This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jRSyGPEVLHn4LmTbyLKv8eZPVmE.roa File: jRSyGPEVLHn4LmTbyLKv8eZPVmE.roa (raw, json) Hash identifier: CQrJW1KUOi05bB2aN8lfHKsxEaw4E7nx9a8/reS1LI8= Subject key identifier: 8D:14:B2:18:F1:15:2C:79:F8:2E:64:DB:C8:B2:AF:F1:E6:4F:56:61 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019BDAA632BE7B17CDEFD5699F39590DF9F8 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jRSyGPEVLHn4LmTbyLKv8eZPVmE.roa Signing time: Tue 20 Jan 2026 09:04:43 +0000 ROA not before: Tue 20 Jan 2026 09:04:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213586 IP address blocks: 2a0e:97c0:9c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:a6:32:be:7b:17:cd:ef:d5:69:9f:39:59:0d:f9:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 20 09:04:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d14b218f1152c79f82e64dbc8b2aff1e64f5661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:96:2f:fb:11:7e:48:4e:d5:ea:fe:8b:6b:56: 50:b3:6c:96:01:47:26:87:b1:1b:83:51:04:af:1c: 94:74:4e:56:3e:04:e2:92:34:b0:8c:61:c8:e3:0c: a0:be:c6:e4:22:8f:a9:e3:fe:42:0a:71:91:53:09: 73:c1:f8:15:51:7a:6c:ac:ae:f4:7c:b7:a9:53:84: 17:ed:1a:84:2d:0f:cb:4f:63:a1:75:25:5e:74:c9: fd:8f:3c:11:ca:e5:5c:4b:48:5c:34:da:1c:32:69: 57:a7:d5:cc:36:75:7c:2d:7c:ee:b8:4c:9e:1a:85: aa:d0:ee:ed:9f:3e:d3:8c:6e:51:d9:13:91:e7:4d: df:7a:7b:9e:01:d3:96:cd:b7:fd:01:59:fd:5f:2f: a5:04:ef:68:21:61:91:17:7a:cb:c0:f4:1c:96:4f: 52:53:da:44:0a:3b:f9:96:9e:f1:42:ff:cc:c1:20: 58:1a:f6:9b:c2:b4:47:ea:b2:fe:7f:fb:80:79:09: f8:ac:a4:23:e3:d9:d1:2d:0e:37:44:f3:1e:61:7c: a6:ee:9e:80:9a:82:78:20:25:d8:d7:b4:20:fa:b0: 5f:6b:be:6d:bb:6f:2b:ff:0e:f1:e3:28:12:05:76: 34:76:3c:65:74:1c:9a:c1:21:70:96:ff:00:3a:92: 34:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:14:B2:18:F1:15:2C:79:F8:2E:64:DB:C8:B2:AF:F1:E6:4F:56:61 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jRSyGPEVLHn4LmTbyLKv8eZPVmE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:9c0::/48 Signature Algorithm: sha256WithRSAEncryption ad:6d:c4:7a:7c:0a:27:2e:3f:6c:b1:9d:c7:a4:f2:67:e8:aa: 0a:fb:1f:be:d7:2c:74:c6:39:43:a5:d1:1e:e8:11:55:f6:3d: b5:7d:24:84:26:73:ca:1f:29:13:c3:fc:fe:75:69:ed:79:74: f0:ff:2b:bc:40:27:74:2d:18:35:45:94:0d:53:23:2d:de:20: 53:8d:f1:81:18:8c:e8:be:71:36:50:37:28:04:b6:eb:5d:08: 08:6d:4c:44:e3:1c:25:dc:e4:09:67:a6:a9:8b:22:da:25:e5: 9b:21:5b:18:0b:be:27:2f:84:d7:b2:a6:01:ce:0d:f3:fd:a2: 12:7b:4d:5c:f4:0d:3f:0c:30:3c:00:f9:14:81:e1:c7:5c:4a: 02:fe:e3:2e:22:4a:de:bf:5c:97:2c:73:29:98:4d:33:d7:16: b9:45:db:ad:94:14:b9:c7:fc:1f:ff:1d:b1:60:a6:b0:b6:ca: 5a:c1:89:84:79:04:50:f9:3f:58:ab:75:c9:a2:a9:71:a4:29: c3:7c:45:87:04:07:5e:10:62:77:4b:07:64:ab:25:62:0a:77: 54:df:2b:f7:45:01:d7:1a:dd:53:f4:78:57:8c:28:e9:3e:60: 31:00:a2:d8:7b:66:f6:46:a6:30:d7:6b:d3:23:f5:ea:2c:92: 69:f2:5e:fd -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZvapjK+exfN79VpnzlZDfn4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTIwMDkwNDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDE0YjIxOGYxMTUyYzc5ZjgyZTY0ZGJjOGIyYWZmMWU2NGY1NjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZYv+xF+SE7V6v6La1ZQs2yWAUcm h7Ebg1EErxyUdE5WPgTikjSwjGHI4wygvsbkIo+p4/5CCnGRUwlzwfgVUXpsrK70 fLepU4QX7RqELQ/LT2OhdSVedMn9jzwRyuVcS0hcNNocMmlXp9XMNnV8LXzuuEye GoWq0O7tnz7TjG5R2ROR503fenueAdOWzbf9AVn9Xy+lBO9oIWGRF3rLwPQclk9S U9pECjv5lp7xQv/MwSBYGvabwrRH6rL+f/uAeQn4rKQj49nRLQ43RPMeYXym7p6A moJ4ICXY17Qg+rBfa75tu28r/w7x4ygSBXY0djxldByawSFwlv8AOpI0OQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFI0UshjxFSx5+C5k28iyr/HmT1ZhMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvalJTeUdQRVZMSG40TG1UYnlMS3Y4ZVpQVm1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6XwAnA MA0GCSqGSIb3DQEBCwUAA4IBAQCtbcR6fAonLj9ssZ3HpPJn6KoK+x++1yx0xjlD pdEe6BFV9j21fSSEJnPKHykTw/z+dWnteXTw/yu8QCd0LRg1RZQNUyMt3iBTjfGB GIzovnE2UDcoBLbrXQgIbUxE4xwl3OQJZ6apiyLaJeWbIVsYC74nL4TXsqYBzg3z /aISe01c9A0/DDA8APkUgeHHXEoC/uMuIkrev1yXLHMpmE0z1xa5RdutlBS5x/wf /x2xYKawtspawYmEeQRQ+T9Yq3XJoqlxpCnDfEWHBAdeEGJ3SwdkqyViCndU3yv3 RQHXGt1T9HhXjCjpPmAxAKLYe2b2RqYw12vTI/XqLJJp8l79 -----END CERTIFICATE-----Generated at Fri Jan 23 03:28:06 2026 by rpki-client