This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cCMsGZ-Hr8BL4-HR77HcvuTRhcA.roa File: cCMsGZ-Hr8BL4-HR77HcvuTRhcA.roa (raw, json) Hash identifier: t9CDbc/3S+xeU8y3y5/Ym/tusd79XmHJoi8mUtUtRxE= Subject key identifier: 70:23:2C:19:9F:87:AF:C0:4B:E3:E1:D1:EF:B1:DC:BE:E4:D1:85:C0 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CF8D7AFA7F0C92E16ED4C49B65257 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cCMsGZ-Hr8BL4-HR77HcvuTRhcA.roa Signing time: Fri 02 Jan 2026 06:20:03 +0000 ROA not before: Fri 02 Jan 2026 06:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204268 IP address blocks: 2a0e:b107:1fa0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f8:d7:af:a7:f0:c9:2e:16:ed:4c:49:b6:52:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70232c199f87afc04be3e1d1efb1dcbee4d185c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:11:5a:dc:74:92:d1:5d:8c:4c:5c:22:3f:26: 4e:1c:c8:5d:29:b6:bc:2b:69:cd:b2:49:73:c9:28: 14:4f:ee:80:7e:1b:ac:d3:3d:a1:3c:83:20:62:56: bf:6e:7f:ef:a8:f3:b6:2e:8b:76:6a:42:9f:92:3e: 6d:25:92:52:92:ec:4d:eb:50:ed:65:92:58:d0:c1: 0c:17:1b:64:c8:20:4b:a9:3b:f8:92:34:c2:c2:19: 38:24:bd:51:e2:49:49:08:61:a9:5d:de:c9:07:db: 46:4f:b9:5f:37:81:54:ed:62:73:6e:12:8c:93:e2: 05:07:10:90:39:f5:a4:42:1a:a2:22:e5:99:f3:c9: dd:de:ea:54:98:b9:06:f2:d5:18:37:9a:35:7b:23: af:df:93:80:8b:31:96:d6:84:dc:31:1d:9e:00:25: 34:44:ee:57:0d:c6:3a:7d:00:22:61:ac:f4:ea:4c: 7a:12:df:3a:21:bf:6f:6b:1b:9d:6c:fc:a1:60:1c: 9c:2b:08:bb:e7:65:7f:80:eb:05:11:25:37:97:5c: 48:50:32:70:0a:87:a2:7c:cc:58:c3:60:8d:8b:fd: 3b:3c:e3:05:7f:4d:b6:a2:a0:52:5a:e0:91:36:91: 9c:3b:90:58:5d:30:cb:6c:15:41:b9:f9:f4:a0:70: 69:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:23:2C:19:9F:87:AF:C0:4B:E3:E1:D1:EF:B1:DC:BE:E4:D1:85:C0 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cCMsGZ-Hr8BL4-HR77HcvuTRhcA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1fa0::/44 Signature Algorithm: sha256WithRSAEncryption 55:fe:6d:33:31:07:6e:be:84:18:40:07:ec:39:d1:1a:18:73: 4a:92:65:4e:61:02:08:a9:fe:66:7d:1b:27:51:88:aa:e8:18: 08:48:2f:11:c0:b9:13:e8:88:aa:50:5d:50:d1:fa:2b:69:06: ea:77:69:a8:15:d9:7c:86:27:38:35:20:c6:8f:1a:a6:d8:b7: 51:56:2c:38:00:6d:df:c9:f6:fc:54:72:50:aa:c8:97:c6:94: 19:25:48:63:d5:11:75:f8:89:12:a4:76:0d:c8:bd:b0:8c:8f: a5:9d:1c:b8:46:9d:9b:6b:ca:55:0e:db:66:24:3f:87:ae:80: 34:81:c2:55:36:73:fc:94:52:ac:29:41:8b:41:c7:7a:e3:e0: 33:09:20:ba:4e:20:3a:c8:c7:cc:c0:c3:80:54:31:ff:61:5a: a5:4b:6b:9a:db:c8:27:94:2a:4d:0b:c8:6b:32:e0:eb:41:63: fa:76:9b:4f:0b:72:8f:98:95:1e:ae:2b:bc:f9:0e:ae:6d:93: 06:ed:e7:3e:b1:fa:c0:70:32:7d:82:66:0d:e0:f0:50:2e:61: 31:a4:77:a3:ca:6c:09:be:d7:9b:1f:3a:54:81:85:49:b6:ea: d6:bb:98:53:7a:7b:c2:87:d3:e6:08:05:78:5b:3e:8b:59:57: 45:f7:eb:cb -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XPjXr6fwyS4W7UxJtlJXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDIzMmMxOTlmODdhZmMwNGJlM2UxZDFlZmIxZGNiZWU0ZDE4NWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RFa3HSS0V2MTFwiPyZOHMhdKba8 K2nNsklzySgUT+6Afhus0z2hPIMgYla/bn/vqPO2Lot2akKfkj5tJZJSkuxN61Dt ZZJY0MEMFxtkyCBLqTv4kjTCwhk4JL1R4klJCGGpXd7JB9tGT7lfN4FU7WJzbhKM k+IFBxCQOfWkQhqiIuWZ88nd3upUmLkG8tUYN5o1eyOv35OAizGW1oTcMR2eACU0 RO5XDcY6fQAiYaz06kx6Et86Ib9vaxudbPyhYBycKwi752V/gOsFESU3l1xIUDJw CoeifMxYw2CNi/07POMFf022oqBSWuCRNpGcO5BYXTDLbBVBufn0oHBpWQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHAjLBmfh6/AS+Ph0e+x3L7k0YXAMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvY0NNc0daLUhyOEJMNC1IUjc3SGN2dVRSaGNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBx+g MA0GCSqGSIb3DQEBCwUAA4IBAQBV/m0zMQduvoQYQAfsOdEaGHNKkmVOYQIIqf5m fRsnUYiq6BgISC8RwLkT6IiqUF1Q0foraQbqd2moFdl8hic4NSDGjxqm2LdRViw4 AG3fyfb8VHJQqsiXxpQZJUhj1RF1+IkSpHYNyL2wjI+lnRy4Rp2ba8pVDttmJD+H roA0gcJVNnP8lFKsKUGLQcd64+AzCSC6TiA6yMfMwMOAVDH/YVqlS2ua28gnlCpN C8hrMuDrQWP6dptPC3KPmJUeriu8+Q6ubZMG7ec+sfrAcDJ9gmYN4PBQLmExpHej ymwJvtebHzpUgYVJturWu5hTenvCh9PmCAV4Wz6LWVdF9+vL -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:21 2026 by rpki-client