This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cB5f34yRCgkk6u6On6woJ_YipKU.roa File: cB5f34yRCgkk6u6On6woJ_YipKU.roa (raw, json) Hash identifier: 4EQQF+bXO253lG/lhhHjyJheFKaxNDPtQHyYiQPFokA= Subject key identifier: 70:1E:5F:DF:8C:91:0A:09:24:EA:EE:8E:9F:AC:28:27:F6:22:A4:A5 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D72801D103F3F920887EC8A50829C Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cB5f34yRCgkk6u6On6woJ_YipKU.roa Signing time: Fri 02 Jan 2026 06:20:34 +0000 ROA not before: Fri 02 Jan 2026 06:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214971 IP address blocks: 2a06:de02:1a01::/48 maxlen: 48 2a06:de02:1a02::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:72:80:1d:10:3f:3f:92:08:87:ec:8a:50:82:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=701e5fdf8c910a0924eaee8e9fac2827f622a4a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:55:09:ef:41:e1:c6:d3:92:c6:c9:02:71:c6: 3f:07:b5:76:ff:63:94:a3:0e:db:99:c2:18:69:b0: 78:e7:dd:d0:1e:02:ad:dc:e4:fc:a7:e4:30:9e:af: f0:ca:02:81:bd:ed:ce:05:0d:96:e8:0b:65:27:b1: 8f:d0:86:aa:8b:a0:c5:54:ed:d3:44:5e:4b:93:38: 0d:c2:cf:be:64:df:19:a5:dc:90:41:88:e6:1d:26: c2:77:89:73:90:99:60:a2:59:09:fe:26:cb:01:6f: 9e:a2:97:1a:d8:9d:29:ba:ff:90:4c:4b:d6:4c:27: 50:65:f9:bf:1a:24:5b:65:d2:90:95:80:5b:71:36: ec:58:60:f6:d1:5b:f4:9c:6b:d2:f3:61:95:d4:99: b9:52:a3:8a:08:b8:df:50:86:f2:80:d4:c9:8e:d9: 67:fa:db:5c:e6:76:6b:54:99:fe:4a:a3:d5:eb:e1: fe:ba:e1:ad:ad:a3:95:83:33:c9:a7:8e:f6:15:59: 72:b0:c4:94:29:08:67:49:e5:15:6b:45:af:e4:e8: 6f:04:70:59:16:d4:11:69:f4:38:c1:fd:98:9d:39: 7b:90:55:b4:67:4a:7c:de:8d:f3:6b:48:d4:04:9d: 2c:89:09:36:52:fa:9f:f7:dd:45:c3:6d:89:66:de: 28:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:1E:5F:DF:8C:91:0A:09:24:EA:EE:8E:9F:AC:28:27:F6:22:A4:A5 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cB5f34yRCgkk6u6On6woJ_YipKU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:de02:1a01::-2a06:de02:1a02:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 1b:ce:17:21:9f:79:b6:1a:bc:b2:78:a8:39:42:78:c7:1b:22: 9f:0c:8b:a7:33:3b:a5:2a:2d:31:46:4b:32:70:d2:88:25:11: 7a:82:9b:9b:bf:41:4c:97:64:77:46:73:a6:b1:66:30:80:47: e5:06:c3:3a:f8:af:f4:31:64:6f:5b:d1:2b:29:bc:ba:bb:5f: 12:ff:ab:07:0a:27:bd:46:f0:1f:63:d7:e4:fa:a8:9e:3d:d3: e2:a8:83:fc:9e:c3:35:2f:e5:31:a3:05:cd:26:db:06:1e:81: 0f:90:e4:21:5f:f6:c3:03:a2:87:b9:f6:f5:98:88:b5:78:e5: 89:41:8f:8a:43:17:85:7b:3d:91:84:7d:bf:c6:19:b1:86:71: f4:03:94:af:d8:b2:d1:3b:fc:53:35:04:dc:8d:0f:eb:f2:29: 42:60:f8:1c:a6:6c:f3:a0:e3:2d:d8:93:f5:62:9d:01:2b:2e: 8b:3a:8a:e5:ca:d3:9a:51:a3:11:49:30:f9:de:e0:07:92:d4: a4:38:8d:61:14:39:e0:dc:92:9d:dd:d4:90:89:6b:7a:61:24: 90:87:43:72:c0:82:04:09:0d:5a:29:0a:4f:25:9a:94:29:7c: 02:b8:02:46:71:46:6d:0f:c0:17:f0:ac:3c:dc:41:bc:c2:34: 14:4d:30:eb -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt9XXKAHRA/P5IIh+yKUIKcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDFlNWZkZjhjOTEwYTA5MjRlYWVlOGU5ZmFjMjgyN2Y2MjJhNGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1UJ70HhxtOSxskCccY/B7V2/2OU ow7bmcIYabB4593QHgKt3OT8p+Qwnq/wygKBve3OBQ2W6AtlJ7GP0Iaqi6DFVO3T RF5LkzgNws++ZN8ZpdyQQYjmHSbCd4lzkJlgolkJ/ibLAW+eopca2J0puv+QTEvW TCdQZfm/GiRbZdKQlYBbcTbsWGD20Vv0nGvS82GV1Jm5UqOKCLjfUIbygNTJjtln +ttc5nZrVJn+SqPV6+H+uuGtraOVgzPJp472FVlysMSUKQhnSeUVa0Wv5OhvBHBZ FtQRafQ4wf2YnTl7kFW0Z0p83o3za0jUBJ0siQk2Uvqf991Fw22JZt4ogQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFHAeX9+MkQoJJOrujp+sKCf2IqSlMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvY0I1ZjM0eVJDZ2trNnU2T242d29KX1lpcEtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqBt4C GgEDBwAqBt4CGgIwDQYJKoZIhvcNAQELBQADggEBABvOFyGfebYavLJ4qDlCeMcb Ip8Mi6czO6UqLTFGSzJw0oglEXqCm5u/QUyXZHdGc6axZjCAR+UGwzr4r/QxZG9b 0SspvLq7XxL/qwcKJ71G8B9j1+T6qJ490+Kog/yewzUv5TGjBc0m2wYegQ+Q5CFf 9sMDooe59vWYiLV45YlBj4pDF4V7PZGEfb/GGbGGcfQDlK/YstE7/FM1BNyND+vy KUJg+BymbPOg4y3Yk/VinQErLos6iuXK05pRoxFJMPne4AeS1KQ4jWEUOeDckp3d 1JCJa3phJJCHQ3LAggQJDVopCk8lmpQpfAK4AkZxRm0PwBfwrDzcQbzCNBRNMOs= -----END CERTIFICATE-----Generated at Fri Jan 9 13:11:51 2026 by rpki-client