This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qO8UZ2T2T-hrZcVlJ4U54SK8g9M.roa File: qO8UZ2T2T-hrZcVlJ4U54SK8g9M.roa (raw, json) Hash identifier: 1b/RP1ciCm4nwT2Okney6UaQNKAbHY43/iRzZXE1I5w= Subject key identifier: A8:EF:14:67:64:F6:4F:E8:6B:65:C5:65:27:85:39:E1:22:BC:83:D3 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CB92FE2E9581E9DCDDE84CE29F76B Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qO8UZ2T2T-hrZcVlJ4U54SK8g9M.roa Signing time: Fri 02 Jan 2026 06:19:47 +0000 ROA not before: Fri 02 Jan 2026 06:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52177 IP address blocks: 2a10:2f00:136::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b9:2f:e2:e9:58:1e:9d:cd:de:84:ce:29:f7:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8ef146764f64fe86b65c565278539e122bc83d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7a:3c:25:70:c0:cf:33:0c:4b:df:9b:81:f3: d2:07:66:b7:17:ec:8b:21:27:ef:c2:4b:63:f6:e5: 4b:94:91:92:8f:e0:dc:2f:ae:2f:53:d9:b0:7a:8a: 94:81:3a:f5:19:2d:3e:d8:ac:0a:58:04:06:6d:3d: db:fd:65:68:0d:29:48:4f:1f:d5:a5:43:dc:f1:fe: 60:de:7d:7a:45:45:5f:00:76:7f:2d:8d:06:81:96: 37:89:dd:1c:fb:9e:24:32:9b:d6:44:cf:b2:87:b2: 32:15:2e:13:30:c8:20:7a:25:81:c2:d5:54:da:b9: b5:5f:36:16:12:cf:44:10:9f:bd:f8:13:40:a6:96: c9:68:f9:e0:3d:11:05:4d:db:d0:ec:7e:3d:b0:56: 4c:62:51:65:06:90:bf:27:f1:ac:85:5e:b7:d3:30: 88:8f:07:df:10:96:b5:5d:f6:d3:49:a4:fa:8b:d3: 00:48:6b:95:c5:fd:e0:0e:ae:ad:9f:58:e3:cc:b2: ab:64:f3:ea:3e:6a:b4:d2:9a:1c:46:64:06:e2:94: 8c:b9:7a:b8:22:ad:96:99:4e:f1:46:be:b0:55:f1: 2e:a3:bb:b2:2c:5a:22:4c:10:fc:aa:ae:08:35:92: d1:fa:a9:e9:69:e0:5a:e7:a6:56:9a:e0:5a:50:4f: c7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:EF:14:67:64:F6:4F:E8:6B:65:C5:65:27:85:39:E1:22:BC:83:D3 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qO8UZ2T2T-hrZcVlJ4U54SK8g9M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:2f00:136::/48 Signature Algorithm: sha256WithRSAEncryption 71:e4:42:f1:d9:30:04:dd:86:8d:52:64:80:e5:6e:80:c1:32: 55:a4:0e:90:df:ff:af:59:ee:e1:41:7a:c1:35:dd:3e:7f:08: fc:30:c3:54:5a:11:fe:a1:ed:78:53:a7:31:e3:f0:98:64:81: de:02:c7:3c:7e:20:c0:b9:7a:95:3b:db:98:fb:ed:62:1f:0f: 24:29:ef:53:7f:1c:c2:eb:99:8c:96:d2:c3:bb:26:fe:da:3d: 0c:74:6c:3f:31:cc:d0:78:47:59:58:3c:89:a5:26:2a:36:59: 0b:3f:ee:eb:7b:6c:7b:01:f9:2e:4f:67:6a:39:e4:51:18:27: e6:63:2a:1f:42:a9:c4:df:31:4a:18:ee:22:bb:29:b5:20:81: 39:f6:fe:04:7e:f1:c1:50:7b:40:16:2a:e6:10:af:20:c0:c9: 52:0f:7f:aa:4c:15:7b:03:b2:31:f5:a0:16:e0:9a:87:b0:10: 86:6d:ae:a6:e0:81:6f:e0:07:b2:f3:57:39:05:6a:2c:f6:40: 03:bc:d6:75:81:74:ae:93:b5:14:b2:16:f3:7e:2c:84:b4:ce: 53:09:37:67:98:eb:29:83:cc:31:e4:77:5f:11:6e:25:d5:3c: 4f:89:0b:f0:27:2d:0d:a0:cb:63:26:2c:b9:7b:34:c6:82:26: e2:ec:0f:87 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XLkv4ulYHp3N3oTOKfdrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGVmMTQ2NzY0ZjY0ZmU4NmI2NWM1NjUyNzg1MzllMTIyYmM4M2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ho8JXDAzzMMS9+bgfPSB2a3F+yL ISfvwktj9uVLlJGSj+DcL64vU9mweoqUgTr1GS0+2KwKWAQGbT3b/WVoDSlITx/V pUPc8f5g3n16RUVfAHZ/LY0GgZY3id0c+54kMpvWRM+yh7IyFS4TMMggeiWBwtVU 2rm1XzYWEs9EEJ+9+BNAppbJaPngPREFTdvQ7H49sFZMYlFlBpC/J/GshV630zCI jwffEJa1XfbTSaT6i9MASGuVxf3gDq6tn1jjzLKrZPPqPmq00pocRmQG4pSMuXq4 Iq2WmU7xRr6wVfEuo7uyLFoiTBD8qq4INZLR+qnpaeBa56ZWmuBaUE/HmwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKjvFGdk9k/oa2XFZSeFOeEivIPTMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvcU84VVoyVDJULWhyWmNWbEo0VTU0U0s4ZzlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAvAAE2 MA0GCSqGSIb3DQEBCwUAA4IBAQBx5ELx2TAE3YaNUmSA5W6AwTJVpA6Q3/+vWe7h QXrBNd0+fwj8MMNUWhH+oe14U6cx4/CYZIHeAsc8fiDAuXqVO9uY++1iHw8kKe9T fxzC65mMltLDuyb+2j0MdGw/MczQeEdZWDyJpSYqNlkLP+7re2x7AfkuT2dqOeRR GCfmYyofQqnE3zFKGO4iuym1IIE59v4EfvHBUHtAFirmEK8gwMlSD3+qTBV7A7Ix 9aAW4JqHsBCGba6m4IFv4Aey81c5BWos9kADvNZ1gXSuk7UUshbzfiyEtM5TCTdn mOspg8wx5HdfEW4l1TxPiQvwJy0NoMtjJiy5ezTGgibi7A+H -----END CERTIFICATE-----Generated at Fri Jan 9 13:11:52 2026 by rpki-client