This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_HtvxE6B3O47M6Cfz92kTXJfCVM.roa File: _HtvxE6B3O47M6Cfz92kTXJfCVM.roa (raw, json) Hash identifier: mhkvneRqvWyk+fgKVi66HY67VIEzWBc94UxYXcV9tDE= Subject key identifier: FC:7B:6F:C4:4E:81:DC:EE:3B:33:A0:9F:CF:DD:A4:4D:72:5F:09:53 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D284E9DB04211800F56CF65072B6C Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_HtvxE6B3O47M6Cfz92kTXJfCVM.roa Signing time: Fri 02 Jan 2026 06:20:15 +0000 ROA not before: Fri 02 Jan 2026 06:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210606 IP address blocks: 2a10:2f00:175::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:28:4e:9d:b0:42:11:80:0f:56:cf:65:07:2b:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc7b6fc44e81dcee3b33a09fcfdda44d725f0953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:48:29:6c:93:75:0e:e2:ec:15:63:12:d5:3f: 7f:35:b5:67:c0:d8:38:f2:21:8c:0c:1b:71:8b:b7: a2:89:d3:a2:04:d3:17:df:1d:c2:00:0e:6a:61:e3: 64:59:7c:82:c6:e8:a9:2a:d6:1a:19:99:c5:28:5e: 05:13:68:63:84:30:23:71:f7:19:5a:aa:97:55:1d: 38:bc:cd:54:54:68:8c:6f:3a:47:7e:be:65:99:ca: 41:6f:46:c3:41:12:af:9d:3d:b0:83:70:b2:df:37: 09:3a:b3:e7:af:f6:60:00:12:58:4c:00:a0:e5:a7: a7:d7:78:82:39:4f:eb:e5:2c:41:a5:af:ee:48:c4: 91:a0:05:0c:8a:96:e3:25:53:20:6b:10:d4:d1:7c: 2d:63:e0:fb:fc:fa:64:53:8d:9d:f4:38:81:f1:ce: 36:49:30:d9:c0:d9:65:f5:5e:0d:10:1b:ec:ca:2a: 61:76:fc:5a:64:f9:2b:31:36:6e:f8:54:e4:03:4d: 3a:1b:48:bc:f5:14:37:2c:20:05:a1:33:27:9c:6d: af:d0:4f:30:f2:c3:7c:72:f2:5c:44:3b:4f:3d:5f: 36:ee:28:49:80:95:25:7d:ba:73:5c:27:8a:c6:aa: 98:98:09:81:4f:f9:2c:31:9a:0d:32:92:89:b9:c6: 04:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:7B:6F:C4:4E:81:DC:EE:3B:33:A0:9F:CF:DD:A4:4D:72:5F:09:53 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_HtvxE6B3O47M6Cfz92kTXJfCVM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:2f00:175::/48 Signature Algorithm: sha256WithRSAEncryption a7:d2:e1:03:c4:a0:f9:c1:87:fe:2d:06:8e:78:7e:16:7e:0d: d6:3f:a7:b7:4c:bb:3c:96:04:93:3a:8c:70:c6:64:d1:dd:b5: 0f:c5:76:ac:56:ee:20:19:fb:22:50:65:65:da:0a:34:c0:27: 26:24:f0:99:7e:35:56:6e:c1:bc:9b:90:e8:9a:35:5c:86:2d: 89:7c:fc:b2:32:7b:58:ba:d3:d4:53:8a:a1:97:d6:23:72:09: 5d:d5:01:d9:48:df:a2:26:68:44:39:b2:41:79:8f:10:79:1d: ff:4c:36:ef:42:a2:40:6f:75:15:8a:23:a2:60:58:2a:ae:7f: 86:9c:07:db:ca:9f:1b:63:11:b1:90:34:87:cb:1b:45:17:cf: 3f:0e:04:30:ca:bb:5f:c2:17:74:a4:e1:f6:56:94:28:ee:5b: 49:05:e5:9b:eb:40:59:68:60:21:72:df:53:a8:af:09:b1:34: cd:3c:ef:95:93:a7:c8:35:08:3a:f6:9b:d3:ad:cc:4d:61:9a: 63:3e:65:b8:7f:62:52:b0:f7:aa:60:25:fe:7e:a0:fd:39:5c: 8a:2e:8c:c5:0d:0a:d1:97:e1:80:b3:5a:cf:6f:fd:f3:00:78: 3f:f6:3b:58:6a:b4:ca:44:45:18:fb:f8:92:e2:3f:45:48:ae: 9a:c0:87:0d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XShOnbBCEYAPVs9lBytsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzdiNmZjNDRlODFkY2VlM2IzM2EwOWZjZmRkYTQ0ZDcyNWYwOTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0gpbJN1DuLsFWMS1T9/NbVnwNg4 8iGMDBtxi7eiidOiBNMX3x3CAA5qYeNkWXyCxuipKtYaGZnFKF4FE2hjhDAjcfcZ WqqXVR04vM1UVGiMbzpHfr5lmcpBb0bDQRKvnT2wg3Cy3zcJOrPnr/ZgABJYTACg 5aen13iCOU/r5SxBpa/uSMSRoAUMipbjJVMgaxDU0XwtY+D7/PpkU42d9DiB8c42 STDZwNll9V4NEBvsyiphdvxaZPkrMTZu+FTkA006G0i89RQ3LCAFoTMnnG2v0E8w 8sN8cvJcRDtPPV827ihJgJUlfbpzXCeKxqqYmAmBT/ksMZoNMpKJucYEcwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPx7b8ROgdzuOzOgn8/dpE1yXwlTMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvX0h0dnhFNkIzTzQ3TTZDZno5MmtUWEpmQ1ZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAvAAF1 MA0GCSqGSIb3DQEBCwUAA4IBAQCn0uEDxKD5wYf+LQaOeH4Wfg3WP6e3TLs8lgST OoxwxmTR3bUPxXasVu4gGfsiUGVl2go0wCcmJPCZfjVWbsG8m5DomjVchi2JfPyy MntYutPUU4qhl9Yjcgld1QHZSN+iJmhEObJBeY8QeR3/TDbvQqJAb3UViiOiYFgq rn+GnAfbyp8bYxGxkDSHyxtFF88/DgQwyrtfwhd0pOH2VpQo7ltJBeWb60BZaGAh ct9TqK8JsTTNPO+Vk6fINQg69pvTrcxNYZpjPmW4f2JSsPeqYCX+fqD9OVyKLozF DQrRl+GAs1rPb/3zAHg/9jtYarTKREUY+/iS4j9FSK6awIcN -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:11 2026 by rpki-client