This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/h1v3Co9Yx5Ok3FpTaW9SwzkCQzU.roa File: h1v3Co9Yx5Ok3FpTaW9SwzkCQzU.roa (raw, json) Hash identifier: 9LqvPY1phFPAJzbJy18qDjE/QcdCWMdy23K3uoUSBeg= Subject key identifier: 87:5B:F7:0A:8F:58:C7:93:A4:DC:5A:53:69:6F:52:C3:39:02:43:35 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CE721B7DA4D0A4DD29D361344E53F Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/h1v3Co9Yx5Ok3FpTaW9SwzkCQzU.roa Signing time: Fri 02 Jan 2026 06:19:59 +0000 ROA not before: Fri 02 Jan 2026 06:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200885 IP address blocks: 2a0e:b107:178a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e7:21:b7:da:4d:0a:4d:d2:9d:36:13:44:e5:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=875bf70a8f58c793a4dc5a53696f52c339024335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:16:cf:8b:18:c2:e1:df:35:bc:b9:e0:7a:f8: a8:33:ce:0f:b8:3e:e9:bd:c7:f8:82:d5:44:76:67: a2:f6:8e:b8:be:28:79:16:6d:53:3d:26:8c:02:66: d4:e9:33:b3:51:e9:72:bc:91:62:4a:06:ac:c3:74: b3:50:0c:4f:88:d7:57:34:68:8f:06:0b:21:20:68: c9:5c:ec:db:a2:a5:1f:50:4e:80:f0:09:f3:af:d4: 21:f7:b1:c5:e3:4a:9d:79:08:ef:46:21:a7:d9:17: fa:d0:45:7d:48:bb:f4:5e:36:db:8f:20:9f:8c:91: 0c:8a:d4:d7:26:48:c7:17:5c:35:54:67:7d:6d:92: 0d:4f:1c:88:b4:49:97:5e:7f:b3:93:f3:dc:a9:48: 23:78:ca:6d:05:6e:a4:87:1d:c7:8f:6e:54:a6:42: 58:a2:a3:74:74:b3:ed:f3:03:c7:dc:ab:9f:da:8a: 12:d7:eb:90:86:21:90:1e:64:bf:42:26:4b:e7:cc: 9b:5c:66:e0:5e:fd:dd:ca:9c:ac:d8:4b:e0:4c:0e: 69:8d:c1:17:0a:40:8a:e1:93:99:f0:9e:d9:c4:fb: 8d:f4:f0:1c:76:f7:bc:8a:fb:58:4d:c0:a9:3e:2d: bc:4d:91:46:72:41:9d:46:59:05:e1:a0:21:3f:9c: 17:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:5B:F7:0A:8F:58:C7:93:A4:DC:5A:53:69:6F:52:C3:39:02:43:35 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/h1v3Co9Yx5Ok3FpTaW9SwzkCQzU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:178a::/48 Signature Algorithm: sha256WithRSAEncryption 60:c0:c2:52:d3:04:7a:0a:7e:00:f1:32:09:1d:e0:24:67:8c: d0:9a:90:4b:b6:13:e2:8b:5e:5e:c2:55:b9:ca:8f:85:19:da: 39:a3:a4:03:bb:19:b0:18:47:13:12:ef:be:46:6b:16:e6:e1: eb:fa:a5:0f:20:f1:a4:c7:7a:38:4c:45:cb:de:4f:02:2f:c1: 25:06:81:ff:7f:b8:03:8e:65:ec:40:72:47:d5:21:48:9d:fb: 81:7a:99:1c:47:1c:0e:0b:09:ba:01:37:60:b8:09:1c:c0:72: 5b:da:f6:03:da:5e:6a:da:5e:8b:af:61:0c:13:f7:f8:22:2d: 8a:38:6d:1d:e6:86:f2:c9:fd:eb:8d:2d:5b:3e:bf:83:5b:fe: bc:ce:2b:51:5a:b5:b7:21:ed:99:26:b4:75:f4:59:e7:60:11: 32:5c:ff:5e:68:be:a6:57:80:fe:d9:25:2a:67:70:6b:64:1d: 14:55:65:cc:b9:31:22:cb:4a:bd:8e:bb:95:c1:1a:3e:f9:f2: c4:e8:b8:8e:80:99:34:a5:af:89:af:b9:7d:16:40:ae:30:fa: d4:d6:1f:c5:93:66:39:c1:2c:2f:b0:d2:09:d0:01:2e:8d:68: ec:75:6a:d9:d0:e1:9f:e0:b1:36:25:43:ca:ae:be:80:23:d8: 64:f6:d1:29 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XOcht9pNCk3SnTYTROU/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzViZjcwYThmNThjNzkzYTRkYzVhNTM2OTZmNTJjMzM5MDI0MzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBbPixjC4d81vLngevioM84PuD7p vcf4gtVEdmei9o64vih5Fm1TPSaMAmbU6TOzUelyvJFiSgasw3SzUAxPiNdXNGiP BgshIGjJXOzboqUfUE6A8Anzr9Qh97HF40qdeQjvRiGn2Rf60EV9SLv0XjbbjyCf jJEMitTXJkjHF1w1VGd9bZINTxyItEmXXn+zk/PcqUgjeMptBW6khx3Hj25UpkJY oqN0dLPt8wPH3Kuf2ooS1+uQhiGQHmS/QiZL58ybXGbgXv3dypys2EvgTA5pjcEX CkCK4ZOZ8J7ZxPuN9PAcdve8ivtYTcCpPi28TZFGckGdRlkF4aAhP5wXrQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIdb9wqPWMeTpNxaU2lvUsM5AkM1MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvaDF2M0NvOVl4NU9rM0ZwVGFXOVN3emtDUXpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBxeK MA0GCSqGSIb3DQEBCwUAA4IBAQBgwMJS0wR6Cn4A8TIJHeAkZ4zQmpBLthPii15e wlW5yo+FGdo5o6QDuxmwGEcTEu++RmsW5uHr+qUPIPGkx3o4TEXL3k8CL8ElBoH/ f7gDjmXsQHJH1SFInfuBepkcRxwOCwm6ATdguAkcwHJb2vYD2l5q2l6Lr2EME/f4 Ii2KOG0d5obyyf3rjS1bPr+DW/68zitRWrW3Ie2ZJrR19FnnYBEyXP9eaL6mV4D+ 2SUqZ3BrZB0UVWXMuTEiy0q9jruVwRo++fLE6LiOgJk0pa+Jr7l9FkCuMPrU1h/F k2Y5wSwvsNIJ0AEujWjsdWrZ0OGf4LE2JUPKrr6AI9hk9tEp -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:48 2026 by rpki-client