This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bQW0wvVqT4h-ghg-S4gZuyahaDE.roa File: bQW0wvVqT4h-ghg-S4gZuyahaDE.roa (raw, json) Hash identifier: ecfhlpW6W/H1I8aOUL5IGABYOdfAw/5TT503WfIBq2I= Subject key identifier: 6D:05:B4:C2:F5:6A:4F:88:7E:82:18:3E:4B:88:19:BB:26:A1:68:31 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D37916282051B11B80C81A0E754A3 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bQW0wvVqT4h-ghg-S4gZuyahaDE.roa Signing time: Fri 02 Jan 2026 06:20:19 +0000 ROA not before: Fri 02 Jan 2026 06:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211169 IP address blocks: 2a0e:b107:15b0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:37:91:62:82:05:1b:11:b8:0c:81:a0:e7:54:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d05b4c2f56a4f887e82183e4b8819bb26a16831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:27:47:6f:62:20:3f:18:ba:07:09:7d:c4:76: 7f:74:2d:0b:f9:72:1d:75:6b:5b:71:10:f3:44:08: 94:86:9b:6d:ce:49:b8:47:8f:55:d2:81:19:77:44: 66:11:e7:e7:ed:99:e3:b6:23:d1:00:2f:62:08:82: 2f:d9:a5:fa:15:f0:a8:37:80:11:b4:e2:ac:40:dd: fb:cd:03:e3:85:13:fe:ad:a1:a6:0e:9f:b2:d1:08: 31:17:de:27:86:fe:b5:a9:99:f4:9e:6b:2f:de:ef: a9:28:d1:68:07:39:c4:ad:ef:4d:b0:d7:54:10:e0: 69:cf:70:74:21:5a:7f:16:8d:82:5a:71:a8:3c:f4: 8b:9a:b4:3e:f8:d6:74:45:93:b3:70:6e:43:ab:1e: eb:17:76:8f:88:93:c1:54:6c:0d:43:87:8f:5e:f4: ac:e8:6d:ef:4b:c8:43:3c:a5:63:c0:e3:08:8d:39: ad:60:1f:01:cb:19:87:2e:62:16:19:e5:31:d0:c5: 6b:f4:c1:75:9c:33:ba:05:ac:cd:9c:ca:40:2f:fe: 9c:79:d6:f7:13:06:32:bf:df:32:d9:83:23:76:3d: b2:eb:a2:ff:36:b4:e4:73:3b:4e:95:45:37:d5:9c: 92:05:5c:b3:65:ed:59:85:bb:1f:63:04:79:8f:76: 01:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:05:B4:C2:F5:6A:4F:88:7E:82:18:3E:4B:88:19:BB:26:A1:68:31 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bQW0wvVqT4h-ghg-S4gZuyahaDE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:15b0::/44 Signature Algorithm: sha256WithRSAEncryption 35:9b:73:3e:7a:be:8a:4b:70:ab:2c:67:f3:8a:ef:10:c6:c9: 78:f2:a5:b8:4d:a5:15:16:7a:67:a9:ce:a1:40:5b:66:c5:21: e7:fa:ef:b5:97:65:59:ea:31:c9:3f:f3:24:75:39:3c:d9:5a: e8:5f:66:93:52:69:41:d2:d9:f1:1b:fd:73:73:6b:fb:36:3c: ca:88:c4:f2:0e:0d:da:47:34:16:49:58:e4:2d:4a:27:29:01: 94:55:aa:d5:24:f8:d4:56:62:30:b7:0a:5f:e5:0a:fc:cc:0c: fa:57:46:13:2c:00:c0:6a:71:78:76:2f:6b:7b:13:90:1b:f7: 47:69:4f:d4:20:fb:88:80:4e:92:f2:f3:df:12:dc:6f:54:15: 7b:d5:f5:c1:e0:d4:13:96:46:7a:dc:8d:f9:21:27:b1:29:53: 48:ec:f2:fe:ce:30:49:ed:ca:01:b3:0e:43:48:da:37:27:12: bc:0e:1f:5f:f7:96:e6:0f:07:d2:26:e9:d7:15:7e:db:f3:2a: dd:64:ef:bf:49:5e:2a:a6:61:04:7f:fb:ae:fb:58:bb:65:bf: 89:42:0c:f2:a2:98:8c:5a:5f:a2:dc:36:e6:2c:6f:c4:d8:54: b5:4f:45:52:73:ba:c9:49:00:fc:78:45:c2:48:e5:90:99:d4: 59:d3:7b:24 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XTeRYoIFGxG4DIGg51SjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDA1YjRjMmY1NmE0Zjg4N2U4MjE4M2U0Yjg4MTliYjI2YTE2ODMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CdHb2IgPxi6Bwl9xHZ/dC0L+XId dWtbcRDzRAiUhpttzkm4R49V0oEZd0RmEefn7ZnjtiPRAC9iCIIv2aX6FfCoN4AR tOKsQN37zQPjhRP+raGmDp+y0QgxF94nhv61qZn0nmsv3u+pKNFoBznEre9NsNdU EOBpz3B0IVp/Fo2CWnGoPPSLmrQ++NZ0RZOzcG5Dqx7rF3aPiJPBVGwNQ4ePXvSs 6G3vS8hDPKVjwOMIjTmtYB8ByxmHLmIWGeUx0MVr9MF1nDO6BazNnMpAL/6cedb3 EwYyv98y2YMjdj2y66L/NrTkcztOlUU31ZySBVyzZe1ZhbsfYwR5j3YBywIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFG0FtML1ak+IfoIYPkuIGbsmoWgxMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvYlFXMHd2VnFUNGgtZ2hnLVM0Z1p1eWFoYURFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxWw MA0GCSqGSIb3DQEBCwUAA4IBAQA1m3M+er6KS3CrLGfziu8Qxsl48qW4TaUVFnpn qc6hQFtmxSHn+u+1l2VZ6jHJP/MkdTk82VroX2aTUmlB0tnxG/1zc2v7NjzKiMTy Dg3aRzQWSVjkLUonKQGUVarVJPjUVmIwtwpf5Qr8zAz6V0YTLADAanF4di9rexOQ G/dHaU/UIPuIgE6S8vPfEtxvVBV71fXB4NQTlkZ63I35ISexKVNI7PL+zjBJ7coB sw5DSNo3JxK8Dh9f95bmDwfSJunXFX7b8yrdZO+/SV4qpmEEf/uu+1i7Zb+JQgzy opiMWl+i3DbmLG/E2FS1T0VSc7rJSQD8eEXCSOWQmdRZ03sk -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:44 2026 by rpki-client