This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nATXrxXr01Lw3J_fIoLEKNVaBCI.roa File: nATXrxXr01Lw3J_fIoLEKNVaBCI.roa (raw, json) Hash identifier: Tijo1oOvxehapvIZSc2mp1xoif+0w+iCD6biDbfrleE= Subject key identifier: 9C:04:D7:AF:15:EB:D3:52:F0:DC:9F:DF:22:82:C4:28:D5:5A:04:22 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D08D0762CDA8A1E8A8447DDD19A84 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nATXrxXr01Lw3J_fIoLEKNVaBCI.roa Signing time: Fri 02 Jan 2026 06:20:07 +0000 ROA not before: Fri 02 Jan 2026 06:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207466 IP address blocks: 2a0e:b107:770::/44 maxlen: 48 2a0e:b107:771::/48 maxlen: 48 2a0e:b107:772::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:08:d0:76:2c:da:8a:1e:8a:84:47:dd:d1:9a:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c04d7af15ebd352f0dc9fdf2282c428d55a0422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:23:08:d0:fe:7a:f4:de:bb:c8:e1:95:27:a3: 4a:3d:cf:a7:e4:5e:aa:e5:70:e5:bf:f0:fd:4a:d9: db:ed:d4:29:ff:3c:46:ad:24:6f:c1:8e:fc:7e:1e: 4e:95:d5:32:f7:10:4f:86:74:86:c7:0d:3d:ad:ad: 7a:99:8b:f1:c5:9a:d5:c2:26:d0:e2:e8:98:48:9c: 20:11:ce:ba:b6:d6:82:a1:84:08:32:8e:2e:5d:a9: 4e:68:25:03:36:a0:ef:ba:1b:ac:3b:f4:0d:a2:ec: 49:eb:c8:60:76:8e:37:a1:26:24:ff:31:ca:a7:dc: 4b:dc:6e:8b:fe:11:58:c9:8c:30:fa:1d:cc:36:29: f9:bd:d3:c3:13:4f:f2:d0:48:64:fa:4d:32:46:9d: e7:3b:74:e6:08:80:03:49:5e:07:ae:54:78:db:e4: bf:fc:78:89:54:bd:b6:e2:37:2c:4c:76:5a:3e:42: f0:1c:42:fb:ba:b9:db:57:d5:02:76:2f:fc:e5:5c: 80:53:53:05:54:cb:3c:4c:c5:e6:0c:5a:51:a2:40: 0f:00:3c:0b:25:e5:bd:2d:bb:c5:4c:49:fe:67:b8: 5c:dc:ca:da:64:f4:a5:d1:be:80:0b:a8:e8:d4:ab: a4:1c:46:b0:5f:3f:69:e5:c3:9f:7a:58:17:de:66: 59:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:04:D7:AF:15:EB:D3:52:F0:DC:9F:DF:22:82:C4:28:D5:5A:04:22 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nATXrxXr01Lw3J_fIoLEKNVaBCI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:770::/44 Signature Algorithm: sha256WithRSAEncryption 0e:a1:36:3e:67:b9:4f:f5:42:29:e5:f1:60:85:b2:18:2f:5f: e5:e2:f1:99:5a:50:de:f7:73:15:a4:71:57:b1:0c:9a:a1:5e: 8a:79:65:85:34:0a:10:20:e0:81:84:9c:c4:91:33:38:ce:75: f6:c5:2a:e9:c7:8b:77:9a:60:7c:80:6e:91:38:7d:b6:d1:73: b8:c2:a7:66:c0:45:8b:ad:70:7b:db:d3:4a:b6:16:77:57:d4: 6b:86:16:ef:3e:90:d4:ed:f4:b5:e2:2d:72:c1:b8:ec:e7:1e: b1:2a:5e:2c:c5:78:59:da:80:21:cc:92:41:81:ca:c8:af:3c: 64:a1:a8:9a:b3:28:7a:9d:81:a4:1d:c3:d6:46:0d:7f:44:c9: 67:84:47:1e:59:db:2e:73:b5:7d:ee:bd:86:39:19:8c:4b:0a: f5:73:ad:b0:a5:12:fd:7c:96:33:e4:2e:71:0d:46:f6:e7:3e: c1:c2:db:89:29:50:76:b0:7a:fd:8d:20:8a:5b:4c:67:4e:a8: 98:69:fa:0c:e0:14:2a:38:75:2d:92:6d:1e:e9:fd:1c:9f:a0: 64:83:87:e0:36:f2:55:04:48:9c:06:2f:13:03:c3:ac:26:c7: 8b:56:bd:a7:18:ee:51:5e:1c:3a:fd:04:4e:62:f0:0c:ad:fe: 9c:9c:49:3c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XQjQdizaih6KhEfd0ZqEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzA0ZDdhZjE1ZWJkMzUyZjBkYzlmZGYyMjgyYzQyOGQ1NWEwNDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyMI0P569N67yOGVJ6NKPc+n5F6q 5XDlv/D9Stnb7dQp/zxGrSRvwY78fh5OldUy9xBPhnSGxw09ra16mYvxxZrVwibQ 4uiYSJwgEc66ttaCoYQIMo4uXalOaCUDNqDvuhusO/QNouxJ68hgdo43oSYk/zHK p9xL3G6L/hFYyYww+h3MNin5vdPDE0/y0Ehk+k0yRp3nO3TmCIADSV4HrlR42+S/ /HiJVL224jcsTHZaPkLwHEL7urnbV9UCdi/85VyAU1MFVMs8TMXmDFpRokAPADwL JeW9LbvFTEn+Z7hc3MraZPSl0b6AC6jo1KukHEawXz9p5cOfelgX3mZZYQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJwE168V69NS8Nyf3yKCxCjVWgQiMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvbkFUWHJ4WHIwMUx3M0pfZklvTEVLTlZhQkNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBwdw MA0GCSqGSIb3DQEBCwUAA4IBAQAOoTY+Z7lP9UIp5fFghbIYL1/l4vGZWlDe93MV pHFXsQyaoV6KeWWFNAoQIOCBhJzEkTM4znX2xSrpx4t3mmB8gG6ROH220XO4wqdm wEWLrXB729NKthZ3V9RrhhbvPpDU7fS14i1ywbjs5x6xKl4sxXhZ2oAhzJJBgcrI rzxkoaiasyh6nYGkHcPWRg1/RMlnhEceWdsuc7V97r2GORmMSwr1c62wpRL9fJYz 5C5xDUb25z7BwtuJKVB2sHr9jSCKW0xnTqiYafoM4BQqOHUtkm0e6f0cn6Bkg4fg NvJVBEicBi8TA8OsJseLVr2nGO5RXhw6/QROYvAMrf6cnEk8 -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:23 2026 by rpki-client