This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/k_xFtYS1TxKHVaE0F4YLzAPDcyk.roa File: k_xFtYS1TxKHVaE0F4YLzAPDcyk.roa (raw, json) Hash identifier: ET1QJI5vr7ge0Eo9MT0cCdvZDopsKfrihXDTVaR2Hhs= Subject key identifier: 93:FC:45:B5:84:B5:4F:12:87:55:A1:34:17:86:0B:CC:03:C3:73:29 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D7F87AB7AA293DAE7DF892648097B Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/k_xFtYS1TxKHVaE0F4YLzAPDcyk.roa Signing time: Fri 02 Jan 2026 06:20:38 +0000 ROA not before: Fri 02 Jan 2026 06:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215715 IP address blocks: 2a10:ccc1:1000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 17:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:7f:87:ab:7a:a2:93:da:e7:df:89:26:48:09:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93fc45b584b54f128755a13417860bcc03c37329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e0:6e:72:01:b6:c1:1d:c5:8e:97:41:b9:f3: 38:cc:c8:bf:93:6c:79:5e:4d:f0:aa:b2:7a:08:f8: 1d:49:eb:a3:a5:bf:6e:e7:0f:95:3c:0b:c3:56:dd: 57:24:1c:2f:e9:8d:21:28:be:87:1d:cb:24:f8:40: d3:3a:5d:d2:47:b3:5d:d1:2f:db:df:f3:02:8d:b4: 03:ff:f2:51:ad:c5:06:34:13:6e:87:9c:4d:9e:27: 7f:fc:51:aa:ff:57:6b:c3:a3:f9:16:3c:84:e6:e8: 01:cc:d4:20:f4:79:c5:8d:78:ea:f3:76:7f:54:df: e1:9d:4c:e2:2d:a7:eb:1f:bf:2b:0b:ec:95:85:e5: 7e:93:b0:04:b5:e0:6d:b0:8e:81:fc:d3:88:35:bb: cf:17:67:5f:51:f8:c4:1f:0f:3b:80:89:6e:97:eb: 02:18:79:0b:af:3d:83:be:7a:a5:c6:dc:a4:51:01: 1e:64:c8:38:49:73:f9:2a:9d:95:91:25:57:5d:bb: a0:f5:06:a2:b3:47:54:73:91:76:94:24:5d:99:d2: 52:3e:88:34:cc:f2:01:4b:94:51:72:55:e1:5d:a3: 8a:44:e1:3d:b9:00:f3:57:6d:1c:23:3c:cf:3b:c8: bb:cd:b8:d5:07:c4:ae:b0:88:a6:fe:15:c9:5a:62: 26:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FC:45:B5:84:B5:4F:12:87:55:A1:34:17:86:0B:CC:03:C3:73:29 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/k_xFtYS1TxKHVaE0F4YLzAPDcyk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:ccc1:1000::/44 Signature Algorithm: sha256WithRSAEncryption 7e:03:60:e0:db:e2:38:be:60:24:d2:d8:c3:1c:36:32:a3:10: dc:62:40:2c:3c:1a:38:97:18:10:c3:6d:c9:08:e9:ec:d8:6c: 75:1c:37:6d:f8:d0:08:fd:1f:5f:20:24:b6:0a:ba:0e:0c:3c: af:8d:96:66:15:ce:b3:d8:7a:1f:4d:ec:ba:d7:4e:90:32:89: 0a:4b:5a:d0:34:19:af:05:59:ab:19:04:f6:92:c8:16:34:44: 1a:7b:25:bd:57:18:74:8e:43:83:80:cb:4e:9d:0d:74:9a:29: 68:f9:11:ec:a4:29:7c:84:05:c3:bb:a4:6b:1e:6e:d9:a0:05: 06:68:b3:5a:5b:83:52:7f:b6:42:d4:44:ec:2e:2a:ad:42:cd: d1:b2:a6:58:fe:cb:cb:e1:80:29:2a:f5:34:0a:31:2b:36:90: 20:ed:88:97:7d:c9:df:1c:f9:48:80:e6:1f:d1:2c:14:a0:15: 59:c5:a4:9c:5f:e7:c3:fb:d6:af:18:87:51:70:5a:46:54:c0: 23:a9:9f:5b:15:bd:17:8c:68:c4:48:17:ed:21:ef:e1:ca:17: 3c:5b:bf:40:5c:08:03:59:58:0e:11:dd:ea:ce:d1:a7:65:93: bc:fb:99:07:08:71:7e:ab:60:56:ee:43:77:2c:a2:b0:de:32: e4:0c:b2:49 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XX+Hq3qik9rn34kmSAl7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2ZjNDViNTg0YjU0ZjEyODc1NWExMzQxNzg2MGJjYzAzYzM3MzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuBucgG2wR3FjpdBufM4zMi/k2x5 Xk3wqrJ6CPgdSeujpb9u5w+VPAvDVt1XJBwv6Y0hKL6HHcsk+EDTOl3SR7Nd0S/b 3/MCjbQD//JRrcUGNBNuh5xNnid//FGq/1drw6P5FjyE5ugBzNQg9HnFjXjq83Z/ VN/hnUziLafrH78rC+yVheV+k7AEteBtsI6B/NOINbvPF2dfUfjEHw87gIlul+sC GHkLrz2DvnqlxtykUQEeZMg4SXP5Kp2VkSVXXbug9Qais0dUc5F2lCRdmdJSPog0 zPIBS5RRclXhXaOKROE9uQDzV20cIzzPO8i7zbjVB8SusIim/hXJWmImbwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJP8RbWEtU8Sh1WhNBeGC8wDw3MpMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEva194RnRZUzFUeEtIVmFFMEY0WUx6QVBEY3lrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhDMwRAA MA0GCSqGSIb3DQEBCwUAA4IBAQB+A2Dg2+I4vmAk0tjDHDYyoxDcYkAsPBo4lxgQ w23JCOns2Gx1HDdt+NAI/R9fICS2CroODDyvjZZmFc6z2HofTey6106QMokKS1rQ NBmvBVmrGQT2ksgWNEQaeyW9Vxh0jkODgMtOnQ10milo+RHspCl8hAXDu6RrHm7Z oAUGaLNaW4NSf7ZC1ETsLiqtQs3RsqZY/svL4YApKvU0CjErNpAg7YiXfcnfHPlI gOYf0SwUoBVZxaScX+fD+9avGIdRcFpGVMAjqZ9bFb0XjGjESBftIe/hyhc8W79A XAgDWVgOEd3qztGnZZO8+5kHCHF+q2BW7kN3LKKw3jLkDLJJ -----END CERTIFICATE-----Generated at Sat Jan 10 02:19:31 2026 by rpki-client