This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/r1R_LJFReH7pVF4sLFSX_Z-Nns8.roa File: r1R_LJFReH7pVF4sLFSX_Z-Nns8.roa (raw, json) Hash identifier: IiOURfiJjx4pigZmv3IPNQVIOkgCW5UJXZJWeDgXXrA= Subject key identifier: AF:54:7F:2C:91:51:78:7E:E9:54:5E:2C:2C:54:97:FD:9F:8D:9E:CF Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019BD38535499F67AEC6EFDD8DE130931285 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/r1R_LJFReH7pVF4sLFSX_Z-Nns8.roa Signing time: Sun 18 Jan 2026 23:51:21 +0000 ROA not before: Sun 18 Jan 2026 23:51:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134666 IP address blocks: 2a0e:b107:30f::/48 maxlen: 48 2a10:2f01:3df::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 23:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d3:85:35:49:9f:67:ae:c6:ef:dd:8d:e1:30:93:12:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 18 23:51:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af547f2c9151787ee9545e2c2c5497fd9f8d9ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:93:4c:ee:c8:18:d5:83:a0:f8:97:fa:49:00: 1b:9c:f5:07:b6:a6:c6:ec:65:e7:eb:ba:2c:ab:34: 13:c6:1a:7d:4e:9e:72:aa:bc:67:02:86:02:4b:44: 5b:2f:b9:4e:a1:46:f9:da:da:f2:de:34:b0:a4:42: b8:16:ff:75:36:db:83:f0:d4:5b:6b:96:b2:de:11: 38:79:68:8c:07:8f:00:7d:f5:48:63:e8:85:5f:b1: 60:13:eb:e9:9c:f4:dc:90:30:28:ac:e8:0f:1c:14: 50:23:9b:be:97:fc:b9:90:97:c7:e6:ae:37:9b:dc: 89:0a:6f:a8:34:e9:3f:f1:93:0f:41:cb:13:51:d7: 7b:25:37:91:d2:3a:13:04:b4:be:77:a1:a3:ac:09: bd:df:00:58:e9:82:ef:49:11:94:3f:01:fb:8f:1a: 68:20:da:6c:43:59:c5:7e:91:f8:a5:23:90:e1:30: c2:d8:c2:c5:0d:54:3d:af:92:1f:93:a8:48:34:9f: 2b:5c:ec:23:d9:8e:cb:e3:b4:b6:82:5e:23:1c:95: 48:05:a9:81:7a:ca:b7:f2:47:b9:de:d0:10:b4:d3: 03:95:7b:a6:92:3c:bb:9d:78:b8:d1:54:28:e1:13: b8:4b:88:71:9b:0f:69:91:b3:64:c5:9f:02:e2:59: ba:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:54:7F:2C:91:51:78:7E:E9:54:5E:2C:2C:54:97:FD:9F:8D:9E:CF X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/r1R_LJFReH7pVF4sLFSX_Z-Nns8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:30f::/48 2a10:2f01:3df::/48 Signature Algorithm: sha256WithRSAEncryption bd:a2:35:d1:74:85:7d:e6:86:c9:6b:2e:26:d8:24:11:19:d6: af:d5:f0:a5:71:c2:db:0f:3e:7b:58:7a:f1:0d:d1:70:66:fb: 96:bd:f2:31:2d:cc:94:43:92:e4:bb:b9:98:7b:0c:29:2d:76: 61:0a:ab:55:cc:7c:7d:5c:75:c2:be:a0:f5:34:69:f0:39:b2: ed:51:ec:d6:e1:3a:cc:e6:ee:d2:2d:9c:bb:b0:14:41:04:a2: 7c:24:1d:1d:0e:6c:54:0d:ad:6e:2d:4c:23:cf:71:4d:4b:00: a8:e0:b8:a8:3b:7f:21:be:c6:38:73:49:72:69:d0:53:8c:2d: ee:80:52:d4:36:3a:00:e3:cd:03:0a:11:34:6d:04:aa:a8:b8: 6a:3f:90:23:3b:f4:d9:31:b5:f0:4b:30:02:0c:17:28:94:b1: 25:5d:56:fb:1a:28:40:5b:c9:1b:9f:5d:c2:0c:7d:f4:44:73: 57:e7:6d:8a:f1:da:25:ff:74:c4:9f:59:af:8a:b0:bd:b5:eb: ec:8e:35:98:16:c2:df:e8:98:ae:80:63:d7:fb:ba:f5:6c:01: 57:42:cd:d4:a1:bc:d1:61:b4:5f:cf:2f:24:d4:94:0b:f5:12: 56:b8:7e:b6:db:56:97:4d:0a:5c:88:de:ec:76:f6:fb:ac:8d: 26:db:a0:ca -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZvThTVJn2euxu/djeEwkxKFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTE4MjM1MTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjU0N2YyYzkxNTE3ODdlZTk1NDVlMmMyYzU0OTdmZDlmOGQ5ZWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8pNM7sgY1YOg+Jf6SQAbnPUHtqbG 7GXn67osqzQTxhp9Tp5yqrxnAoYCS0RbL7lOoUb52try3jSwpEK4Fv91NtuD8NRb a5ay3hE4eWiMB48AffVIY+iFX7FgE+vpnPTckDAorOgPHBRQI5u+l/y5kJfH5q43 m9yJCm+oNOk/8ZMPQcsTUdd7JTeR0joTBLS+d6GjrAm93wBY6YLvSRGUPwH7jxpo INpsQ1nFfpH4pSOQ4TDC2MLFDVQ9r5Ifk6hINJ8rXOwj2Y7L47S2gl4jHJVIBamB esq38ke53tAQtNMDlXumkjy7nXi40VQo4RO4S4hxmw9pkbNkxZ8C4lm6EQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFK9UfyyRUXh+6VReLCxUl/2fjZ7PMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvcjFSX0xKRlJlSDdwVkY0c0xGU1hfWi1ObnM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg6xBwMP AwcAKhAvAQPfMA0GCSqGSIb3DQEBCwUAA4IBAQC9ojXRdIV95obJay4m2CQRGdav 1fClccLbDz57WHrxDdFwZvuWvfIxLcyUQ5Lku7mYewwpLXZhCqtVzHx9XHXCvqD1 NGnwObLtUezW4TrM5u7SLZy7sBRBBKJ8JB0dDmxUDa1uLUwjz3FNSwCo4LioO38h vsY4c0lyadBTjC3ugFLUNjoA480DChE0bQSqqLhqP5AjO/TZMbXwSzACDBcolLEl XVb7GihAW8kbn13CDH30RHNX522K8dol/3TEn1mvirC9tevsjjWYFsLf6JiugGPX +7r1bAFXQs3UobzRYbRfzy8k1JQL9RJWuH6221aXTQpciN7sdvb7rI0m26DK -----END CERTIFICATE-----Generated at Thu Jan 22 04:05:30 2026 by rpki-client