This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/k9_ZcpkinPdjAyjHaGut5_qdDwQ.roa File: k9_ZcpkinPdjAyjHaGut5_qdDwQ.roa (raw, json) Hash identifier: ELtK3PnNNmCKlq6PtC4sNDEsV7rD6P6Dgeky4YyGnNI= Subject key identifier: 93:DF:D9:72:99:22:9C:F7:63:03:28:C7:68:6B:AD:E7:FA:9D:0F:04 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D8C8E99F53AB4BC2301EAF4445730 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/k9_ZcpkinPdjAyjHaGut5_qdDwQ.roa Signing time: Fri 02 Jan 2026 06:20:41 +0000 ROA not before: Fri 02 Jan 2026 06:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216418 IP address blocks: 2a10:ccc0:110::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:8c:8e:99:f5:3a:b4:bc:23:01:ea:f4:44:57:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93dfd97299229cf7630328c7686bade7fa9d0f04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1a:03:b3:07:e8:11:f5:39:21:de:e6:23:58: 30:d0:fc:ea:2f:bb:32:ae:cf:9e:96:37:77:18:31: 5e:bc:8a:e8:14:0e:05:69:8e:1e:eb:25:cf:87:db: d7:5d:0b:40:0b:a8:f1:e4:aa:3f:d3:21:4b:ae:0c: 03:07:8f:aa:c3:07:5f:08:4f:77:62:83:17:8c:be: 29:bf:cd:17:ca:23:aa:b0:f2:de:3f:8d:de:39:ee: 06:9e:46:3b:49:c7:5c:05:4e:da:43:60:a2:a6:b8: b2:85:97:de:ff:dc:29:ff:8e:a7:ca:9b:15:f0:3e: 17:0d:05:58:9a:58:1b:ad:2d:37:94:36:c3:30:b3: 35:01:08:ea:b6:6a:bd:48:a6:9c:5a:57:28:6a:3a: 6a:43:c6:31:24:11:a7:e9:6b:5f:09:0e:70:c4:e0: 13:73:bd:23:ec:02:d0:a6:2c:10:e9:2b:88:0a:88: b8:8d:39:b6:3c:d8:bd:1c:26:86:de:f1:75:f8:95: 66:6d:47:62:9b:bb:f4:ac:2c:52:1d:00:39:c4:6a: ce:a1:1d:ff:6d:6c:43:0e:1b:f9:50:03:57:83:6d: b8:88:1d:4a:f9:6f:bf:68:8e:ce:6d:32:8a:e5:c1: 1f:5e:97:89:b9:c1:a4:45:13:81:11:5b:1c:fb:db: 09:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:DF:D9:72:99:22:9C:F7:63:03:28:C7:68:6B:AD:E7:FA:9D:0F:04 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/k9_ZcpkinPdjAyjHaGut5_qdDwQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:ccc0:110::/44 Signature Algorithm: sha256WithRSAEncryption 60:1f:b5:85:96:e5:f7:17:91:da:82:31:45:74:89:b1:48:85: 4d:f7:71:6e:b6:07:80:71:3f:ca:8d:49:5a:b9:aa:2d:26:1d: 1e:4d:a6:b6:db:bb:82:b3:1d:bd:cf:14:98:4e:a1:68:b9:fd: 96:66:4f:91:ba:05:9d:4f:79:3c:b0:3f:ba:a1:30:72:8d:6e: 2d:14:67:9d:c9:6f:28:56:a0:20:68:84:63:d2:a6:bd:2a:e4: a2:c5:68:aa:e5:15:31:c9:8f:08:55:78:64:67:17:31:17:93: 79:9b:23:74:fd:87:8d:66:dd:51:34:70:fb:cc:ec:55:0e:c2: 4a:c2:19:24:dc:8c:8c:7e:f5:30:83:85:cb:84:a7:5f:38:a3: 3a:61:0d:2a:c0:1a:8d:7d:c5:4c:f8:ae:12:e2:06:99:09:4f: 3f:38:75:46:96:88:62:c1:70:e4:5d:47:70:bb:4b:98:02:2b: 6d:39:64:71:19:49:b5:96:6a:36:0a:41:8c:41:e7:c2:fc:b2: 24:22:31:26:80:79:2d:6b:5d:37:af:90:01:f2:2f:b7:3b:4f: 4c:3a:57:51:1d:88:ae:be:76:b8:d1:ee:e6:89:61:6c:87:c6: 93:3a:c4:f1:02:f7:bd:3c:33:d7:cc:03:15:42:92:83:cc:78: 63:e4:8e:9b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XYyOmfU6tLwjAer0RFcwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2RmZDk3Mjk5MjI5Y2Y3NjMwMzI4Yzc2ODZiYWRlN2ZhOWQwZjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBoDswfoEfU5Id7mI1gw0PzqL7sy rs+eljd3GDFevIroFA4FaY4e6yXPh9vXXQtAC6jx5Ko/0yFLrgwDB4+qwwdfCE93 YoMXjL4pv80XyiOqsPLeP43eOe4GnkY7ScdcBU7aQ2CipriyhZfe/9wp/46nypsV 8D4XDQVYmlgbrS03lDbDMLM1AQjqtmq9SKacWlcoajpqQ8YxJBGn6WtfCQ5wxOAT c70j7ALQpiwQ6SuICoi4jTm2PNi9HCaG3vF1+JVmbUdim7v0rCxSHQA5xGrOoR3/ bWxDDhv5UANXg224iB1K+W+/aI7ObTKK5cEfXpeJucGkRROBEVsc+9sJMwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJPf2XKZIpz3YwMox2hrref6nQ8EMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvazlfWmNwa2luUGRqQXlqSGFHdXQ1X3FkRHdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhDMwAEQ MA0GCSqGSIb3DQEBCwUAA4IBAQBgH7WFluX3F5HagjFFdImxSIVN93FutgeAcT/K jUlauaotJh0eTaa227uCsx29zxSYTqFouf2WZk+RugWdT3k8sD+6oTByjW4tFGed yW8oVqAgaIRj0qa9KuSixWiq5RUxyY8IVXhkZxcxF5N5myN0/YeNZt1RNHD7zOxV DsJKwhkk3IyMfvUwg4XLhKdfOKM6YQ0qwBqNfcVM+K4S4gaZCU8/OHVGlohiwXDk XUdwu0uYAittOWRxGUm1lmo2CkGMQefC/LIkIjEmgHkta103r5AB8i+3O09MOldR HYiuvna40e7miWFsh8aTOsTxAve9PDPXzAMVQpKDzHhj5I6b -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:09 2026 by rpki-client