This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/a2qdS0No2i7oH7lL7zJlOashXWs.roa File: a2qdS0No2i7oH7lL7zJlOashXWs.roa (raw, json) Hash identifier: g491Yu3vDK0QIqhZCMalOzake31viqM+wuEA4JRX6Es= Subject key identifier: 6B:6A:9D:4B:43:68:DA:2E:E8:1F:B9:4B:EF:32:65:39:AB:21:5D:6B Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CC314990BA5A0C879304BC74E65FC Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/a2qdS0No2i7oH7lL7zJlOashXWs.roa Signing time: Fri 02 Jan 2026 06:19:49 +0000 ROA not before: Fri 02 Jan 2026 06:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61112 IP address blocks: 2a0e:97c0:7d0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:c3:14:99:0b:a5:a0:c8:79:30:4b:c7:4e:65:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b6a9d4b4368da2ee81fb94bef326539ab215d6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:95:49:57:d5:50:56:50:52:0d:09:21:4d:11: 10:00:cd:ab:9a:64:22:0c:21:47:a8:33:8c:df:a9: 80:3b:98:51:40:9d:2d:c2:d7:65:20:94:03:42:b6: c7:5d:f8:d2:37:84:1e:1d:2c:90:cf:4b:95:22:8e: f7:25:2b:c7:d1:bb:b0:88:71:0a:9c:67:8b:b4:6f: 24:81:3f:3e:99:eb:90:9c:7b:5b:df:ab:f7:98:14: 75:21:85:e4:3d:14:9a:a0:d1:b1:1c:cf:b6:de:99: 4b:10:90:07:29:f1:95:c1:84:63:dd:19:92:2e:db: bd:e1:5f:79:d7:5e:db:95:0b:dd:7b:e6:42:0a:11: 0e:e4:34:2e:2a:31:2c:e7:d9:63:a9:3e:94:47:f4: be:1e:63:ec:62:a0:c0:ff:4c:25:e2:0c:0e:5c:37: ff:9f:b2:4e:55:36:37:52:20:41:af:b4:d7:54:9a: 60:09:50:10:95:d0:81:0e:5c:73:5e:15:8f:12:ef: 39:52:b3:62:43:ff:b3:c3:98:21:87:f8:fc:59:9a: d9:74:02:49:fa:6a:48:1b:0d:eb:cd:80:2b:54:cc: cd:1f:f6:82:71:d4:67:d7:f2:37:91:0a:e5:cb:97: c6:a3:25:e9:f0:d5:f2:22:fe:99:7c:da:bd:b5:a1: ff:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:6A:9D:4B:43:68:DA:2E:E8:1F:B9:4B:EF:32:65:39:AB:21:5D:6B X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/a2qdS0No2i7oH7lL7zJlOashXWs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:7d0::/44 Signature Algorithm: sha256WithRSAEncryption ab:1b:29:00:44:30:2b:e9:fe:5b:be:00:16:6a:8e:c7:5d:a0: ff:b7:9c:02:58:30:a0:3e:33:91:07:5a:01:39:a4:26:25:8c: 38:ac:80:d5:82:fc:c4:1a:db:ac:8c:c6:17:57:71:66:d9:c0: 79:69:39:ec:af:66:fa:6c:bb:5d:14:44:45:e5:5c:1d:1d:2c: 8d:d5:34:7a:9f:37:a6:b3:e0:c6:00:af:28:5a:5f:7e:b5:f0: ef:77:4a:33:09:66:8f:d1:70:a8:6c:7d:ff:df:5c:88:5e:92: fa:b9:e2:53:2e:ae:60:92:2e:ed:25:a6:33:66:2e:5f:ac:60: 81:b0:fe:70:02:6e:8c:89:16:ab:dd:69:dd:7c:e2:c6:ae:2f: b2:9a:18:d0:54:22:71:d2:3f:e1:cc:62:65:0e:36:a4:50:d6: d9:fc:33:16:f2:87:1e:1f:40:c6:ff:80:08:c7:bf:32:b4:95: ee:a6:a2:65:6e:f1:84:70:cb:4d:11:ff:d8:db:80:4b:d3:7c: 94:cc:4b:c8:f5:af:16:6a:4b:b4:60:b9:d8:54:69:a6:e9:8b: 48:69:1d:d6:c1:35:67:a3:75:45:de:c4:2a:a7:44:6e:a4:a8: 25:4c:61:c3:33:07:1c:dc:bb:30:ba:42:f6:2a:4a:56:ce:42: 42:4b:8d:f4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XMMUmQuloMh5MEvHTmX8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjZhOWQ0YjQzNjhkYTJlZTgxZmI5NGJlZjMyNjUzOWFiMjE1ZDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5VJV9VQVlBSDQkhTREQAM2rmmQi DCFHqDOM36mAO5hRQJ0twtdlIJQDQrbHXfjSN4QeHSyQz0uVIo73JSvH0buwiHEK nGeLtG8kgT8+meuQnHtb36v3mBR1IYXkPRSaoNGxHM+23plLEJAHKfGVwYRj3RmS Ltu94V95117blQvde+ZCChEO5DQuKjEs59ljqT6UR/S+HmPsYqDA/0wl4gwOXDf/ n7JOVTY3UiBBr7TXVJpgCVAQldCBDlxzXhWPEu85UrNiQ/+zw5ghh/j8WZrZdAJJ +mpIGw3rzYArVMzNH/aCcdRn1/I3kQrly5fGoyXp8NXyIv6ZfNq9taH/jwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGtqnUtDaNou6B+5S+8yZTmrIV1rMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvYTJxZFMwTm8yaTdvSDdsTDd6SmxPYXNoWFdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAfQ MA0GCSqGSIb3DQEBCwUAA4IBAQCrGykARDAr6f5bvgAWao7HXaD/t5wCWDCgPjOR B1oBOaQmJYw4rIDVgvzEGtusjMYXV3Fm2cB5aTnsr2b6bLtdFERF5VwdHSyN1TR6 nzems+DGAK8oWl9+tfDvd0ozCWaP0XCobH3/31yIXpL6ueJTLq5gki7tJaYzZi5f rGCBsP5wAm6MiRar3WndfOLGri+ymhjQVCJx0j/hzGJlDjakUNbZ/DMW8oceH0DG /4AIx78ytJXupqJlbvGEcMtNEf/Y24BL03yUzEvI9a8Waku0YLnYVGmm6YtIaR3W wTVno3VF3sQqp0RupKglTGHDMwcc3LswukL2KkpWzkJCS430 -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:08 2026 by rpki-client