This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jLtyIen5MeCxwODv1SybcrHv_5o.roa File: jLtyIen5MeCxwODv1SybcrHv_5o.roa (raw, json) Hash identifier: aqlio2DcihfLNAc0nBKHohU+fHKo8sYwx7De+n6m6ow= Subject key identifier: 8C:BB:72:21:E9:F9:31:E0:B1:C0:E0:EF:D5:2C:9B:72:B1:EF:FF:9A Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D0DE7BE5F8CC8281F4067B52A1B82 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jLtyIen5MeCxwODv1SybcrHv_5o.roa Signing time: Fri 02 Jan 2026 06:20:08 +0000 ROA not before: Fri 02 Jan 2026 06:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207662 IP address blocks: 2a0e:97c0:760::/44 maxlen: 48 2a0e:97c0:76f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:0d:e7:be:5f:8c:c8:28:1f:40:67:b5:2a:1b:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8cbb7221e9f931e0b1c0e0efd52c9b72b1efff9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d8:06:25:a0:39:4a:71:d8:d1:04:0a:72:55: fa:67:e7:51:d0:7f:24:d9:99:95:97:b6:7f:1c:5b: 9d:6b:86:de:4e:aa:43:cc:a4:56:25:4d:88:ce:c5: 34:dd:e5:13:a8:54:0a:eb:50:03:af:87:7d:75:3d: e6:bc:aa:8f:37:af:58:f3:e1:0e:a8:bc:74:36:df: bf:3e:eb:5c:22:b1:e5:58:bb:bb:85:1e:67:e7:03: 51:fd:ae:59:9d:0e:0c:47:da:6b:81:9f:7a:de:52: e2:10:48:08:f6:20:99:3d:b5:94:26:79:9a:21:be: 41:e2:da:c8:04:3c:24:f6:94:30:cd:23:9d:a6:fb: f9:8e:84:6e:1a:52:98:ba:33:cf:21:1a:84:d0:49: 6f:9b:ba:ea:20:6e:97:33:e7:e2:26:83:58:98:bf: 1e:d8:d1:84:50:ed:4b:3e:27:9e:7e:88:37:c0:ae: 19:65:fa:5b:de:0d:f0:f7:62:f7:3a:d7:1c:84:ee: d4:7f:0a:50:3b:ee:12:d4:8c:7e:7f:a5:5e:f6:3d: d6:88:b7:de:42:db:77:2d:c2:7f:e4:3a:b6:d3:ab: 59:13:17:31:f5:f2:e0:80:27:c9:5f:e7:7c:91:a5: 17:42:19:82:b0:2d:da:70:3e:e6:87:08:8b:fc:7f: b6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:BB:72:21:E9:F9:31:E0:B1:C0:E0:EF:D5:2C:9B:72:B1:EF:FF:9A X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jLtyIen5MeCxwODv1SybcrHv_5o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:760::/44 Signature Algorithm: sha256WithRSAEncryption 59:71:f0:ab:0b:90:16:4f:a6:e4:cd:9d:e8:41:30:3f:34:eb: 73:65:1c:a1:7d:7f:3c:09:7b:98:99:e4:bb:ea:6b:1a:96:73: cc:6c:10:88:0f:93:7c:8a:7e:fc:48:bb:ac:5c:77:6b:a8:27: 22:d9:e2:4d:d2:b2:26:d7:41:94:9d:98:af:80:a2:b3:76:4a: dc:f5:6a:a9:f1:d8:3c:1d:d8:34:cd:bc:7c:1c:15:06:5f:40: cc:c9:1a:e5:8e:16:10:54:0c:f6:2f:ca:89:af:37:2b:27:70: 13:09:e1:db:eb:28:35:74:05:d0:4e:94:c9:77:70:27:34:e8: 6e:f9:d8:27:a7:11:80:1c:7b:80:f3:f2:93:ec:57:83:b9:b2: b2:4e:1b:db:dc:e4:94:cc:f6:f2:ca:87:c5:4f:9a:a8:37:9f: c2:59:75:a5:56:75:19:0c:e2:d5:5e:ec:50:9c:e3:d3:8f:97: d2:23:2f:0f:0a:68:8c:b5:d3:60:dd:f7:5b:ae:a3:b9:05:10: e8:7f:38:08:ab:45:97:52:c3:fb:05:25:c4:94:1c:0b:31:a9: 71:cd:17:5d:15:6d:79:a9:da:1a:10:ab:e8:80:58:27:5f:7c: 36:f6:47:a5:36:51:8f:33:f5:92:f7:93:da:cd:33:00:48:3f: 5c:57:79:18 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XQ3nvl+MyCgfQGe1KhuCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2JiNzIyMWU5ZjkzMWUwYjFjMGUwZWZkNTJjOWI3MmIxZWZmZjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tgGJaA5SnHY0QQKclX6Z+dR0H8k 2ZmVl7Z/HFuda4beTqpDzKRWJU2IzsU03eUTqFQK61ADr4d9dT3mvKqPN69Y8+EO qLx0Nt+/PutcIrHlWLu7hR5n5wNR/a5ZnQ4MR9prgZ963lLiEEgI9iCZPbWUJnma Ib5B4trIBDwk9pQwzSOdpvv5joRuGlKYujPPIRqE0Elvm7rqIG6XM+fiJoNYmL8e 2NGEUO1LPieefog3wK4ZZfpb3g3w92L3OtcchO7UfwpQO+4S1Ix+f6Ve9j3WiLfe Qtt3LcJ/5Dq206tZExcx9fLggCfJX+d8kaUXQhmCsC3acD7mhwiL/H+2tQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIy7ciHp+THgscDg79Usm3Kx7/+aMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvakx0eUllbjVNZUN4d09EdjFTeWJjckh2XzVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAdg MA0GCSqGSIb3DQEBCwUAA4IBAQBZcfCrC5AWT6bkzZ3oQTA/NOtzZRyhfX88CXuY meS76msalnPMbBCID5N8in78SLusXHdrqCci2eJN0rIm10GUnZivgKKzdkrc9Wqp 8dg8Hdg0zbx8HBUGX0DMyRrljhYQVAz2L8qJrzcrJ3ATCeHb6yg1dAXQTpTJd3An NOhu+dgnpxGAHHuA8/KT7FeDubKyThvb3OSUzPbyyofFT5qoN5/CWXWlVnUZDOLV XuxQnOPTj5fSIy8PCmiMtdNg3fdbrqO5BRDofzgIq0WXUsP7BSXElBwLMalxzRdd FW15qdoaEKvogFgnX3w29kelNlGPM/WS95PazTMASD9cV3kY -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:22 2026 by rpki-client