This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/taIjikAeB1Kl3vOQJW3NUGT-85k.roa File: taIjikAeB1Kl3vOQJW3NUGT-85k.roa (raw, json) Hash identifier: Tc/7hZS4HPwk5DYPNkjqOwvvNDpztL6Uqy72ZUTxUV8= Subject key identifier: B5:A2:23:8A:40:1E:07:52:A5:DE:F3:90:25:6D:CD:50:64:FE:F3:99 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CD32C6EA8A9DBD67ECB00F65D729A Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/taIjikAeB1Kl3vOQJW3NUGT-85k.roa Signing time: Fri 02 Jan 2026 06:19:53 +0000 ROA not before: Fri 02 Jan 2026 06:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 151194 IP address blocks: 2a06:de00:de00::/44 maxlen: 48 2a06:de00:de0f::/48 maxlen: 48 2a10:ccc0:ccc0::/44 maxlen: 48 2a10:ccc0:ccc0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d3:2c:6e:a8:a9:db:d6:7e:cb:00:f6:5d:72:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5a2238a401e0752a5def390256dcd5064fef399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6e:57:7c:42:5e:c5:7f:8a:31:46:2a:1b:58: 3f:e1:a8:fe:87:7f:d6:8a:75:39:87:1a:f9:81:03: fa:9a:56:d9:44:a5:b2:64:3a:98:e9:0e:d7:6b:bd: 43:37:82:d7:04:a5:c2:7b:29:ce:2a:45:c1:7c:47: 42:f9:0c:83:44:56:e8:62:b5:ba:5a:85:de:b7:74: 10:2e:bd:f1:97:c0:c0:7f:15:43:19:e3:ed:ed:0f: 2e:8b:6b:eb:6a:b6:4c:16:ab:b5:51:7d:cb:5f:ca: a8:da:61:0a:d8:f6:15:c2:eb:c1:f5:d6:c2:ea:10: b8:a3:f4:d0:23:59:4c:f5:d3:27:18:72:1e:c1:c3: df:2c:99:39:f2:e3:eb:a3:c4:1e:b6:d8:e1:d9:fd: 90:d1:2d:4e:96:fa:43:04:86:8f:96:21:b0:95:1a: 0a:45:8c:b2:ce:62:78:c7:df:68:af:42:f6:5e:11: 4c:6b:f3:7d:18:b7:fa:15:81:72:80:5d:54:92:2a: 52:8b:bf:09:ef:4f:a3:e5:f3:d2:3d:55:6c:a5:d3: 29:72:ae:8b:00:5f:ae:b6:e5:ad:b2:9b:99:2a:16: 61:ef:a1:c4:f1:7c:15:05:83:9b:62:1f:d6:38:4d: 4b:2b:2e:72:fe:c6:54:5d:fe:1c:64:bf:50:f3:40: 63:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A2:23:8A:40:1E:07:52:A5:DE:F3:90:25:6D:CD:50:64:FE:F3:99 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/taIjikAeB1Kl3vOQJW3NUGT-85k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:de00:de00::/44 2a10:ccc0:ccc0::/44 Signature Algorithm: sha256WithRSAEncryption 4a:ed:ae:11:0d:0f:3c:bf:f3:f9:20:9d:db:3a:d4:10:50:cc: 60:35:8b:dc:c4:b7:00:26:8c:7d:d5:96:77:ad:80:aa:d8:63: 77:c1:4c:e3:61:48:34:5d:78:c0:41:c8:68:a6:39:72:fc:9a: f4:59:36:81:38:1f:96:13:82:e4:f7:b4:6c:3c:7d:3f:71:c8: 34:48:a8:4e:d8:83:ee:0f:8a:32:49:9d:1e:e5:c8:b7:bd:78: 59:0b:73:ab:7c:1f:22:63:71:9b:16:f8:9e:4c:2b:30:fb:61: a3:25:f3:b9:2d:be:be:96:93:ee:42:16:ca:95:18:30:52:4c: 4f:ab:14:0f:83:4f:d7:ae:cb:8c:58:6b:79:52:14:9f:ce:54: d8:08:29:fd:28:38:ca:fa:27:c5:f5:58:28:ed:2f:7c:f5:9e: b6:db:2a:07:3b:52:bc:8b:9e:d7:a6:76:8d:5a:fa:c0:a1:c2: c3:f0:8e:81:b9:c3:1d:f8:d8:3f:11:50:7e:71:e0:ef:fb:59: b5:ae:9d:ce:7e:cc:84:fc:b9:05:48:df:2d:81:21:47:5a:60: 96:88:8c:ad:4c:1d:d5:13:c9:c9:43:43:fe:e3:39:a1:08:20: d7:4b:83:6c:7e:0b:f8:b3:5d:3c:e0:97:3d:4a:6e:56:7f:24: df:ed:b2:ef -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XNMsbqip29Z+ywD2XXKaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWEyMjM4YTQwMWUwNzUyYTVkZWYzOTAyNTZkY2Q1MDY0ZmVmMzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3m5XfEJexX+KMUYqG1g/4aj+h3/W inU5hxr5gQP6mlbZRKWyZDqY6Q7Xa71DN4LXBKXCeynOKkXBfEdC+QyDRFboYrW6 WoXet3QQLr3xl8DAfxVDGePt7Q8ui2vrarZMFqu1UX3LX8qo2mEK2PYVwuvB9dbC 6hC4o/TQI1lM9dMnGHIewcPfLJk58uPro8Qettjh2f2Q0S1OlvpDBIaPliGwlRoK RYyyzmJ4x99or0L2XhFMa/N9GLf6FYFygF1UkipSi78J70+j5fPSPVVspdMpcq6L AF+utuWtspuZKhZh76HE8XwVBYObYh/WOE1LKy5y/sZUXf4cZL9Q80BjUQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLWiI4pAHgdSpd7zkCVtzVBk/vOZMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvdGFJamlrQWVCMUtsM3ZPUUpXM05VR1QtODVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgbeAN4A AwcEKhDMwMzAMA0GCSqGSIb3DQEBCwUAA4IBAQBK7a4RDQ88v/P5IJ3bOtQQUMxg NYvcxLcAJox91ZZ3rYCq2GN3wUzjYUg0XXjAQchopjly/Jr0WTaBOB+WE4Lk97Rs PH0/ccg0SKhO2IPuD4oySZ0e5ci3vXhZC3OrfB8iY3GbFvieTCsw+2GjJfO5Lb6+ lpPuQhbKlRgwUkxPqxQPg0/XrsuMWGt5UhSfzlTYCCn9KDjK+ifF9Vgo7S989Z62 2yoHO1K8i57XpnaNWvrAocLD8I6BucMd+Ng/EVB+ceDv+1m1rp3OfsyE/LkFSN8t gSFHWmCWiIytTB3VE8nJQ0P+4zmhCCDXS4Nsfgv4s1084Jc9Sm5WfyTf7bLv -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:05 2026 by rpki-client