This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/V-fMCa6TgMtTCiouAPsaCSo_Og4.roa File: V-fMCa6TgMtTCiouAPsaCSo_Og4.roa (raw, json) Hash identifier: Hew6Dg9HCpdyvpOhbcvjRRfyF/w7IWuFELm3ESDRVR0= Subject key identifier: 57:E7:CC:09:AE:93:80:CB:53:0A:2A:2E:00:FB:1A:09:2A:3F:3A:0E Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D3C78D4E7021D0F1D0D8A570C2C8E Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/V-fMCa6TgMtTCiouAPsaCSo_Og4.roa Signing time: Fri 02 Jan 2026 06:20:20 +0000 ROA not before: Fri 02 Jan 2026 06:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211293 IP address blocks: 2a0e:b107:2190::/48 maxlen: 48 2a0e:b107:2191::/48 maxlen: 48 2a0e:b107:2192::/48 maxlen: 48 2a0e:b107:2193::/48 maxlen: 48 2a0e:b107:2194::/48 maxlen: 48 2a0e:b107:2195::/48 maxlen: 48 2a0e:b107:2196::/48 maxlen: 48 2a0e:b107:2197::/48 maxlen: 48 2a0e:b107:2198::/48 maxlen: 48 2a0e:b107:2199::/48 maxlen: 48 2a0e:b107:219a::/48 maxlen: 48 2a0e:b107:219b::/48 maxlen: 48 2a0e:b107:219c::/48 maxlen: 48 2a0e:b107:219d::/48 maxlen: 48 2a0e:b107:219f::/48 maxlen: 48 2a0e:b107:21c0::/44 maxlen: 48 2a0e:b107:21c0::/45 maxlen: 48 2a0e:b107:2220::/45 maxlen: 48 2a0e:b107:2228::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:3c:78:d4:e7:02:1d:0f:1d:0d:8a:57:0c:2c:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57e7cc09ae9380cb530a2a2e00fb1a092a3f3a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:76:3b:5b:1c:f5:7a:ea:ec:d6:c2:e5:49:5b: ae:b0:aa:da:a5:2b:2f:cc:9d:43:d9:1a:2f:2f:5e: 24:5d:81:fe:2b:c5:e4:ff:5a:31:52:7d:43:b9:6a: 1a:f6:5f:31:2b:ba:d1:a9:3f:88:99:83:68:b7:4c: de:61:e7:56:fc:36:89:22:10:84:fe:a9:05:36:89: 80:8b:3a:68:de:6e:34:b5:6b:42:38:3a:d1:83:e0: 83:79:de:2f:68:af:fd:e7:7c:bc:81:bf:0d:79:89: 07:c9:75:e7:1b:e0:75:7f:fa:3e:b4:5f:d7:a1:0b: eb:91:31:25:51:a7:f7:54:d1:17:78:b4:8d:55:df: 70:2c:18:f4:ca:14:a0:87:55:a5:2f:cb:da:ee:7c: 71:03:4d:e5:04:de:d7:76:50:c1:d1:00:a2:fc:32: 2d:0a:10:0e:31:ce:71:7c:2d:e8:fe:81:11:b8:8e: 06:f1:39:54:3c:a4:b0:3a:a1:b7:f8:ec:57:76:db: c1:5f:61:92:0b:77:24:1f:ce:4f:bd:d2:23:ec:1b: 46:b0:42:e7:28:cd:65:1b:b1:50:24:b6:31:34:0d: 4e:10:f5:86:4f:60:9f:0e:1a:bd:ce:4c:36:0d:22: e8:e2:1c:e3:40:b4:08:e7:8e:e2:6a:ed:9c:96:28: 91:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E7:CC:09:AE:93:80:CB:53:0A:2A:2E:00:FB:1A:09:2A:3F:3A:0E