This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/coPKe3EhWAdL_9zt8Mz5oBIgENw.roa File: coPKe3EhWAdL_9zt8Mz5oBIgENw.roa (raw, json) Hash identifier: dbPgj4VObgkTXd/JDwG2URF88NB/WoNitWPyLWChUy4= Subject key identifier: 72:83:CA:7B:71:21:58:07:4B:FF:DC:ED:F0:CC:F9:A0:12:20:10:DC Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019AD5DC360FF5EECD1350D035985F7DA278 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/coPKe3EhWAdL_9zt8Mz5oBIgENw.roa Signing time: Sun 30 Nov 2025 17:42:50 +0000 ROA not before: Sun 30 Nov 2025 17:42:50 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214243 IP address blocks: 2a06:de00:7f1::/48 maxlen: 48 2a0e:97c0:471::/48 maxlen: 48 2a0e:97c0:4c0::/44 maxlen: 48 2a0e:97c0:4c1::/48 maxlen: 48 2a0e:97c0:4c2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 02 Dec 2025 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d5:dc:36:0f:f5:ee:cd:13:50:d0:35:98:5f:7d:a2:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Nov 30 17:42:50 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7283ca7b712158074bffdcedf0ccf9a0122010dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ee:85:11:46:af:49:99:91:89:da:ea:6e:99: ac:78:d0:bd:ae:91:24:5c:e1:00:51:33:17:eb:99: af:6e:5a:1e:22:4c:37:04:7d:b7:4a:c4:3e:69:33: 47:48:ec:ac:13:b8:78:03:be:a4:1d:49:ce:e5:0b: c5:01:a2:89:a3:15:b3:da:13:61:9a:cf:45:45:95: 54:23:d1:83:f9:d1:99:00:98:bb:c1:68:0f:7c:f6: 02:06:3e:c3:91:76:da:ea:c6:bb:5f:01:1e:e4:d0: a5:36:2c:a8:5d:e4:d4:3c:5d:5a:37:ab:38:70:a1: 98:7a:c1:a3:3f:aa:b4:92:87:46:b7:52:67:5f:15: cd:aa:13:79:b9:d3:17:c2:8e:28:01:de:6b:02:a8: 63:f1:67:81:51:7a:bf:b5:07:33:8d:8e:fd:c5:dd: b6:ec:d2:7d:75:7f:e3:f9:22:8c:ac:4a:7e:f5:dc: c1:aa:af:45:ac:65:17:c1:88:37:a7:2f:e5:4d:3c: 5f:32:72:01:23:64:cb:63:c7:61:d3:f3:d0:36:5a: 3c:11:23:aa:d9:91:80:42:8e:de:c3:91:15:e1:92: 3c:b1:aa:cd:5c:8e:7a:c8:71:e5:cf:04:72:51:7a: c5:ab:4a:63:05:ab:a9:ca:83:3b:c9:3c:17:7f:5b: ba:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:83:CA:7B:71:21:58:07:4B:FF:DC:ED:F0:CC:F9:A0:12:20:10:DC X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/coPKe3EhWAdL_9zt8Mz5oBIgENw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:de00:7f1::/48 2a0e:97c0:471::/48 2a0e:97c0:4c0::/44 Signature Algorithm: sha256WithRSAEncryption 43:db:0f:63:ef:93:c2:88:01:cc:f3:94:b4:68:e8:05:20:3e: 82:06:14:fe:0a:49:35:02:af:e4:9e:26:9d:a9:39:8b:84:e2: ec:ba:f4:60:ce:fd:a4:65:c8:5f:26:8d:32:b8:5a:2b:9c:9c: 59:e8:e0:51:03:19:82:d9:2b:52:58:5d:d8:61:3a:3e:a0:9e: 05:57:b8:a7:c2:06:25:dd:ac:67:07:d4:a1:1e:ab:9d:93:ee: fe:8a:2a:d4:2c:05:07:9e:03:e0:6b:99:57:64:4d:14:cb:89: 66:f5:1d:8d:8a:0e:4d:a1:49:ca:66:7a:50:56:74:60:c4:2a: c9:97:23:e3:4b:95:e3:3c:66:50:2f:df:59:eb:64:d7:f6:43: 6e:94:cd:39:ce:97:e8:7a:46:c6:4a:be:30:90:a0:50:d9:7b: 4e:10:96:bd:d1:5a:fe:16:46:a3:93:05:c2:68:e5:ed:7f:44: 76:59:50:39:16:db:f5:aa:e5:a3:93:97:d3:78:65:f8:55:5f: 22:94:79:77:c9:cd:62:5d:c6:de:48:4a:c9:e7:49:ca:40:81: 32:52:5a:ed:49:6a:bc:c4:e8:77:20:4c:c9:6c:e8:bf:01:62: 73:66:7d:d8:59:63:61:d8:ca:ef:ba:b6:b8:a7:6c:6d:ee:80: b3:18:6d:3c -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZrV3DYP9e7NE1DQNZhffaJ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjUxMTMwMTc0MjUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjgzY2E3YjcxMjE1ODA3NGJmZmRjZWRmMGNjZjlhMDEyMjAxMGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O6FEUavSZmRidrqbpmseNC9rpEk XOEAUTMX65mvbloeIkw3BH23SsQ+aTNHSOysE7h4A76kHUnO5QvFAaKJoxWz2hNh ms9FRZVUI9GD+dGZAJi7wWgPfPYCBj7DkXba6sa7XwEe5NClNiyoXeTUPF1aN6s4 cKGYesGjP6q0kodGt1JnXxXNqhN5udMXwo4oAd5rAqhj8WeBUXq/tQczjY79xd22 7NJ9dX/j+SKMrEp+9dzBqq9FrGUXwYg3py/lTTxfMnIBI2TLY8dh0/PQNlo8ESOq 2ZGAQo7ew5EV4ZI8sarNXI56yHHlzwRyUXrFq0pjBaupyoM7yTwXf1u69wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFHKDyntxIVgHS//c7fDM+aASIBDcMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvY29QS2UzRWhXQWRMXzl6dDhNejVvQklnRU53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAKgbeAAfx AwcAKg6XwARxAwcEKg6XwATAMA0GCSqGSIb3DQEBCwUAA4IBAQBD2w9j75PCiAHM 85S0aOgFID6CBhT+Ckk1Aq/kniadqTmLhOLsuvRgzv2kZchfJo0yuFornJxZ6OBR AxmC2StSWF3YYTo+oJ4FV7inwgYl3axnB9ShHqudk+7+iirULAUHngPga5lXZE0U y4lm9R2Nig5NoUnKZnpQVnRgxCrJlyPjS5XjPGZQL99Z62TX9kNulM05zpfoekbG Sr4wkKBQ2XtOEJa90Vr+FkajkwXCaOXtf0R2WVA5Ftv1quWjk5fTeGX4VV8ilHl3 yc1iXcbeSErJ50nKQIEyUlrtSWq8xOh3IEzJbOi/AWJzZn3YWWNh2Mrvura4p2xt 7oCzGG08 -----END CERTIFICATE-----Generated at Mon Dec 1 23:05:56 2025 by rpki-client