This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/i4Je7RY1HJpP4mmdKgIM1VfPrYw.roa File: i4Je7RY1HJpP4mmdKgIM1VfPrYw.roa (raw, json) Hash identifier: Dwozxo/iCDHQAVATlupok9Y8di1eFQboDJlhRpNB1pg= Subject key identifier: 8B:82:5E:ED:16:35:1C:9A:4F:E2:69:9D:2A:02:0C:D5:57:CF:AD:8C Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D128D95ADB61FCD36483120AB6B5C Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/i4Je7RY1HJpP4mmdKgIM1VfPrYw.roa Signing time: Fri 02 Jan 2026 06:20:10 +0000 ROA not before: Fri 02 Jan 2026 06:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208191 IP address blocks: 2a0e:b107:16::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:12:8d:95:ad:b6:1f:cd:36:48:31:20:ab:6b:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b825eed16351c9a4fe2699d2a020cd557cfad8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bb:6b:bf:49:71:57:d2:52:0a:40:db:1f:95: 15:ce:3e:3a:95:08:00:ce:f6:f8:4a:1c:a4:3a:49: 39:0d:fb:4e:78:43:0f:58:65:c8:06:b0:7d:fe:bf: c5:74:ae:39:12:82:34:ec:12:dd:b3:43:bf:25:bd: 20:26:91:78:4d:e2:4d:fb:1a:88:41:23:36:15:f9: 24:f0:73:eb:84:41:fe:fc:35:ea:c8:d5:4a:fb:ea: 8b:0d:0a:61:d3:c0:64:73:23:f0:20:5d:6e:f3:c2: e5:62:c1:6b:c3:38:27:f6:68:25:c9:5b:9f:c8:c4: c9:9d:14:23:1d:9a:82:79:81:a3:c8:27:ca:22:6a: c7:c6:d3:25:58:1c:f8:c7:5c:70:c7:50:10:28:c1: 8b:6d:5b:93:76:70:47:e6:c4:1f:b0:42:70:1e:d3: d5:c6:2c:49:f3:65:46:55:66:f5:33:e3:58:d9:47: 64:18:7a:6c:3a:5c:18:d2:2e:35:5d:60:0b:8f:53: b5:9c:d1:24:f0:51:2b:1d:f5:55:fb:95:02:36:41: 88:f4:78:29:53:5d:55:fe:89:22:88:1d:63:19:35: c0:72:a7:c5:83:fd:e3:3f:ce:86:80:45:eb:4f:23: ad:42:9a:a1:d4:96:3b:ae:3b:f7:02:ce:23:c7:b3: e5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:82:5E:ED:16:35:1C:9A:4F:E2:69:9D:2A:02:0C:D5:57:CF:AD:8C X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/i4Je7RY1HJpP4mmdKgIM1VfPrYw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:16::/48 Signature Algorithm: sha256WithRSAEncryption 9a:4c:d5:4e:0a:9b:8e:43:d2:08:8a:73:35:ca:9d:54:74:4a: 33:5d:2c:db:3f:97:1c:ca:d9:4e:35:7a:60:d0:83:f4:05:ef: 09:ee:01:ff:33:d7:c5:9e:32:0c:7f:40:da:83:94:6f:58:7f: cb:ec:d8:e2:f5:b5:1e:83:a5:6c:27:df:64:70:9c:14:03:83: 3e:b0:99:1a:99:90:b8:c8:2f:b2:18:b1:7c:b1:63:b0:18:79: 48:cc:23:35:86:b6:00:bf:81:48:85:ac:8a:0e:aa:fe:90:50: 2b:cf:a4:fc:24:2e:1a:f4:dc:a9:92:74:07:32:2e:23:32:03: 1b:20:8c:61:c0:c4:b2:3f:dd:2d:fd:bd:ce:d6:72:32:34:d8: 1f:5b:b4:2b:69:c2:e5:ca:c2:df:55:35:be:ec:07:93:8f:8b: 47:7e:c4:37:8b:88:5d:b6:22:f5:6b:0e:31:34:55:ee:c9:48: 6f:12:f5:90:72:f1:d9:ab:2c:27:27:be:cf:94:a4:9d:65:b8: f3:49:88:bb:4a:85:89:47:97:6e:d9:0a:11:f6:fd:12:f6:96: c3:5b:e0:60:8e:ab:92:aa:e0:8e:0c:fb:5e:bb:24:1e:11:f4: 17:8f:ad:25:46:53:44:f6:d3:f4:42:54:8d:24:3d:31:c4:ab: 71:c8:a0:73 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XRKNla22H802SDEgq2tcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjgyNWVlZDE2MzUxYzlhNGZlMjY5OWQyYTAyMGNkNTU3Y2ZhZDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLtrv0lxV9JSCkDbH5UVzj46lQgA zvb4ShykOkk5DftOeEMPWGXIBrB9/r/FdK45EoI07BLds0O/Jb0gJpF4TeJN+xqI QSM2Ffkk8HPrhEH+/DXqyNVK++qLDQph08BkcyPwIF1u88LlYsFrwzgn9mglyVuf yMTJnRQjHZqCeYGjyCfKImrHxtMlWBz4x1xwx1AQKMGLbVuTdnBH5sQfsEJwHtPV xixJ82VGVWb1M+NY2UdkGHpsOlwY0i41XWALj1O1nNEk8FErHfVV+5UCNkGI9Hgp U11V/okiiB1jGTXAcqfFg/3jP86GgEXrTyOtQpqh1JY7rjv3As4jx7PlIwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIuCXu0WNRyaT+JpnSoCDNVXz62MMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvaTRKZTdSWTFISnBQNG1tZEtnSU0xVmZQcll3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBwAW MA0GCSqGSIb3DQEBCwUAA4IBAQCaTNVOCpuOQ9IIinM1yp1UdEozXSzbP5ccytlO NXpg0IP0Be8J7gH/M9fFnjIMf0Dag5RvWH/L7Nji9bUeg6VsJ99kcJwUA4M+sJka mZC4yC+yGLF8sWOwGHlIzCM1hrYAv4FIhayKDqr+kFArz6T8JC4a9NypknQHMi4j MgMbIIxhwMSyP90t/b3O1nIyNNgfW7QracLlysLfVTW+7AeTj4tHfsQ3i4hdtiL1 aw4xNFXuyUhvEvWQcvHZqywnJ77PlKSdZbjzSYi7SoWJR5du2QoR9v0S9pbDW+Bg jquSquCODPteuyQeEfQXj60lRlNE9tP0QlSNJD0xxKtxyKBz -----END CERTIFICATE-----Generated at Fri Jan 9 13:12:07 2026 by rpki-client