This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/j2t7zMuvMh4xs-kjWA-r9v_ylBE.roa File: j2t7zMuvMh4xs-kjWA-r9v_ylBE.roa (raw, json) Hash identifier: a8CFuHE3Wv/Zl9kcmnE7yXM9Gk2P3sobqjpT2fXp65o= Subject key identifier: 8F:6B:7B:CC:CB:AF:32:1E:31:B3:E9:23:58:0F:AB:F6:FF:F2:94:11 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D25C0F268AB04442DBD5C54DA1ED8 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/j2t7zMuvMh4xs-kjWA-r9v_ylBE.roa Signing time: Fri 02 Jan 2026 06:20:15 +0000 ROA not before: Fri 02 Jan 2026 06:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210426 IP address blocks: 2a0e:97c0:5e0::/44 maxlen: 48 2a0e:97c0:5e0::/48 maxlen: 48 2a0e:97c0:5e1::/48 maxlen: 48 2a0e:97c0:5e2::/48 maxlen: 48 2a0e:97c0:5e3::/48 maxlen: 48 2a0e:97c0:5e4::/48 maxlen: 48 2a0e:97c0:5e5::/48 maxlen: 48 2a0e:97c0:5e6::/48 maxlen: 48 2a0e:97c0:5e7::/48 maxlen: 48 2a0e:97c0:5e8::/48 maxlen: 48 2a0e:97c0:5e9::/48 maxlen: 48 2a0e:97c0:5ea::/48 maxlen: 48 2a0e:97c0:5eb::/48 maxlen: 48 2a0e:97c0:5ec::/48 maxlen: 48 2a0e:97c0:5ed::/48 maxlen: 48 2a0e:97c0:5ee::/48 maxlen: 48 2a0e:97c0:5ef::/48 maxlen: 48 2a0e:b107:17e0::/44 maxlen: 48 2a0e:b107:17e0::/48 maxlen: 48 2a0e:b107:17e1::/48 maxlen: 48 2a0e:b107:17e2::/48 maxlen: 48 2a0e:b107:17e3::/48 maxlen: 48 2a0e:b107:17e4::/48 maxlen: 48 2a0e:b107:17e5::/48 maxlen: 48 2a0e:b107:17e6::/48 maxlen: 48 2a0e:b107:17e7::/48 maxlen: 48 2a0e:b107:17e8::/48 maxlen: 48 2a0e:b107:17e9::/48 maxlen: 48 2a0e:b107:17ea::/48 maxlen: 48 2a0e:b107:17eb::/48 maxlen: 48 2a0e:b107:17ec::/48 maxlen: 48 2a0e:b107:17ed::/48 maxlen: 48 2a0e:b107:17ee::/48 maxlen: 48 2a0e:b107:17ef::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:25:c0:f2:68:ab:04:44:2d:bd:5c:54:da:1e:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f6b7bcccbaf321e31b3e923580fabf6fff29411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:70:4a:30:f3:e3:34:f2:01:85:11:ac:45:6e: 0f:ae:12:e7:22:dd:9c:bc:1a:c0:1d:dd:08:13:2c: 43:5f:c1:ec:58:2e:dd:a1:0f:5f:22:44:89:2e:9d: cd:9e:bd:11:e7:2b:35:58:a7:71:1a:4a:b3:46:fb: fe:a6:be:8a:77:d8:03:d5:ac:5c:fd:68:3d:88:30: 9a:5e:c4:f9:c5:0e:cf:78:29:57:ee:5d:8f:cb:19: 40:2b:2a:f2:b8:8d:57:48:9f:47:a8:8f:12:e3:58: 61:f0:5d:0e:4f:26:0d:30:1e:8f:80:e6:36:8f:59: 92:7e:65:31:43:72:d9:3c:2b:bb:ff:3f:8b:30:63: 02:c8:39:22:a9:5e:1a:a9:f2:3d:7d:72:88:82:b1: df:d5:64:9e:86:73:22:03:42:bb:d0:13:eb:e0:53: 75:2b:48:65:0c:06:fa:00:05:32:05:47:90:e3:ca: a3:f2:43:a5:fc:97:f0:c1:41:ef:fc:50:dc:33:e4: d3:89:e5:f1:80:81:ef:4e:72:64:21:f3:da:93:43: