This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eZ14J5TsDUJgeemAG22Cp6hRFOc.roa File: eZ14J5TsDUJgeemAG22Cp6hRFOc.roa (raw, json) Hash identifier: 7qxTDcDkhzRvbpUcUvSxAjNQyJ+Tyihs3ufpXhWCGy8= Subject key identifier: 79:9D:78:27:94:EC:0D:42:60:79:E9:80:1B:6D:82:A7:A8:51:14:E7 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D013CD73CA598755A10222D515210 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eZ14J5TsDUJgeemAG22Cp6hRFOc.roa Signing time: Fri 02 Jan 2026 06:20:05 +0000 ROA not before: Fri 02 Jan 2026 06:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205398 IP address blocks: 2a0e:b107:19c8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:01:3c:d7:3c:a5:98:75:5a:10:22:2d:51:52:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=799d782794ec0d426079e9801b6d82a7a85114e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a2:43:d1:35:d6:ed:2a:9a:f9:59:f4:89:62: 43:14:96:00:44:49:9f:f1:8c:b9:90:62:47:58:69: ee:dc:08:e1:70:c8:61:8a:ba:40:44:84:20:50:5f: cd:08:2a:b7:1c:a7:38:b7:6f:64:d2:34:99:e7:22: eb:1a:65:c8:51:d9:cc:53:37:ee:a0:13:56:1a:af: 0b:5d:e4:8e:36:8c:3e:b8:b3:69:59:66:db:6b:33: e9:57:51:e2:b9:15:70:86:fa:21:4b:a9:76:0c:2c: ee:e1:53:ac:1c:dd:02:84:7e:5d:d1:5c:e3:d5:84: 0d:47:eb:36:21:ff:3d:18:82:87:c4:dd:55:79:fc: 0b:bb:b9:dd:88:f3:18:2e:e9:d8:0b:ac:ea:50:57: 39:2c:b1:f1:ff:71:23:d0:7a:31:25:19:1d:09:96: 1d:4b:37:75:82:32:60:6a:c6:b7:c1:ab:d1:4e:22: ae:d6:fd:6f:9b:86:5b:c4:46:ad:cb:8e:fe:e6:ae: 01:20:6a:e3:87:84:c0:a8:26:79:72:1a:c3:0d:f4: 8d:4b:53:2a:fb:ff:91:4a:f9:f1:f4:79:ae:46:af: c8:e5:cc:c9:98:78:8f:80:e8:06:de:be:fd:3d:b2: d9:21:8e:e9:15:3c:00:7a:df:d8:55:9c:73:4d:32: 7c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:9D:78:27:94:EC:0D:42:60:79:E9:80:1B:6D:82:A7:A8:51:14:E7 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eZ14J5TsDUJgeemAG22Cp6hRFOc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:19c8::/48 Signature Algorithm: sha256WithRSAEncryption 6c:01:96:15:37:b9:c3:91:60:e9:1e:b7:30:52:54:74:8d:30: 37:6c:b0:90:a9:36:e8:a6:64:f3:9d:9b:6e:a3:1e:6b:3f:f3: 7e:70:b9:62:e0:34:63:c6:e6:80:d3:f7:0a:0f:d2:ed:7d:9e: 2c:a5:cf:47:d7:2d:a8:cf:5c:3c:1a:7e:27:47:e7:73:5e:92: 6b:2d:ff:69:c9:d8:85:27:8e:1e:eb:97:80:db:34:ce:06:be: 5c:4d:4e:62:4b:e5:94:8e:f4:00:b1:46:dd:23:42:ae:2d:c6: 65:ee:52:b7:a3:48:26:32:09:b4:1a:4a:8c:24:43:3b:92:5f: 20:9f:eb:b5:47:99:85:20:21:90:eb:2f:56:a2:d5:ca:fa:00: 7b:17:1a:42:82:4d:ae:18:51:88:01:8b:62:63:8e:bc:28:4d: 43:e2:d6:eb:72:1d:ce:c4:1a:2d:96:af:7e:0c:b8:b1:a1:45: fe:6b:b4:08:28:17:c7:b0:aa:ce:ae:2b:eb:19:2c:22:ea:92: 8b:08:03:42:00:bb:25:d2:e2:07:82:18:4f:c5:d9:52:0d:34: ef:2e:a3:60:0f:dd:51:2e:ef:2d:36:31:cf:9c:0e:3b:63:67: 70:78:86:c2:10:1f:2b:26:c2:37:6d:87:0f:50:bf:de:ef:8c: cb:aa:44:94 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XQE81zylmHVaECItUVIQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTlkNzgyNzk0ZWMwZDQyNjA3OWU5ODAxYjZkODJhN2E4NTExNGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KJD0TXW7Sqa+Vn0iWJDFJYAREmf 8Yy5kGJHWGnu3AjhcMhhirpARIQgUF/NCCq3HKc4t29k0jSZ5yLrGmXIUdnMUzfu oBNWGq8LXeSONow+uLNpWWbbazPpV1HiuRVwhvohS6l2DCzu4VOsHN0ChH5d0Vzj 1YQNR+s2If89GIKHxN1VefwLu7ndiPMYLunYC6zqUFc5LLHx/3Ej0HoxJRkdCZYd Szd1gjJgasa3wavRTiKu1v1vm4ZbxEaty47+5q4BIGrjh4TAqCZ5chrDDfSNS1Mq +/+RSvnx9HmuRq/I5czJmHiPgOgG3r79PbLZIY7pFTwAet/YVZxzTTJ89wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHmdeCeU7A1CYHnpgBttgqeoURTnMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvZVoxNEo1VHNEVUpnZWVtQUcyMkNwNmhSRk9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBxnI MA0GCSqGSIb3DQEBCwUAA4IBAQBsAZYVN7nDkWDpHrcwUlR0jTA3bLCQqTbopmTz nZtuox5rP/N+cLli4DRjxuaA0/cKD9LtfZ4spc9H1y2oz1w8Gn4nR+dzXpJrLf9p ydiFJ44e65eA2zTOBr5cTU5iS+WUjvQAsUbdI0KuLcZl7lK3o0gmMgm0GkqMJEM7 kl8gn+u1R5mFICGQ6y9WotXK+gB7FxpCgk2uGFGIAYtiY468KE1D4tbrch3OxBot lq9+DLixoUX+a7QIKBfHsKrOrivrGSwi6pKLCANCALsl0uIHghhPxdlSDTTvLqNg D91RLu8tNjHPnA47Y2dweIbCEB8rJsI3bYcPUL/e74zLqkSU -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:09 2026 by rpki-client