b8:62:b0:3d:ab:e2:cc:d6: c1:46:1b:b3:5c:15:69:b7:53:b5:ae:61:89:65:91:fd:2e:45: 4d:30:d5:55:84:9f:99:64:b2:a8:3e:23:5f:e3:90:83:a9:17: de:f0:59:11:42:97:d0:aa:19:df:19:34:2b:ea:f3:2a:4d:b6: de:52:cf:d9:99:e3:0c:2c:58:f2:f9:14:d6:d4:a4:b9:2f:56: ae:f7:5c:5e:a3:1c:61:46:4e:a7:8a:7d:9d:d9:89:bb:6a:78: 4b:41:80:89:b7:10:3f:6c:55:e3:fa:d7:e5:4c:fe:3f:2c:e1: 0c:05:ee:a4:8c:12:fc:d4:c7:ec:17:19:da:76:dc:18:96:7f: 41:1a:27:45:ff:02:5e:40:35:19:95:3b:3d:20:71:41:c8:e7: 8e:6c:7d:57:4d:16:c6:dd:67:a2:81:26:99:fe:0d:8a:4d:1a: 6d:70:5e:09:d3:e7:df:f8:62:82:89:3a:fa:45:70:d3:4a:03: 9c:17:c2:73:1a:be:53:c7:2e:64:68:7a:5d:7a:8c:2c:0a:da: 0f:ba:9d:5f:c0:1e:f4:e5:08:f2:ed:53:96:24:c9:76:e0:1c: e2:8e:84:f3:46:a0:3e:6f:78:dc:8d:0a:f4:35:79:3f:a7:fb: 6c:db:6b:ae -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZv7+OvrwKpx8LDp1t3H1CkmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTI2MjAyMjMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzkzYWVjMDk4MjI5YzNjZTAwY2IyYmZkYzU5ODdlOGE1NGQ0NmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kOD0RkUR16NrvcNQ7FafCIQdkCH CBh8SxrDcvb7V1mNbT2UUMSOfyTUZuRVC2IL9RwqjUqgjfA8TuR/dzfxaOsLa+Qo Yz01kVbK94SQOtfZWZPi7K0IWMh26NtzuOUTRc8RsF5PySPCw4QV/voyWYv+nxy/ /meuIGlolWRJrFv0yrJAgylc7FwiWFgW+ASuPTef9xhdxp7FECwAKaLBEG/D8gL6 DXPpXPldUWSzTvintBVq5yc6KOcgMy+hov35D0HOx40OQP+ooQrPkrTHK56ZBaLs cypzvAsTHBqP/GJ+QKWCsbYzATk01Apy/IMbMiIPidQgY9PPoHBJ2Lm/PwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFOTrsCYIpw84Ayyv9xZh+ilTUb+MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvVTVPdXdKZ2luRHpnRExLXzNGbUg2S1ZOUnY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg/kBAEF MA0GCSqGSIb3DQEBCwUAA4IBAQAGfSsrdBGhccuBuGKwPavizNbBRhuzXBVpt1O1 rmGJZZH9LkVNMNVVhJ+ZZLKoPiNf45CDqRfe8FkRQpfQqhnfGTQr6vMqTbbeUs/Z meMMLFjy+RTW1KS5L1au91xeoxxhRk6nin2d2Ym7anhLQYCJtxA/bFXj+tflTP4/ LOEMBe6kjBL81MfsFxnadtwYln9BGidF/wJeQDUZlTs9IHFByOeObH1XTRbG3Wei gSaZ/g2KTRptcF4J0+ff+GKCiTr6RXDTSgOcF8JzGr5Txy5kaHpdeowsCtoPup1f wB705Qjy7VOWJMl24BzijoTzRqA+b3jcjQr0NXk/p/ts22uu -----END CERTIFICATE-----Generated at Tue Jan 27 07:18:26 2026 by rpki-client