This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sxWNtVgPY4ZKg-dHm8W-V-Hzak4.roa File: sxWNtVgPY4ZKg-dHm8W-V-Hzak4.roa (raw, json) Hash identifier: 15RXkFvfq6UR8nJXTPL/xnK17r4AgOe3SW574DUlJtc= Subject key identifier: B3:15:8D:B5:58:0F:63:86:4A:83:E7:47:9B:C5:BE:57:E1:F3:6A:4E Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CCC3FDBD156C75B5CFEFFAF242942 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sxWNtVgPY4ZKg-dHm8W-V-Hzak4.roa Signing time: Fri 02 Jan 2026 06:19:51 +0000 ROA not before: Fri 02 Jan 2026 06:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 141237 IP address blocks: 2a0e:b107:df1::/48 maxlen: 48 2a0e:b107:df3::/48 maxlen: 48 2a0e:b107:df4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:cc:3f:db:d1:56:c7:5b:5c:fe:ff:af:24:29:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3158db5580f63864a83e7479bc5be57e1f36a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:35:ed:bd:4f:ea:df:63:2e:3c:69:14:ec:de: b7:f6:16:8a:01:25:41:52:80:b2:83:54:36:86:c4: a9:f9:23:07:6f:7a:a6:c1:0f:d2:22:5e:97:84:7c: 7a:c7:87:9e:d8:5a:a6:a3:c7:cb:e9:22:a7:5c:26: bb:eb:5f:f9:f9:6a:18:3c:b6:dd:2b:0b:e8:03:0b: 64:d7:25:ed:20:05:4a:ce:20:1f:66:ce:f0:6a:0e: bd:07:d9:c2:42:c6:f7:20:0d:b5:bc:63:2c:9b:94: 97:cf:5b:a1:76:bc:57:65:54:59:bf:cd:91:f6:4a: a7:d8:83:87:ae:aa:22:3e:21:c2:58:60:a9:27:eb: 69:d6:0b:d2:17:ca:78:f2:c5:b8:51:61:69:c6:e7: eb:c6:5e:3f:23:6e:d5:6d:2c:f4:87:d9:81:4d:42: d9:b7:55:23:67:35:c2:3a:41:0c:d3:4f:ef:6b:a4: 7d:1f:3d:4a:d0:db:37:eb:d5:7b:ca:4d:33:2c:5d: 16:69:43:3f:3d:bf:99:ce:27:9d:75:bf:bb:f2:8b: 03:87:a6:06:ce:f0:86:e7:7f:13:36:f9:75:a2:fb: df:30:83:11:1b:3a:d0:74:44:a1:cf:72:e2:c1:61: b5:3f:19:da:5f:2c:37:9e:22:32:ea:d6:a9:6b:91: a5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:15:8D:B5:58:0F:63:86:4A:83:E7:47:9B:C5:BE:57:E1:F3:6A:4E X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sxWNtVgPY4ZKg-dHm8W-V-Hzak4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:df1::/48 2a0e:b107:df3::-2a0e:b107:df4:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 73:ea:23:17:06:17:ee:06:78:e3:7d:42:3c:34:7f:45:b0:d2: 6d:2b:86:a7:2a:2f:98:5e:50:21:d7:09:94:df:06:27:86:be: 2b:a8:f7:c6:89:85:11:d9:9d:72:85:aa:98:c6:53:59:40:a6: 32:f2:3f:6a:18:f9:6d:ee:c9:6a:27:7a:a5:8d:41:bf:23:29: 67:38:47:fd:ca:a4:90:b9:8e:3b:f7:40:71:f5:74:44:ff:86: fc:86:47:a9:a3:fa:75:37:d5:0d:0b:b6:a1:db:94:ed:7e:46: f9:d0:83:60:2c:02:cd:1c:10:f1:bf:68:ae:bf:e8:8d:74:62: 81:3e:28:e7:b9:bc:16:15:9f:12:a7:10:c7:29:9f:e9:89:76: a7:bc:63:30:14:3d:fa:0d:05:e2:1b:0f:1f:bc:a4:44:4e:ba: 68:d0:5b:fd:95:37:1c:36:cd:1f:a8:cf:58:69:33:1f:aa:d7: c6:5c:61:86:a7:50:1c:57:10:9e:01:d3:e8:53:f3:7f:17:cd: c9:d1:af:43:0f:02:df:23:bd:a9:c0:69:d7:f1:39:aa:34:97: e2:42:87:89:86:c0:8f:ec:8d:b8:50:78:a1:0c:d7:19:86:42: cb:22:24:72:5e:2e:30:97:f2:a2:fd:35:15:45:46:d6:22:ee: 40:51:4f:3b -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt9XMw/29FWx1tc/v+vJClCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzE1OGRiNTU4MGY2Mzg2NGE4M2U3NDc5YmM1YmU1N2UxZjM2YTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDXtvU/q32MuPGkU7N639haKASVB UoCyg1Q2hsSp+SMHb3qmwQ/SIl6XhHx6x4ee2Fqmo8fL6SKnXCa761/5+WoYPLbd KwvoAwtk1yXtIAVKziAfZs7wag69B9nCQsb3IA21vGMsm5SXz1uhdrxXZVRZv82R 9kqn2IOHrqoiPiHCWGCpJ+tp1gvSF8p48sW4UWFpxufrxl4/I27VbSz0h9mBTULZ t1UjZzXCOkEM00/va6R9Hz1K0Ns369V7yk0zLF0WaUM/Pb+Zzieddb+78osDh6YG zvCG538TNvl1ovvfMIMRGzrQdEShz3LiwWG1PxnaXyw3niIy6tapa5GlbQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFLMVjbVYD2OGSoPnR5vFvlfh82pOMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvc3hXTnRWZ1BZNFpLZy1kSG04Vy1WLUh6YWs0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdAwcAKg6xBw3x MBIDBwAqDrEHDfMDBwAqDrEHDfQwDQYJKoZIhvcNAQELBQADggEBAHPqIxcGF+4G eON9Qjw0f0Ww0m0rhqcqL5heUCHXCZTfBieGviuo98aJhRHZnXKFqpjGU1lApjLy P2oY+W3uyWoneqWNQb8jKWc4R/3KpJC5jjv3QHH1dET/hvyGR6mj+nU31Q0LtqHb lO1+RvnQg2AsAs0cEPG/aK6/6I10YoE+KOe5vBYVnxKnEMcpn+mJdqe8YzAUPfoN BeIbDx+8pEROumjQW/2VNxw2zR+oz1hpMx+q18ZcYYanUBxXEJ4B0+hT838XzcnR r0MPAt8jvanAadfxOao0l+JCh4mGwI/sjbhQeKEM1xmGQssiJHJeLjCX8qL9NRVF RtYi7kBRTzs= -----END CERTIFICATE-----Generated at Fri Jan 9 13:12:06 2026 by rpki-client