This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y3zJQ_pF4f6ev2GkIWZFZz4YEwc.roa File: Y3zJQ_pF4f6ev2GkIWZFZz4YEwc.roa (raw, json) Hash identifier: mOYO0e/oUTdt3TAcVl9kP9mVdD5BlPP2m+rI2IoW9c4= Subject key identifier: 63:7C:C9:43:FA:45:E1:FE:9E:BF:61:A4:21:66:45:67:3E:18:13:07 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CADDF5E7B242F7A64579ED2846F3D Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y3zJQ_pF4f6ev2GkIWZFZz4YEwc.roa Signing time: Fri 02 Jan 2026 06:19:44 +0000 ROA not before: Fri 02 Jan 2026 06:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43607 IP address blocks: 2a0e:b107:28a4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ad:df:5e:7b:24:2f:7a:64:57:9e:d2:84:6f:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=637cc943fa45e1fe9ebf61a4216645673e181307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f6:a3:85:52:19:de:d7:49:de:9b:18:84:c7: c4:dc:3e:b1:ce:25:cd:bb:2f:5b:e8:66:9c:9f:41: 77:f1:88:bd:ac:84:4f:45:3f:ad:ec:05:63:f6:46: 39:00:0a:99:10:25:40:ee:14:ff:c9:00:eb:f0:93: 78:ef:90:f9:0d:c9:43:1e:d3:17:10:eb:ef:d8:94: d2:18:29:1a:91:b8:46:44:44:10:e5:bd:d7:43:26: d8:a2:12:29:b2:1c:39:69:37:ba:ea:b0:8f:1f:30: ad:6c:ab:da:45:20:76:e5:5d:1f:b0:6c:7d:1c:11: 1d:84:3f:88:9c:c9:2f:2f:36:da:b8:92:90:4f:7d: f3:40:b0:2d:80:c6:23:3a:6e:01:83:f4:c2:a5:48: 74:28:0b:33:97:3c:8c:3b:cf:cc:eb:83:44:a9:87: 28:29:1f:0f:05:7c:78:d3:11:4b:a5:4b:be:6f:e2: 60:75:e3:ab:53:48:d9:04:7a:96:ab:1d:c3:8d:d3: 5b:6a:28:41:e7:15:07:2e:50:1f:e2:75:df:dc:68: 76:93:55:b4:02:06:c7:96:17:28:47:06:25:fa:3d: 90:31:e1:36:ac:08:5b:e2:85:c1:34:1e:3d:3a:c0: ae:9d:90:f2:12:85:11:f8:54:31:0c:6b:a4:7f:0f: f0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:7C:C9:43:FA:45:E1:FE:9E:BF:61:A4:21:66:45:67:3E:18:13:07 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y3zJQ_pF4f6ev2GkIWZFZz4YEwc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:28a4::/48 Signature Algorithm: sha256WithRSAEncryption 68:6b:49:b0:71:21:7a:b8:5e:be:74:f7:50:af:3f:5e:70:18: f9:14:e5:bc:7e:79:61:3b:13:87:c0:45:ff:8b:1d:70:d0:a5: 93:a4:ba:54:8a:3b:e9:f7:f4:e2:b5:9a:76:42:ed:5c:20:aa: 37:ba:6f:e7:13:d3:65:3f:42:51:3f:08:bc:71:8e:22:65:37: fe:72:75:ed:b2:17:53:93:48:8d:0f:d5:df:5a:84:b8:2c:0f: 31:5c:1d:f7:b1:b7:52:42:80:3b:f1:ba:56:04:24:76:d3:06: db:ee:d1:6c:97:c7:1a:5c:00:cb:d7:8b:ac:08:ac:71:18:96: fc:92:4a:29:87:bf:f5:4b:40:2b:b2:fc:e0:95:26:41:95:03: ea:0b:48:c3:44:29:e6:19:5e:0a:b0:37:45:ee:31:53:ca:63: f4:f6:30:c7:50:54:ef:ef:85:d6:0b:8f:c8:0a:b2:12:94:48: 21:2d:f7:e7:67:1e:fd:27:28:57:5c:22:89:e6:0e:5c:14:1e: e4:b1:e3:d1:3e:d0:60:be:16:84:46:d5:59:8d:ec:73:b7:a0: 81:c4:00:8c:d1:3d:e6:03:6d:38:8f:30:40:fc:37:9f:41:a8: d0:6d:8f:0b:62:ae:3a:f0:37:cf:13:d2:e6:31:27:6c:2d:09: 3c:1d:22:0f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XK3fXnskL3pkV57ShG89MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzdjYzk0M2ZhNDVlMWZlOWViZjYxYTQyMTY2NDU2NzNlMTgxMzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vajhVIZ3tdJ3psYhMfE3D6xziXN uy9b6Gacn0F38Yi9rIRPRT+t7AVj9kY5AAqZECVA7hT/yQDr8JN475D5DclDHtMX EOvv2JTSGCkakbhGREQQ5b3XQybYohIpshw5aTe66rCPHzCtbKvaRSB25V0fsGx9 HBEdhD+InMkvLzbauJKQT33zQLAtgMYjOm4Bg/TCpUh0KAszlzyMO8/M64NEqYco KR8PBXx40xFLpUu+b+JgdeOrU0jZBHqWqx3DjdNbaihB5xUHLlAf4nXf3Gh2k1W0 AgbHlhcoRwYl+j2QMeE2rAhb4oXBNB49OsCunZDyEoUR+FQxDGukfw/wFwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGN8yUP6ReH+nr9hpCFmRWc+GBMHMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvWTN6SlFfcEY0ZjZldjJHa0lXWkZaejRZRXdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xByik MA0GCSqGSIb3DQEBCwUAA4IBAQBoa0mwcSF6uF6+dPdQrz9ecBj5FOW8fnlhOxOH wEX/ix1w0KWTpLpUijvp9/TitZp2Qu1cIKo3um/nE9NlP0JRPwi8cY4iZTf+cnXt shdTk0iND9XfWoS4LA8xXB33sbdSQoA78bpWBCR20wbb7tFsl8caXADL14usCKxx GJb8kkoph7/1S0ArsvzglSZBlQPqC0jDRCnmGV4KsDdF7jFTymP09jDHUFTv74XW C4/ICrISlEghLffnZx79JyhXXCKJ5g5cFB7ksePRPtBgvhaERtVZjexzt6CBxACM 0T3mA204jzBA/DefQajQbY8LYq468DfPE9LmMSdsLQk8HSIP -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:23 2026 by rpki-client