This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_A-P8q87_rAhABpVa-MWEY6BhBs.roa File: _A-P8q87_rAhABpVa-MWEY6BhBs.roa (raw, json) Hash identifier: NX6NmSr3QCgfSoZ8Ie0wmH7lPJJLGplTD4IL6oCTLZQ= Subject key identifier: FC:0F:8F:F2:AF:3B:FE:B0:21:00:1A:55:6B:E3:16:11:8E:81:84:1B Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D499DC3B5031680B77ED3B6AE2549 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_A-P8q87_rAhABpVa-MWEY6BhBs.roa Signing time: Fri 02 Jan 2026 06:20:24 +0000 ROA not before: Fri 02 Jan 2026 06:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212121 IP address blocks: 2a0e:b107:1130::/44 maxlen: 48 2a0e:b107:1130::/48 maxlen: 48 2a0e:b107:1131::/48 maxlen: 48 2a0e:b107:1132::/48 maxlen: 48 2a0e:b107:113e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:49:9d:c3:b5:03:16:80:b7:7e:d3:b6:ae:25:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc0f8ff2af3bfeb021001a556be316118e81841b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:91:0c:1b:d4:79:09:a5:77:25:a5:52:b9:0f: ae:90:fa:c3:7b:15:82:ce:da:8a:2d:6c:f7:d4:f0: 0d:a2:38:dd:fd:77:a6:63:0c:c6:8d:7f:97:71:60: b7:9d:dd:ab:43:05:a9:e4:65:84:7d:1a:94:eb:5e: 52:a3:55:c4:4a:d7:e2:c2:f9:39:16:96:5b:74:5e: d3:c1:6a:61:fa:fb:bd:de:85:e1:01:01:21:3b:c0: c0:98:d4:46:2f:0f:37:8d:9f:d0:70:00:02:69:c8: fb:2f:e4:ac:45:1f:ed:c0:6d:bf:83:39:c6:d6:58: 58:5a:3e:0d:53:a8:52:ba:09:30:46:af:59:99:7c: f3:93:b3:5f:e5:73:eb:5b:80:1a:69:e9:e4:43:ab: 46:75:79:f5:4b:44:5a:a6:32:b8:3c:cc:dd:c8:61: 08:88:f8:51:b2:73:89:80:71:ce:94:54:05:0b:52: 73:6c:4a:3b:d7:f0:77:dc:88:1e:23:6a:a6:66:8e: 4e:dc:49:c4:09:25:80:aa:88:9b:18:fc:e4:7f:56: 2f:f2:fc:56:6f:8c:43:c0:b4:9b:11:28:c2:be:b8: 3e:a0:2e:f4:32:4a:85:16:ed:90:fc:1f:98:92:18: d9:48:31:58:d4:b0:87:bb:0d:93:ce:50:6f:e2:7f: 29:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:0F:8F:F2:AF:3B:FE:B0:21:00:1A:55:6B:E3:16:11:8E:81:84:1B X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_A-P8q87_rAhABpVa-MWEY6BhBs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1130::/44 Signature Algorithm: sha256WithRSAEncryption 73:1a:c0:de:02:ff:a9:48:5a:59:d0:e1:f6:74:14:32:a2:b1: ac:7b:5a:85:5b:6a:63:5a:b5:51:e8:0d:3b:b1:bf:7a:58:0c: d5:d2:1c:51:ce:a3:68:98:12:10:fc:50:f4:e3:f8:04:82:eb: fa:7b:f8:d8:bc:a3:21:30:17:ae:c2:ad:71:ac:1d:30:67:21: cf:c7:e0:4b:6c:0f:47:25:37:5f:f9:35:89:b2:c6:96:d5:d4: 68:4b:6b:fe:c5:ad:6f:b0:2e:7e:77:ef:a2:b9:43:cd:52:c6: 11:22:83:0f:21:f1:42:12:04:b4:16:e4:90:99:66:c1:3c:7e: 74:75:49:18:5f:74:d5:9a:45:58:85:ed:05:85:48:53:23:5f: e9:d0:da:aa:8a:e8:ec:e7:b7:94:11:a2:b1:18:0d:1c:6c:fe: 04:9e:29:53:9d:57:b0:84:a4:c1:47:f6:cc:64:c1:03:d2:3b: e0:9b:f8:5d:58:2f:aa:fa:39:0b:fc:be:54:02:84:0f:78:50: b4:6d:90:e4:a3:b2:c3:c3:0b:85:cf:94:9d:47:7f:77:8f:b7: 46:d4:09:a2:30:0e:79:ec:38:99:41:32:55:f5:ce:1d:82:e2: 8e:5d:d3:4e:fa:3b:78:6d:3b:58:13:18:4e:c8:e2:4e:74:26: 8c:01:f5:48 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XUmdw7UDFoC3ftO2riVJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzBmOGZmMmFmM2JmZWIwMjEwMDFhNTU2YmUzMTYxMThlODE4NDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJEMG9R5CaV3JaVSuQ+ukPrDexWC ztqKLWz31PANojjd/XemYwzGjX+XcWC3nd2rQwWp5GWEfRqU615So1XEStfiwvk5 FpZbdF7TwWph+vu93oXhAQEhO8DAmNRGLw83jZ/QcAACacj7L+SsRR/twG2/gznG 1lhYWj4NU6hSugkwRq9ZmXzzk7Nf5XPrW4AaaenkQ6tGdXn1S0RapjK4PMzdyGEI iPhRsnOJgHHOlFQFC1JzbEo71/B33IgeI2qmZo5O3EnECSWAqoibGPzkf1Yv8vxW b4xDwLSbESjCvrg+oC70MkqFFu2Q/B+YkhjZSDFY1LCHuw2TzlBv4n8pCQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPwPj/KvO/6wIQAaVWvjFhGOgYQbMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvX0EtUDhxODdfckFoQUJwVmEtTVdFWTZCaEJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxEw MA0GCSqGSIb3DQEBCwUAA4IBAQBzGsDeAv+pSFpZ0OH2dBQyorGse1qFW2pjWrVR 6A07sb96WAzV0hxRzqNomBIQ/FD04/gEguv6e/jYvKMhMBeuwq1xrB0wZyHPx+BL bA9HJTdf+TWJssaW1dRoS2v+xa1vsC5+d++iuUPNUsYRIoMPIfFCEgS0FuSQmWbB PH50dUkYX3TVmkVYhe0FhUhTI1/p0Nqqiujs57eUEaKxGA0cbP4EnilTnVewhKTB R/bMZMED0jvgm/hdWC+q+jkL/L5UAoQPeFC0bZDko7LDwwuFz5SdR393j7dG1Ami MA557DiZQTJV9c4dguKOXdNO+jt4bTtYExhOyOJOdCaMAfVI -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:10 2026 by rpki-client