This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ck6B9gYncrChM-wAMTqlFXvssFQ.roa File: ck6B9gYncrChM-wAMTqlFXvssFQ.roa (raw, json) Hash identifier: 2m6WtdxaynjjzF9dioavn6u0tLtXfDlp+G/L9w+K6l4= Subject key identifier: 72:4E:81:F6:06:27:72:B0:A1:33:EC:00:31:3A:A5:15:7B:EC:B0:54 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D6547554289882DE6AD93B44522BB Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ck6B9gYncrChM-wAMTqlFXvssFQ.roa Signing time: Fri 02 Jan 2026 06:20:31 +0000 ROA not before: Fri 02 Jan 2026 06:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213579 IP address blocks: 2a10:ccc0:eee0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:65:47:55:42:89:88:2d:e6:ad:93:b4:45:22:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=724e81f6062772b0a133ec00313aa5157becb054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:39:58:d9:95:7e:46:21:24:3d:3e:e9:20:27: 87:b2:50:80:b5:0f:3f:db:eb:77:05:ed:86:88:7b: 0e:9c:83:37:0d:61:d6:85:62:80:b3:8b:e2:a6:6c: 1e:6d:4b:47:a9:71:d0:0d:ce:5e:17:0d:4b:77:f1: a1:45:ad:8c:ae:47:7b:ad:4d:ff:e6:d6:80:c1:74: 2c:dd:26:34:59:52:77:5b:5d:0d:a7:bd:79:53:b0: 2d:f0:87:6c:82:14:19:4f:74:cf:88:27:20:12:e9: d0:e2:21:42:f1:cd:73:e2:34:a0:ea:e5:10:94:5e: 91:74:90:2d:85:79:08:03:27:6a:bf:d5:ad:76:24: 9d:34:a3:08:46:1f:95:6d:87:2b:f4:c7:8d:44:23: 77:a5:74:bf:4b:dd:6a:b2:ef:fc:1c:25:c0:8f:d9: 9c:c3:1b:50:16:e0:d7:96:c0:45:c3:5b:ab:28:9f: 72:c0:b1:ee:7c:7f:4e:20:77:87:f9:ea:9a:c5:7c: 0f:b6:9c:20:80:30:de:45:80:2f:fa:8e:c9:24:91: 7e:a8:c6:7b:a6:66:06:e0:74:b5:ef:b6:d7:74:8f: 7c:23:c5:e3:14:b7:4e:10:01:e3:a0:c9:59:de:64: 0f:3c:4b:46:34:06:b0:a4:5b:a9:8a:95:1d:ee:7f: 5e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:4E:81:F6:06:27:72:B0:A1:33:EC:00:31:3A:A5:15:7B:EC:B0:54 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ck6B9gYncrChM-wAMTqlFXvssFQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:ccc0:eee0::/44 Signature Algorithm: sha256WithRSAEncryption c4:e6:69:2c:a2:e4:26:22:e8:1d:f8:6d:e0:99:07:41:79:3d: b9:8f:d1:17:73:14:bc:c6:24:53:cc:b3:1e:45:83:bf:f3:25: fa:94:13:38:e0:53:7f:98:f0:09:c9:76:f8:18:4c:49:5b:df: 60:5f:e6:ce:3b:f9:f9:21:d4:11:f7:6a:b9:ad:78:60:d6:e1: 69:c6:3c:1a:53:08:ae:77:47:e2:bc:cc:1b:e2:5c:8f:8e:aa: f0:db:62:00:9f:6e:e5:81:6b:fc:97:1d:62:6f:64:42:a3:e9: e9:8b:32:84:54:74:2b:78:db:0e:91:b0:de:7f:2a:22:ca:80: 16:6e:f4:ba:fb:b8:ee:a9:ff:b8:11:8e:2b:37:b2:26:ba:76: ee:67:6e:9c:ed:2a:6b:91:a6:9c:e7:08:1d:48:53:43:c4:45: 25:6c:a6:04:a0:fb:66:82:71:25:a6:40:65:5d:9b:1c:64:3f: bc:fa:6d:82:7c:29:d2:d5:5d:35:b6:2f:d6:64:33:24:c7:86: f4:49:09:07:92:88:31:da:38:3a:79:0a:74:48:07:18:50:e8: 46:af:0a:3d:ab:2a:d3:a9:37:92:d4:3b:dd:0a:96:c6:f9:c1: 51:e6:8e:97:ec:12:5c:77:fd:20:76:df:d3:c2:81:fb:81:62: 1f:ce:0a:27 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XWVHVUKJiC3mrZO0RSK7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjRlODFmNjA2Mjc3MmIwYTEzM2VjMDAzMTNhYTUxNTdiZWNiMDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzlY2ZV+RiEkPT7pICeHslCAtQ8/ 2+t3Be2GiHsOnIM3DWHWhWKAs4vipmwebUtHqXHQDc5eFw1Ld/GhRa2Mrkd7rU3/ 5taAwXQs3SY0WVJ3W10Np715U7At8IdsghQZT3TPiCcgEunQ4iFC8c1z4jSg6uUQ lF6RdJAthXkIAydqv9WtdiSdNKMIRh+VbYcr9MeNRCN3pXS/S91qsu/8HCXAj9mc wxtQFuDXlsBFw1urKJ9ywLHufH9OIHeH+eqaxXwPtpwggDDeRYAv+o7JJJF+qMZ7 pmYG4HS177bXdI98I8XjFLdOEAHjoMlZ3mQPPEtGNAawpFupipUd7n9egwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHJOgfYGJ3KwoTPsADE6pRV77LBUMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvY2s2QjlnWW5jckNoTS13QU1UcWxGWHZzc0ZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhDMwO7g MA0GCSqGSIb3DQEBCwUAA4IBAQDE5mksouQmIugd+G3gmQdBeT25j9EXcxS8xiRT zLMeRYO/8yX6lBM44FN/mPAJyXb4GExJW99gX+bOO/n5IdQR92q5rXhg1uFpxjwa Uwiud0fivMwb4lyPjqrw22IAn27lgWv8lx1ib2RCo+npizKEVHQreNsOkbDefyoi yoAWbvS6+7juqf+4EY4rN7ImunbuZ26c7Sprkaac5wgdSFNDxEUlbKYEoPtmgnEl pkBlXZscZD+8+m2CfCnS1V01ti/WZDMkx4b0SQkHkogx2jg6eQp0SAcYUOhGrwo9 qyrTqTeS1DvdCpbG+cFR5o6X7BJcd/0gdt/TwoH7gWIfzgon -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:25 2026 by rpki-client