This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/a_w75ChU9YKHX1H-m1vWopfICIU.roa File: a_w75ChU9YKHX1H-m1vWopfICIU.roa (raw, json) Hash identifier: axH/+vZ4CMzc/4zb5w7cevgX0mXTfsadCRxl8Ki8D0w= Subject key identifier: 6B:FC:3B:E4:28:54:F5:82:87:5F:51:FE:9B:5B:D6:A2:97:C8:08:85 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D720A7048851F80088C312FEAD969 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/a_w75ChU9YKHX1H-m1vWopfICIU.roa Signing time: Fri 02 Jan 2026 06:20:34 +0000 ROA not before: Fri 02 Jan 2026 06:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214953 IP address blocks: 2a06:de07:de00::/44 maxlen: 48 2a10:2f01:403::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:72:0a:70:48:85:1f:80:08:8c:31:2f:ea:d9:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6bfc3be42854f582875f51fe9b5bd6a297c80885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:d1:96:22:cd:fb:27:47:23:14:ea:e0:a0:62: 21:2a:db:fc:31:64:35:52:a5:b4:b4:61:f9:c3:1b: 94:1e:8f:1b:a9:d4:03:2b:53:b8:26:79:91:1b:25: 20:87:c7:89:d1:02:35:77:b0:c6:c4:a2:79:4a:04: be:b4:72:0d:91:4e:f6:a9:c8:d9:6d:81:0d:57:bf: f0:c1:07:90:66:c3:32:5d:e8:b4:cd:80:54:80:d5: ad:94:5b:1d:d4:b5:56:8c:b6:74:20:15:f6:8f:c0: 7f:49:55:cc:c0:a7:0c:da:09:f9:4e:c5:92:57:1b: 9a:22:84:d8:04:cc:44:39:cb:f1:fc:d6:22:c3:03: 83:3c:15:70:9f:ce:a0:43:4e:3d:18:52:74:75:7d: cb:e3:44:2f:8c:30:9a:d4:d6:08:b7:f9:83:a6:95: df:e9:e4:64:8a:db:bb:b8:24:9c:2a:56:1f:66:56: e6:1c:91:f9:01:27:34:36:36:76:fa:c3:8e:9e:2f: 94:0f:27:f1:e6:61:cd:2a:62:5e:b1:e0:f8:c2:c8: 12:dc:b9:b4:ef:fa:85:47:b3:c8:aa:7d:3f:80:94: c9:5b:a8:57:90:37:71:05:c2:c2:ba:50:be:fa:ab: cf:89:97:e5:3c:15:75:66:68:d5:eb:58:0c:01:23: 68:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:FC:3B:E4:28:54:F5:82:87:5F:51:FE:9B:5B:D6:A2:97:C8:08:85 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/a_w75ChU9YKHX1H-m1vWopfICIU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:de07:de00::/44 2a10:2f01:403::/48 Signature Algorithm: sha256WithRSAEncryption c8:18:c0:16:86:02:0d:24:1a:66:f0:6c:ae:3e:5a:46:41:4c: 9a:1f:ba:17:67:c5:5b:75:90:5d:fa:53:1c:9b:84:87:29:7e: dc:b4:50:09:0a:0f:ea:45:a5:be:d8:5f:b0:1e:5a:93:9e:c8: fb:c8:21:b4:41:a1:88:c3:c4:5d:35:ab:e8:4b:0b:2d:f6:4b: 41:e0:d6:56:99:36:9c:e8:01:9b:08:57:cf:79:d3:7d:44:2e: 68:07:00:0b:69:d2:db:1b:4c:57:14:ef:f0:03:b2:4f:6b:c6: 86:81:b8:6a:ec:78:8b:ed:88:44:c9:6c:b4:7e:43:83:b7:36: 1d:b3:81:1a:e4:23:da:13:36:45:b5:95:a5:06:d2:36:2f:c9: 24:15:df:45:39:6c:7a:88:19:79:2d:48:9e:52:f0:44:0d:5c: f8:64:ab:a7:d4:a5:73:e1:a6:c1:cb:fc:e3:3f:d3:8d:6c:db: 21:94:11:2f:7e:e5:85:16:31:1d:89:ed:4b:75:74:5b:41:a3: 4b:d9:8d:cd:70:6b:32:13:85:00:a2:22:94:2b:bd:75:64:54: b7:d4:66:66:17:2a:22:d4:13:cd:d6:69:17:63:dd:a7:52:a6: e4:d3:29:57:76:2a:cc:cb:c9:6d:a7:c7:d2:02:6d:9a:58:e2: 96:57:7c:6d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XXIKcEiFH4AIjDEv6tlpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmZjM2JlNDI4NTRmNTgyODc1ZjUxZmU5YjViZDZhMjk3YzgwODg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA89GWIs37J0cjFOrgoGIhKtv8MWQ1 UqW0tGH5wxuUHo8bqdQDK1O4JnmRGyUgh8eJ0QI1d7DGxKJ5SgS+tHINkU72qcjZ bYENV7/wwQeQZsMyXei0zYBUgNWtlFsd1LVWjLZ0IBX2j8B/SVXMwKcM2gn5TsWS VxuaIoTYBMxEOcvx/NYiwwODPBVwn86gQ049GFJ0dX3L40QvjDCa1NYIt/mDppXf 6eRkitu7uCScKlYfZlbmHJH5ASc0NjZ2+sOOni+UDyfx5mHNKmJeseD4wsgS3Lm0 7/qFR7PIqn0/gJTJW6hXkDdxBcLCulC++qvPiZflPBV1ZmjV61gMASNoXwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGv8O+QoVPWCh19R/ptb1qKXyAiFMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvYV93NzVDaFU5WUtIWDFILW0xdldvcGZJQ0lVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgbeB94A AwcAKhAvAQQDMA0GCSqGSIb3DQEBCwUAA4IBAQDIGMAWhgINJBpm8GyuPlpGQUya H7oXZ8VbdZBd+lMcm4SHKX7ctFAJCg/qRaW+2F+wHlqTnsj7yCG0QaGIw8RdNavo Swst9ktB4NZWmTac6AGbCFfPedN9RC5oBwALadLbG0xXFO/wA7JPa8aGgbhq7HiL 7YhEyWy0fkODtzYds4Ea5CPaEzZFtZWlBtI2L8kkFd9FOWx6iBl5LUieUvBEDVz4 ZKun1KVz4abBy/zjP9ONbNshlBEvfuWFFjEdie1LdXRbQaNL2Y3NcGsyE4UAoiKU K711ZFS31GZmFyoi1BPN1mkXY92nUqbk0ylXdirMy8ltp8fSAm2aWOKWV3xt -----END CERTIFICATE-----Generated at Fri Jan 9 13:11:59 2026 by rpki-client