This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lQ3rbJM1dtv4I_juc2n-7E-4bUE.roa File: lQ3rbJM1dtv4I_juc2n-7E-4bUE.roa (raw, json) Hash identifier: alWYPKsPoLvUvjUvFE/YRIdHJtrU9rRgk94etTzB6FM= Subject key identifier: 95:0D:EB:6C:93:35:76:DB:F8:23:F8:EE:73:69:FE:EC:4F:B8:6D:41 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CEB71B4B94CAD694CC92CABF2EF1F Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lQ3rbJM1dtv4I_juc2n-7E-4bUE.roa Signing time: Fri 02 Jan 2026 06:20:00 +0000 ROA not before: Fri 02 Jan 2026 06:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202222 IP address blocks: 2a0e:b107:1ea0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:eb:71:b4:b9:4c:ad:69:4c:c9:2c:ab:f2:ef:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=950deb6c933576dbf823f8ee7369feec4fb86d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1e:bd:58:0f:d7:74:5a:0a:b7:4d:9d:2b:8f: cf:24:12:18:78:c3:d1:31:01:ad:1f:f4:95:54:63: ff:dc:6f:25:f5:81:b2:6e:bf:7e:4a:0b:04:ee:61: 68:6c:4f:e9:72:83:4c:7c:ae:68:3b:91:a1:8c:61: 49:5f:cd:59:ce:78:7a:5a:85:36:79:db:8f:76:ee: 7c:3e:54:de:4e:72:1b:89:94:fa:13:70:d4:d7:c4: 27:6a:f0:e1:bb:0d:0c:b7:d6:c5:a4:61:f6:1c:fd: a8:f7:5f:48:c9:e5:c2:f4:80:5b:25:60:c8:a3:c2: 84:c7:2b:4b:af:ee:7b:22:d9:b4:46:5c:51:dd:35: 44:2e:e9:45:d4:04:b0:53:4d:7b:7a:76:ec:3c:6e: 1d:f4:55:f2:d1:ce:54:5e:2d:73:76:3c:04:fe:e3: 77:7d:06:b0:d8:19:88:65:7b:cb:12:82:27:2c:c9: fa:20:da:cc:73:a3:3b:ef:55:40:cf:b3:7c:cd:14: cf:1e:b9:9f:51:39:04:e0:d5:db:3e:fb:fd:4f:a5: 50:8a:3b:a8:b4:a4:62:c1:18:a9:6b:28:96:89:a3: 10:5e:2a:1b:40:72:08:b8:a3:88:f1:e0:a9:e6:87: 7a:d1:55:a5:b0:5b:b2:50:50:14:1b:28:30:74:71: 6a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:0D:EB:6C:93:35:76:DB:F8:23:F8:EE:73:69:FE:EC:4F:B8:6D:41 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/lQ3rbJM1dtv4I_juc2n-7E-4bUE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1ea0::/44 Signature Algorithm: sha256WithRSAEncryption 52:90:1f:66:ee:90:d0:b6:be:39:8b:9f:59:b0:6d:1d:81:e0: b4:eb:74:cd:37:58:61:e1:35:fe:43:b1:ad:d8:72:f6:63:d2: e0:39:33:8d:3c:3a:ca:33:70:f0:a5:ee:0b:4e:43:09:57:43: 75:7a:b8:07:9c:bf:51:31:bc:23:83:7d:6a:64:97:ce:aa:48: bc:d7:c8:40:f8:24:be:a6:a0:6a:2c:3f:ea:1b:58:9e:59:53: 3e:8c:7a:e8:65:6d:23:24:8d:68:89:75:aa:33:36:dc:6b:00: 3d:97:0c:58:e1:0f:96:46:68:b9:c6:20:65:7a:5f:ca:77:8e: b9:49:6c:af:e3:d4:4e:9c:8e:36:0e:2d:d3:cb:5c:6c:70:a0: 8f:d0:65:97:50:81:d3:88:f0:28:0a:71:c9:07:e8:83:44:b4: 7e:7b:f8:85:f4:54:3c:cf:61:f4:a1:d4:3c:9f:d6:34:2b:aa: a1:e5:71:fd:ac:78:c8:d4:88:9b:c7:3e:38:f4:c5:3e:72:9f: 6e:93:1b:aa:2b:32:b6:18:f1:30:5e:3b:3a:13:7c:2c:d1:b3: 08:4c:df:51:21:b4:c4:3b:b1:c0:d4:d5:a8:f8:25:c6:61:d2: ef:51:d3:bf:86:d2:90:cd:45:6d:7f:44:46:86:75:b0:98:a8: a7:f5:e5:ba -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XOtxtLlMrWlMySyr8u8fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTBkZWI2YzkzMzU3NmRiZjgyM2Y4ZWU3MzY5ZmVlYzRmYjg2ZDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2h69WA/XdFoKt02dK4/PJBIYeMPR MQGtH/SVVGP/3G8l9YGybr9+SgsE7mFobE/pcoNMfK5oO5GhjGFJX81Zznh6WoU2 eduPdu58PlTeTnIbiZT6E3DU18QnavDhuw0Mt9bFpGH2HP2o919IyeXC9IBbJWDI o8KExytLr+57Itm0RlxR3TVELulF1ASwU017enbsPG4d9FXy0c5UXi1zdjwE/uN3 fQaw2BmIZXvLEoInLMn6INrMc6M771VAz7N8zRTPHrmfUTkE4NXbPvv9T6VQijuo tKRiwRipayiWiaMQXiobQHIIuKOI8eCp5od60VWlsFuyUFAUGygwdHFqUwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJUN62yTNXbb+CP47nNp/uxPuG1BMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvbFEzcmJKTTFkdHY0SV9qdWMybi03RS00YlVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBx6g MA0GCSqGSIb3DQEBCwUAA4IBAQBSkB9m7pDQtr45i59ZsG0dgeC063TNN1hh4TX+ Q7Gt2HL2Y9LgOTONPDrKM3Dwpe4LTkMJV0N1ergHnL9RMbwjg31qZJfOqki818hA +CS+pqBqLD/qG1ieWVM+jHroZW0jJI1oiXWqMzbcawA9lwxY4Q+WRmi5xiBlel/K d465SWyv49ROnI42Di3Ty1xscKCP0GWXUIHTiPAoCnHJB+iDRLR+e/iF9FQ8z2H0 odQ8n9Y0K6qh5XH9rHjI1Iibxz449MU+cp9ukxuqKzK2GPEwXjs6E3ws0bMITN9R IbTEO7HA1NWo+CXGYdLvUdO/htKQzUVtf0RGhnWwmKin9eW6 -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:10 2026 by rpki-client