This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/q4kWYgey5jSc8nKkcJePkmfoS0Y.roa File: q4kWYgey5jSc8nKkcJePkmfoS0Y.roa (raw, json) Hash identifier: mtvk7h/rYTyfsR+6wGv/vgCk9E1pxMsQKbX5VRByiXo= Subject key identifier: AB:89:16:62:07:B2:E6:34:9C:F2:72:A4:70:97:8F:92:67:E8:4B:46 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CAFADBE723B05A07E33FD3EFC43DC Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/q4kWYgey5jSc8nKkcJePkmfoS0Y.roa Signing time: Fri 02 Jan 2026 06:19:44 +0000 ROA not before: Fri 02 Jan 2026 06:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44592 IP address blocks: 2a06:de00:100::/44 maxlen: 48 2a0e:97c0:3e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 17:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:af:ad:be:72:3b:05:a0:7e:33:fd:3e:fc:43:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab89166207b2e6349cf272a470978f9267e84b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:24:fc:12:27:04:a3:61:0b:26:08:55:33:e7: a6:04:08:93:c1:2e:76:4a:71:28:a2:ab:78:86:a4: d2:36:bf:8b:bb:df:73:f9:7b:f2:f7:5f:00:34:20: ed:8f:8c:c4:83:98:70:d7:8c:cd:71:99:e2:89:9c: bd:f1:88:3d:fc:d0:3a:ae:f5:17:7c:43:f2:07:3e: 17:f3:d9:c3:c1:30:88:b8:fa:c6:cb:f2:bc:b4:bd: a8:02:29:98:84:2a:f4:71:2d:33:6a:5d:e7:75:bc: 43:45:14:5e:21:d3:75:5b:83:57:06:81:5b:b3:b6: 4b:1b:df:7a:86:7d:04:47:a0:ff:ba:af:ee:63:b2: 74:e9:a5:1a:d6:af:b7:d8:98:38:17:ca:c6:fa:3d: 78:1c:4a:ea:7d:e6:30:3e:fa:8f:dc:22:0d:74:d5: 10:19:0c:e0:37:68:57:97:36:95:db:61:9d:39:53: 68:a0:3b:b0:af:c7:0e:bb:cd:bc:48:53:e6:c4:07: e8:f5:0e:68:37:60:d4:f5:c2:17:b5:94:2c:d6:f2: 4a:57:c4:12:47:85:b4:02:99:5c:6f:82:71:ef:9e: cf:23:df:eb:7c:2d:6c:ed:1d:e3:91:b7:29:c5:c9: 59:98:e4:8d:fe:c1:88:54:45:4a:4c:58:87:3c:7c: 2e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:89:16:62:07:B2:E6:34:9C:F2:72:A4:70:97:8F:92:67:E8:4B:46 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/q4kWYgey5jSc8nKkcJePkmfoS0Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:de00:100::/44 2a0e:97c0:3e0::/48 Signature Algorithm: sha256WithRSAEncryption 91:ec:78:7e:4e:0c:01:23:36:59:b8:ac:2b:df:02:9d:e0:e1: c8:77:15:23:84:33:b3:dd:b1:cd:15:dd:5b:f3:26:84:76:91: 7d:32:f5:8e:67:32:69:5e:ef:e2:b4:76:28:bc:ea:53:47:44: 4f:96:cc:86:34:8a:2b:2d:4a:28:36:dc:87:85:32:33:81:91: 75:dc:91:13:99:ef:3b:f4:88:ce:76:99:c2:d3:17:c5:56:03: 5b:b3:d1:24:4f:c2:96:82:7d:cc:3f:fd:d8:83:fd:9f:b4:db: 72:be:0e:a9:ac:ba:cd:b4:3c:68:68:a1:76:40:16:51:a7:26: cf:d4:11:c8:fc:a5:34:77:a3:77:96:6f:66:ac:5d:b1:cc:bc: f9:ca:ff:96:bd:4d:69:4f:16:4d:3d:b6:5a:19:86:41:09:87: e6:2f:05:02:7c:7c:b2:f1:f2:1b:aa:3d:27:be:41:73:c9:e4: c8:d3:a4:02:8b:73:0e:e5:1b:5d:68:fa:22:54:c0:e1:cc:55: 85:39:7b:77:cf:e3:5d:3e:d1:be:02:38:91:0e:7a:c0:62:81: b3:ba:ea:08:56:21:73:9f:94:fa:61:d0:2d:7a:fe:3e:d2:5c: 4a:8d:ae:2c:9e:ec:04:66:96:5b:0c:a6:a3:67:78:94:25:d6: 6c:f2:03:90 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XK+tvnI7BaB+M/0+/EPcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjg5MTY2MjA3YjJlNjM0OWNmMjcyYTQ3MDk3OGY5MjY3ZTg0YjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCT8EicEo2ELJghVM+emBAiTwS52 SnEooqt4hqTSNr+Lu99z+Xvy918ANCDtj4zEg5hw14zNcZniiZy98Yg9/NA6rvUX fEPyBz4X89nDwTCIuPrGy/K8tL2oAimYhCr0cS0zal3ndbxDRRReIdN1W4NXBoFb s7ZLG996hn0ER6D/uq/uY7J06aUa1q+32Jg4F8rG+j14HErqfeYwPvqP3CINdNUQ GQzgN2hXlzaV22GdOVNooDuwr8cOu828SFPmxAfo9Q5oN2DU9cIXtZQs1vJKV8QS R4W0Aplcb4Jx757PI9/rfC1s7R3jkbcpxclZmOSN/sGIVEVKTFiHPHwubQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKuJFmIHsuY0nPJypHCXj5Jn6EtGMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvcTRrV1lnZXk1alNjOG5La2NKZVBrbWZvUzBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgbeAAEA AwcAKg6XwAPgMA0GCSqGSIb3DQEBCwUAA4IBAQCR7Hh+TgwBIzZZuKwr3wKd4OHI dxUjhDOz3bHNFd1b8yaEdpF9MvWOZzJpXu/itHYovOpTR0RPlsyGNIorLUooNtyH hTIzgZF13JETme879IjOdpnC0xfFVgNbs9EkT8KWgn3MP/3Yg/2ftNtyvg6prLrN tDxoaKF2QBZRpybP1BHI/KU0d6N3lm9mrF2xzLz5yv+WvU1pTxZNPbZaGYZBCYfm LwUCfHyy8fIbqj0nvkFzyeTI06QCi3MO5RtdaPoiVMDhzFWFOXt3z+NdPtG+AjiR DnrAYoGzuuoIViFzn5T6YdAtev4+0lxKja4snuwEZpZbDKajZ3iUJdZs8gOQ -----END CERTIFICATE-----Generated at Sat Jan 10 02:19:25 2026 by rpki-client