This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/k0eEtKHY3MFdA7XtBdS1BwMBUyc.roa File: k0eEtKHY3MFdA7XtBdS1BwMBUyc.roa (raw, json) Hash identifier: PXuY9U2gyzlY2lnzbyQdBw+xOiQdsw/wbH6h2r3qTfs= Subject key identifier: 93:47:84:B4:A1:D8:DC:C1:5D:03:B5:ED:05:D4:B5:07:03:01:53:27 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D66C98D4946D76710382BF39B34DC Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/k0eEtKHY3MFdA7XtBdS1BwMBUyc.roa Signing time: Fri 02 Jan 2026 06:20:31 +0000 ROA not before: Fri 02 Jan 2026 06:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213748 IP address blocks: 2a06:de00:f0::/44 maxlen: 48 2a0e:97c0:580::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:66:c9:8d:49:46:d7:67:10:38:2b:f3:9b:34:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=934784b4a1d8dcc15d03b5ed05d4b50703015327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:24:ae:29:ac:87:ea:56:90:dd:32:12:5d:98: 03:a9:26:ea:7f:c5:b5:67:48:e9:ff:f2:b3:76:f5: c6:6c:35:b7:02:c4:0a:08:bb:a0:55:a9:d6:54:30: f0:5f:d5:87:e6:26:61:47:14:90:0a:b4:4b:c1:1e: 7b:ca:36:2f:10:22:5f:a1:c3:3a:d2:82:b4:d2:b2: c2:3e:29:06:32:79:61:00:6a:99:1a:67:04:80:c6: cc:e9:28:9a:da:93:c0:ce:f6:b1:76:28:a2:05:d9: 64:9b:40:f5:dd:48:eb:d1:a5:96:46:fe:3c:cd:81: 97:48:09:44:36:fb:a7:e9:ac:95:c3:f6:bc:2b:2d: 33:29:4a:17:78:9c:ee:fb:f2:7b:e9:8e:40:be:3a: 97:0d:16:c6:64:a6:4e:bf:e6:25:95:fe:50:78:bf: d5:d4:6e:59:10:93:9f:42:27:59:6d:b4:40:d5:17: 0b:11:6d:7a:b9:8d:57:81:e9:33:d9:a9:32:7e:b7: 68:51:5c:d1:6e:c7:f9:f2:38:3a:82:0e:fe:b0:74: a8:07:8e:eb:9a:10:9d:ab:5c:da:ed:cb:7b:52:b4: 89:fb:31:3e:e2:ce:dc:0c:a1:8f:44:44:2a:35:4b: 8b:be:d7:75:ac:ab:97:fa:a4:55:b0:da:f0:47:19: 6d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:47:84:B4:A1:D8:DC:C1:5D:03:B5:ED:05:D4:B5:07:03:01:53:27 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/k0eEtKHY3MFdA7XtBdS1BwMBUyc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:de00:f0::/44 2a0e:97c0:580::/44 Signature Algorithm: sha256WithRSAEncryption bd:99:e3:2f:66:b2:b4:2a:9e:61:0c:fb:4c:f2:c9:db:b4:a1: b7:72:fe:ee:71:67:da:23:24:1a:ef:c6:dd:33:2a:b5:ea:a5: f4:53:e9:af:35:db:c3:18:93:06:2e:51:0e:58:3f:3a:01:ab: 26:c3:d3:25:8b:13:04:2c:b1:18:20:a1:fc:46:31:45:12:68: 73:1d:03:d6:bd:41:e4:21:c8:60:69:f8:e8:bd:6b:92:17:b2: da:78:0d:c6:ee:17:ca:de:ec:7e:b0:b8:8f:b1:9f:8b:77:ab: 07:41:0f:a0:bc:42:9e:a7:a3:21:19:02:07:ec:4f:ca:56:cb: 91:3a:e7:a1:73:5b:13:1f:2b:a1:02:6c:e5:08:fe:3c:39:96: 1f:cf:f6:2a:73:f2:b2:e0:a6:fa:f6:75:58:2e:56:f7:18:b5: 38:53:86:6b:bc:2a:38:22:60:10:3a:8d:63:11:db:b0:56:d0: 90:a4:26:ff:e7:2a:be:17:d9:a6:b1:97:d9:28:cd:8a:7c:9e: 2c:4b:df:78:03:80:4e:6a:43:ed:c1:15:05:42:34:4f:90:68: 8c:49:4d:3b:d4:f1:bd:6b:fa:27:25:4d:22:ab:12:17:01:23: 51:60:aa:ff:f0:e8:eb:5b:d3:78:c7:e3:e6:13:01:69:d5:8b: bc:16:82:f1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XWbJjUlG12cQOCvzmzTcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzQ3ODRiNGExZDhkY2MxNWQwM2I1ZWQwNWQ0YjUwNzAzMDE1MzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSSuKayH6laQ3TISXZgDqSbqf8W1 Z0jp//KzdvXGbDW3AsQKCLugVanWVDDwX9WH5iZhRxSQCrRLwR57yjYvECJfocM6 0oK00rLCPikGMnlhAGqZGmcEgMbM6Sia2pPAzvaxdiiiBdlkm0D13Ujr0aWWRv48 zYGXSAlENvun6ayVw/a8Ky0zKUoXeJzu+/J76Y5AvjqXDRbGZKZOv+Yllf5QeL/V 1G5ZEJOfQidZbbRA1RcLEW16uY1Xgekz2akyfrdoUVzRbsf58jg6gg7+sHSoB47r mhCdq1za7ct7UrSJ+zE+4s7cDKGPREQqNUuLvtd1rKuX+qRVsNrwRxltvQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJNHhLSh2NzBXQO17QXUtQcDAVMnMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvazBlRXRLSFkzTUZkQTdYdEJkUzFCd01CVXljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgbeAADw AwcEKg6XwAWAMA0GCSqGSIb3DQEBCwUAA4IBAQC9meMvZrK0Kp5hDPtM8snbtKG3 cv7ucWfaIyQa78bdMyq16qX0U+mvNdvDGJMGLlEOWD86Aasmw9MlixMELLEYIKH8 RjFFEmhzHQPWvUHkIchgafjovWuSF7LaeA3G7hfK3ux+sLiPsZ+Ld6sHQQ+gvEKe p6MhGQIH7E/KVsuROuehc1sTHyuhAmzlCP48OZYfz/Yqc/Ky4Kb69nVYLlb3GLU4 U4ZrvCo4ImAQOo1jEduwVtCQpCb/5yq+F9mmsZfZKM2KfJ4sS994A4BOakPtwRUF QjRPkGiMSU071PG9a/onJU0iqxIXASNRYKr/8OjrW9N4x+PmEwFp1Yu8FoLx -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:06 2026 by rpki-client