This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/V-8A4YkSuo5EyBMQdiCxIXcHxkE.roa File: V-8A4YkSuo5EyBMQdiCxIXcHxkE.roa (raw, json) Hash identifier: Z1xzlbSkXhKoGGU28qnG4iZ/nwHbUOpEJHuU1sNE7ck= Subject key identifier: 57:EF:00:E1:89:12:BA:8E:44:C8:13:10:76:20:B1:21:77:07:C6:41 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D1A85415743E4688DCCFDA3C33F0B Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/V-8A4YkSuo5EyBMQdiCxIXcHxkE.roa Signing time: Fri 02 Jan 2026 06:20:12 +0000 ROA not before: Fri 02 Jan 2026 06:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209218 IP address blocks: 2a0e:b107:a0::/44 maxlen: 48 2a0e:b107:ab::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 17:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:1a:85:41:57:43:e4:68:8d:cc:fd:a3:c3:3f:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57ef00e18912ba8e44c813107620b1217707c641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:68:45:07:0c:42:ea:c6:e6:a0:92:d7:30:b1: 2c:67:20:1b:5c:7f:43:88:d0:6c:91:08:73:79:89: ac:0b:34:91:03:c1:28:bb:60:75:af:b6:bf:87:68: 2e:4c:15:58:f2:8b:4e:05:f0:3e:c4:0f:64:fb:b6: 8d:02:ce:db:8b:e0:40:47:8c:0f:4d:43:63:82:81: c9:e0:a3:5a:c2:d8:44:64:b4:69:4d:7b:51:e2:7a: b0:d7:7d:6e:f7:05:e0:be:d0:91:c8:47:a9:93:54: 2d:5f:16:be:7b:53:a6:1b:b9:92:17:b8:b7:35:0b: 4b:9b:5d:30:d0:49:ce:4a:e1:56:7f:a3:ad:09:18: 3f:50:07:e4:0c:49:21:4d:3f:1a:93:52:e9:fa:b3: 0d:95:ec:b4:48:63:2c:4a:0d:cd:9b:9b:b3:75:70: 51:e5:6d:e6:ba:fe:62:e7:2d:a0:e5:4c:ad:78:0b: ad:59:d4:0a:4e:34:e2:c0:f2:d0:57:27:dc:8a:f4: 78:5e:42:bd:e3:ec:80:d5:6c:d6:db:85:52:1a:89: c0:08:31:4e:42:aa:05:15:d6:be:e7:fb:00:59:39: 7c:65:bb:01:aa:00:6d:1c:a6:a5:a1:45:91:83:62: 30:cb:92:f0:7d:77:4d:b0:f9:5a:06:95:9f:51:0f: 38:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:EF:00:E1:89:12:BA:8E:44:C8:13:10:76:20:B1:21:77:07:C6:41 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/V-8A4YkSuo5EyBMQdiCxIXcHxkE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:a0::/44 Signature Algorithm: sha256WithRSAEncryption 7d:ef:a4:90:e3:99:da:24:5e:e0:d2:2f:b0:0d:b3:f1:e5:db: 19:9b:f7:fb:17:ee:69:5c:1e:ff:2c:f3:c0:44:2d:1d:86:70: 08:97:6f:8e:e1:98:ac:ba:14:7e:0d:de:35:63:5b:5c:02:dc: b0:a0:71:77:dc:e9:d9:3d:96:3d:be:06:a8:ba:bf:06:dc:e8: 4f:e4:5b:41:c2:ca:77:40:e2:4b:a7:5c:11:61:db:a9:b8:64: 13:7b:4a:c3:e1:08:0c:eb:ec:c5:67:ca:93:e1:bf:dd:a9:43: e2:74:12:25:22:e1:48:a8:e5:fc:be:59:e6:81:ee:04:a3:2f: 8c:9d:39:ff:10:5b:85:16:ab:63:d4:8c:5f:c0:ed:34:d1:ca: 44:d3:cc:43:a0:29:b4:25:96:9f:ef:54:fa:e2:64:ad:b3:f2: 18:5a:91:6d:17:67:06:a5:d2:98:33:c2:2e:7e:3c:c2:2d:50: a6:06:d2:bc:5b:66:e4:d8:da:23:ac:70:ff:c1:3d:06:78:3c: b1:d5:47:e1:2c:0a:08:c7:4d:1c:09:35:61:83:e1:e6:20:28: a1:02:f0:bc:2c:3e:d0:02:2e:88:10:11:2a:21:88:64:6a:ee: 7a:62:03:bf:42:14:09:ae:99:e1:99:d3:2f:4b:cc:04:0c:af: fb:17:a9:28 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XRqFQVdD5GiNzP2jwz8LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2VmMDBlMTg5MTJiYThlNDRjODEzMTA3NjIwYjEyMTc3MDdjNjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GhFBwxC6sbmoJLXMLEsZyAbXH9D iNBskQhzeYmsCzSRA8Eou2B1r7a/h2guTBVY8otOBfA+xA9k+7aNAs7bi+BAR4wP TUNjgoHJ4KNawthEZLRpTXtR4nqw131u9wXgvtCRyEepk1QtXxa+e1OmG7mSF7i3 NQtLm10w0EnOSuFWf6OtCRg/UAfkDEkhTT8ak1Lp+rMNley0SGMsSg3Nm5uzdXBR 5W3muv5i5y2g5UyteAutWdQKTjTiwPLQVyfcivR4XkK94+yA1WzW24VSGonACDFO QqoFFda+5/sAWTl8ZbsBqgBtHKaloUWRg2Iwy5LwfXdNsPlaBpWfUQ84qQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFfvAOGJErqORMgTEHYgsSF3B8ZBMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvVi04QTRZa1N1bzVFeUJNUWRpQ3hJWGNIeGtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBwCg MA0GCSqGSIb3DQEBCwUAA4IBAQB976SQ45naJF7g0i+wDbPx5dsZm/f7F+5pXB7/ LPPARC0dhnAIl2+O4ZisuhR+Dd41Y1tcAtywoHF33OnZPZY9vgaour8G3OhP5FtB wsp3QOJLp1wRYdupuGQTe0rD4QgM6+zFZ8qT4b/dqUPidBIlIuFIqOX8vlnmge4E oy+MnTn/EFuFFqtj1IxfwO000cpE08xDoCm0JZaf71T64mSts/IYWpFtF2cGpdKY M8IufjzCLVCmBtK8W2bk2NojrHD/wT0GeDyx1UfhLAoIx00cCTVhg+HmICihAvC8 LD7QAi6IEBEqIYhkau56YgO/QhQJrpnhmdMvS8wEDK/7F6ko -----END CERTIFICATE-----Generated at Sat Jan 10 02:18:48 2026 by rpki-client