This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/awK8Q-Yt7Qv9LkjMd8Fd7bCPspc.roa File: awK8Q-Yt7Qv9LkjMd8Fd7bCPspc.roa (raw, json) Hash identifier: /Qj+WL+3kV/3qpuirUbwcffC74kt0/05PP3oOI8XO1w= Subject key identifier: 6B:02:BC:43:E6:2D:ED:0B:FD:2E:48:CC:77:C1:5D:ED:B0:8F:B2:97 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D5A93146A89630F2A883B7250430E Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/awK8Q-Yt7Qv9LkjMd8Fd7bCPspc.roa Signing time: Fri 02 Jan 2026 06:20:28 +0000 ROA not before: Fri 02 Jan 2026 06:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213086 IP address blocks: 2a0e:b107:670::/44 maxlen: 48 2a0e:b107:1df0::/44 maxlen: 48 2a0e:b107:1f00::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:5a:93:14:6a:89:63:0f:2a:88:3b:72:50:43:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b02bc43e62ded0bfd2e48cc77c15dedb08fb297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:10:56:29:8d:0d:91:7a:7e:5f:60:87:23:a1: 39:1b:a1:06:62:2e:d5:22:42:6c:de:22:d1:30:be: ec:97:4f:0c:11:f2:73:26:b6:c3:0e:a6:ad:14:08: e9:f7:87:da:a1:e2:e2:e3:04:20:72:b9:09:bb:eb: a4:bf:1f:93:33:80:9f:41:76:62:13:a3:ad:f1:71: 23:5c:06:96:cd:54:cc:a0:97:82:f5:61:7f:b0:4a: dc:1e:80:e3:09:d6:d1:82:c7:4d:44:6c:d9:ed:fb: a3:e8:df:c5:04:55:1f:d3:49:99:fe:a3:da:de:1d: 1d:de:05:86:1b:3c:8f:9a:04:c5:49:91:4b:cc:27: ca:49:24:2d:79:8f:b1:33:78:27:97:b8:74:2c:37: d4:92:7f:85:2b:9b:54:55:c1:30:0e:ef:10:47:6e: b9:9e:e9:42:a6:76:18:72:03:52:7f:fd:c9:e3:0f: 44:ed:f9:f4:6d:a5:8a:b2:45:8d:f4:98:b2:3f:88: f7:df:56:54:a4:d2:24:cf:78:4b:6d:8d:d1:3b:63: d1:bc:1d:15:8c:3c:e8:ef:b1:4c:d5:b6:3c:58:81: 4e:94:fd:cb:99:8c:c6:32:5e:b4:1f:a8:21:1e:e4: 92:d8:2b:e4:02:d8:13:f1:82:12:33:4f:d7:b1:49: a4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:02:BC:43:E6:2D:ED:0B:FD:2E:48:CC:77:C1:5D:ED:B0:8F:B2:97 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/awK8Q-Yt7Qv9LkjMd8Fd7bCPspc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:670::/44 2a0e:b107:1df0::/44 2a0e:b107:1f00::/44 Signature Algorithm: sha256WithRSAEncryption 40:9f:b5:e4:bb:c4:6f:26:32:b3:37:8f:38:89:2f:33:eb:fb: 05:74:52:bd:1d:1f:95:20:0f:d6:27:78:b4:a9:02:9c:5f:93: 36:8f:75:29:df:6e:36:55:94:de:c6:6a:2a:5b:8e:d9:70:27: 8a:4e:79:6d:24:4b:49:12:d9:02:02:90:8f:d4:8d:d9:32:8b: f6:44:d9:d4:fe:8e:ec:f0:32:dc:a5:0d:80:52:30:00:7f:db: 0c:3b:3b:1e:96:e0:af:07:e1:50:99:20:77:47:ab:65:ba:f9: c3:76:21:6a:f3:6a:b0:44:2e:43:37:d9:9f:61:8c:26:10:5f: ca:55:ff:56:b0:49:14:63:0b:7e:f9:9d:13:24:9a:06:c6:54: 9c:a7:35:7a:04:1c:29:5a:e6:26:97:2e:8d:58:df:0e:86:c0: bb:17:1c:f8:b4:e8:1f:1c:3a:55:ab:e9:d3:77:62:13:c8:bb: 49:1d:89:32:23:ce:14:35:1d:b2:4d:9d:9b:9e:1a:47:9b:32: a0:27:43:c9:ba:a1:62:ac:ed:2f:96:31:9b:34:40:3b:30:b2: f4:cc:57:86:1c:30:f7:c3:50:64:69:fb:bf:2d:df:6e:4d:f3: 3f:c2:3a:5a:ab:b1:27:ac:51:72:24:66:18:16:a7:0f:0e:1d: 31:6a:35:8c -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9XVqTFGqJYw8qiDtyUEMOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjAyYmM0M2U2MmRlZDBiZmQyZTQ4Y2M3N2MxNWRlZGIwOGZiMjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxBWKY0NkXp+X2CHI6E5G6EGYi7V IkJs3iLRML7sl08MEfJzJrbDDqatFAjp94faoeLi4wQgcrkJu+ukvx+TM4CfQXZi E6Ot8XEjXAaWzVTMoJeC9WF/sErcHoDjCdbRgsdNRGzZ7fuj6N/FBFUf00mZ/qPa 3h0d3gWGGzyPmgTFSZFLzCfKSSQteY+xM3gnl7h0LDfUkn+FK5tUVcEwDu8QR265 nulCpnYYcgNSf/3J4w9E7fn0baWKskWN9JiyP4j331ZUpNIkz3hLbY3RO2PRvB0V jDzo77FM1bY8WIFOlP3LmYzGMl60H6ghHuSS2CvkAtgT8YISM0/XsUmklQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFGsCvEPmLe0L/S5IzHfBXe2wj7KXMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvYXdLOFEtWXQ3UXY5TGtqTWQ4RmQ3YkNQc3BjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcEKg6xBwZw AwcEKg6xBx3wAwcEKg6xBx8AMA0GCSqGSIb3DQEBCwUAA4IBAQBAn7Xku8RvJjKz N484iS8z6/sFdFK9HR+VIA/WJ3i0qQKcX5M2j3Up3242VZTexmoqW47ZcCeKTnlt JEtJEtkCApCP1I3ZMov2RNnU/o7s8DLcpQ2AUjAAf9sMOzseluCvB+FQmSB3R6tl uvnDdiFq82qwRC5DN9mfYYwmEF/KVf9WsEkUYwt++Z0TJJoGxlScpzV6BBwpWuYm ly6NWN8OhsC7Fxz4tOgfHDpVq+nTd2ITyLtJHYkyI84UNR2yTZ2bnhpHmzKgJ0PJ uqFirO0vljGbNEA7MLL0zFeGHDD3w1Bkafu/Ld9uTfM/wjpaq7EnrFFyJGYYFqcP Dh0xajWM -----END CERTIFICATE-----Generated at Fri Jan 9 13:12:07 2026 by rpki-client