This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/czaDXrPV9kADMREI6BoRK866a8M.roa File: czaDXrPV9kADMREI6BoRK866a8M.roa (raw, json) Hash identifier: 3nzvIO86ywzNg6fc18S/S2zmiRT0bBIqAQY6TnPhdzY= Subject key identifier: 73:36:83:5E:B3:D5:F6:40:03:31:11:08:E8:1A:11:2B:CE:BA:6B:C3 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D8FEDDB8309B93242B46C78677012 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/czaDXrPV9kADMREI6BoRK866a8M.roa Signing time: Fri 02 Jan 2026 06:20:42 +0000 ROA not before: Fri 02 Jan 2026 06:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1294067294 IP address blocks: 2a0e:b107:13d2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:8f:ed:db:83:09:b9:32:42:b4:6c:78:67:70:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7336835eb3d5f64003311108e81a112bceba6bc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:07:dc:0d:de:56:b2:0c:7f:38:fe:21:76:50: 5b:01:71:d8:76:09:0c:6e:fd:ef:5a:d8:8e:98:20: f3:c2:a2:d6:10:ae:26:84:75:6b:85:26:b8:66:97: fd:8c:58:11:16:0e:39:7f:60:c5:86:3c:f9:b7:42: 1c:bc:ba:2c:2b:a9:cb:9c:b1:d2:01:74:b8:47:44: 2b:b6:16:77:87:57:29:69:0a:26:60:56:d9:72:ff: c0:ea:f3:c0:6e:9f:7e:27:45:59:6f:69:29:7b:53: f3:68:c9:e1:43:bb:b7:96:97:a8:2d:11:b4:86:e2: 84:cd:70:45:9c:51:cb:38:68:48:67:c0:b0:4e:f0: 85:16:00:9e:0e:9f:76:bf:7f:29:c1:9f:43:37:14: f9:89:88:01:4e:ec:53:7b:d8:f2:32:d6:13:1b:91: 17:32:f7:4e:16:18:fb:8a:57:93:09:ae:27:46:be: 83:26:27:17:bf:dd:c9:c0:b8:aa:da:e6:7e:be:04: 4d:df:f7:8f:fd:ef:cf:20:73:48:ff:f4:ba:0d:20: a5:df:b0:99:72:ea:e7:e6:15:4f:e8:49:39:a2:90: 5a:63:fc:46:70:2c:46:98:d2:67:75:a0:10:d6:5b: 57:71:57:42:fb:08:64:c4:58:ed:27:e2:ee:8d:ce: 11:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:36:83:5E:B3:D5:F6:40:03:31:11:08:E8:1A:11:2B:CE:BA:6B:C3 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/czaDXrPV9kADMREI6BoRK866a8M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:13d2::/48 Signature Algorithm: sha256WithRSAEncryption 01:89:06:5a:15:2d:63:ee:6c:d4:49:87:72:3d:ff:49:35:17: 2d:15:d7:b6:2e:b9:65:03:4c:c2:13:e0:9c:ad:80:a5:bb:5f: bd:a0:51:a1:59:56:dd:df:40:de:57:79:c3:11:7f:91:6b:fe: 62:0e:59:0e:38:b5:7b:8e:5c:de:9f:b6:00:1c:21:71:f1:9f: 8b:19:2f:3d:9b:69:33:14:7a:eb:9e:8d:62:5c:01:59:94:c6: 1e:39:eb:4f:07:77:dd:e1:83:68:c3:d1:52:d6:99:75:d7:8f: 21:29:9b:fe:ff:d1:9d:3f:35:73:41:bb:3e:ec:f4:d9:0d:b3: d8:cd:12:08:ee:b9:c7:12:d6:f0:6c:e2:db:53:e4:a8:0e:3f: 73:a3:2f:e8:52:37:92:d1:bb:7d:3a:e1:b5:35:61:89:24:53: b7:3f:e1:ca:fc:70:93:d1:99:9d:b3:cc:91:e2:f2:fb:5a:56: 9b:82:f2:c5:8f:1c:d6:7c:a5:d7:66:d1:3b:66:cd:8b:b2:d0: 96:76:3c:e4:21:15:ae:cc:bc:f7:c0:6f:75:94:c7:af:26:fe: 26:f5:7f:fb:45:c3:0c:40:0e:51:8e:0a:5b:64:61:f3:db:0d: c1:16:4e:72:a6:96:ae:48:ba:0c:66:3c:95:01:ba:a0:20:c9: 9b:18:af:86 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XY/t24MJuTJCtGx4Z3ASMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzM2ODM1ZWIzZDVmNjQwMDMzMTExMDhlODFhMTEyYmNlYmE2YmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQfcDd5Wsgx/OP4hdlBbAXHYdgkM bv3vWtiOmCDzwqLWEK4mhHVrhSa4Zpf9jFgRFg45f2DFhjz5t0IcvLosK6nLnLHS AXS4R0QrthZ3h1cpaQomYFbZcv/A6vPAbp9+J0VZb2kpe1PzaMnhQ7u3lpeoLRG0 huKEzXBFnFHLOGhIZ8CwTvCFFgCeDp92v38pwZ9DNxT5iYgBTuxTe9jyMtYTG5EX MvdOFhj7ileTCa4nRr6DJicXv93JwLiq2uZ+vgRN3/eP/e/PIHNI//S6DSCl37CZ curn5hVP6Ek5opBaY/xGcCxGmNJndaAQ1ltXcVdC+whkxFjtJ+Lujc4R1QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHM2g16z1fZAAzERCOgaESvOumvDMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvY3phRFhyUFY5a0FETVJFSTZCb1JLODY2YThNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBxPS MA0GCSqGSIb3DQEBCwUAA4IBAQABiQZaFS1j7mzUSYdyPf9JNRctFde2LrllA0zC E+CcrYClu1+9oFGhWVbd30DeV3nDEX+Ra/5iDlkOOLV7jlzen7YAHCFx8Z+LGS89 m2kzFHrrno1iXAFZlMYeOetPB3fd4YNow9FS1pl1148hKZv+/9GdPzVzQbs+7PTZ DbPYzRII7rnHEtbwbOLbU+SoDj9zoy/oUjeS0bt9OuG1NWGJJFO3P+HK/HCT0Zmd s8yR4vL7WlabgvLFjxzWfKXXZtE7Zs2LstCWdjzkIRWuzLz3wG91lMevJv4m9X/7 RcMMQA5RjgpbZGHz2w3BFk5yppauSLoMZjyVAbqgIMmbGK+G -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:23 2026 by rpki-client