This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cryc4X_n6wYWELGhisS6AjE0cMI.roa
File: cryc4X_n6wYWELGhisS6AjE0cMI.roa (raw, json)
Hash identifier: WYg80pcOZnNGSZlLmih6hXOItvCoKw4f6qy9b8eHIRI=
Subject key identifier: 72:BC:9C:E1:7F:E7:EB:06:16:10:B1:A1:8A:C4:BA:02:31:34:70:C2
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019B7D5C9E5BAE25451C12F6376584AA20B7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cryc4X_n6wYWELGhisS6AjE0cMI.roa
Signing time: Fri 02 Jan 2026 06:19:40 +0000
ROA not before: Fri 02 Jan 2026 06:19:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5687
IP address blocks: 2a0e:b107:2130::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Jan 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:9e:5b:ae:25:45:1c:12:f6:37:65:84:aa:20:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 06:19:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72bc9ce17fe7eb061610b1a18ac4ba02313470c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f7:b8:ed:da:16:e2:c1:32:2f:41:c6:36:c9:
7e:57:e4:d6:1d:10:52:2a:79:fa:ad:9a:c0:86:2d:
fe:36:6e:3f:d3:bd:be:6b:41:52:d8:f6:ae:5b:db:
9a:72:4e:1d:2c:c1:8a:09:bc:af:01:49:dd:9e:2f:
8a:b0:a4:31:6e:83:73:71:bb:58:69:ba:37:bb:b6:
d7:45:c1:9f:cb:14:bf:7b:05:e2:c5:a7:1c:de:87:
42:7a:30:c4:07:18:49:78:dd:52:9e:0c:7f:98:5f:
53:9e:fe:bb:7b:7b:dc:25:91:4b:5f:71:24:82:1c:
08:c7:78:95:44:4a:95:ad:20:42:db:3e:30:d7:d0:
5d:db:8f:2b:9d:69:13:66:78:8f:a2:8b:55:27:5e:
3b:b2:46:60:fc:19:5a:ab:17:0f:e9:7d:75:f6:08:
2b:2b:d2:4d:84:58:bb:3f:ee:5b:be:84:7c:8c:85:
9e:5f:3f:72:6e:29:2e:5d:2f:06:7c:0b:f4:0c:1a:
c3:4c:ce:a2:83:1f:b8:8e:b7:03:a7:85:27:d6:85:
3a:92:89:ed:7c:8e:72:f2:43:49:19:a0:eb:d3:c4:
c5:36:14:f1:de:cf:f4:3c:e2:a7:3e:b4:25:49:68:
08:15:76:53:ca:23:20:7e:8b:88:75:5d:82:07:a6:
ac:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BC:9C:E1:7F:E7:EB:06:16:10:B1:A1:8A:C4:BA:02:31:34:70:C2
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cryc4X_n6wYWELGhisS6AjE0cMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2130::/44
Signature Algorithm: sha256WithRSAEncryption
23:c4:c4:8a:f4:30:d9:d9:32:d8:05:db:0c:e4:74:5e:6b:eb:
ec:e5:21:df:74:44:79:99:42:a8:f0:9f:81:f0:d6:ce:e3:ae:
52:5e:27:6b:5a:b1:36:9e:ee:81:5c:68:4b:35:0e:10:b7:db:
0e:b1:1f:14:83:9e:ad:5f:80:9b:9a:57:eb:8c:83:4f:03:0b:
a7:af:67:36:ef:cc:72:fc:7b:7b:ac:8a:f2:24:73:41:0a:02:
8d:38:92:19:69:7f:26:8c:34:f0:58:ae:37:15:2c:29:38:1c:
89:97:00:1e:cd:98:fb:de:cd:e3:80:cb:76:02:6c:cb:95:4a:
33:78:28:03:62:51:88:d1:9c:9c:b1:23:ca:52:b8:cb:42:74:
9f:5e:fb:6a:44:92:08:ca:df:49:6c:ac:30:06:04:81:1c:5c:
37:d3:b9:c2:bb:d3:31:a9:f8:f9:62:16:7c:2f:c5:0b:a4:97:
e2:61:55:67:57:84:ed:7c:0e:90:ac:f8:d4:6b:38:e3:dd:9a:
f9:f8:78:4f:ad:3c:1c:f4:64:96:c4:a3:cb:73:f5:e1:20:65:
76:80:6e:bf:c9:28:39:4d:cf:7f:92:a7:9d:a3:df:bc:5c:21:
4c:8e:b7:bf:40:dc:f1:7b:06:98:cd:1b:5d:96:76:0d:96:8e:
0d:44:84:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 13:11:49 2026 by rpki-client