This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/imI5S1PtvFI9HLLbxoQT6_WPAnE.roa File: imI5S1PtvFI9HLLbxoQT6_WPAnE.roa (raw, json) Hash identifier: Cw+oq6nMGj0b8oIF144ha/8cOgb1chCz6pBBrcF+TUw= Subject key identifier: 8A:62:39:4B:53:ED:BC:52:3D:1C:B2:DB:C6:84:13:EB:F5:8F:02:71 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D85A74EC8475A44D7EAFBBEF1EC2A Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/imI5S1PtvFI9HLLbxoQT6_WPAnE.roa Signing time: Fri 02 Jan 2026 06:20:39 +0000 ROA not before: Fri 02 Jan 2026 06:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215852 IP address blocks: 2a0e:97c0:630::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:85:a7:4e:c8:47:5a:44:d7:ea:fb:be:f1:ec:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a62394b53edbc523d1cb2dbc68413ebf58f0271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c1:74:cc:fe:84:91:1d:80:26:97:2c:04:49: c4:a6:ff:ef:64:5d:97:c4:b5:cf:55:fc:99:39:a1: c4:ba:e5:d8:45:04:db:fe:2c:0d:ac:29:3e:cf:68: d0:19:30:3e:90:dd:a3:85:02:73:a9:cf:0e:c6:80: 03:d6:44:9f:7a:0c:3c:d9:47:29:8b:81:a2:72:31: 8c:ec:e0:76:cd:0a:17:a4:18:9a:d4:11:da:f5:30: ee:72:da:9e:9d:c3:c7:74:18:d0:2d:d5:95:dc:ea: 55:5a:c4:c8:d9:28:b6:45:24:0a:23:99:86:fa:72: 1b:1c:30:2d:0c:24:65:8f:15:b7:08:cc:37:81:d4: 39:3c:83:fa:fd:78:e0:96:00:62:aa:d8:03:74:3c: a9:42:86:62:0d:3c:93:28:84:b8:75:98:93:03:5f: 1d:18:33:6b:2f:ae:d6:22:2c:32:71:8a:51:cd:3a: bb:f1:30:44:e4:18:06:5d:6f:08:a8:a0:a1:b1:84: db:81:48:83:28:c4:8a:ee:b6:bc:db:e7:a1:30:6f: 89:30:9e:e2:48:1d:76:1c:07:4f:39:32:a8:67:ec: 3b:3d:aa:5f:c9:98:e5:7f:14:28:ea:13:b2:81:67: d4:a6:64:6d:7b:f9:c4:85:75:77:27:7a:35:5b:3c: 7e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:62:39:4B:53:ED:BC:52:3D:1C:B2:DB:C6:84:13:EB:F5:8F:02:71 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/imI5S1PtvFI9HLLbxoQT6_WPAnE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:630::/44 Signature Algorithm: sha256WithRSAEncryption ab:95:20:6b:70:e5:9f:72:5a:29:30:b4:2d:b1:fb:6d:5c:bb: 8d:9e:8d:bb:e2:5f:3e:42:b2:b5:e0:e2:7d:fc:d9:43:68:57: d2:9b:50:d1:10:27:a1:61:6e:4e:da:d3:6f:32:5c:e4:8e:64: 20:ca:7e:16:67:59:eb:87:84:9d:b1:a0:af:ba:67:19:b9:9f: 97:47:f5:64:d3:d2:13:21:65:ca:cd:b5:10:b7:37:83:f9:89: 11:c0:f2:f8:00:14:69:be:16:4d:97:ec:07:fa:a7:62:59:2c: 5a:87:39:74:98:a8:67:92:9f:88:8b:d6:76:7f:78:31:eb:39: 79:8c:76:fa:f5:a3:e1:1c:a0:84:f9:05:26:32:3b:7f:ce:81: 81:32:1d:22:df:7b:7b:fb:d3:ab:09:a1:3f:ac:b4:10:c4:04: 59:bc:e3:96:2a:d1:5e:e9:9a:dc:88:a0:f3:ad:31:01:bb:a8: 30:55:76:f2:4c:18:ac:63:d3:0b:d4:15:4f:ca:24:3d:90:af: 76:b2:7c:52:5c:ac:3d:d2:4c:63:16:b5:01:3c:f8:db:8e:a1: bc:a7:56:39:53:c2:39:7d:f2:2a:8c:e6:4b:b4:40:20:9b:a2: 88:ab:b5:f4:97:79:04:6c:61:65:3c:17:ae:3f:23:60:fa:91: 74:f0:2d:9a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XYWnTshHWkTX6vu+8ewqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTYyMzk0YjUzZWRiYzUyM2QxY2IyZGJjNjg0MTNlYmY1OGYwMjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8F0zP6EkR2AJpcsBEnEpv/vZF2X xLXPVfyZOaHEuuXYRQTb/iwNrCk+z2jQGTA+kN2jhQJzqc8OxoAD1kSfegw82Ucp i4GicjGM7OB2zQoXpBia1BHa9TDuctqencPHdBjQLdWV3OpVWsTI2Si2RSQKI5mG +nIbHDAtDCRljxW3CMw3gdQ5PIP6/XjglgBiqtgDdDypQoZiDTyTKIS4dZiTA18d GDNrL67WIiwycYpRzTq78TBE5BgGXW8IqKChsYTbgUiDKMSK7ra82+ehMG+JMJ7i SB12HAdPOTKoZ+w7PapfyZjlfxQo6hOygWfUpmRte/nEhXV3J3o1Wzx+NwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIpiOUtT7bxSPRyy28aEE+v1jwJxMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvaW1JNVMxUHR2Rkk5SExMYnhvUVQ2X1dQQW5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAYw MA0GCSqGSIb3DQEBCwUAA4IBAQCrlSBrcOWfclopMLQtsfttXLuNno274l8+QrK1 4OJ9/NlDaFfSm1DRECehYW5O2tNvMlzkjmQgyn4WZ1nrh4SdsaCvumcZuZ+XR/Vk 09ITIWXKzbUQtzeD+YkRwPL4ABRpvhZNl+wH+qdiWSxahzl0mKhnkp+Ii9Z2f3gx 6zl5jHb69aPhHKCE+QUmMjt/zoGBMh0i33t7+9OrCaE/rLQQxARZvOOWKtFe6Zrc iKDzrTEBu6gwVXbyTBisY9ML1BVPyiQ9kK92snxSXKw90kxjFrUBPPjbjqG8p1Y5 U8I5ffIqjOZLtEAgm6KIq7X0l3kEbGFlPBeuPyNg+pF08C2a -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:05 2026 by rpki-client