This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/s28KJX8pFc2H41VMpRNl7jUujX8.roa File: s28KJX8pFc2H41VMpRNl7jUujX8.roa (raw, json) Hash identifier: vG0oKpdlNpxQa+zklH2saucx3DB5oebxxjOkILcR73Y= Subject key identifier: B3:6F:0A:25:7F:29:15:CD:87:E3:55:4C:A5:13:65:EE:35:2E:8D:7F Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CD4F550AA5A97763D76C21F92D7EB Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/s28KJX8pFc2H41VMpRNl7jUujX8.roa Signing time: Fri 02 Jan 2026 06:19:54 +0000 ROA not before: Fri 02 Jan 2026 06:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197477 IP address blocks: 2a06:de01:70::/44 maxlen: 48 2a10:ccc0:150::/44 maxlen: 48 2a10:ccc2:10::/44 maxlen: 48 2a10:ccc2:1330::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d4:f5:50:aa:5a:97:76:3d:76:c2:1f:92:d7:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b36f0a257f2915cd87e3554ca51365ee352e8d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ad:dd:f9:a0:d7:10:11:da:9e:4f:a8:98:8e: a7:41:6a:54:15:f8:62:fd:f3:16:bf:f2:8c:2b:14: 20:84:e3:59:4d:23:df:62:53:57:1b:db:47:f6:5c: dd:c4:18:0b:39:83:90:ce:f9:3c:2f:2d:bf:e1:97: bf:34:10:56:fc:dd:3e:e9:78:ed:8d:6f:e0:98:e0: 0e:76:aa:56:46:a3:a9:49:c6:a8:57:32:84:24:79: 29:6d:20:8b:f3:d8:ac:8e:c2:2e:fb:09:d4:82:26: b2:1b:c2:13:cd:73:0f:3b:ee:aa:32:7d:2f:bb:05: 96:14:d6:1d:a1:79:d9:7d:74:07:51:41:36:6d:ed: 0d:9e:c0:74:27:4d:01:dd:cc:9a:9c:04:c4:14:1c: 79:ae:5f:f6:b4:16:f3:1d:54:0e:92:b6:51:16:52: a7:9c:17:04:d3:18:b2:83:8d:7b:0a:7c:10:5c:ac: 97:4a:14:45:1b:8f:75:ea:42:3f:2e:cf:90:9f:14: 36:a2:d2:fa:3d:3b:49:3a:5c:a3:2f:7f:5b:1c:d9: 21:cd:64:9f:22:84:11:4c:c5:ec:3a:71:ec:7e:ef: e8:74:9b:22:ed:7a:6a:75:29:77:98:02:ca:5f:6b: ea:e5:cd:34:e9:d0:58:4f:9c:09:ab:d1:1a:f8:b3: 05:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:6F:0A:25:7F:29:15:CD:87:E3:55:4C:A5:13:65:EE:35:2E:8D:7F X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/s28KJX8pFc2H41VMpRNl7jUujX8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:de01:70::/44 2a10:ccc0:150::/44 2a10:ccc2:10::/44 2a10:ccc2:1330::/44 Signature Algorithm: sha256WithRSAEncryption 81:90:72:c8:85:86:a0:d7:43:47:70:46:5f:b7:44:cb:99:7b: 3e:d8:1b:78:57:10:5f:cc:f0:c4:99:2d:ca:b3:c7:14:64:6d: 38:b6:bc:28:4a:2d:17:f8:9f:f6:83:0f:3e:3a:7c:d8:12:d1: 88:2a:e3:20:cc:15:fb:eb:5d:dd:b4:ed:75:15:79:7e:48:fe: 80:b0:f8:a6:1d:1d:27:3a:31:f6:62:39:08:94:c2:30:00:27: 45:b2:06:88:ca:bd:0f:e7:21:b9:08:ea:c0:93:39:88:2e:4e: b8:c9:6e:a4:a7:b9:f9:d9:7a:b2:c8:13:3f:e4:a6:74:ca:8a: 48:82:88:c5:2f:d0:a9:f0:20:68:0f:6b:a2:03:72:e8:fe:35: 29:12:a3:3a:d0:cb:08:b3:b0:88:b5:d2:86:06:e5:79:9b:0b: d4:6c:7c:21:d0:05:ad:f3:a2:0c:81:1a:19:5a:77:12:17:ed: a6:3b:40:cb:6c:c3:1b:bc:97:b7:00:68:8f:c3:61:3e:48:f4: dc:60:08:f5:6c:9e:55:a3:2e:cb:82:b0:bb:8c:2a:bf:a2:dc: fe:1d:0a:61:f2:b6:d9:4c:4a:10:67:d8:a8:a4:de:f1:18:03: cf:66:54:17:97:da:f8:7b:ff:f6:5e:4b:89:00:0c:fb:69:0f: 24:9b:7b:ee -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt9XNT1UKpal3Y9dsIfktfrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzZmMGEyNTdmMjkxNWNkODdlMzU1NGNhNTEzNjVlZTM1MmU4ZDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqK3d+aDXEBHank+omI6nQWpUFfhi /fMWv/KMKxQghONZTSPfYlNXG9tH9lzdxBgLOYOQzvk8Ly2/4Ze/NBBW/N0+6Xjt jW/gmOAOdqpWRqOpScaoVzKEJHkpbSCL89isjsIu+wnUgiayG8ITzXMPO+6qMn0v uwWWFNYdoXnZfXQHUUE2be0NnsB0J00B3cyanATEFBx5rl/2tBbzHVQOkrZRFlKn nBcE0xiyg417CnwQXKyXShRFG4916kI/Ls+QnxQ2otL6PTtJOlyjL39bHNkhzWSf IoQRTMXsOnHsfu/odJsi7XpqdSl3mALKX2vq5c006dBYT5wJq9Ea+LMFVQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFLNvCiV/KRXNh+NVTKUTZe41Lo1/MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvczI4S0pYOHBGYzJINDFWTXBSTmw3alV1alg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcEKgbeAQBw AwcEKhDMwAFQAwcEKhDMwgAQAwcEKhDMwhMwMA0GCSqGSIb3DQEBCwUAA4IBAQCB kHLIhYag10NHcEZft0TLmXs+2Bt4VxBfzPDEmS3Ks8cUZG04trwoSi0X+J/2gw8+ OnzYEtGIKuMgzBX7613dtO11FXl+SP6AsPimHR0nOjH2YjkIlMIwACdFsgaIyr0P 5yG5COrAkzmILk64yW6kp7n52XqyyBM/5KZ0yopIgojFL9Cp8CBoD2uiA3Lo/jUp EqM60MsIs7CItdKGBuV5mwvUbHwh0AWt86IMgRoZWncSF+2mO0DLbMMbvJe3AGiP w2E+SPTcYAj1bJ5Voy7LgrC7jCq/otz+HQph8rbZTEoQZ9iopN7xGAPPZlQXl9r4 e//2XkuJAAz7aQ8km3vu -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:23 2026 by rpki-client