This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iVWpvcg2_aUwP1ZILtU3XAl2WyM.roa File: iVWpvcg2_aUwP1ZILtU3XAl2WyM.roa (raw, json) Hash identifier: Z+CWL/pP3LH+KgVfOerhUpHJxEx5VB6mK5M4czADCvo= Subject key identifier: 89:55:A9:BD:C8:36:FD:A5:30:3F:56:48:2E:D5:37:5C:09:76:5B:23 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D8A6451566B5844CD8FBB9EA5673A Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iVWpvcg2_aUwP1ZILtU3XAl2WyM.roa Signing time: Fri 02 Jan 2026 06:20:40 +0000 ROA not before: Fri 02 Jan 2026 06:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216182 IP address blocks: 2a06:de01:80::/44 maxlen: 48 2a0e:97c0:dd0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:8a:64:51:56:6b:58:44:cd:8f:bb:9e:a5:67:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8955a9bdc836fda5303f56482ed5375c09765b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c6:5e:9b:95:de:26:eb:9f:1e:2d:11:56:3c: dc:9d:f6:9b:ad:63:6e:58:fc:51:0b:cb:dd:6d:ad: 8e:de:4d:30:0a:63:2a:06:97:d3:08:ee:64:2d:2a: ab:bc:ff:f4:2a:2f:c3:e5:54:33:90:3f:38:bc:fa: 32:06:27:f5:f8:43:a6:08:b4:91:67:6a:60:08:d2: 5b:42:d3:de:4d:6f:aa:22:d5:b8:90:2e:17:ff:44: e1:02:3b:40:b0:02:88:cb:95:42:53:b2:c7:02:0a: 52:6b:82:ab:a0:1e:22:5b:fe:8b:cd:dd:6f:77:fc: 6b:b6:89:ca:15:2e:b7:b5:16:13:67:e1:7c:af:49: 1e:cb:50:6e:e0:c5:c5:91:66:4f:1f:a0:94:92:f3: 35:6b:ff:bd:7b:34:81:e2:c1:84:0d:fe:d5:d2:ba: fd:60:27:e5:b8:1a:61:95:d3:5c:46:d1:bf:1b:c0: c7:5c:a9:35:5c:0d:c2:6f:fe:89:2e:7d:6e:a7:d3: 56:4c:8f:f8:26:85:2a:a5:8f:af:c6:61:d4:94:dd: 55:04:a5:fc:ee:e2:f0:eb:38:03:ba:10:12:cd:0c: 1a:8e:0f:6f:44:dd:c0:72:15:6a:05:cf:e7:7f:fe: 11:03:81:7b:0e:02:e2:01:77:fe:36:a6:2e:02:36: 3c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:55:A9:BD:C8:36:FD:A5:30:3F:56:48:2E:D5:37:5C:09:76:5B:23 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iVWpvcg2_aUwP1ZILtU3XAl2WyM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:de01:80::/44 2a0e:97c0:dd0::/44 Signature Algorithm: sha256WithRSAEncryption 9f:04:00:36:75:6d:ae:ac:55:5e:1c:b3:f1:2f:48:7b:6b:c0: 21:71:48:1e:55:87:05:3a:09:53:cf:3c:a3:31:d7:5c:64:1a: e9:5e:b3:37:13:7d:d3:e4:63:0f:10:df:03:17:a0:1f:4a:60: 10:c1:2e:72:af:73:43:b3:b9:a6:cd:53:c5:e7:16:22:86:04: f0:56:fb:ed:0e:5c:5d:41:b3:02:61:c8:e1:13:5a:0d:35:41: aa:3d:4d:79:dc:e4:73:75:df:70:c0:c5:3c:5e:2f:ab:5d:44: cd:c7:07:8f:cb:29:58:35:17:3a:59:3c:1a:3e:89:72:65:3f: 98:22:9a:e2:21:12:47:a8:59:72:03:c7:b0:b8:86:d9:ad:e8: f0:15:85:87:a6:1b:10:74:43:ad:13:84:4a:47:2f:71:52:04: 38:d8:7b:bd:e9:e9:0b:65:2f:aa:8f:b4:0e:5d:68:ea:bb:7b: fa:8a:3b:ec:46:21:02:ef:a0:2b:d8:f9:d3:35:a0:9c:47:57: c5:3c:33:e5:0a:83:1e:6f:93:9d:1e:6f:ea:7c:3e:a7:fb:94: 16:3e:3e:1d:d8:d7:51:aa:d8:4f:cc:ce:19:53:a5:2f:c3:8b: 32:5e:c5:96:79:bc:21:23:a7:9e:f4:da:d4:53:c8:a9:aa:7c: b1:69:95:0c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XYpkUVZrWETNj7uepWc6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTU1YTliZGM4MzZmZGE1MzAzZjU2NDgyZWQ1Mzc1YzA5NzY1YjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMZem5XeJuufHi0RVjzcnfabrWNu WPxRC8vdba2O3k0wCmMqBpfTCO5kLSqrvP/0Ki/D5VQzkD84vPoyBif1+EOmCLSR Z2pgCNJbQtPeTW+qItW4kC4X/0ThAjtAsAKIy5VCU7LHAgpSa4KroB4iW/6Lzd1v d/xrtonKFS63tRYTZ+F8r0key1Bu4MXFkWZPH6CUkvM1a/+9ezSB4sGEDf7V0rr9 YCfluBphldNcRtG/G8DHXKk1XA3Cb/6JLn1up9NWTI/4JoUqpY+vxmHUlN1VBKX8 7uLw6zgDuhASzQwajg9vRN3AchVqBc/nf/4RA4F7DgLiAXf+NqYuAjY8MQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIlVqb3INv2lMD9WSC7VN1wJdlsjMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvaVZXcHZjZzJfYVV3UDFaSUx0VTNYQWwyV3lNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgbeAQCA AwcEKg6XwA3QMA0GCSqGSIb3DQEBCwUAA4IBAQCfBAA2dW2urFVeHLPxL0h7a8Ah cUgeVYcFOglTzzyjMddcZBrpXrM3E33T5GMPEN8DF6AfSmAQwS5yr3NDs7mmzVPF 5xYihgTwVvvtDlxdQbMCYcjhE1oNNUGqPU153ORzdd9wwMU8Xi+rXUTNxwePyylY NRc6WTwaPolyZT+YIpriIRJHqFlyA8ewuIbZrejwFYWHphsQdEOtE4RKRy9xUgQ4 2Hu96ekLZS+qj7QOXWjqu3v6ijvsRiEC76Ar2PnTNaCcR1fFPDPlCoMeb5OdHm/q fD6n+5QWPj4d2NdRqthPzM4ZU6Uvw4syXsWWebwhI6ee9NrUU8ipqnyxaZUM -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:08 2026 by rpki-client