This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iF5wGtnd9GbqScWn0g52uu-jNw4.roa File: iF5wGtnd9GbqScWn0g52uu-jNw4.roa (raw, json) Hash identifier: pvg/TT0n98+j7luDC6CaHd2PeYa/fqPFZS1mWJ+utWM= Subject key identifier: 88:5E:70:1A:D9:DD:F4:66:EA:49:C5:A7:D2:0E:76:BA:EF:A3:37:0E Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D57821CCF78B29CC2469BA63B0CB7 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iF5wGtnd9GbqScWn0g52uu-jNw4.roa Signing time: Fri 02 Jan 2026 06:20:27 +0000 ROA not before: Fri 02 Jan 2026 06:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212948 IP address blocks: 2a0e:b107:27a0::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:57:82:1c:cf:78:b2:9c:c2:46:9b:a6:3b:0c:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=885e701ad9ddf466ea49c5a7d20e76baefa3370e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fa:1c:84:35:66:67:b4:10:1d:2c:3e:2f:c4: 92:de:17:55:44:de:b4:c6:53:1f:d5:f2:e5:a7:89: 25:31:51:d9:39:72:aa:d7:79:2d:69:e3:30:a0:14: be:0e:ea:f5:94:9f:17:fb:b1:3f:1c:49:cc:27:09: 76:d0:20:6c:f6:b0:a3:98:0a:bf:64:08:b6:46:e9: 4a:42:76:ba:ec:ef:1a:5f:20:37:23:a7:28:07:e7: 48:b4:d1:98:a1:fc:0e:c8:a2:ba:31:0c:f1:35:8c: c4:24:fc:23:40:ee:8e:e8:d0:49:d9:85:e7:7b:bf: 7e:61:e1:84:c7:24:a0:32:e1:db:cc:a9:50:19:2d: c0:82:fe:5e:34:44:a2:4c:0d:42:f7:1c:64:3a:33: a0:69:fc:72:ff:80:f1:a2:e3:33:da:64:0e:7a:4e: 52:a6:72:75:4f:66:aa:57:70:3d:05:07:cf:63:9e: 1b:18:b5:88:07:9a:02:fc:e0:c0:35:e7:32:bd:60: 47:01:34:16:7b:65:9e:95:72:ec:97:c1:b7:e3:92: 3c:7b:c3:0b:ad:6c:61:91:5f:08:77:66:52:90:c7: 01:67:b3:e1:cc:41:39:19:2f:c2:91:bf:70:cb:ee: 42:05:8e:ca:49:3e:7a:ec:65:6f:fa:ce:0b:bf:60: ea:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:5E:70:1A:D9:DD:F4:66:EA:49:C5:A7:D2:0E:76:BA:EF:A3:37:0E X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iF5wGtnd9GbqScWn0g52uu-jNw4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:27a0::/45 Signature Algorithm: sha256WithRSAEncryption 48:6e:6d:9a:0a:d7:f7:e3:45:e8:2b:32:2b:5d:19:48:3c:af: ce:9c:25:21:cc:f1:30:75:6c:3d:5e:b9:cd:d2:17:b9:e9:5c: 48:cc:64:43:a6:dd:51:d0:ed:7b:ba:58:20:e0:b4:e2:b2:97: 21:c1:42:41:46:4a:90:7d:61:3b:45:de:fc:ea:ef:45:ce:39: 04:e3:93:40:18:a9:54:8e:20:5b:24:ae:df:3d:e1:86:dd:3d: 6a:80:fb:38:d9:34:f7:b1:a9:dd:f7:26:75:aa:b8:6d:5d:a3: 19:f6:fe:0d:2d:a3:61:94:90:36:12:34:d7:dd:9c:f0:69:54: aa:5e:3f:c7:80:59:47:34:f1:9a:ff:cf:df:bb:55:04:c4:94: 6b:e9:b6:74:f2:16:a0:3c:3f:e1:67:5a:2a:01:7b:69:15:f4: b7:98:34:36:e4:4e:96:f2:21:27:fe:e5:a2:31:df:e7:d3:01: f4:b2:0e:2e:4d:7f:93:14:23:ea:19:ab:07:e9:16:33:a6:b0: 9f:df:f4:60:69:f5:c0:39:3b:8e:26:f5:b0:09:b2:30:d6:5a: 54:f8:a6:ac:08:7c:7c:86:0b:07:f8:17:70:74:f3:7d:40:c7: b5:83:65:ab:e9:5d:25:62:50:c8:5b:c5:bb:6d:b1:da:59:1e: c0:98:1d:16 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XVeCHM94spzCRpumOwy3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODVlNzAxYWQ5ZGRmNDY2ZWE0OWM1YTdkMjBlNzZiYWVmYTMzNzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/ochDVmZ7QQHSw+L8SS3hdVRN60 xlMf1fLlp4klMVHZOXKq13ktaeMwoBS+Dur1lJ8X+7E/HEnMJwl20CBs9rCjmAq/ ZAi2RulKQna67O8aXyA3I6coB+dItNGYofwOyKK6MQzxNYzEJPwjQO6O6NBJ2YXn e79+YeGExySgMuHbzKlQGS3Agv5eNESiTA1C9xxkOjOgafxy/4DxouMz2mQOek5S pnJ1T2aqV3A9BQfPY54bGLWIB5oC/ODANecyvWBHATQWe2WelXLsl8G345I8e8ML rWxhkV8Id2ZSkMcBZ7PhzEE5GS/Ckb9wy+5CBY7KST567GVv+s4Lv2DqjQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIhecBrZ3fRm6knFp9IOdrrvozcOMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvaUY1d0d0bmQ5R2JxU2NXbjBnNTJ1dS1qTnc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDKg6xByeg MA0GCSqGSIb3DQEBCwUAA4IBAQBIbm2aCtf340XoKzIrXRlIPK/OnCUhzPEwdWw9 XrnN0he56VxIzGRDpt1R0O17ulgg4LTispchwUJBRkqQfWE7Rd786u9FzjkE45NA GKlUjiBbJK7fPeGG3T1qgPs42TT3sand9yZ1qrhtXaMZ9v4NLaNhlJA2EjTX3Zzw aVSqXj/HgFlHNPGa/8/fu1UExJRr6bZ08hagPD/hZ1oqAXtpFfS3mDQ25E6W8iEn /uWiMd/n0wH0sg4uTX+TFCPqGasH6RYzprCf3/RgafXAOTuOJvWwCbIw1lpU+Kas CHx8hgsH+BdwdPN9QMe1g2Wr6V0lYlDIW8W7bbHaWR7AmB0W -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:45 2026 by rpki-client