This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XrkBwWKj_aM8yHLMQhyM3B2eyfY.roa File: XrkBwWKj_aM8yHLMQhyM3B2eyfY.roa (raw, json) Hash identifier: F5rGJNesac1s3A71Vgeuq3rwH76yCOY68Nk2UGSyUXw= Subject key identifier: 5E:B9:01:C1:62:A3:FD:A3:3C:C8:72:CC:42:1C:8C:DC:1D:9E:C9:F6 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019BA272E02927ABBA7FE1556E7B8814819D Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XrkBwWKj_aM8yHLMQhyM3B2eyfY.roa Signing time: Fri 09 Jan 2026 11:09:56 +0000 ROA not before: Fri 09 Jan 2026 11:09:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202473 IP address blocks: 2a0e:97c0:9e0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:72:e0:29:27:ab:ba:7f:e1:55:6e:7b:88:14:81:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 9 11:09:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5eb901c162a3fda33cc872cc421c8cdc1d9ec9f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:50:8a:e8:b6:76:68:b6:ac:13:29:6e:81:3f: 6b:fc:74:9d:fd:d6:59:35:0b:c6:2c:b7:c7:0d:f4: f8:d1:47:1d:36:a5:02:88:07:fc:bd:aa:c0:88:de: 09:eb:ab:c9:09:d6:b0:14:d5:a6:db:6d:cd:70:d1: 2f:38:c9:33:26:38:2e:4d:9e:fa:06:6c:d7:4d:34: af:bf:d9:1b:ba:2a:e2:26:69:b1:b2:92:a6:ab:fb: d1:31:7c:77:66:ce:a1:6a:b5:fa:e8:29:7a:3a:e2: dd:dc:fe:53:bc:fc:ec:4c:a3:e8:30:6e:95:03:f0: db:80:ec:8f:f5:d4:df:79:63:de:fd:6b:4c:ed:2a: 73:98:4d:27:11:80:5a:51:1c:8b:86:1e:bc:4a:36: ce:3b:de:be:6f:6f:26:68:70:94:5e:55:56:ca:12: f8:10:cd:7f:c7:19:b9:cf:a5:db:dc:b7:f9:2c:71: e9:6f:ba:e4:4d:87:4a:8b:3a:1e:09:66:32:9e:59: f6:49:7f:b6:b3:07:f2:ee:8c:6d:1c:31:5a:dd:d3: e6:fe:51:e3:2a:41:e3:ec:9e:02:85:25:da:47:f4: 19:b7:be:64:ac:cd:3d:97:46:1f:b8:ae:7f:14:68: c1:c1:a0:fb:5b:05:e9:4f:5e:73:57:90:1d:e5:41: 46:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B9:01:C1:62:A3:FD:A3:3C:C8:72:CC:42:1C:8C:DC:1D:9E:C9:F6 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XrkBwWKj_aM8yHLMQhyM3B2eyfY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:9e0::/44 Signature Algorithm: sha256WithRSAEncryption 61:f4:5c:e7:14:65:4b:f2:ef:0e:72:3c:5f:da:7a:0c:c7:40: 1e:af:40:63:b2:65:58:6e:3e:94:a6:bc:f0:5a:2f:fd:67:e9: b4:3e:d6:a2:8c:a0:7e:70:54:7f:f1:1f:7f:04:d8:76:44:42: 42:4d:60:97:1b:02:3d:ba:af:d6:00:b1:ca:68:7f:6e:b8:74: a0:50:ee:56:5a:c6:73:4a:76:77:44:81:bf:c1:e1:26:94:f1: 0f:1c:7c:4a:fb:29:a1:19:6a:98:a3:c2:e8:83:91:f1:7b:3a: 8b:6b:80:f3:15:e7:2a:95:b2:b5:c4:97:8c:ac:b6:42:db:99: 25:03:72:69:46:7a:63:98:67:90:43:c0:21:96:d5:ab:ad:0b: 12:00:85:c8:b7:b1:d0:20:44:e7:48:cb:9e:74:e1:c9:89:ff: f3:5c:c5:b9:52:11:22:56:c7:d0:69:09:db:c7:1a:77:fb:bf: c3:99:a4:c4:94:3c:e6:b4:6b:15:a5:4e:e0:e8:c3:9c:95:87: 17:50:2f:43:56:43:6d:47:19:f8:35:b0:bd:f3:ea:60:ec:76: 5d:7e:fc:91:30:20:d9:c0:43:b8:61:2d:37:60:39:3f:48:13: d9:17:fb:1a:40:38:19:a6:8e:56:51:b2:ff:ae:06:a1:4e:e2: 3a:57:1d:bb -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZuicuApJ6u6f+FVbnuIFIGdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTA5MTEwOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWI5MDFjMTYyYTNmZGEzM2NjODcyY2M0MjFjOGNkYzFkOWVjOWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1CK6LZ2aLasEylugT9r/HSd/dZZ NQvGLLfHDfT40UcdNqUCiAf8varAiN4J66vJCdawFNWm223NcNEvOMkzJjguTZ76 BmzXTTSvv9kbuiriJmmxspKmq/vRMXx3Zs6harX66Cl6OuLd3P5TvPzsTKPoMG6V A/DbgOyP9dTfeWPe/WtM7SpzmE0nEYBaURyLhh68SjbOO96+b28maHCUXlVWyhL4 EM1/xxm5z6Xb3Lf5LHHpb7rkTYdKizoeCWYynln2SX+2swfy7oxtHDFa3dPm/lHj KkHj7J4ChSXaR/QZt75krM09l0YfuK5/FGjBwaD7WwXpT15zV5Ad5UFGewIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFF65AcFio/2jPMhyzEIcjNwdnsn2MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvWHJrQndXS2pfYU04eUhMTVFoeU0zQjJleWZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAng MA0GCSqGSIb3DQEBCwUAA4IBAQBh9FznFGVL8u8Ocjxf2noMx0Aer0BjsmVYbj6U przwWi/9Z+m0PtaijKB+cFR/8R9/BNh2REJCTWCXGwI9uq/WALHKaH9uuHSgUO5W WsZzSnZ3RIG/weEmlPEPHHxK+ymhGWqYo8Log5HxezqLa4DzFecqlbK1xJeMrLZC 25klA3JpRnpjmGeQQ8AhltWrrQsSAIXIt7HQIETnSMuedOHJif/zXMW5UhEiVsfQ aQnbxxp3+7/DmaTElDzmtGsVpU7g6MOclYcXUC9DVkNtRxn4NbC98+pg7HZdfvyR MCDZwEO4YS03YDk/SBPZF/saQDgZpo5WUbL/rgahTuI6Vx27 -----END CERTIFICATE-----Generated at Mon Jan 12 01:05:10 2026 by rpki-client