X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/V-fMCa6TgMtTCiouAPsaCSo_Og4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:2190::-2a0e:b107:219d:ffff:ffff:ffff:ffff:ffff 2a0e:b107:219f::/48 2a0e:b107:21c0::/44 2a0e:b107:2220::/44 Signature Algorithm: sha256WithRSAEncryption af:fc:fb:99:4e:1a:8d:58:71:29:33:e3:e2:fe:62:c7:49:f6: fb:e3:5a:b1:5a:5d:67:93:f0:5d:72:5e:9b:7d:6e:2b:7d:c2: 1e:67:95:9c:9e:08:04:70:76:1b:e2:cc:97:4a:30:7f:8b:da: 45:cc:05:8c:fb:b4:bc:80:ce:90:4b:d9:b0:ee:d5:a1:3c:a1: 27:d0:4f:7f:6d:c8:9b:13:2b:5c:82:21:2f:98:78:86:a3:b2: bb:a4:43:4a:79:8d:55:63:e0:01:b1:a1:a4:86:cd:ec:e2:81: 75:e8:46:50:01:58:e5:c0:75:f7:57:dd:51:89:c4:ce:b1:cd: cf:b1:4e:76:12:ac:c0:d8:e5:65:be:2b:a1:22:6c:8a:ba:ab: 0e:68:e8:ca:4c:26:e9:70:87:7f:70:98:c6:1b:e2:10:a1:48: 12:4e:e1:d9:c4:8d:0e:65:02:fd:fe:c6:b6:05:7a:9a:18:68: cc:86:47:ae:26:90:39:ad:48:46:b1:29:17:0e:ee:a9:dc:4e: 48:16:1d:fa:bd:d4:1d:43:b2:b2:0d:2e:ce:44:6f:91:e6:0d: 61:d5:98:ad:4e:9b:dc:c0:3c:30:b7:8e:0d:f8:d1:c7:aa:1a: fe:1a:86:87:d8:e0:8c:58:af:06:65:e7:94:08:47:a6:39:c0: b9:af:0d:f8 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt9XTx41OcCHQ8dDYpXDCyOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2U3Y2MwOWFlOTM4MGNiNTMwYTJhMmUwMGZiMWEwOTJhM2YzYTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXY7Wxz1eurs1sLlSVuusKrapSsv zJ1D2RovL14kXYH+K8Xk/1oxUn1DuWoa9l8xK7rRqT+ImYNot0zeYedW/DaJIhCE /qkFNomAizpo3m40tWtCODrRg+CDed4vaK/953y8gb8NeYkHyXXnG+B1f/o+tF/X oQvrkTElUaf3VNEXeLSNVd9wLBj0yhSgh1WlL8va7nxxA03lBN7XdlDB0QCi/DIt ChAOMc5xfC3o/oERuI4G8TlUPKSwOqG3+OxXdtvBX2GSC3ckH85PvdIj7BtGsELn KM1lG7FQJLYxNA1OEPWGT2CfDhq9zkw2DSLo4hzjQLQI547iau2cliiRewIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFFfnzAmuk4DLUwoqLgD7GgkqPzoOMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvVi1mTUNhNlRnTXRUQ2lvdUFQc2FDU29fT2c0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzA1BAIAAjAvMBIDBwQqDrEH IZADBwEqDrEHIZwDBwAqDrEHIZ8DBwQqDrEHIcADBwQqDrEHIiAwDQYJKoZIhvcN AQELBQADggEBAK/8+5lOGo1YcSkz4+L+YsdJ9vvjWrFaXWeT8F1yXpt9bit9wh5n lZyeCARwdhvizJdKMH+L2kXMBYz7tLyAzpBL2bDu1aE8oSfQT39tyJsTK1yCIS+Y eIajsrukQ0p5jVVj4AGxoaSGzezigXXoRlABWOXAdfdX3VGJxM6xzc+xTnYSrMDY 5WW+K6EibIq6qw5o6MpMJulwh39wmMYb4hChSBJO4dnEjQ5lAv3+xrYFepoYaMyG R64mkDmtSEaxKRcO7qncTkgWHfq91B1DsrINLs5Eb5HmDWHVmK1Om9zAPDC3jg34 0ceqGv4ahofY4IxYrwZl55QIR6Y5wLmvDfg= -----END CERTIFICATE-----Generated at Fri Jan 9 13:12:02 2026 by rpki-client