This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eRbIiH6Arzkj7on_CVCB4ZsV4_Q.roa File: eRbIiH6Arzkj7on_CVCB4ZsV4_Q.roa (raw, json) Hash identifier: L5OtaoznR6s0k4FyvhsujK7ZEod4wMEWDU7DLxS3vBk= Subject key identifier: 79:16:C8:88:7E:80:AF:39:23:EE:89:FF:09:50:81:E1:9B:15:E3:F4 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D769A81D0304C18E91016FC1CCD68 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eRbIiH6Arzkj7on_CVCB4ZsV4_Q.roa Signing time: Fri 02 Jan 2026 06:20:35 +0000 ROA not before: Fri 02 Jan 2026 06:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215296 IP address blocks: 2a10:ccc0:140::/44 maxlen: 48 2a10:ccc0:140::/48 maxlen: 48 2a10:ccc0:141::/48 maxlen: 48 2a10:ccc0:142::/48 maxlen: 48 2a10:ccc0:144::/48 maxlen: 48 2a10:ccc0:14a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:76:9a:81:d0:30:4c:18:e9:10:16:fc:1c:cd:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7916c8887e80af3923ee89ff095081e19b15e3f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7f:44:cd:7e:3b:9f:91:3c:5e:52:d3:19:f4: 45:ec:ab:65:b4:86:3d:9a:4c:11:93:4e:9d:7b:f4: 62:31:6e:18:d5:9b:20:27:94:34:22:e4:14:9a:6d: dd:98:02:35:bc:71:63:a9:e7:0a:9d:a8:8d:66:ab: d4:46:fa:88:3a:e6:e7:7c:73:41:8c:f1:a9:02:e9: d8:e0:15:7f:c7:e6:1d:1b:52:35:fa:68:36:2e:db: 0c:cb:f3:8d:7e:68:19:33:e8:88:6a:b8:06:85:95: 75:fd:04:fb:cc:14:82:f3:4d:8d:6a:56:b3:35:08: d0:74:7f:89:04:ad:a1:fa:62:05:79:2c:e7:64:df: e8:2e:71:18:fd:48:79:03:18:62:99:dd:f6:75:cb: 01:66:4a:4e:0a:d7:29:f9:77:ba:64:d5:e6:4d:41: 53:69:4a:da:32:00:a6:17:ad:84:35:0c:40:0b:3e: 5b:f3:b5:36:4b:df:5e:87:91:5a:36:a2:1e:56:f2: 29:ab:93:fe:6b:e4:df:53:43:1d:db:5e:bc:da:bb: 1a:9b:e1:62:c2:ec:82:67:ba:1e:e8:05:57:31:fd: a4:24:32:db:1f:f8:55:2e:83:a1:5e:c1:72:83:22: a7:9c:1b:05:94:3e:d2:dc:7b:b0:da:c9:86:ec:0b: 71:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:16:C8:88:7E:80:AF:39:23:EE:89:FF:09:50:81:E1:9B:15:E3:F4 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eRbIiH6Arzkj7on_CVCB4ZsV4_Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:ccc0:140::/44 Signature Algorithm: sha256WithRSAEncryption c6:60:dd:08:66:1b:bf:ba:78:39:10:da:62:76:d4:38:72:00: 6c:77:f5:0e:3f:ad:72:74:63:21:df:0f:d8:77:6a:77:33:c2: 44:c4:74:d9:96:a8:2c:f5:1a:99:4e:52:75:18:a7:a8:2c:30: b8:fc:27:30:05:9e:0c:97:65:c7:24:0d:4f:57:13:45:6d:0d: a8:6f:b5:66:ab:b5:c5:17:02:5b:4e:c7:f2:d9:8f:ca:23:11: f0:e7:c4:7b:f2:c1:f1:af:4d:bc:56:3a:ef:3e:af:d0:84:5c: a2:42:20:63:5f:73:c0:ba:6e:06:2c:9e:0f:1b:43:fb:3d:4a: 80:7d:10:d1:78:86:ae:90:91:d9:3b:d0:fb:87:7a:5a:5f:2d: 40:c4:42:0a:e6:e8:65:4c:b1:14:83:71:91:b6:18:13:18:b0: 94:85:42:c3:f5:e1:f4:61:c1:92:d6:78:4a:34:bf:bb:93:5c: 45:86:d5:ff:a3:32:53:4f:5b:9b:94:90:0b:ce:95:66:9f:e6: 4c:e4:b0:11:0b:1f:7d:cf:b0:52:57:de:46:25:5e:92:75:a0: 66:ed:f7:66:10:c1:ab:8c:05:8c:75:04:50:d5:b7:95:bc:67: d5:1c:bd:c3:fc:9f:19:a5:c8:3f:76:2e:24:d8:8a:e2:b1:6e: 8d:20:43:05 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XXaagdAwTBjpEBb8HM1oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTE2Yzg4ODdlODBhZjM5MjNlZTg5ZmYwOTUwODFlMTliMTVlM2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn39EzX47n5E8XlLTGfRF7KtltIY9 mkwRk06de/RiMW4Y1ZsgJ5Q0IuQUmm3dmAI1vHFjqecKnaiNZqvURvqIOubnfHNB jPGpAunY4BV/x+YdG1I1+mg2LtsMy/ONfmgZM+iIargGhZV1/QT7zBSC802Nalaz NQjQdH+JBK2h+mIFeSznZN/oLnEY/Uh5Axhimd32dcsBZkpOCtcp+Xe6ZNXmTUFT aUraMgCmF62ENQxACz5b87U2S99eh5FaNqIeVvIpq5P+a+TfU0Md21682rsam+Fi wuyCZ7oe6AVXMf2kJDLbH/hVLoOhXsFygyKnnBsFlD7S3Huw2smG7AtxeQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHkWyIh+gK85I+6J/wlQgeGbFeP0MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvZVJiSWlINkFyemtqN29uX0NWQ0I0WnNWNF9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhDMwAFA MA0GCSqGSIb3DQEBCwUAA4IBAQDGYN0IZhu/ung5ENpidtQ4cgBsd/UOP61ydGMh 3w/Yd2p3M8JExHTZlqgs9RqZTlJ1GKeoLDC4/CcwBZ4Ml2XHJA1PVxNFbQ2ob7Vm q7XFFwJbTsfy2Y/KIxHw58R78sHxr028VjrvPq/QhFyiQiBjX3PAum4GLJ4PG0P7 PUqAfRDReIaukJHZO9D7h3paXy1AxEIK5uhlTLEUg3GRthgTGLCUhULD9eH0YcGS 1nhKNL+7k1xFhtX/ozJTT1ublJALzpVmn+ZM5LARCx99z7BSV95GJV6SdaBm7fdm EMGrjAWMdQRQ1beVvGfVHL3D/J8Zpcg/di4k2IrisW6NIEMF -----END CERTIFICATE-----Generated at Fri Jan 9 13:12:07 2026 by rpki-client