This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VgVjyJBnH6_hVjKlslW0Jd-QY5U.roa File: VgVjyJBnH6_hVjKlslW0Jd-QY5U.roa (raw, json) Hash identifier: KrAH6BhXTRK3Sv6fyndb4caKwY4MvQQb7VHSoA/xQRg= Subject key identifier: 56:05:63:C8:90:67:1F:AF:E1:56:32:A5:B2:55:B4:25:DF:90:63:95 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D1965713AE079FB11004D0EAD8C52 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VgVjyJBnH6_hVjKlslW0Jd-QY5U.roa Signing time: Fri 02 Jan 2026 06:20:11 +0000 ROA not before: Fri 02 Jan 2026 06:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209101 IP address blocks: 2a0e:b107:510::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:19:65:71:3a:e0:79:fb:11:00:4d:0e:ad:8c:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=560563c890671fafe15632a5b255b425df906395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3a:8e:23:dc:0c:59:df:2a:27:eb:ce:40:5d: 9b:fa:99:ba:89:c5:99:67:9f:f0:b9:c8:a0:f8:fe: 46:61:cb:a5:96:4d:09:3a:9c:85:10:ab:03:69:2b: 8a:30:77:a9:df:96:02:e2:36:bc:83:39:8a:62:84: 8a:6e:c3:0a:e4:0c:3b:dd:1f:e1:c3:4d:35:a1:af: ad:fe:37:63:ff:00:eb:c4:09:60:41:39:3e:46:d3: 8d:23:e6:eb:55:91:cc:06:ab:53:f4:13:aa:22:bd: 7d:07:78:6a:9b:d1:a9:34:e9:96:5f:a9:38:8e:89: ef:b4:f3:49:72:37:a9:11:2f:6d:4f:e0:d5:23:71: 1e:7f:fe:7f:99:a0:64:8a:84:56:e2:84:e0:03:ff: 9d:0c:23:f7:06:84:70:08:94:d7:5d:e7:43:64:17: 69:77:d7:23:45:6e:4f:81:37:a6:f1:f7:6a:86:e6: ca:5c:f9:39:20:55:ce:1d:13:67:3d:b8:b3:a5:76: b0:4a:0b:80:05:99:7d:34:01:d5:11:04:a8:c1:91: e5:79:4e:56:ae:0b:6f:5d:78:be:e4:89:a2:f0:3c: 9c:ee:dc:ca:84:e8:90:4d:99:30:c8:4a:37:6d:0a: 87:db:b2:75:b9:06:b9:9e:c4:8b:ca:95:53:da:b7: 09:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:05:63:C8:90:67:1F:AF:E1:56:32:A5:B2:55:B4:25:DF:90:63:95 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VgVjyJBnH6_hVjKlslW0Jd-QY5U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:510::/44 Signature Algorithm: sha256WithRSAEncryption 11:b9:b3:5a:94:bd:e6:41:a0:84:0a:e0:0c:8d:97:2a:2f:de: 57:87:5e:38:fa:61:10:0b:c5:f0:3d:17:2f:71:e2:19:ec:02: 1f:6d:db:be:05:7b:20:57:32:87:84:b1:6f:f7:7d:d8:76:fa: b7:ad:0c:6e:da:cb:bc:a4:4b:1e:43:6b:ac:66:83:6f:91:1c: 72:6f:f0:92:0c:d1:42:f6:00:c7:23:57:7d:12:7a:86:08:40: f9:71:42:93:18:52:06:e8:e5:71:39:45:4b:2a:40:f2:ef:fb: 0a:88:b0:65:9d:33:7c:e4:3b:60:e8:e8:e7:3f:4a:b6:bc:49: 3d:3c:5c:0b:54:44:6c:89:fd:78:62:61:68:51:44:28:2b:9a: 1d:ae:2a:de:bc:c7:5a:4c:46:4e:99:59:fb:04:56:97:ed:12: b8:3b:82:17:f7:ce:80:84:51:fb:9c:4a:c7:cc:ff:39:9f:4e: 91:78:50:03:d0:38:15:aa:7f:6e:c4:20:2f:fa:da:4f:48:5d: e5:f9:ad:db:9a:90:1c:34:94:af:50:74:ac:6f:0e:d1:2c:f4: 63:b0:96:e5:80:0e:fc:ab:85:6b:50:1d:ea:d1:80:be:cf:86: 02:2c:4a:0a:9a:82:4c:62:c2:08:13:8f:76:ae:7f:ed:f1:57: 56:bf:00:f4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XRllcTrgefsRAE0OrYxSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjA1NjNjODkwNjcxZmFmZTE1NjMyYTViMjU1YjQyNWRmOTA2Mzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszqOI9wMWd8qJ+vOQF2b+pm6icWZ Z5/wucig+P5GYcullk0JOpyFEKsDaSuKMHep35YC4ja8gzmKYoSKbsMK5Aw73R/h w001oa+t/jdj/wDrxAlgQTk+RtONI+brVZHMBqtT9BOqIr19B3hqm9GpNOmWX6k4 jonvtPNJcjepES9tT+DVI3Eef/5/maBkioRW4oTgA/+dDCP3BoRwCJTXXedDZBdp d9cjRW5PgTem8fdqhubKXPk5IFXOHRNnPbizpXawSguABZl9NAHVEQSowZHleU5W rgtvXXi+5Imi8Dyc7tzKhOiQTZkwyEo3bQqH27J1uQa5nsSLypVT2rcJ0wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFYFY8iQZx+v4VYypbJVtCXfkGOVMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvVmdWanlKQm5INl9oVmpLbHNsVzBKZC1RWTVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBwUQ MA0GCSqGSIb3DQEBCwUAA4IBAQARubNalL3mQaCECuAMjZcqL95Xh144+mEQC8Xw PRcvceIZ7AIfbdu+BXsgVzKHhLFv933Ydvq3rQxu2su8pEseQ2usZoNvkRxyb/CS DNFC9gDHI1d9EnqGCED5cUKTGFIG6OVxOUVLKkDy7/sKiLBlnTN85Dtg6OjnP0q2 vEk9PFwLVERsif14YmFoUUQoK5odrirevMdaTEZOmVn7BFaX7RK4O4IX986AhFH7 nErHzP85n06ReFAD0DgVqn9uxCAv+tpPSF3l+a3bmpAcNJSvUHSsbw7RLPRjsJbl gA78q4VrUB3q0YC+z4YCLEoKmoJMYsIIE492rn/t8VdWvwD0 -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:46 2026 by rpki-client