This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rpK7aerhS6L07QBBnUYuUOtU02k.roa File: rpK7aerhS6L07QBBnUYuUOtU02k.roa (raw, json) Hash identifier: HePGJeRdovoOidWlSeBd7Lf/WXrYMiSbBlzy2Ohktt4= Subject key identifier: AE:92:BB:69:EA:E1:4B:A2:F4:ED:00:41:9D:46:2E:50:EB:54:D3:69 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019C44D104A730DB74289EC63BA22D4383F5 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rpK7aerhS6L07QBBnUYuUOtU02k.roa Signing time: Mon 09 Feb 2026 23:51:14 +0000 ROA not before: Mon 09 Feb 2026 23:51:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209669 IP address blocks: 2a0e:97c0:a1f::/48 maxlen: 48 2a10:cc40:150::/48 maxlen: 48 2a10:cc40:151::/48 maxlen: 48 2a10:cc40:152::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 12 Feb 2026 15:10:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:d1:04:a7:30:db:74:28:9e:c6:3b:a2:2d:43:83:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Feb 9 23:51:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae92bb69eae14ba2f4ed00419d462e50eb54d369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2c:e8:d0:17:7a:81:e1:39:a4:41:3f:76:97: d2:84:e5:e7:ef:a6:ac:1c:71:01:3d:42:82:0e:3c: d5:48:c2:44:ec:90:64:bf:dc:07:ad:88:71:e6:97: 3a:e7:00:67:19:1a:70:0b:3e:1d:70:e3:6d:0b:0a: 80:91:6f:b6:32:9f:24:56:58:b2:a6:f6:0c:3e:88: f8:64:2c:dc:ae:a3:49:12:6e:34:be:2c:1f:c9:2e: ab:8a:6d:ab:0f:59:4b:57:10:69:0c:63:e4:94:6b: da:a9:94:8c:08:bc:af:2f:b8:fe:85:e6:32:56:32: b9:54:f1:1f:79:c7:38:ba:de:89:c3:81:ea:ce:dc: a3:6b:73:e6:75:56:4f:e5:49:c5:bd:ef:fd:40:3c: 03:b5:10:9f:ce:62:3a:3c:b2:a4:8f:75:b0:3e:0f: 10:e3:d7:e2:c5:de:a5:17:aa:76:99:be:db:5b:46: cf:fe:b8:d4:14:68:95:d8:f4:5f:a4:92:33:aa:63: 4d:d4:18:c7:b6:80:60:eb:62:2f:ca:e1:8b:b0:bb: c5:0d:9e:42:7a:73:9a:f5:e2:8e:20:bc:05:56:44: 9f:e8:70:60:4a:bf:24:c3:f9:85:b7:2c:eb:6a:4f: 7e:34:01:8e:62:21:ca:ca:64:30:53:37:4a:ba:1f: df:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:92:BB:69:EA:E1:4B:A2:F4:ED:00:41:9D:46:2E:50:EB:54:D3:69 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rpK7aerhS6L07QBBnUYuUOtU02k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:a1f::/48 2a10:cc40:150::-2a10:cc40:152:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 15:6d:08:35:84:2f:40:3b:0b:25:c4:61:13:86:3c:be:0b:dc: 22:e2:8c:8e:61:e4:f6:32:7d:7d:3d:0f:71:c8:bb:5a:8f:49: a9:05:82:da:2b:d4:cc:1e:67:d4:0e:38:5e:1f:15:db:88:57: 27:12:46:28:11:a6:02:81:c1:cc:e3:8f:bc:cc:f0:d2:a9:06: f5:08:cd:7d:d3:b8:f8:5b:b9:d8:54:f1:0f:96:f4:47:56:e0: ec:8b:a4:36:af:22:58:8c:91:19:85:78:ad:cc:6a:36:56:81: 45:1a:29:d6:fb:a5:1c:13:b5:69:96:17:43:a6:b0:f3:bd:40: 6f:2a:6a:3f:a4:2c:2f:55:75:59:dd:17:d8:bc:10:4a:82:3f: 7e:db:6b:d4:d7:66:33:f3:40:27:61:1f:68:63:cd:20:75:04: ad:c7:36:b4:c6:a2:ed:fa:9e:7e:2f:d1:0f:36:ba:a7:3a:1b: cf:40:c7:02:f3:36:a9:9d:5c:7d:66:e7:68:79:6a:0d:95:a7: 84:53:25:f4:e7:04:fb:3d:8f:cc:7c:2d:90:2e:e8:20:2d:26: 28:77:fc:0d:47:24:a8:aa:ea:1c:48:6a:16:d6:40:10:51:34: 0b:dd:e4:e0:fa:e3:78:e7:da:38:28:3f:a4:1c:ea:60:ca:51: bc:68:34:bb -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZxE0QSnMNt0KJ7GO6ItQ4P1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMjA5MjM1MTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTkyYmI2OWVhZTE0YmEyZjRlZDAwNDE5ZDQ2MmU1MGViNTRkMzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSzo0Bd6geE5pEE/dpfShOXn76as HHEBPUKCDjzVSMJE7JBkv9wHrYhx5pc65wBnGRpwCz4dcONtCwqAkW+2Mp8kVliy pvYMPoj4ZCzcrqNJEm40viwfyS6rim2rD1lLVxBpDGPklGvaqZSMCLyvL7j+heYy VjK5VPEfecc4ut6Jw4Hqztyja3PmdVZP5UnFve/9QDwDtRCfzmI6PLKkj3WwPg8Q 49fixd6lF6p2mb7bW0bP/rjUFGiV2PRfpJIzqmNN1BjHtoBg62IvyuGLsLvFDZ5C enOa9eKOILwFVkSf6HBgSr8kw/mFtyzrak9+NAGOYiHKymQwUzdKuh/ftwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFK6Su2nq4Uui9O0AQZ1GLlDrVNNpMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvcnBLN2FlcmhTNkwwN1FCQm5VWXVVT3RVMDJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdAwcAKg6XwAof MBIDBwQqEMxAAVADBwAqEMxAAVIwDQYJKoZIhvcNAQELBQADggEBABVtCDWEL0A7 CyXEYROGPL4L3CLijI5h5PYyfX09D3HIu1qPSakFgtor1MweZ9QOOF4fFduIVycS RigRpgKBwczjj7zM8NKpBvUIzX3TuPhbudhU8Q+W9EdW4OyLpDavIliMkRmFeK3M ajZWgUUaKdb7pRwTtWmWF0OmsPO9QG8qaj+kLC9VdVndF9i8EEqCP37ba9TXZjPz QCdhH2hjzSB1BK3HNrTGou36nn4v0Q82uqc6G89AxwLzNqmdXH1m52h5ag2Vp4RT JfTnBPs9j8x8LZAu6CAtJih3/A1HJKiq6hxIahbWQBBRNAvd5OD643jn2jgoP6Qc 6mDKUbxoNLs= -----END CERTIFICATE-----Generated at Thu Feb 12 01:22:36 2026 by rpki-client