This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pviEIUm23Ghg9GkWZdWbbjOUpyE.roa File: pviEIUm23Ghg9GkWZdWbbjOUpyE.roa (raw, json) Hash identifier: DX8L+X9CDU8lAGbuRR/mnKOwrItTo6VxRS6ivJfTkGA= Subject key identifier: A6:F8:84:21:49:B6:DC:68:60:F4:69:16:65:D5:9B:6E:33:94:A7:21 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D5215BBC454657FA5541BD6E9D738 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pviEIUm23Ghg9GkWZdWbbjOUpyE.roa Signing time: Fri 02 Jan 2026 06:20:26 +0000 ROA not before: Fri 02 Jan 2026 06:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212508 IP address blocks: 2a0e:b107:dd0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:52:15:bb:c4:54:65:7f:a5:54:1b:d6:e9:d7:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6f8842149b6dc6860f4691665d59b6e3394a721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:65:2c:d5:fa:f8:5f:44:41:92:72:2e:12:83: ee:c0:54:4b:12:f6:cf:eb:b1:f2:51:37:21:3b:2e: b9:b5:3e:48:3f:33:28:50:35:82:21:7e:a7:28:b1: 54:d8:75:10:ac:b1:08:e1:f2:96:26:86:e6:c6:7c: ec:e7:42:9a:45:88:77:72:d9:67:3d:b6:6e:00:9d: 7a:56:65:4e:95:21:e3:9d:c3:d8:ba:67:e0:2e:f4: ca:c0:74:39:ff:c8:eb:83:00:f0:96:65:e7:a7:53: 4a:d8:33:9f:4b:9f:70:f1:b3:1b:cc:c1:e0:a7:b9: ed:99:9b:07:95:01:01:f2:bf:9d:a4:95:9e:29:0b: 6e:c9:65:41:41:49:20:5d:6f:cb:5f:f9:c2:b8:5c: c0:12:69:b4:5d:d5:7f:9c:84:32:4e:b1:c9:37:fe: 71:70:21:f3:c3:69:35:27:16:1a:fe:8b:60:d2:f0: f2:be:34:05:01:83:7c:39:8d:b8:37:59:bb:70:97: b9:ea:54:cf:f4:ea:2b:80:62:85:a8:c8:93:b0:46: 20:49:5b:56:d5:aa:dd:fd:64:46:1c:9b:14:61:ef: d3:de:23:61:0d:68:f6:e1:3a:8a:ef:75:a4:49:f1: 89:8f:eb:50:c0:05:a7:24:02:80:cc:cf:e7:d9:ee: 45:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F8:84:21:49:B6:DC:68:60:F4:69:16:65:D5:9B:6E:33:94:A7:21 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pviEIUm23Ghg9GkWZdWbbjOUpyE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:dd0::/44 Signature Algorithm: sha256WithRSAEncryption 0c:af:52:72:32:2d:ff:40:a2:70:e3:6e:68:dc:57:96:e8:86: 5b:1a:1a:f1:5d:25:11:d8:20:0a:cc:2d:fb:68:58:f4:bd:e5: fb:85:e1:d7:91:48:de:c1:2e:a0:f7:44:ff:0e:02:9d:ba:80: d1:d6:7c:ef:10:88:ce:e9:89:7c:f2:68:0a:f2:0b:8f:65:0d: 14:bc:13:55:4e:c5:b3:23:c7:dd:a5:f1:33:9f:5d:44:ba:2a: 7c:35:bc:c8:e2:13:f7:f9:71:bb:ab:44:2d:d0:c7:80:9a:92: 3e:34:85:47:b1:fb:0f:6c:f5:dc:d4:de:66:8a:d6:93:a0:88: 29:aa:08:68:71:91:f4:6b:d6:64:b9:06:10:6e:7c:4c:59:b3: da:d2:19:6b:05:69:16:52:12:45:d7:45:49:18:57:62:8b:f4: 3e:99:8d:17:fc:a9:a9:1b:88:01:4a:2a:03:ae:71:9d:22:df: b1:b9:4b:29:cb:c5:be:85:cf:e4:7f:8f:48:71:d8:41:b3:2f: 53:7e:f6:c5:3d:79:12:d1:aa:b8:3d:fc:48:53:ab:1e:3d:d6: 8f:01:a8:c5:5c:0b:b3:3f:02:f6:6a:84:db:5f:e4:6e:be:1f: 40:df:ae:de:12:eb:d5:5c:a8:5f:c4:69:b5:d7:61:4c:2f:ec: 46:ba:08:2c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XVIVu8RUZX+lVBvW6dc4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmY4ODQyMTQ5YjZkYzY4NjBmNDY5MTY2NWQ1OWI2ZTMzOTRhNzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWUs1fr4X0RBknIuEoPuwFRLEvbP 67HyUTchOy65tT5IPzMoUDWCIX6nKLFU2HUQrLEI4fKWJobmxnzs50KaRYh3ctln PbZuAJ16VmVOlSHjncPYumfgLvTKwHQ5/8jrgwDwlmXnp1NK2DOfS59w8bMbzMHg p7ntmZsHlQEB8r+dpJWeKQtuyWVBQUkgXW/LX/nCuFzAEmm0XdV/nIQyTrHJN/5x cCHzw2k1JxYa/otg0vDyvjQFAYN8OY24N1m7cJe56lTP9OorgGKFqMiTsEYgSVtW 1ard/WRGHJsUYe/T3iNhDWj24TqK73WkSfGJj+tQwAWnJAKAzM/n2e5FuQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKb4hCFJttxoYPRpFmXVm24zlKchMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvcHZpRUlVbTIzR2hnOUdrV1pkV2Jiak9VcHlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBw3Q MA0GCSqGSIb3DQEBCwUAA4IBAQAMr1JyMi3/QKJw425o3FeW6IZbGhrxXSUR2CAK zC37aFj0veX7heHXkUjewS6g90T/DgKduoDR1nzvEIjO6Yl88mgK8guPZQ0UvBNV TsWzI8fdpfEzn11Euip8NbzI4hP3+XG7q0Qt0MeAmpI+NIVHsfsPbPXc1N5mitaT oIgpqghocZH0a9ZkuQYQbnxMWbPa0hlrBWkWUhJF10VJGFdii/Q+mY0X/KmpG4gB SioDrnGdIt+xuUspy8W+hc/kf49IcdhBsy9TfvbFPXkS0aq4PfxIU6sePdaPAajF XAuzPwL2aoTbX+Ruvh9A367eEuvVXKhfxGm112FML+xGuggs -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:26 2026 by rpki-client