This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VCdPoO1JjliSVck2yg9YEC9QZj0.roa File: VCdPoO1JjliSVck2yg9YEC9QZj0.roa (raw, json) Hash identifier: vLvO8SD/FHDXxKMcltZHYj9f8aaYS7hxhXI3HLPbiXo= Subject key identifier: 54:27:4F:A0:ED:49:8E:58:92:55:C9:36:CA:0F:58:10:2F:50:66:3D Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CD431D519616D5936B30A5B54F206 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VCdPoO1JjliSVck2yg9YEC9QZj0.roa Signing time: Fri 02 Jan 2026 06:19:54 +0000 ROA not before: Fri 02 Jan 2026 06:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197071 IP address blocks: 2a0e:97c0:3e2::/48 maxlen: 48 2a0e:97c0:3e4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d4:31:d5:19:61:6d:59:36:b3:0a:5b:54:f2:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54274fa0ed498e589255c936ca0f58102f50663d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ea:b1:f0:ac:0b:cd:aa:06:2b:6a:9e:67:a8: 94:36:51:69:e6:41:7e:a6:8a:8f:9a:d3:19:23:d9: 31:2b:56:69:7e:0d:4f:14:b8:2f:57:cc:89:d9:8b: cd:b0:83:00:63:53:3e:57:be:71:ce:06:d3:a4:df: c7:94:01:33:7a:cc:44:5b:81:ce:55:b3:42:5d:ea: ca:bc:10:d0:fc:7d:ff:11:ab:c2:99:63:04:ca:90: 86:3e:a5:66:21:a3:49:cf:3f:8c:9d:9e:6c:ad:67: eb:16:58:25:1f:c4:dc:3f:25:a9:98:d3:86:87:c3: 9a:48:5d:70:4c:3a:9f:52:17:46:46:8a:b3:1a:f6: ea:f3:8b:33:03:36:46:00:a9:af:77:43:f5:f0:a8: 31:29:af:0e:f2:b3:bd:42:03:e2:c7:8a:1d:f1:1e: 72:2c:3c:4f:77:5f:e4:6f:03:3e:30:83:21:e2:2d: 2c:21:03:de:05:73:81:3e:7e:e9:1e:48:fe:73:66: f0:cd:69:f2:f9:f2:75:e7:cf:23:25:17:ce:e8:0a: 61:a4:34:a4:9d:c3:f6:44:7a:e1:70:62:69:f1:f6: eb:cc:ea:2e:b9:09:35:d6:57:48:de:db:13:5a:37: 95:d2:2a:b7:da:2d:0b:53:bb:9e:ff:c2:d4:c1:df: 76:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:27:4F:A0:ED:49:8E:58:92:55:C9:36:CA:0F:58:10:2F:50:66:3D X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VCdPoO1JjliSVck2yg9YEC9QZj0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:3e2::/48 2a0e:97c0:3e4::/48 Signature Algorithm: sha256WithRSAEncryption 44:ca:28:3e:c9:03:9e:aa:de:08:fb:40:b9:3c:04:1a:80:a6: 91:35:2f:78:f3:b3:51:7a:48:31:4e:2f:ed:58:20:7d:13:f1: 55:28:2f:c6:57:1c:d2:80:40:ad:be:af:a6:31:14:b5:98:21: 0f:8c:6b:63:45:0b:1f:6a:75:03:a9:38:e9:fb:75:85:b0:b7: f9:a8:f1:9a:96:63:6d:3a:da:df:35:d6:71:da:d1:2c:58:d3: 7c:7f:b1:61:de:21:46:34:d9:14:d3:ee:db:fe:35:a0:8d:77: 2b:69:33:eb:2c:80:5a:25:f8:3c:e4:4d:04:11:d5:bb:3c:84: e6:6a:94:7d:4b:26:c5:35:86:66:45:cc:70:b8:8a:b5:02:95: e8:2a:dd:4f:a8:41:c1:74:ee:d0:3a:37:f2:40:b7:ba:e6:a9: 9f:4e:b0:f7:e5:49:04:41:e6:7f:7b:04:f0:25:25:8f:56:ac: 21:91:4c:4a:c8:e9:d1:8b:90:43:2b:41:36:99:6b:39:76:ec: c4:04:96:6c:13:d9:4e:fe:ab:bd:bc:49:e9:88:3d:d6:29:a3: 9c:01:b1:cb:73:ec:c2:9c:96:ad:55:91:14:be:f6:36:5f:7b: fb:e6:eb:f8:85:6a:c5:be:61:64:b4:0d:39:cc:b1:9c:a5:d5: b5:1b:8a:f9 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XNQx1RlhbVk2swpbVPIGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDI3NGZhMGVkNDk4ZTU4OTI1NWM5MzZjYTBmNTgxMDJmNTA2NjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+qx8KwLzaoGK2qeZ6iUNlFp5kF+ poqPmtMZI9kxK1Zpfg1PFLgvV8yJ2YvNsIMAY1M+V75xzgbTpN/HlAEzesxEW4HO VbNCXerKvBDQ/H3/EavCmWMEypCGPqVmIaNJzz+MnZ5srWfrFlglH8TcPyWpmNOG h8OaSF1wTDqfUhdGRoqzGvbq84szAzZGAKmvd0P18KgxKa8O8rO9QgPix4od8R5y LDxPd1/kbwM+MIMh4i0sIQPeBXOBPn7pHkj+c2bwzWny+fJ1588jJRfO6AphpDSk ncP2RHrhcGJp8fbrzOouuQk11ldI3tsTWjeV0iq32i0LU7ue/8LUwd92+QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFQnT6DtSY5YklXJNsoPWBAvUGY9MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvVkNkUG9PMUpqbGlTVmNrMnlnOVlFQzlRWmowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg6XwAPi AwcAKg6XwAPkMA0GCSqGSIb3DQEBCwUAA4IBAQBEyig+yQOeqt4I+0C5PAQagKaR NS9487NRekgxTi/tWCB9E/FVKC/GVxzSgECtvq+mMRS1mCEPjGtjRQsfanUDqTjp +3WFsLf5qPGalmNtOtrfNdZx2tEsWNN8f7Fh3iFGNNkU0+7b/jWgjXcraTPrLIBa Jfg85E0EEdW7PITmapR9SybFNYZmRcxwuIq1ApXoKt1PqEHBdO7QOjfyQLe65qmf TrD35UkEQeZ/ewTwJSWPVqwhkUxKyOnRi5BDK0E2mWs5duzEBJZsE9lO/qu9vEnp iD3WKaOcAbHLc+zCnJatVZEUvvY2X3v75uv4hWrFvmFktA05zLGcpdW1G4r5 -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:24 2026 by rpki-client