This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cyIhZc4sT_bcNAsqtC0Z9XIQKS0.roa File: cyIhZc4sT_bcNAsqtC0Z9XIQKS0.roa (raw, json) Hash identifier: W2PFTR0Ebf2+fVcfGTH174VuxM0XW3SSVei2AalsbUc= Subject key identifier: 73:22:21:65:CE:2C:4F:F6:DC:34:0B:2A:B4:2D:19:F5:72:10:29:2D Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D31F6EC326B1405940FC8A6AB743E Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cyIhZc4sT_bcNAsqtC0Z9XIQKS0.roa Signing time: Fri 02 Jan 2026 06:20:18 +0000 ROA not before: Fri 02 Jan 2026 06:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211024 IP address blocks: 2a0e:97c0:4d0::/48 maxlen: 48 2a0e:97c0:4d2::/48 maxlen: 48 2a0e:97c0:4df::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 17:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:31:f6:ec:32:6b:14:05:94:0f:c8:a6:ab:74:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73222165ce2c4ff6dc340b2ab42d19f57210292d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d1:db:73:03:36:b5:0a:f1:2d:a9:6e:23:8d: d8:9a:db:c0:5a:45:66:55:ba:58:fb:80:e3:e4:9e: 4c:b6:9a:ce:1c:29:80:86:75:b9:75:58:76:4a:bf: 0d:8b:31:55:e7:62:84:fc:73:4b:37:d6:49:ed:6a: 14:06:02:4b:06:8d:9b:40:5c:e5:58:78:57:04:50: 88:37:4f:4c:c2:92:dd:52:ee:86:b7:f3:6c:2d:76: e6:29:05:34:77:f2:cb:2b:c7:79:b7:1a:36:1a:3b: c7:7b:b3:8e:37:19:aa:05:a5:34:be:09:17:9f:da: bf:ca:7f:39:66:81:28:f9:d9:32:26:a8:d1:7d:8f: e6:72:b2:6b:ba:a1:19:98:25:d6:8f:d3:a6:e9:00: 37:2b:df:dc:50:1f:02:01:7f:90:52:1f:7c:a4:78: 3f:12:da:7a:dd:ef:8f:f0:21:6b:1d:06:a3:6e:3b: e4:7a:73:f5:47:9b:16:c7:9f:8f:04:ee:ba:8e:11: 94:a9:e8:43:cf:4c:0a:8d:e8:ff:f2:be:39:9e:16: 0d:69:d8:1f:50:64:32:61:bb:a1:34:a3:be:04:a4: cd:a7:8e:2a:b2:34:aa:15:9f:e0:6a:b3:21:82:54: 37:87:97:a4:81:b3:ad:7e:7e:53:03:2e:e0:74:2b: 6d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:22:21:65:CE:2C:4F:F6:DC:34:0B:2A:B4:2D:19:F5:72:10:29:2D X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cyIhZc4sT_bcNAsqtC0Z9XIQKS0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:4d0::/48 2a0e:97c0:4d2::/48 2a0e:97c0:4df::/48 Signature Algorithm: sha256WithRSAEncryption 16:43:81:cc:ed:7c:c5:60:ae:c6:77:95:0d:9a:b6:f0:51:ac: fd:da:32:1d:6d:9a:c6:04:9d:09:20:6e:01:9e:4f:1c:b9:72: 40:5c:0e:c9:70:5a:8b:ed:7d:4a:91:3b:b1:5e:5b:e4:68:51: b1:e8:ed:36:0e:6a:e4:f5:4d:c2:36:81:3a:c6:1a:87:e5:d7: 04:ea:39:b8:57:75:1c:6e:37:c1:b1:75:4e:95:3d:8a:bb:28: e3:b9:77:bf:39:2d:5e:17:50:6d:c4:5f:dd:e6:40:71:09:0d: 40:2d:e5:6d:f7:6b:b4:35:63:04:c8:5a:fe:8f:aa:5c:d7:24: 69:15:40:0e:be:26:05:85:d7:80:1b:d9:4a:ec:16:b6:f8:fc: fe:2c:d2:87:7f:4b:4d:57:8b:f5:ed:5f:fa:10:d8:da:38:10: d7:c9:ff:6f:a9:7e:67:e7:2c:ac:82:ce:6f:3f:40:c7:72:a8: 76:51:e8:e6:ea:9a:a1:16:16:4e:99:9e:3c:6b:02:f4:a2:df: 26:fb:6e:8b:81:91:35:f9:b9:92:b4:4e:f5:ac:1a:de:ce:ab: a9:3d:91:a3:47:83:bd:5e:03:64:f2:0b:74:78:f4:8c:ce:6e: 93:d5:79:3b:81:12:87:55:71:3d:67:b0:af:e4:4f:95:41:90: 4e:96:8f:df -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9XTH27DJrFAWUD8imq3Q+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzIyMjE2NWNlMmM0ZmY2ZGMzNDBiMmFiNDJkMTlmNTcyMTAyOTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9HbcwM2tQrxLaluI43YmtvAWkVm VbpY+4Dj5J5MtprOHCmAhnW5dVh2Sr8NizFV52KE/HNLN9ZJ7WoUBgJLBo2bQFzl WHhXBFCIN09MwpLdUu6Gt/NsLXbmKQU0d/LLK8d5txo2GjvHe7OONxmqBaU0vgkX n9q/yn85ZoEo+dkyJqjRfY/mcrJruqEZmCXWj9Om6QA3K9/cUB8CAX+QUh98pHg/ Etp63e+P8CFrHQajbjvkenP1R5sWx5+PBO66jhGUqehDz0wKjej/8r45nhYNadgf UGQyYbuhNKO+BKTNp44qsjSqFZ/garMhglQ3h5ekgbOtfn5TAy7gdCttewIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFHMiIWXOLE/23DQLKrQtGfVyECktMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvY3lJaFpjNHNUX2JjTkFzcXRDMFo5WElRS1MwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAKg6XwATQ AwcAKg6XwATSAwcAKg6XwATfMA0GCSqGSIb3DQEBCwUAA4IBAQAWQ4HM7XzFYK7G d5UNmrbwUaz92jIdbZrGBJ0JIG4Bnk8cuXJAXA7JcFqL7X1KkTuxXlvkaFGx6O02 Dmrk9U3CNoE6xhqH5dcE6jm4V3UcbjfBsXVOlT2KuyjjuXe/OS1eF1BtxF/d5kBx CQ1ALeVt92u0NWMEyFr+j6pc1yRpFUAOviYFhdeAG9lK7Ba2+Pz+LNKHf0tNV4v1 7V/6ENjaOBDXyf9vqX5n5yysgs5vP0DHcqh2Uejm6pqhFhZOmZ48awL0ot8m+26L gZE1+bmStE71rBrezqupPZGjR4O9XgNk8gt0ePSMzm6T1Xk7gRKHVXE9Z7Cv5E+V QZBOlo/f -----END CERTIFICATE-----Generated at Sat Jan 10 02:19:26 2026 by rpki-client