This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bCsaDSucrSBtZdWpl6KxsXBsfQA.roa File: bCsaDSucrSBtZdWpl6KxsXBsfQA.roa (raw, json) Hash identifier: gxF4Lh5kByWvSPBtGf5Nm2FBHynk1YJCe6e9mIPFd04= Subject key identifier: 6C:2B:1A:0D:2B:9C:AD:20:6D:65:D5:A9:97:A2:B1:B1:70:6C:7D:00 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D16ADA61C75A7634BAA7C303CCDA1 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bCsaDSucrSBtZdWpl6KxsXBsfQA.roa Signing time: Fri 02 Jan 2026 06:20:11 +0000 ROA not before: Fri 02 Jan 2026 06:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208717 IP address blocks: 2a0e:b107:220::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:16:ad:a6:1c:75:a7:63:4b:aa:7c:30:3c:cd:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c2b1a0d2b9cad206d65d5a997a2b1b1706c7d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:aa:f6:4f:2e:a8:81:7d:74:2f:99:57:8b:92: 41:24:a7:cd:2f:36:37:81:37:af:b5:5d:4f:62:df: ba:37:ef:fc:a3:51:28:f9:0d:7e:21:9f:08:1f:d3: 68:16:53:fb:f5:e6:4e:db:1e:fb:52:1c:42:f4:93: 96:cd:7d:20:da:8b:d6:18:72:b7:3b:ed:87:ff:bf: 17:25:14:c1:5c:b3:f4:36:11:53:b4:fa:80:5c:e7: a8:7f:b5:72:47:5f:87:bc:79:53:fb:ca:a0:f6:ab: 87:28:a1:2f:25:8f:53:40:51:1b:33:88:7e:05:fb: c5:08:c5:d2:d5:10:1f:bd:0e:19:77:5e:df:41:3e: c6:3d:00:ab:4a:39:85:81:71:73:57:9e:84:53:56: da:9e:ac:53:2e:2f:c4:9b:d0:db:f8:6e:c8:4e:15: 5d:5e:20:5a:7c:48:de:14:48:36:ea:15:f5:c3:a0: 95:81:43:b5:eb:30:cd:ff:ec:05:c7:df:c7:98:e7: 61:d6:cf:1b:0b:47:c1:c6:44:73:57:16:03:ed:66: 2a:66:bd:9e:0b:5e:0d:fd:c0:f6:c6:d9:96:36:4b: e4:f4:2f:0b:fd:1f:8e:59:07:e9:22:33:a2:9e:36: 2e:ce:a3:67:d2:fa:3d:f2:3f:27:37:ff:c3:3c:3e: 7f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:2B:1A:0D:2B:9C:AD:20:6D:65:D5:A9:97:A2:B1:B1:70:6C:7D:00 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bCsaDSucrSBtZdWpl6KxsXBsfQA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:220::/44 Signature Algorithm: sha256WithRSAEncryption 7f:54:53:8e:c6:20:60:04:d0:84:0f:83:8c:99:7b:0c:eb:44: ed:9c:3e:8a:7f:05:b2:00:5b:23:87:8e:4f:73:cb:42:9e:81: c8:53:82:51:5f:54:77:10:d5:f8:7b:a3:12:87:7e:0c:b2:8e: de:6e:16:32:dc:72:79:83:a2:64:f2:85:48:7b:64:d0:94:22: 87:f5:06:94:7c:ba:76:23:9e:e7:27:b8:fb:08:4d:25:73:b4: a2:53:03:3f:d3:b9:39:62:9b:7a:0a:21:4a:35:1a:cf:18:c3: 5c:c6:74:4a:b3:95:cb:ac:6b:87:48:88:18:73:19:e8:73:84: e5:cb:56:aa:49:ce:a3:75:4b:dd:7b:e1:b0:d0:ca:cf:93:46: 03:33:66:50:d7:a1:0a:92:59:1f:63:d2:b5:ee:cf:ce:7d:27: 2c:97:ee:57:ec:29:3a:de:6d:0d:c9:79:e1:c2:5a:83:a4:de: 18:ef:42:b0:07:11:d1:97:d4:17:16:b1:0b:7f:bc:ca:3c:23: 1f:be:b2:44:32:04:a2:40:b8:c5:d3:0f:d4:be:92:24:93:32: 5e:eb:13:b2:e1:37:da:94:79:19:e7:65:3f:2f:bf:29:7c:07: ba:23:db:c0:38:73:8f:54:90:db:6e:3a:ff:8d:07:f5:c7:16: fa:63:f0:7b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XRatphx1p2NLqnwwPM2hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzJiMWEwZDJiOWNhZDIwNmQ2NWQ1YTk5N2EyYjFiMTcwNmM3ZDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKr2Ty6ogX10L5lXi5JBJKfNLzY3 gTevtV1PYt+6N+/8o1Eo+Q1+IZ8IH9NoFlP79eZO2x77UhxC9JOWzX0g2ovWGHK3 O+2H/78XJRTBXLP0NhFTtPqAXOeof7VyR1+HvHlT+8qg9quHKKEvJY9TQFEbM4h+ BfvFCMXS1RAfvQ4Zd17fQT7GPQCrSjmFgXFzV56EU1banqxTLi/Em9Db+G7IThVd XiBafEjeFEg26hX1w6CVgUO16zDN/+wFx9/HmOdh1s8bC0fBxkRzVxYD7WYqZr2e C14N/cD2xtmWNkvk9C8L/R+OWQfpIjOinjYuzqNn0vo98j8nN//DPD5/awIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGwrGg0rnK0gbWXVqZeisbFwbH0AMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvYkNzYURTdWNyU0J0WmRXcGw2S3hzWEJzZlFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBwIg MA0GCSqGSIb3DQEBCwUAA4IBAQB/VFOOxiBgBNCED4OMmXsM60TtnD6KfwWyAFsj h45Pc8tCnoHIU4JRX1R3ENX4e6MSh34Mso7ebhYy3HJ5g6Jk8oVIe2TQlCKH9QaU fLp2I57nJ7j7CE0lc7SiUwM/07k5Ypt6CiFKNRrPGMNcxnRKs5XLrGuHSIgYcxno c4Tly1aqSc6jdUvde+Gw0MrPk0YDM2ZQ16EKklkfY9K17s/OfScsl+5X7Ck63m0N yXnhwlqDpN4Y70KwBxHRl9QXFrELf7zKPCMfvrJEMgSiQLjF0w/UvpIkkzJe6xOy 4TfalHkZ52U/L78pfAe6I9vAOHOPVJDbbjr/jQf1xxb6Y/B7 -----END CERTIFICATE-----Generated at Fri Jan 9 13:11:55 2026 by rpki-client