This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pIarnan4psFR3nB7uWIUir4OMxE.roa File: pIarnan4psFR3nB7uWIUir4OMxE.roa (raw, json) Hash identifier: DpQMkJL7z8dW+WpxbNA4GzqiLCJgm34Ovsiid7DF1fU= Subject key identifier: A4:86:AB:9D:A9:F8:A6:C1:51:DE:70:7B:B9:62:14:8A:BE:0E:33:11 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B138571955A2051DE00BDFF24B17B1C4C Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pIarnan4psFR3nB7uWIUir4OMxE.roa Signing time: Fri 12 Dec 2025 17:04:31 +0000 ROA not before: Fri 12 Dec 2025 17:04:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210825 IP address blocks: 2a0e:b107:24f0::/48 maxlen: 48 2a10:ccc0:1330::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:85:71:95:5a:20:51:de:00:bd:ff:24:b1:7b:1c:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Dec 12 17:04:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a486ab9da9f8a6c151de707bb962148abe0e3311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2b:5c:03:92:03:20:4e:1d:ea:24:28:6e:b7: c4:af:6e:7f:34:b2:18:91:eb:e6:04:47:3b:c5:0f: df:0e:5b:c9:70:db:5e:89:86:eb:a1:a5:90:c8:df: b5:19:f0:c7:37:5c:d2:dc:97:18:61:19:54:c1:71: 30:8b:37:bb:90:7f:aa:65:38:5e:fb:80:05:b3:57: 05:5a:e6:a8:d1:e9:40:00:57:d1:1f:5a:64:e6:1b: f0:5f:c8:dd:af:67:29:62:0e:3b:ed:5b:9f:7d:69: a7:12:8e:0f:0b:5b:65:ca:2b:4d:40:d6:f3:c8:24: 62:67:4d:74:42:64:d8:7e:99:63:4a:04:0c:6a:53: 3c:7c:eb:ec:18:cf:2c:97:b0:c2:e7:f4:70:69:dd: ff:48:e6:b9:0c:af:a7:ea:51:05:ff:dd:85:d6:ed: 8b:61:1d:e7:b8:71:db:61:88:9b:ef:73:ab:00:34: a8:ab:d6:a1:3d:2b:76:63:c7:df:48:ab:16:87:ba: be:2a:0b:48:87:81:09:ee:b8:41:b4:ee:9d:1a:49: 1b:ec:a9:dc:b7:ba:a0:69:95:37:38:6d:59:d1:f4: 1c:c8:d6:db:14:db:ca:5f:55:36:b9:f3:5f:dc:65: a0:dc:9c:f0:b8:6f:92:43:48:99:5a:7d:23:71:9e: 53:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:86:AB:9D:A9:F8:A6:C1:51:DE:70:7B:B9:62:14:8A:BE:0E:33:11 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pIarnan4psFR3nB7uWIUir4OMxE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:24f0::/48 2a10:ccc0:1330::/44 Signature Algorithm: sha256WithRSAEncryption 58:1e:c3:c2:50:78:66:d1:fd:85:07:1d:ff:4e:41:43:81:10: 88:5b:e7:6e:e1:cf:a0:8b:36:bb:f0:66:17:66:fd:21:23:f2: 77:71:50:8c:aa:3a:5d:de:0d:66:a6:e3:09:ce:d8:5f:f7:67: 74:1d:22:13:bc:34:a0:49:60:21:6d:0c:ce:37:a3:5a:06:17: 86:9d:b2:30:ea:5f:0a:53:29:fb:d3:66:47:f7:6d:d6:7a:3c: 80:91:8f:a8:88:b1:b1:9e:27:24:1a:c8:93:0d:c6:3d:3b:1f: cd:4c:78:b1:63:c0:8e:b3:3d:98:50:06:7c:71:bb:26:58:63: dd:cf:e1:fc:a3:9a:64:28:f3:55:6a:5a:99:46:35:d5:3d:79: 73:3c:9c:13:d3:b5:dd:0b:f1:80:ab:f5:69:f1:cc:c9:85:aa: fb:57:54:9c:aa:17:aa:15:88:cd:54:20:0c:52:d8:a2:66:08: 19:ee:b9:d0:95:d9:75:08:09:e6:ef:34:b2:fa:23:b7:43:c3: 48:7c:a7:e0:17:ae:3f:02:d6:73:88:a4:15:a2:ce:06:60:31: 77:3f:4a:a1:70:87:9f:c9:01:13:41:bc:15:33:eb:c8:1f:81: 57:00:ef:1e:c9:3a:ed:dc:51:d8:22:8d:b1:b9:c4:c8:2d:8a: db:00:14:19 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZsThXGVWiBR3gC9/ySxexxMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjUxMjEyMTcwNDMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDg2YWI5ZGE5ZjhhNmMxNTFkZTcwN2JiOTYyMTQ4YWJlMGUzMzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0itcA5IDIE4d6iQobrfEr25/NLIY kevmBEc7xQ/fDlvJcNteiYbroaWQyN+1GfDHN1zS3JcYYRlUwXEwize7kH+qZThe +4AFs1cFWuao0elAAFfRH1pk5hvwX8jdr2cpYg477VuffWmnEo4PC1tlyitNQNbz yCRiZ010QmTYfpljSgQMalM8fOvsGM8sl7DC5/Rwad3/SOa5DK+n6lEF/92F1u2L YR3nuHHbYYib73OrADSoq9ahPSt2Y8ffSKsWh7q+KgtIh4EJ7rhBtO6dGkkb7Knc t7qgaZU3OG1Z0fQcyNbbFNvKX1U2ufNf3GWg3JzwuG+SQ0iZWn0jcZ5TRwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKSGq52p+KbBUd5we7liFIq+DjMRMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvcElhcm5hbjRwc0ZSM25CN3VXSVVpcjRPTXhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg6xByTw AwcEKhDMwBMwMA0GCSqGSIb3DQEBCwUAA4IBAQBYHsPCUHhm0f2FBx3/TkFDgRCI W+du4c+giza78GYXZv0hI/J3cVCMqjpd3g1mpuMJzthf92d0HSITvDSgSWAhbQzO N6NaBheGnbIw6l8KUyn702ZH923WejyAkY+oiLGxnickGsiTDcY9Ox/NTHixY8CO sz2YUAZ8cbsmWGPdz+H8o5pkKPNValqZRjXVPXlzPJwT07XdC/GAq/Vp8czJhar7 V1ScqheqFYjNVCAMUtiiZggZ7rnQldl1CAnm7zSy+iO3Q8NIfKfgF64/AtZziKQV os4GYDF3P0qhcIefyQETQbwVM+vIH4FXAO8eyTrt3FHYIo2xucTILYrbABQZ -----END CERTIFICATE-----Generated at Sun Dec 14 05:56:14 2025 by rpki-client