This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/s8xmkW7thGxu4b9CPhcqs7YA490.roa File: s8xmkW7thGxu4b9CPhcqs7YA490.roa (raw, json) Hash identifier: /dncxudchT/gwXdVcZLoqfepkmCtrNF6wWDB0qKCVjA= Subject key identifier: B3:CC:66:91:6E:ED:84:6C:6E:E1:BF:42:3E:17:2A:B3:B6:00:E3:DD Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D166D968DC09A15A447C13D5A27AF Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/s8xmkW7thGxu4b9CPhcqs7YA490.roa Signing time: Fri 02 Jan 2026 06:20:10 +0000 ROA not before: Fri 02 Jan 2026 06:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208699 IP address blocks: 2a0e:97c0:730::/48 maxlen: 48 2a0e:97c0:731::/48 maxlen: 48 2a0e:97c0:738::/45 maxlen: 48 2a0e:b107:9fe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:16:6d:96:8d:c0:9a:15:a4:47:c1:3d:5a:27:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3cc66916eed846c6ee1bf423e172ab3b600e3dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2f:e1:89:57:eb:cf:9c:38:94:11:c2:29:ae: ec:40:8b:ed:90:38:24:31:48:98:85:b3:d1:72:b2: 90:f4:a6:4b:df:c6:92:52:7f:cf:e7:3e:81:17:0d: 81:6a:7e:14:4f:01:d1:3b:35:07:b0:45:e4:d5:ba: e7:f1:f4:1b:de:8d:9c:70:9a:45:8f:0c:db:d2:d9: 30:bc:97:63:ea:01:2d:ec:2c:59:2a:37:3c:13:81: 45:ae:f9:83:5d:ef:64:e8:7f:bb:73:40:d5:21:20: e6:5b:9a:82:df:d5:2c:69:11:a3:54:13:07:1f:8b: dd:8e:5b:21:87:13:ac:36:ff:2d:ca:3e:a8:4a:c4: 12:e2:78:41:02:0c:e5:5b:e7:d1:57:2e:52:a6:cd: 5f:61:dd:62:bc:9c:17:a8:42:a7:ba:19:48:ad:0b: 8a:40:da:f1:53:84:c6:b8:38:48:99:eb:20:56:eb: 2f:82:56:bc:8e:45:1c:f7:3e:98:47:3f:29:64:2b: 56:8c:fc:c4:70:22:0a:5f:12:2a:1a:0f:e2:ed:8e: bc:65:3c:8f:22:48:af:36:fb:d0:b8:69:29:38:cc: 35:9d:9a:60:e2:57:27:c5:13:5f:ae:b0:d1:d1:09: eb:cb:cf:62:da:5d:a5:22:13:19:83:61:11:36:78: 02:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:CC:66:91:6E:ED:84:6C:6E:E1:BF:42:3E:17:2A:B3:B6:00:E3:DD X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/s8xmkW7thGxu4b9CPhcqs7YA490.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:730::/47 2a0e:97c0:738::/45 2a0e:b107:9fe::/48 Signature Algorithm: sha256WithRSAEncryption 90:6a:f9:69:73:d4:34:6e:94:29:b2:7f:8d:9c:0e:fc:c0:54: ad:14:7f:e7:f1:81:75:d9:31:2c:09:39:14:92:1b:45:d9:b5: 6f:d7:b1:8d:e6:46:25:85:aa:19:e7:ac:64:cf:1c:a5:8f:67: 37:f3:d2:56:bf:2f:e3:b1:a6:48:9d:aa:fa:49:52:bc:b4:6b: 1b:5d:08:45:2e:e1:42:50:89:d5:33:5a:a7:f4:30:5a:ec:e3: 97:5b:a6:ea:d9:ab:a7:cb:dd:e2:d6:fc:4f:76:ff:4d:34:8a: f4:c5:c5:dc:34:5d:4c:5e:85:80:f6:64:5a:19:f9:07:7f:f8: cb:7f:fc:50:5b:36:0e:33:93:36:1a:8d:b0:2a:db:97:87:62: 7e:eb:4d:9e:87:ec:24:b5:73:43:75:f9:75:5f:00:36:c4:24: 4d:93:9f:3c:7c:05:27:3c:62:ad:98:4d:97:9d:ed:b0:6f:ab: bd:b8:f5:e3:04:fd:68:48:50:0e:14:62:a1:4a:6b:e0:64:04: f6:cc:f7:ff:32:35:26:f4:95:55:c3:4d:f6:ee:e4:a2:60:09: ef:26:b5:18:68:2b:01:6b:72:56:71:aa:b1:e6:a5:a0:99:b9: 28:04:f0:59:be:15:02:86:25:85:07:62:46:28:9f:36:fd:95: f3:a9:d4:0f -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9XRZtlo3AmhWkR8E9WievMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2NjNjY5MTZlZWQ4NDZjNmVlMWJmNDIzZTE3MmFiM2I2MDBlM2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy/hiVfrz5w4lBHCKa7sQIvtkDgk MUiYhbPRcrKQ9KZL38aSUn/P5z6BFw2Ban4UTwHROzUHsEXk1brn8fQb3o2ccJpF jwzb0tkwvJdj6gEt7CxZKjc8E4FFrvmDXe9k6H+7c0DVISDmW5qC39UsaRGjVBMH H4vdjlshhxOsNv8tyj6oSsQS4nhBAgzlW+fRVy5Sps1fYd1ivJwXqEKnuhlIrQuK QNrxU4TGuDhImesgVusvgla8jkUc9z6YRz8pZCtWjPzEcCIKXxIqGg/i7Y68ZTyP IkivNvvQuGkpOMw1nZpg4lcnxRNfrrDR0Qnry89i2l2lIhMZg2ERNngCPwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFLPMZpFu7YRsbuG/Qj4XKrO2AOPdMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvczh4bWtXN3RoR3h1NGI5Q1BoY3FzN1lBNDkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcBKg6XwAcw AwcDKg6XwAc4AwcAKg6xBwn+MA0GCSqGSIb3DQEBCwUAA4IBAQCQavlpc9Q0bpQp sn+NnA78wFStFH/n8YF12TEsCTkUkhtF2bVv17GN5kYlhaoZ56xkzxylj2c389JW vy/jsaZInar6SVK8tGsbXQhFLuFCUInVM1qn9DBa7OOXW6bq2auny93i1vxPdv9N NIr0xcXcNF1MXoWA9mRaGfkHf/jLf/xQWzYOM5M2Go2wKtuXh2J+602eh+wktXND dfl1XwA2xCRNk588fAUnPGKtmE2Xne2wb6u9uPXjBP1oSFAOFGKhSmvgZAT2zPf/ MjUm9JVVw0327uSiYAnvJrUYaCsBa3JWcaqx5qWgmbkoBPBZvhUChiWFB2JGKJ82 /ZXzqdQP -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:24 2026 by rpki-client