This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/q6M8yFTiLJi1XKI8uevlEFs1CqA.roa File: q6M8yFTiLJi1XKI8uevlEFs1CqA.roa (raw, json) Hash identifier: nXsU3vDOsBMCZ8xtKLDK5U4+5aWXeOzGIMbKY4quuuE= Subject key identifier: AB:A3:3C:C8:54:E2:2C:98:B5:5C:A2:3C:B9:EB:E5:10:5B:35:0A:A0 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CA593724E18F878C3E67D16684CD0 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/q6M8yFTiLJi1XKI8uevlEFs1CqA.roa Signing time: Fri 02 Jan 2026 06:19:42 +0000 ROA not before: Fri 02 Jan 2026 06:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 2a0e:97c0:300::/44 maxlen: 48 2a0e:97c0:650::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:a5:93:72:4e:18:f8:78:c3:e6:7d:16:68:4c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aba33cc854e22c98b55ca23cb9ebe5105b350aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:14:32:d1:e3:b9:ad:bf:2c:a2:7b:b9:a3:0c: c7:61:67:f1:cb:e4:bf:77:8d:77:63:38:89:e1:21: 24:b2:81:d4:18:af:27:2d:ea:c4:c8:e4:64:98:f7: f2:17:91:fe:b6:54:b6:d5:76:12:01:85:9b:e1:97: 06:85:7b:fd:c5:b9:05:1e:90:3d:bc:bb:4c:2e:41: 2e:37:e5:0e:a6:57:ca:0f:76:44:62:f2:b5:de:42: 87:29:5d:e7:52:c9:83:c1:4b:bd:a8:dc:50:1e:74: 73:2d:9d:f3:f3:26:d2:e9:3e:5c:64:c8:4d:1b:24: ed:9c:bc:6e:07:e4:4c:a0:84:e8:43:3c:1b:54:30: 74:b9:65:28:14:8e:75:e2:e9:f1:4f:42:89:49:0e: 90:84:74:a7:e4:5e:70:4b:fd:cb:59:85:16:a3:61: af:3f:71:f0:62:e4:05:ca:07:50:b8:08:8a:91:2b: 48:df:75:39:9b:d3:83:ed:41:58:41:59:e7:d1:03: 9b:8a:b4:63:f4:c5:4b:bd:42:fc:17:64:d8:84:75: 1b:ee:c9:5b:1f:63:40:03:fd:d7:ab:16:e9:d4:6e: 5c:36:ad:eb:5e:38:24:ab:fd:5e:18:fd:aa:11:84: c2:8f:c5:25:ee:52:ca:a7:bd:60:66:fb:ae:e6:6b: 64:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A3:3C:C8:54:E2:2C:98:B5:5C:A2:3C:B9:EB:E5:10:5B:35:0A:A0 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/q6M8yFTiLJi1XKI8uevlEFs1CqA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:300::/44 2a0e:97c0:650::/44 Signature Algorithm: sha256WithRSAEncryption 96:c1:d0:74:6b:b5:4b:8e:0b:dd:5e:ce:4e:bb:fb:f4:26:00: 2a:49:68:25:be:31:27:bc:ce:65:70:e2:76:a6:37:6b:86:6c: d3:18:1e:b9:c6:e6:9b:1d:74:23:e4:d8:be:01:0a:80:4d:64: b8:3b:c7:6c:88:c5:d8:07:53:64:c3:e4:a7:46:42:67:02:df: b5:fc:87:2b:77:28:42:bc:57:c9:05:a5:9e:ae:7b:16:94:57: 73:b4:7b:06:e7:30:19:86:b0:c9:ce:f7:74:49:4d:f9:fa:d7: 29:6a:eb:10:96:99:11:c0:f8:48:d9:eb:24:a8:c8:9f:c2:56: 55:54:5d:e0:b5:96:76:38:f3:99:f4:7f:a8:1c:7c:d1:32:2d: 7b:d2:f3:3f:16:be:3e:3a:aa:82:c6:85:59:30:96:ab:f4:c8: 46:bb:58:5f:b4:0d:5e:48:cd:63:15:aa:84:18:82:5c:6a:1f: a2:e5:d1:7d:f0:2d:ff:11:29:26:bb:27:1f:9f:59:e4:15:cd: 09:e6:4e:bc:dc:c3:75:f5:10:be:c1:30:df:52:21:b4:9a:78: 29:43:fd:f8:29:86:7d:16:ba:a6:4f:a4:01:a8:83:a2:73:3e: ef:54:15:41:0a:16:4c:cd:b5:eb:28:03:0e:72:ec:5a:9a:c2: dd:01:6b:f1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XKWTck4Y+HjD5n0WaEzQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmEzM2NjODU0ZTIyYzk4YjU1Y2EyM2NiOWViZTUxMDViMzUwYWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RQy0eO5rb8sonu5owzHYWfxy+S/ d413YziJ4SEksoHUGK8nLerEyORkmPfyF5H+tlS21XYSAYWb4ZcGhXv9xbkFHpA9 vLtMLkEuN+UOplfKD3ZEYvK13kKHKV3nUsmDwUu9qNxQHnRzLZ3z8ybS6T5cZMhN GyTtnLxuB+RMoIToQzwbVDB0uWUoFI514unxT0KJSQ6QhHSn5F5wS/3LWYUWo2Gv P3HwYuQFygdQuAiKkStI33U5m9OD7UFYQVnn0QObirRj9MVLvUL8F2TYhHUb7slb H2NAA/3Xqxbp1G5cNq3rXjgkq/1eGP2qEYTCj8Ul7lLKp71gZvuu5mtk4QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKujPMhU4iyYtVyiPLnr5RBbNQqgMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvcTZNOHlGVGlMSmkxWEtJOHVldmxFRnMxQ3FBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg6XwAMA AwcEKg6XwAZQMA0GCSqGSIb3DQEBCwUAA4IBAQCWwdB0a7VLjgvdXs5Ou/v0JgAq SWglvjEnvM5lcOJ2pjdrhmzTGB65xuabHXQj5Ni+AQqATWS4O8dsiMXYB1Nkw+Sn RkJnAt+1/IcrdyhCvFfJBaWernsWlFdztHsG5zAZhrDJzvd0SU35+tcpausQlpkR wPhI2eskqMifwlZVVF3gtZZ2OPOZ9H+oHHzRMi170vM/Fr4+OqqCxoVZMJar9MhG u1hftA1eSM1jFaqEGIJcah+i5dF98C3/ESkmuycfn1nkFc0J5k683MN19RC+wTDf UiG0mngpQ/34KYZ9FrqmT6QBqIOicz7vVBVBChZMzbXrKAMOcuxamsLdAWvx -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:47 2026 by rpki-client