This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hGT7dS6uCJtbVNR7KyQsbT-9Fes.roa File: hGT7dS6uCJtbVNR7KyQsbT-9Fes.roa (raw, json) Hash identifier: Z7M8nqkih6pv+4kLBxMamN17Q4G/YYeFP+EsTT2RrTo= Subject key identifier: 84:64:FB:75:2E:AE:08:9B:5B:54:D4:7B:2B:24:2C:6D:3F:BD:15:EB Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D69D4325D40B69BBF074FE12EEB03 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hGT7dS6uCJtbVNR7KyQsbT-9Fes.roa Signing time: Fri 02 Jan 2026 06:20:32 +0000 ROA not before: Fri 02 Jan 2026 06:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214243 IP address blocks: 2a06:de00:7f1::/48 maxlen: 48 2a0e:97c0:471::/48 maxlen: 48 2a0e:97c0:4c0::/44 maxlen: 48 2a0e:97c0:4c1::/48 maxlen: 48 2a0e:97c0:4c2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 17:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:69:d4:32:5d:40:b6:9b:bf:07:4f:e1:2e:eb:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8464fb752eae089b5b54d47b2b242c6d3fbd15eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:84:f5:93:3d:21:cd:6e:78:79:f8:33:14:36: b7:ef:8e:d7:36:11:0e:bd:bc:b4:bd:9f:45:e1:c9: a1:6a:70:e8:4c:9c:70:ca:51:db:75:fe:41:9b:84: 57:1a:23:93:b1:20:2f:c9:7c:78:50:9d:75:24:c6: d8:a3:fc:96:22:30:f6:16:94:a1:ec:72:ba:d2:f9: f2:b2:82:49:eb:5d:17:c1:6a:52:3a:ad:bb:39:8c: b0:0b:cd:bd:6c:30:dc:3c:60:35:11:cf:4e:dd:95: 99:04:6d:d4:a5:27:7e:0f:ca:93:43:93:8c:db:06: ef:e1:f4:be:4a:d2:33:4b:8e:49:33:66:cb:cf:f8: 69:e2:f4:73:41:2f:65:41:ec:6f:6f:fe:76:92:e1: 92:2d:b9:ca:7e:5c:0c:47:94:d7:c4:4b:0b:a9:5c: 37:8a:24:29:ae:50:55:18:39:e3:82:f1:9b:8b:ee: b7:28:88:93:b0:4b:80:98:d9:a8:a0:99:00:04:50: d1:f9:c2:90:30:a1:39:e1:81:b3:11:bc:b9:6b:0b: 22:19:84:64:f9:17:c0:b2:76:ee:6c:d2:9f:e4:57: ba:10:95:e9:bc:86:91:79:fc:b2:4f:0c:c6:fc:c5: 15:f8:6d:bd:cc:e8:61:fb:35:49:7c:28:6f:c6:95: 5c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:64:FB:75:2E:AE:08:9B:5B:54:D4:7B:2B:24:2C:6D:3F:BD:15:EB X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hGT7dS6uCJtbVNR7KyQsbT-9Fes.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:de00:7f1::/48 2a0e:97c0:471::/48 2a0e:97c0:4c0::/44 Signature Algorithm: sha256WithRSAEncryption 4b:cc:03:5e:20:b5:36:9f:8a:cb:38:55:20:15:2a:33:34:25: bc:c5:58:ce:63:8f:da:c9:a9:e0:9b:40:30:a1:e1:80:38:a0: 6d:38:d9:a5:0a:24:8d:69:78:2f:3a:95:44:44:02:2e:a4:15: c8:a7:1f:96:a8:af:ba:dc:5f:e6:df:e1:12:e6:0c:e5:52:36: d7:63:0d:51:29:b6:a4:dc:4e:ee:07:6c:2b:ee:fb:11:85:4d: c5:3f:59:35:70:d0:99:97:13:35:13:37:e6:07:2e:ef:5a:0c: 0c:60:09:4e:64:da:43:23:e7:8a:98:39:53:66:b7:38:83:cc: fb:d0:88:5a:ff:0f:29:f0:a1:55:35:72:8d:06:28:a6:69:18: 38:4e:77:12:f8:1b:e8:cd:b2:ad:03:ed:54:4e:0f:e3:f1:2f: 8c:ad:4d:df:a6:78:a6:16:e9:4e:19:9f:be:29:bc:55:61:6a: 0d:fe:c2:14:5e:25:95:94:4f:57:7b:d9:03:d6:9e:f6:17:c8: 32:4f:7b:8a:7a:13:26:e7:83:ce:33:39:ab:92:e1:84:3c:07: 4e:d4:0e:42:3f:30:af:47:e7:53:da:85:6e:e7:a9:be:94:97: cc:ea:72:5f:9f:3c:1a:27:47:2b:08:62:26:30:bd:73:d9:20: 01:08:a1:e3 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9XWnUMl1Atpu/B0/hLusDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDY0ZmI3NTJlYWUwODliNWI1NGQ0N2IyYjI0MmM2ZDNmYmQxNWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoT1kz0hzW54efgzFDa3747XNhEO vby0vZ9F4cmhanDoTJxwylHbdf5Bm4RXGiOTsSAvyXx4UJ11JMbYo/yWIjD2FpSh 7HK60vnysoJJ610XwWpSOq27OYywC829bDDcPGA1Ec9O3ZWZBG3UpSd+D8qTQ5OM 2wbv4fS+StIzS45JM2bLz/hp4vRzQS9lQexvb/52kuGSLbnKflwMR5TXxEsLqVw3 iiQprlBVGDnjgvGbi+63KIiTsEuAmNmooJkABFDR+cKQMKE54YGzEby5awsiGYRk +RfAsnbubNKf5Fe6EJXpvIaRefyyTwzG/MUV+G29zOhh+zVJfChvxpVcWwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFIRk+3UurgibW1TUeyskLG0/vRXrMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvaEdUN2RTNnVDSnRiVk5SN0t5UXNiVC05RmVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAKgbeAAfx AwcAKg6XwARxAwcEKg6XwATAMA0GCSqGSIb3DQEBCwUAA4IBAQBLzANeILU2n4rL OFUgFSozNCW8xVjOY4/ayangm0AwoeGAOKBtONmlCiSNaXgvOpVERAIupBXIpx+W qK+63F/m3+ES5gzlUjbXYw1RKbak3E7uB2wr7vsRhU3FP1k1cNCZlxM1EzfmBy7v WgwMYAlOZNpDI+eKmDlTZrc4g8z70Iha/w8p8KFVNXKNBiimaRg4TncS+BvozbKt A+1UTg/j8S+MrU3fpnimFulOGZ++KbxVYWoN/sIUXiWVlE9Xe9kD1p72F8gyT3uK ehMm54POMzmrkuGEPAdO1A5CPzCvR+dT2oVu56m+lJfM6nJfnzwaJ0crCGImML1z 2SABCKHj -----END CERTIFICATE-----Generated at Sat Jan 10 02:19:25 2026 by rpki-client