This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rNqyoKsYtjJxIagSM3xxkwE1BEI.roa File: rNqyoKsYtjJxIagSM3xxkwE1BEI.roa (raw, json) Hash identifier: RLH1C4WHd2hu1UVwOpj6i7mvcQCjL6Hz6UE+du+0bmw= Subject key identifier: AC:DA:B2:A0:AB:18:B6:32:71:21:A8:12:33:7C:71:93:01:35:04:42 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CC18F7FD26C3CB6E17E131554C6E4 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rNqyoKsYtjJxIagSM3xxkwE1BEI.roa Signing time: Fri 02 Jan 2026 06:19:49 +0000 ROA not before: Fri 02 Jan 2026 06:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60240 IP address blocks: 2a0e:97c0:610::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:c1:8f:7f:d2:6c:3c:b6:e1:7e:13:15:54:c6:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=acdab2a0ab18b6327121a812337c719301350442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:15:e2:bd:b6:4d:7d:27:0e:39:1e:0a:70:fc: 02:28:df:46:66:7d:84:9c:b8:09:47:29:05:ca:23: 8f:90:48:2b:66:99:53:b1:8f:34:53:ad:b7:9f:e2: 65:c7:3b:f4:cc:f3:36:26:e5:09:32:1c:0d:b2:cb: 26:17:f2:15:f3:34:fe:26:f8:b2:79:33:2e:29:b8: 60:94:70:27:aa:57:90:82:85:14:ee:43:9d:ca:0f: c7:24:94:8d:ce:57:1e:c4:93:e3:49:cd:bd:bd:6b: 38:e8:08:58:f6:08:1a:16:ca:c9:bf:ad:7a:03:cd: 03:f8:4b:af:27:86:ac:b9:e2:64:6a:e9:1b:7d:6c: 8e:cd:30:6a:46:d6:03:e4:f3:e6:c6:db:91:98:2d: cf:8b:57:b5:e0:38:9e:21:f9:3b:fd:b7:a6:c9:e5: 06:f0:28:a4:8e:48:3f:24:70:09:d1:64:67:00:ae: 02:d8:d8:16:b2:35:2d:6a:b4:73:65:73:fb:ae:3e: 5b:60:01:cf:94:d5:3b:75:e6:ad:2f:7f:a8:cf:cb: bd:45:1e:86:e5:41:1f:9a:d3:85:30:21:95:73:00: ed:6a:16:98:f8:7d:d8:06:d1:21:ea:a2:ea:f8:f8: 31:70:15:9f:91:0a:c3:a1:5f:51:62:04:6a:30:ce: 4c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:DA:B2:A0:AB:18:B6:32:71:21:A8:12:33:7C:71:93:01:35:04:42 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rNqyoKsYtjJxIagSM3xxkwE1BEI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:610::/44 Signature Algorithm: sha256WithRSAEncryption 6c:1b:0e:62:0c:44:f8:f6:55:6c:72:c7:b7:75:9f:94:c6:dd: 8f:18:60:99:be:0d:50:2c:48:5b:80:ab:5a:f9:fa:c1:cc:3d: ef:84:35:aa:b7:5a:28:3f:e9:32:5a:01:12:46:ce:c7:80:d8: d7:22:94:57:8a:81:62:5d:8c:8f:be:68:31:b0:8e:33:8d:ee: ca:31:74:ee:89:7e:bf:f8:a6:81:1f:1d:7f:70:53:96:6c:ac: af:9a:94:46:07:cf:4a:c5:8e:7f:79:22:e8:6a:c7:6d:96:2a: c7:ef:3a:b6:86:ca:ec:b6:b0:cc:fb:ca:5e:5b:cd:e4:bb:fb: 56:14:15:8e:a4:29:38:c3:20:de:15:cb:15:2c:1e:62:40:ca: 47:a6:42:49:ab:21:23:c9:d6:d0:f0:b9:31:d4:11:11:5b:7d: 82:ac:63:0e:4c:53:4b:76:4b:8c:1e:3d:30:a2:d0:3c:0f:a0: 40:04:af:f6:1c:d2:2e:4f:56:83:36:85:7a:80:ce:34:b3:ef: 91:de:52:2e:55:6e:3f:cf:f8:4e:68:e2:35:01:95:a4:f0:0f: 04:56:71:e6:6b:eb:a1:2c:30:ec:1a:8b:8d:d0:e7:85:3b:8a: 59:29:6c:b5:cf:d5:d4:96:42:29:2e:f8:88:e0:38:02:ce:23: 16:2b:9a:67 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XMGPf9JsPLbhfhMVVMbkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2RhYjJhMGFiMThiNjMyNzEyMWE4MTIzMzdjNzE5MzAxMzUwNDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xXivbZNfScOOR4KcPwCKN9GZn2E nLgJRykFyiOPkEgrZplTsY80U623n+Jlxzv0zPM2JuUJMhwNsssmF/IV8zT+Jviy eTMuKbhglHAnqleQgoUU7kOdyg/HJJSNzlcexJPjSc29vWs46AhY9ggaFsrJv616 A80D+EuvJ4asueJkaukbfWyOzTBqRtYD5PPmxtuRmC3Pi1e14DieIfk7/bemyeUG 8Cikjkg/JHAJ0WRnAK4C2NgWsjUtarRzZXP7rj5bYAHPlNU7deatL3+oz8u9RR6G 5UEfmtOFMCGVcwDtahaY+H3YBtEh6qLq+PgxcBWfkQrDoV9RYgRqMM5M/wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKzasqCrGLYycSGoEjN8cZMBNQRCMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvck5xeW9Lc1l0akp4SWFnU00zeHhrd0UxQkVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAYQ MA0GCSqGSIb3DQEBCwUAA4IBAQBsGw5iDET49lVscse3dZ+Uxt2PGGCZvg1QLEhb gKta+frBzD3vhDWqt1ooP+kyWgESRs7HgNjXIpRXioFiXYyPvmgxsI4zje7KMXTu iX6/+KaBHx1/cFOWbKyvmpRGB89KxY5/eSLoasdtlirH7zq2hsrstrDM+8peW83k u/tWFBWOpCk4wyDeFcsVLB5iQMpHpkJJqyEjydbQ8Lkx1BERW32CrGMOTFNLdkuM Hj0wotA8D6BABK/2HNIuT1aDNoV6gM40s++R3lIuVW4/z/hOaOI1AZWk8A8EVnHm a+uhLDDsGouN0OeFO4pZKWy1z9XUlkIpLviI4DgCziMWK5pn -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:42 2026 by rpki-client