This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/elPIfFIze_rYnD40nOfIMWr16YQ.roa File: elPIfFIze_rYnD40nOfIMWr16YQ.roa (raw, json) Hash identifier: 2BGnhUfaUAmyEpnL6Or++5qtNwazvG18UfYgL/d390o= Subject key identifier: 7A:53:C8:7C:52:33:7B:FA:D8:9C:3E:34:9C:E7:C8:31:6A:F5:E9:84 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CFE601CA1D8624E22A966787725C3 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/elPIfFIze_rYnD40nOfIMWr16YQ.roa Signing time: Fri 02 Jan 2026 06:20:05 +0000 ROA not before: Fri 02 Jan 2026 06:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204901 IP address blocks: 2a0e:b107:f0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:fe:60:1c:a1:d8:62:4e:22:a9:66:78:77:25:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a53c87c52337bfad89c3e349ce7c8316af5e984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:18:0b:fc:b7:8b:65:31:97:cf:63:d7:e4:11: 3d:a4:3c:76:f5:cc:e4:e4:4c:3d:1b:92:df:6a:54: d8:e6:dc:01:c6:eb:34:61:02:8a:bd:61:90:7b:ef: fc:bf:73:84:79:00:e3:7e:36:16:82:36:c9:ff:b4: 2f:ad:e3:0e:2c:7a:a7:87:2d:65:6a:5a:a3:13:ea: fc:6d:b8:99:de:2c:b7:5a:15:17:4c:7b:eb:4c:6f: c1:d0:56:96:3d:da:a1:b3:6c:db:2b:ac:5f:98:48: cf:bf:79:4d:4c:96:d5:24:eb:c6:db:ee:2d:da:cb: 62:05:11:d5:be:dd:8b:a0:30:c8:76:09:3d:35:ac: 2c:f0:f0:5a:9e:d8:d9:b3:6e:ae:5d:44:87:c5:ce: c9:8d:4f:82:d3:0b:2d:ed:db:84:cf:71:41:62:d0: 1f:c2:92:3f:00:34:93:d3:2e:70:2d:63:da:3f:2e: 4f:a7:d5:8b:4d:ad:0a:ba:ed:87:74:14:18:3a:75: 6c:23:97:4a:3a:8b:a3:9c:87:ac:50:e9:9d:31:77: 5d:c5:d2:37:7c:21:c9:98:7e:ef:ad:ef:b7:bc:26: 25:8f:e4:43:5f:5f:96:a8:e4:3c:f1:51:85:0f:0c: 62:6e:71:85:f8:cc:ec:5f:21:ac:ec:bb:b3:4d:52: d0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:53:C8:7C:52:33:7B:FA:D8:9C:3E:34:9C:E7:C8:31:6A:F5:E9:84 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/elPIfFIze_rYnD40nOfIMWr16YQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:f0::/44 Signature Algorithm: sha256WithRSAEncryption 0c:21:55:76:0d:06:52:8a:0c:6d:ed:2d:a1:8f:34:b1:4f:17: 28:58:d5:85:34:01:33:f2:84:db:87:4d:82:ff:1f:b5:1c:9d: 56:af:65:ef:07:20:a3:65:6c:c0:03:0c:bf:83:ca:d1:ed:06: 66:ac:2c:5e:ad:5f:5b:41:6c:85:1f:c6:85:12:31:a5:55:99: e7:9d:0a:d1:10:6e:7c:52:16:d6:f3:5d:f9:c3:d1:5c:bb:7e: dc:db:ca:b5:05:01:11:b3:e6:cc:b0:4c:1f:9c:38:03:f2:8d: a2:6b:f9:90:f0:e1:14:29:ee:f2:30:b4:4b:f7:fb:70:99:9a: 2c:d8:ac:ae:0a:56:33:a0:c8:ea:91:c4:73:c8:49:ff:12:cb: 94:d4:14:ef:15:aa:06:34:bb:c4:b4:44:50:13:4f:70:44:75: a2:dc:0d:b7:ac:ca:cd:73:54:99:6e:69:98:b3:d1:66:ef:25: b6:02:d2:95:7e:99:17:57:e4:2c:b4:a4:48:46:b9:27:40:a8: d8:c4:d6:42:41:a9:dd:39:5d:81:90:8f:87:d0:eb:b3:ea:66: 94:c6:39:6a:4c:d4:f2:18:7e:6f:fe:e7:61:60:98:73:3b:da: 3a:90:dd:53:5d:08:2c:8c:13:47:70:bb:cc:09:e4:a1:43:1c: 63:01:3b:8a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XP5gHKHYYk4iqWZ4dyXDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTUzYzg3YzUyMzM3YmZhZDg5YzNlMzQ5Y2U3YzgzMTZhZjVlOTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBgL/LeLZTGXz2PX5BE9pDx29czk 5Ew9G5LfalTY5twBxus0YQKKvWGQe+/8v3OEeQDjfjYWgjbJ/7QvreMOLHqnhy1l alqjE+r8bbiZ3iy3WhUXTHvrTG/B0FaWPdqhs2zbK6xfmEjPv3lNTJbVJOvG2+4t 2stiBRHVvt2LoDDIdgk9Naws8PBantjZs26uXUSHxc7JjU+C0wst7duEz3FBYtAf wpI/ADST0y5wLWPaPy5Pp9WLTa0Kuu2HdBQYOnVsI5dKOoujnIesUOmdMXddxdI3 fCHJmH7vre+3vCYlj+RDX1+WqOQ88VGFDwxibnGF+MzsXyGs7LuzTVLQRwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHpTyHxSM3v62Jw+NJznyDFq9emEMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvZWxQSWZGSXplX3JZbkQ0MG5PZklNV3IxNllRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBwDw MA0GCSqGSIb3DQEBCwUAA4IBAQAMIVV2DQZSigxt7S2hjzSxTxcoWNWFNAEz8oTb h02C/x+1HJ1Wr2XvByCjZWzAAwy/g8rR7QZmrCxerV9bQWyFH8aFEjGlVZnnnQrR EG58UhbW8135w9Fcu37c28q1BQERs+bMsEwfnDgD8o2ia/mQ8OEUKe7yMLRL9/tw mZos2KyuClYzoMjqkcRzyEn/EsuU1BTvFaoGNLvEtERQE09wRHWi3A23rMrNc1SZ bmmYs9Fm7yW2AtKVfpkXV+QstKRIRrknQKjYxNZCQandOV2BkI+H0Ouz6maUxjlq TNTyGH5v/udhYJhzO9o6kN1TXQgsjBNHcLvMCeShQxxjATuK -----END CERTIFICATE-----Generated at Fri Jan 9 13:11:47 2026 by rpki-client