This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bI-JvaqenyFXy6kzMJ6jptzDUwA.roa File: bI-JvaqenyFXy6kzMJ6jptzDUwA.roa (raw, json) Hash identifier: aXTTfgCMgFLCC4WXgM9CYqZBBBdSB5T3C1L4Fd/guc8= Subject key identifier: 6C:8F:89:BD:AA:9E:9F:21:57:CB:A9:33:30:9E:A3:A6:DC:C3:53:00 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CD57D3913F93D04ABD7DE0C4373DD Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bI-JvaqenyFXy6kzMJ6jptzDUwA.roa Signing time: Fri 02 Jan 2026 06:19:54 +0000 ROA not before: Fri 02 Jan 2026 06:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197601 IP address blocks: 2a06:de07:10::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d5:7d:39:13:f9:3d:04:ab:d7:de:0c:43:73:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c8f89bdaa9e9f2157cba933309ea3a6dcc35300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8a:7f:c6:d3:f3:a7:86:40:06:91:81:7e:a9: 5e:b4:94:8d:7a:1f:b5:ae:7d:dc:19:be:9f:a6:39: 59:92:b6:d8:09:d3:91:93:8a:da:21:45:c8:72:f1: b0:ee:c2:17:46:2f:6a:c1:3e:7b:3d:2b:65:ba:73: 0c:ba:bc:84:b5:f9:c6:86:de:c0:5b:6f:56:87:f1: f6:01:c3:b0:9c:64:42:12:5a:4e:a7:26:77:3f:a7: 64:b8:44:bb:f2:21:97:45:c6:4c:52:c2:83:b9:72: ef:f1:69:14:2e:3e:aa:18:46:f6:f6:2f:b7:1e:30: d2:fb:05:67:41:87:54:5f:f2:4f:32:2e:7d:b9:d1: 3a:6e:3e:c6:88:f1:00:cf:02:e8:66:1d:cc:7c:a3: 40:f4:32:2f:aa:b3:00:fd:0b:52:24:ae:d6:ae:80: d8:ae:ca:43:11:00:f5:1d:fa:9f:83:26:a4:dc:fb: 71:d2:cc:60:85:a8:04:7c:f0:00:a7:6e:14:b6:48: 05:5e:c4:97:58:48:6a:1d:7a:3c:6f:b5:e9:69:74: e3:3c:4a:98:b1:04:b6:1f:d9:c6:90:14:97:44:1f: 01:c2:06:0c:12:88:4b:49:cb:3a:e1:cf:cc:99:8c: 16:a0:be:65:ec:07:02:89:38:cd:54:d4:e9:3e:41: db:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:8F:89:BD:AA:9E:9F:21:57:CB:A9:33:30:9E:A3:A6:DC:C3:53:00 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bI-JvaqenyFXy6kzMJ6jptzDUwA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:de07:10::/47 Signature Algorithm: sha256WithRSAEncryption 9e:57:ec:26:e0:50:3d:ff:75:36:25:a2:d1:c8:22:89:20:3d: 27:15:a8:a9:64:7a:8f:b7:42:26:69:af:79:0d:80:45:1d:bb: 16:bd:64:65:20:2b:87:06:a4:ad:2b:18:f1:bf:5e:9c:33:e2: 3f:8a:ec:73:83:cf:dc:60:25:ce:dd:d7:ef:2b:50:3c:73:85: 5d:4f:16:ae:c1:80:5b:77:8e:3f:40:ea:2b:9b:de:34:5f:aa: dc:95:9a:19:2c:84:e1:c0:96:43:6c:09:81:5f:dd:09:a6:9c: 63:7e:56:0e:21:2e:bc:f9:fd:2a:80:e8:b3:fe:b0:55:3c:b7: 10:02:4c:e2:cc:a0:89:4e:eb:3b:7c:dc:9b:3c:82:1a:7d:f0: e7:16:0e:e5:9b:db:20:81:30:d9:66:75:db:46:a8:48:d2:ff: 00:20:e6:82:b8:d6:01:40:43:b6:3f:c8:e7:5d:db:05:a8:12: a7:11:74:d4:26:44:b9:9f:cf:ea:24:0b:d4:2f:80:c2:aa:88: 08:6d:44:81:9a:b8:68:c1:35:c3:cd:7c:9a:ea:a8:5a:8c:1e: 6f:bf:9a:87:3e:df:0e:68:f1:de:88:40:09:bd:08:c8:54:77: 95:c4:98:66:ca:3c:de:83:1c:b6:0d:9b:72:d4:e8:1b:a3:62: 34:84:ec:5a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XNV9ORP5PQSr194MQ3PdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzhmODliZGFhOWU5ZjIxNTdjYmE5MzMzMDllYTNhNmRjYzM1MzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4p/xtPzp4ZABpGBfqletJSNeh+1 rn3cGb6fpjlZkrbYCdORk4raIUXIcvGw7sIXRi9qwT57PStlunMMuryEtfnGht7A W29Wh/H2AcOwnGRCElpOpyZ3P6dkuES78iGXRcZMUsKDuXLv8WkULj6qGEb29i+3 HjDS+wVnQYdUX/JPMi59udE6bj7GiPEAzwLoZh3MfKNA9DIvqrMA/QtSJK7WroDY rspDEQD1Hfqfgyak3Ptx0sxghagEfPAAp24UtkgFXsSXWEhqHXo8b7XpaXTjPEqY sQS2H9nGkBSXRB8BwgYMEohLScs64c/MmYwWoL5l7AcCiTjNVNTpPkHbEQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGyPib2qnp8hV8upMzCeo6bcw1MAMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvYkktSnZhcWVueUZYeTZrek1KNmpwdHpEVXdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKgbeBwAQ MA0GCSqGSIb3DQEBCwUAA4IBAQCeV+wm4FA9/3U2JaLRyCKJID0nFaipZHqPt0Im aa95DYBFHbsWvWRlICuHBqStKxjxv16cM+I/iuxzg8/cYCXO3dfvK1A8c4VdTxau wYBbd44/QOorm940X6rclZoZLIThwJZDbAmBX90JppxjflYOIS68+f0qgOiz/rBV PLcQAkzizKCJTus7fNybPIIaffDnFg7lm9sggTDZZnXbRqhI0v8AIOaCuNYBQEO2 P8jnXdsFqBKnEXTUJkS5n8/qJAvUL4DCqogIbUSBmrhowTXDzXya6qhajB5vv5qH Pt8OaPHeiEAJvQjIVHeVxJhmyjzegxy2DZty1Ogbo2I0hOxa -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:45 2026 by rpki-client