d6:88:4d:64:c0:05:aa:2c:11:8e:e9:18:20:a1:88: 53:7b:43:be:a0:30:c6:94:6c:24:82:a7:1f:20:ee: c1:0d:d6:94:1a:21:c2:80:b2:5e:86:79:a9:2a:40: 96:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6B:7B:CC:CB:AF:32:1E:31:B3:E9:23:58:0F:AB:F6:FF:F2:94:11 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/j2t7zMuvMh4xs-kjWA-r9v_ylBE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:5e0::/44 2a0e:b107:17e0::/44 Signature Algorithm: sha256WithRSAEncryption 77:2d:86:06:ce:a7:69:21:62:69:90:c0:54:76:2d:cb:18:3e: 6d:9e:12:7d:5d:37:bf:56:32:39:ea:fc:ec:c9:85:7a:39:7f: 13:ff:7a:6f:5f:39:9a:7c:e2:0f:83:1b:32:ac:0e:e9:bd:71: 28:a7:a5:3d:61:94:d6:a9:67:9c:46:ab:fe:15:1c:24:cb:e8: fa:a2:41:f7:eb:91:78:e1:5e:7c:ae:8a:60:07:77:8f:e1:0c: b8:68:02:60:2c:5d:67:db:88:91:35:39:a0:e5:ab:89:6a:c1: fe:b5:3c:2b:5e:82:cc:a0:64:52:2a:ce:ad:c3:6d:f5:8c:63: 05:b9:4a:18:61:26:b2:b7:4f:74:4d:df:d8:ac:b0:e5:1e:4d: 55:d3:63:e5:ce:39:07:39:85:1e:ef:6a:bb:2e:31:7d:4d:b3: ee:15:6f:28:c4:ba:d2:d5:ce:51:79:29:da:b8:43:a1:54:67: 94:ca:37:52:82:79:cc:d0:65:29:2d:f1:87:35:ee:25:2d:7f: a4:3d:36:ea:88:dd:22:8c:ed:c9:80:c8:b8:c8:a6:ac:af:ff: f0:a2:08:bc:66:f8:7b:52:f9:5e:57:40:0a:eb:1e:fe:bd:df: e3:16:bb:f8:0f:98:65:5d:e9:01:c2:24:73:1d:bd:be:33:4c: 54:a2:ac:e8 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XSXA8mirBEQtvVxU2h7YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjZiN2JjY2NiYWYzMjFlMzFiM2U5MjM1ODBmYWJmNmZmZjI5NDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHBKMPPjNPIBhRGsRW4PrhLnIt2c vBrAHd0IEyxDX8HsWC7doQ9fIkSJLp3Nnr0R5ys1WKdxGkqzRvv+pr6Kd9gD1axc /Wg9iDCaXsT5xQ7PeClX7l2PyxlAKyryuI1XSJ9HqI8S41hh8F0OTyYNMB6PgOY2 j1mSfmUxQ3LZPCu7/z+LMGMCyDkiqV4aqfI9fXKIgrHf1WSehnMiA0K70BPr4FN1 K0hlDAb6AAUyBUeQ48qj8kOl/JfwwUHv/FDcM+TTieXxgIHvTnJkIfPak0PWiE1k wAWqLBGO6RggoYhTe0O+oDDGlGwkgqcfIO7BDdaUGiHCgLJehnmpKkCWwwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFI9re8zLrzIeMbPpI1gPq/b/8pQRMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvajJ0N3pNdXZNaDR4cy1raldBLXI5dl95bEJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg6XwAXg AwcEKg6xBxfgMA0GCSqGSIb3DQEBCwUAA4IBAQB3LYYGzqdpIWJpkMBUdi3LGD5t nhJ9XTe/VjI56vzsyYV6OX8T/3pvXzmafOIPgxsyrA7pvXEop6U9YZTWqWecRqv+ FRwky+j6okH365F44V58ropgB3eP4Qy4aAJgLF1n24iRNTmg5auJasH+tTwrXoLM oGRSKs6tw231jGMFuUoYYSayt090Td/YrLDlHk1V02PlzjkHOYUe72q7LjF9TbPu FW8oxLrS1c5ReSnauEOhVGeUyjdSgnnM0GUpLfGHNe4lLX+kPTbqiN0ijO3JgMi4 yKasr//wogi8Zvh7UvleV0AK6x7+vd/jFrv4D5hlXekBwiRzHb2+M0xUoqzo -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:42 2026 by rpki-client