This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/b94b39mXNXzIpF-rhrECAAa5mjs.roa File: b94b39mXNXzIpF-rhrECAAa5mjs.roa (raw, json) Hash identifier: SW/SFLM9UPU49j4RJbHXBsLNxm1vTJXSTVCQiEGc398= Subject key identifier: 6F:DE:1B:DF:D9:97:35:7C:C8:A4:5F:AB:86:B1:02:00:06:B9:9A:3B Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D1A53EE7A002C7D5F15002DE8E193 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/b94b39mXNXzIpF-rhrECAAa5mjs.roa Signing time: Fri 02 Jan 2026 06:20:12 +0000 ROA not before: Fri 02 Jan 2026 06:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209209 IP address blocks: 2a0e:b107:1560::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:1a:53:ee:7a:00:2c:7d:5f:15:00:2d:e8:e1:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6fde1bdfd997357cc8a45fab86b1020006b99a3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:05:38:d4:ad:1f:cb:d5:d1:27:70:a2:be:ed: f7:69:76:18:52:77:94:46:87:99:4a:ec:f4:bf:b2: 14:e5:c1:fc:cc:ac:46:5b:f5:8e:8f:08:1f:7c:5a: 2a:f9:29:72:8c:15:9c:c7:e3:76:97:75:3f:4e:e4: cf:02:e8:18:89:d4:46:8a:02:fc:1f:7d:d3:27:ac: 7a:b0:ee:31:2f:d3:bb:fb:a1:da:bd:62:4f:7e:40: b4:58:2c:47:c3:1a:6d:4b:46:b4:14:03:4f:80:af: a5:b3:5d:7f:94:a0:22:59:b8:d8:f6:aa:92:dc:58: 55:5b:e2:34:a0:8e:b5:fc:8c:71:af:78:1c:c9:26: 12:96:96:29:bd:3d:1e:7b:6c:42:2c:91:55:be:27: 84:ec:2a:66:6d:91:c8:ed:71:29:6e:e6:d8:bd:96: 40:20:4f:6f:05:ca:98:f2:de:20:92:50:e7:2d:18: 16:dd:fa:7b:36:2a:33:d2:b0:18:3e:23:58:5d:ec: 1f:fc:82:86:d7:2d:e3:6b:73:da:ab:3d:8f:91:1a: 0c:3b:e6:17:70:55:e2:d8:c9:14:f1:63:1f:66:9c: 95:87:8e:88:bc:cf:87:a9:df:24:88:fa:da:da:7a: 34:d2:61:13:1a:a0:f8:30:fc:06:fe:21:f0:fc:af: 92:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:DE:1B:DF:D9:97:35:7C:C8:A4:5F:AB:86:B1:02:00:06:B9:9A:3B X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/b94b39mXNXzIpF-rhrECAAa5mjs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1560::/44 Signature Algorithm: sha256WithRSAEncryption 08:d5:c3:cc:53:0d:9b:a5:01:9e:5d:e9:a7:2a:02:b4:ab:76: 13:f8:64:d5:05:aa:ea:83:b3:08:af:91:ab:2d:ff:10:53:ae: b7:88:62:ad:14:02:8a:1f:e7:af:94:19:9f:d6:88:84:01:8d: 67:d9:d8:65:46:26:6b:2f:7c:5e:5d:1d:1d:73:d7:f2:78:92: 0f:70:85:73:90:67:24:83:16:a5:e1:72:de:f4:76:cb:a7:04: 78:92:75:b5:0d:c5:fc:96:3d:d0:2b:64:9b:87:f1:bb:22:00: bc:db:3f:41:b9:59:62:f5:79:c7:19:5c:fe:78:96:a0:8a:68: df:77:55:ba:bd:22:f4:b3:67:5a:8e:49:8c:47:55:8b:60:4b: 38:df:1a:7a:45:4a:8e:c9:8c:55:e6:75:62:d5:c5:58:d8:36: 97:cf:48:23:f5:91:31:29:c0:c3:c4:9f:fb:2c:8d:cb:e1:ca: 35:d7:cf:bb:60:35:bd:8b:d5:11:3b:dd:f5:d2:08:c6:34:1f: 1c:88:40:a7:89:c9:86:a6:f0:be:f4:1b:58:c0:43:1d:29:9b: d8:d1:e0:77:fa:9d:f8:be:b4:3b:a7:ab:44:d7:4c:bd:37:23: 18:52:97:45:9f:5a:03:bc:7c:3f:2d:56:83:a3:6d:68:c8:68: 1d:68:cd:e4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XRpT7noALH1fFQAt6OGTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmRlMWJkZmQ5OTczNTdjYzhhNDVmYWI4NmIxMDIwMDA2Yjk5YTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogU41K0fy9XRJ3Civu33aXYYUneU RoeZSuz0v7IU5cH8zKxGW/WOjwgffFoq+SlyjBWcx+N2l3U/TuTPAugYidRGigL8 H33TJ6x6sO4xL9O7+6HavWJPfkC0WCxHwxptS0a0FANPgK+ls11/lKAiWbjY9qqS 3FhVW+I0oI61/Ixxr3gcySYSlpYpvT0ee2xCLJFVvieE7CpmbZHI7XEpbubYvZZA IE9vBcqY8t4gklDnLRgW3fp7Nioz0rAYPiNYXewf/IKG1y3ja3Paqz2PkRoMO+YX cFXi2MkU8WMfZpyVh46IvM+Hqd8kiPra2no00mETGqD4MPwG/iHw/K+SWQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFG/eG9/ZlzV8yKRfq4axAgAGuZo7MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvYjk0YjM5bVhOWHpJcEYtcmhyRUNBQWE1bWpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxVg MA0GCSqGSIb3DQEBCwUAA4IBAQAI1cPMUw2bpQGeXemnKgK0q3YT+GTVBarqg7MI r5GrLf8QU663iGKtFAKKH+evlBmf1oiEAY1n2dhlRiZrL3xeXR0dc9fyeJIPcIVz kGckgxal4XLe9HbLpwR4knW1DcX8lj3QK2Sbh/G7IgC82z9BuVli9XnHGVz+eJag imjfd1W6vSL0s2dajkmMR1WLYEs43xp6RUqOyYxV5nVi1cVY2DaXz0gj9ZExKcDD xJ/7LI3L4co118+7YDW9i9URO9310gjGNB8ciECnicmGpvC+9BtYwEMdKZvY0eB3 +p34vrQ7p6tE10y9NyMYUpdFn1oDvHw/LVaDo21oyGgdaM3k -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:22 2026 by rpki-client