This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ruhtlQV_OR6NlwhfLTOs9xmQ5uo.roa File: ruhtlQV_OR6NlwhfLTOs9xmQ5uo.roa (raw, json) Hash identifier: Kebjhr66RVhx+z9jFbRQ+NHr1oxU2btxHPtoSJ11s/c= Subject key identifier: AE:E8:6D:95:05:7F:39:1E:8D:97:08:5F:2D:33:AC:F7:19:90:E6:EA Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D61667BCC09F4FD9773A09C71A642 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ruhtlQV_OR6NlwhfLTOs9xmQ5uo.roa Signing time: Fri 02 Jan 2026 06:20:30 +0000 ROA not before: Fri 02 Jan 2026 06:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213327 IP address blocks: 2a0e:b107:20a0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:61:66:7b:cc:09:f4:fd:97:73:a0:9c:71:a6:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aee86d95057f391e8d97085f2d33acf71990e6ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:30:db:e9:05:91:94:6b:45:86:e3:16:fd:83: f7:bd:26:f2:08:df:76:84:e3:bd:86:62:9d:2d:0b: 05:2c:aa:9d:aa:70:6c:aa:46:01:3f:c9:aa:e6:4b: 4d:dc:c3:11:77:59:09:81:b9:93:9b:2c:2c:0a:17: 99:06:eb:ed:fe:04:fa:22:36:a3:1f:a4:66:a1:82: c6:b9:c2:75:71:1e:84:e7:b6:3d:d0:8a:d6:51:a6: 63:f2:41:3f:b9:2e:a9:6e:19:b7:cb:37:b3:a7:2c: b6:69:fe:09:48:57:f4:52:fb:b9:d6:05:16:fd:fc: b4:8d:87:3f:4a:6c:a6:a7:4c:db:3e:b3:08:df:99: f2:11:0e:04:99:62:93:68:bc:76:7a:60:92:3c:4d: c5:bd:89:8f:59:17:fc:09:28:c3:4f:e8:8c:04:f3: 23:59:56:21:5e:69:44:e5:f3:f2:56:92:75:f2:b0: a0:46:cd:52:fd:33:d6:93:91:b7:65:16:e4:fa:71: 2c:f0:3f:02:88:d0:35:b5:37:9d:59:40:41:75:b1: 75:ce:a9:96:26:2b:98:fd:ef:c7:7d:ed:bc:4e:60: c5:86:2e:8a:92:a0:87:58:d9:ca:cf:f8:7f:94:52: bc:72:4e:2f:49:f5:10:ab:66:1b:47:45:e2:3d:94: 8c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E8:6D:95:05:7F:39:1E:8D:97:08:5F:2D:33:AC:F7:19:90:E6:EA X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ruhtlQV_OR6NlwhfLTOs9xmQ5uo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:20a0::/44 Signature Algorithm: sha256WithRSAEncryption b2:d8:d0:fd:d9:c0:b2:bd:a4:1e:12:b9:80:a5:95:2c:59:f5: 64:e8:57:ae:fa:c9:ea:8c:c5:e6:8c:a1:14:75:e0:ae:51:93: d1:a6:c4:81:b0:81:7e:ef:69:6c:52:5f:96:e4:a7:29:66:a7: 8c:53:74:47:81:a2:8a:1d:b3:4b:3f:94:5a:89:7c:52:a5:72: 73:ba:3c:c8:cd:fc:f6:6d:78:e1:f8:ac:32:5b:2a:4c:e2:90: 18:3d:de:ef:c2:e5:aa:48:d7:53:ef:83:ac:f4:88:ea:23:8d: 16:64:25:d6:e5:63:eb:1e:f1:e8:d4:3c:99:7c:8f:8a:88:c0: 02:b2:56:d9:b4:39:d8:d2:37:ff:b4:83:ed:96:27:44:95:e7: 9f:fc:b6:5d:37:3a:74:f8:2a:0f:69:38:84:19:70:b6:f5:40: dd:18:57:6d:c7:4b:30:21:e6:31:b1:99:71:9e:95:7b:30:a8: d9:f7:0d:7d:84:f3:6e:08:f5:15:12:6f:12:b0:43:36:c1:72: 2a:dd:c7:ab:fd:5b:e4:b1:52:06:50:f2:27:55:1b:fd:0f:eb: bc:e7:3d:62:4b:92:86:88:8e:9b:a7:64:58:cf:0f:d0:df:a2: cd:77:9b:a6:97:38:ec:81:ed:72:da:99:af:08:ca:cd:e8:5b: cb:9d:11:83 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XWFme8wJ9P2Xc6CccaZCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWU4NmQ5NTA1N2YzOTFlOGQ5NzA4NWYyZDMzYWNmNzE5OTBlNmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzDb6QWRlGtFhuMW/YP3vSbyCN92 hOO9hmKdLQsFLKqdqnBsqkYBP8mq5ktN3MMRd1kJgbmTmywsCheZBuvt/gT6Ijaj H6RmoYLGucJ1cR6E57Y90IrWUaZj8kE/uS6pbhm3yzezpyy2af4JSFf0Uvu51gUW /fy0jYc/Smymp0zbPrMI35nyEQ4EmWKTaLx2emCSPE3FvYmPWRf8CSjDT+iMBPMj WVYhXmlE5fPyVpJ18rCgRs1S/TPWk5G3ZRbk+nEs8D8CiNA1tTedWUBBdbF1zqmW JiuY/e/Hfe28TmDFhi6KkqCHWNnKz/h/lFK8ck4vSfUQq2YbR0XiPZSMEQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFK7obZUFfzkejZcIXy0zrPcZkObqMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvcnVodGxRVl9PUjZObHdoZkxUT3M5eG1RNXVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xByCg MA0GCSqGSIb3DQEBCwUAA4IBAQCy2ND92cCyvaQeErmApZUsWfVk6Feu+snqjMXm jKEUdeCuUZPRpsSBsIF+72lsUl+W5KcpZqeMU3RHgaKKHbNLP5RaiXxSpXJzujzI zfz2bXjh+KwyWypM4pAYPd7vwuWqSNdT74Os9IjqI40WZCXW5WPrHvHo1DyZfI+K iMACslbZtDnY0jf/tIPtlidEleef/LZdNzp0+CoPaTiEGXC29UDdGFdtx0swIeYx sZlxnpV7MKjZ9w19hPNuCPUVEm8SsEM2wXIq3cer/VvksVIGUPInVRv9D+u85z1i S5KGiI6bp2RYzw/Q36LNd5umlzjsge1y2pmvCMrN6FvLnRGD -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:22 2026 by rpki-client