This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aCujzKoEqxGLm772Ww7Dj5bqb9A.roa File: aCujzKoEqxGLm772Ww7Dj5bqb9A.roa (raw, json) Hash identifier: S5JqnMCN7gZn0OWeNdwPFVXe4BM4rGlOTz1MFQ6TBSY= Subject key identifier: 68:2B:A3:CC:AA:04:AB:11:8B:9B:BE:F6:5B:0E:C3:8F:96:EA:6F:D0 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D6AE49A8048907A856F2A473030CF Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aCujzKoEqxGLm772Ww7Dj5bqb9A.roa Signing time: Fri 02 Jan 2026 06:20:32 +0000 ROA not before: Fri 02 Jan 2026 06:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214344 IP address blocks: 2a10:ccc6:6661::/48 maxlen: 48 2a10:ccc6:6662::/48 maxlen: 48 2a10:ccc6:6666::/48 maxlen: 48 2a10:ccc6:666e::/48 maxlen: 48 2a10:ccc6:666f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:6a:e4:9a:80:48:90:7a:85:6f:2a:47:30:30:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=682ba3ccaa04ab118b9bbef65b0ec38f96ea6fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a7:ff:0e:f7:71:64:38:a9:f2:be:65:68:1f: be:39:92:71:07:c4:c9:5b:33:d5:58:db:93:af:9b: 1f:cb:12:f8:21:e8:9b:db:98:49:b8:83:46:ae:c2: 93:98:8a:ce:7f:5c:5d:cc:0a:e5:b9:5a:0c:f8:b0: 70:03:4a:5e:ba:7e:8c:b0:8b:e6:f7:32:4d:b3:10: 9b:88:db:27:02:53:ff:d1:70:56:fd:66:27:fa:0f: ce:6d:be:60:75:7c:fe:6f:2c:8e:09:46:e6:5a:a9: 1e:da:d0:73:32:9a:7f:0d:f9:c9:9c:04:6b:77:4f: 28:64:ec:11:b8:83:df:ae:27:6b:97:80:53:a6:52: 97:49:1d:c7:c0:1f:a3:2f:56:82:f8:de:25:51:1a: 55:fb:f6:50:b0:53:7b:7e:d8:e2:18:1f:94:76:bf: 34:04:19:f6:9c:a8:bf:1d:17:20:2a:2a:cc:0b:06: 3f:3e:64:71:54:12:1e:d6:e5:86:9b:ab:8f:8b:a4: 65:54:ed:5b:33:cb:08:8e:3d:6c:ad:88:84:92:91: ad:ca:58:80:9f:eb:f8:a6:1b:59:8f:58:fb:3c:e8: 6d:ab:b1:c0:0a:3b:75:0d:e1:3a:be:72:fc:05:6f: 52:69:84:9f:55:90:3c:39:39:27:0e:2d:71:9e:c6: 30:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:2B:A3:CC:AA:04:AB:11:8B:9B:BE:F6:5B:0E:C3:8F:96:EA:6F:D0 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aCujzKoEqxGLm772Ww7Dj5bqb9A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:ccc6:6661::-2a10:ccc6:6662:ffff:ffff:ffff:ffff:ffff 2a10:ccc6:6666::/48 2a10:ccc6:666e::/47 Signature Algorithm: sha256WithRSAEncryption 8d:7e:91:f2:b2:e3:1a:d7:ac:82:2b:a0:a0:73:ad:d9:6e:24: 79:95:03:40:d6:58:80:89:80:04:b3:67:a1:e5:0a:84:2c:43: 05:b1:75:d7:34:12:64:c4:ec:99:76:9f:7a:f4:2f:1a:60:8a: a7:df:6b:ac:ea:b2:55:4f:7c:42:fa:64:24:5d:a8:89:75:bf: 41:f3:ad:50:fc:70:11:c1:e5:27:3a:fa:56:9d:27:9d:0e:ed: 8f:55:e5:2f:c5:6f:cc:ed:aa:b3:c2:80:47:63:a6:7e:9c:e5: b5:48:33:8e:69:a2:85:9c:db:58:2a:f8:ee:8b:2a:1a:b5:5c: ef:9e:15:aa:42:8f:b6:2f:24:f5:c3:27:32:2a:46:42:d2:6d: 45:fd:7e:8d:77:8a:56:6b:62:cd:75:38:11:9e:33:69:e1:eb: b4:43:08:48:f9:13:89:ea:93:38:fc:93:38:2e:da:33:90:4b: 1e:8a:78:99:2a:c4:de:f7:f2:d5:b7:bf:5a:5e:1a:a1:84:d6: 1a:da:75:bb:46:2e:13:a8:91:eb:1d:41:a4:2b:55:0a:b5:a3: 2d:f9:e9:d4:02:b2:f4:f9:a1:24:fc:5d:c8:d1:01:2c:12:73: ee:46:37:45:43:f7:3f:98:fc:0c:79:e9:12:4d:6d:17:6b:b8: f7:e3:4e:8c -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt9XWrkmoBIkHqFbypHMDDPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODJiYTNjY2FhMDRhYjExOGI5YmJlZjY1YjBlYzM4Zjk2ZWE2ZmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaf/DvdxZDip8r5laB++OZJxB8TJ WzPVWNuTr5sfyxL4Ieib25hJuINGrsKTmIrOf1xdzArluVoM+LBwA0peun6MsIvm 9zJNsxCbiNsnAlP/0XBW/WYn+g/Obb5gdXz+byyOCUbmWqke2tBzMpp/DfnJnARr d08oZOwRuIPfridrl4BTplKXSR3HwB+jL1aC+N4lURpV+/ZQsFN7ftjiGB+Udr80 BBn2nKi/HRcgKirMCwY/PmRxVBIe1uWGm6uPi6RlVO1bM8sIjj1srYiEkpGtyliA n+v4phtZj1j7POhtq7HACjt1DeE6vnL8BW9SaYSfVZA8OTknDi1xnsYwpQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFGgro8yqBKsRi5u+9lsOw4+W6m/QMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvYUN1anpLb0VxeEdMbTc3Mld3N0RqNWJxYjlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmMBIDBwAqEMzG ZmEDBwAqEMzGZmIDBwAqEMzGZmYDBwEqEMzGZm4wDQYJKoZIhvcNAQELBQADggEB AI1+kfKy4xrXrIIroKBzrdluJHmVA0DWWICJgASzZ6HlCoQsQwWxddc0EmTE7Jl2 n3r0Lxpgiqffa6zqslVPfEL6ZCRdqIl1v0HzrVD8cBHB5Sc6+ladJ50O7Y9V5S/F b8ztqrPCgEdjpn6c5bVIM45pooWc21gq+O6LKhq1XO+eFapCj7YvJPXDJzIqRkLS bUX9fo13ilZrYs11OBGeM2nh67RDCEj5E4nqkzj8kzgu2jOQSx6KeJkqxN738tW3 v1peGqGE1hradbtGLhOokesdQaQrVQq1oy356dQCsvT5oST8XcjRASwSc+5GN0VD 9z+Y/Ax56RJNbRdruPfjTow= -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:12 2026 by rpki-client