This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iZVNW-TA1Qoy8Owdulrkwyfr1Cg.roa File: iZVNW-TA1Qoy8Owdulrkwyfr1Cg.roa (raw, json) Hash identifier: T4jfYdwlekYx6xCBsM8I9mLqbXgZ1z6Ho7gKUdfgHJo= Subject key identifier: 89:95:4D:5B:E4:C0:D5:0A:32:F0:EC:1D:BA:5A:E4:C3:27:EB:D4:28 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D56B56DCD14C7280245F146C10C50 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iZVNW-TA1Qoy8Owdulrkwyfr1Cg.roa Signing time: Fri 02 Jan 2026 06:20:27 +0000 ROA not before: Fri 02 Jan 2026 06:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212858 IP address blocks: 2a0e:b107:88b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:56:b5:6d:cd:14:c7:28:02:45:f1:46:c1:0c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89954d5be4c0d50a32f0ec1dba5ae4c327ebd428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2c:82:3d:13:e7:a2:b2:d5:05:fa:0b:6a:7d: 55:2b:b8:41:e6:d6:ec:0c:31:f4:b8:bc:32:48:41: 0d:44:c8:33:8f:b9:c8:a4:93:3c:0c:e8:97:22:d8: cf:8f:aa:d2:cc:bd:76:ff:7d:d5:3f:da:e4:86:9e: 78:17:91:ae:4c:90:39:da:1c:3b:ea:04:c7:fc:fd: d9:e8:5d:20:6b:02:86:c2:0c:41:df:57:10:65:ae: e5:8f:aa:ba:fb:81:50:56:c6:65:18:ce:97:ce:90: 57:e2:4a:7c:03:f7:33:d8:95:58:40:51:7c:35:cc: 54:41:59:b0:b3:dd:f3:22:13:4c:ef:53:51:83:02: 6d:32:19:4e:c1:5d:87:8a:06:0a:03:4e:3c:59:72: d2:b5:05:5e:b3:b9:48:b6:34:80:9f:47:a7:63:7c: 50:fb:a4:31:f8:6a:7d:16:4d:2f:7b:99:b9:59:57: e8:d3:9f:a1:29:6c:3a:14:ad:97:c7:42:9a:b6:d8: 21:46:52:3a:1a:17:94:97:bd:a4:12:cd:c5:af:ef: 44:c1:0d:08:74:00:77:69:91:1a:62:42:d4:07:00: 25:81:83:92:ef:34:bb:61:18:ee:d9:b7:be:50:c9: 55:39:ca:c1:e2:6b:bd:ce:af:91:07:93:7e:7a:c2: 30:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:95:4D:5B:E4:C0:D5:0A:32:F0:EC:1D:BA:5A:E4:C3:27:EB:D4:28 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iZVNW-TA1Qoy8Owdulrkwyfr1Cg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:88b::/48 Signature Algorithm: sha256WithRSAEncryption 2d:c1:29:e9:d6:d1:69:93:14:14:f0:5a:6b:3c:ef:5e:81:61: 33:06:e4:53:fd:1c:f0:c1:87:c8:6a:a9:6f:07:ae:7e:a4:c4: 08:be:aa:0a:4c:66:9b:82:dd:34:88:96:b2:d5:6f:4e:5e:e1: 37:e1:bf:ee:7b:97:ea:88:e9:ec:ae:1a:62:37:58:af:77:86: 01:78:e6:28:4e:55:66:6e:94:82:b6:fc:28:86:5f:1b:40:d4: 2e:e4:4d:63:59:5d:cd:15:15:bd:13:e5:a0:ae:28:0a:fe:bd: d3:4d:04:5e:2e:e6:93:55:23:cc:9e:ca:51:85:13:ab:77:50: 37:e1:65:6f:95:c8:cd:8e:b3:6e:22:15:d8:6d:c1:86:4c:e3: 87:3e:17:a1:44:6e:c8:99:0b:86:b9:60:fb:17:d2:c7:6c:dd: 55:52:66:31:04:ef:80:70:62:13:2f:67:f2:0e:7a:c4:f7:b9: b5:74:18:df:b9:77:b8:a8:54:b9:66:71:b4:f6:6d:e1:bc:4e: 5c:cf:23:aa:4b:c1:93:f7:12:be:25:5c:a1:c4:20:25:0f:56: a9:23:13:e5:20:c6:72:dd:a9:07:f2:48:c5:c8:ef:c6:f1:99: e6:72:08:93:b0:b3:4b:7b:f3:0b:47:62:2b:6e:4b:13:07:ae: 88:b4:23:81 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XVa1bc0UxygCRfFGwQxQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTk1NGQ1YmU0YzBkNTBhMzJmMGVjMWRiYTVhZTRjMzI3ZWJkNDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yyCPRPnorLVBfoLan1VK7hB5tbs DDH0uLwySEENRMgzj7nIpJM8DOiXItjPj6rSzL12/33VP9rkhp54F5GuTJA52hw7 6gTH/P3Z6F0gawKGwgxB31cQZa7lj6q6+4FQVsZlGM6XzpBX4kp8A/cz2JVYQFF8 NcxUQVmws93zIhNM71NRgwJtMhlOwV2HigYKA048WXLStQVes7lItjSAn0enY3xQ +6Qx+Gp9Fk0ve5m5WVfo05+hKWw6FK2Xx0KattghRlI6GheUl72kEs3Fr+9EwQ0I dAB3aZEaYkLUBwAlgYOS7zS7YRju2be+UMlVOcrB4mu9zq+RB5N+esIwGwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFImVTVvkwNUKMvDsHbpa5MMn69QoMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvaVpWTlctVEExUW95OE93ZHVscmt3eWZyMUNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBwiL MA0GCSqGSIb3DQEBCwUAA4IBAQAtwSnp1tFpkxQU8FprPO9egWEzBuRT/RzwwYfI aqlvB65+pMQIvqoKTGabgt00iJay1W9OXuE34b/ue5fqiOnsrhpiN1ivd4YBeOYo TlVmbpSCtvwohl8bQNQu5E1jWV3NFRW9E+WgrigK/r3TTQReLuaTVSPMnspRhROr d1A34WVvlcjNjrNuIhXYbcGGTOOHPhehRG7ImQuGuWD7F9LHbN1VUmYxBO+AcGIT L2fyDnrE97m1dBjfuXe4qFS5ZnG09m3hvE5czyOqS8GT9xK+JVyhxCAlD1apIxPl IMZy3akH8kjFyO/G8ZnmcgiTsLNLe/MLR2IrbksTB66ItCOB -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:42 2026 by rpki-client