This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tz5qB7F7OmNbSGjhN-VVfMsFMUA.roa File: tz5qB7F7OmNbSGjhN-VVfMsFMUA.roa (raw, json) Hash identifier: qjnHaal/WouSI6CJvsVJHy/jJ1CCuoboNiYXI82PTQk= Subject key identifier: B7:3E:6A:07:B1:7B:3A:63:5B:48:68:E1:37:E5:55:7C:CB:05:31:40 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CE4919D87EA4B60F9397DB4984592 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tz5qB7F7OmNbSGjhN-VVfMsFMUA.roa Signing time: Fri 02 Jan 2026 06:19:58 +0000 ROA not before: Fri 02 Jan 2026 06:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200529 IP address blocks: 2a0e:b107:1d30::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e4:91:9d:87:ea:4b:60:f9:39:7d:b4:98:45:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b73e6a07b17b3a635b4868e137e5557ccb053140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:33:02:95:a9:d1:9b:27:ae:6b:98:14:c2:56: f8:21:e0:e2:44:32:03:da:e5:5e:3c:b2:0a:63:f9: 61:e2:4e:60:8d:d0:f2:ba:73:ff:65:5d:3a:90:cf: 86:20:d1:37:ee:1e:a3:93:a0:e8:68:d8:fc:1e:65: c1:74:39:4f:e3:3a:c8:8e:7d:c8:95:88:76:cc:65: 09:7b:b9:f4:80:66:86:95:09:79:5a:0f:55:ab:18: 3b:e9:a0:29:7c:58:48:c6:d7:fc:c2:60:a2:d1:ab: d3:da:be:e7:ec:93:aa:ee:00:a5:5b:44:41:e4:71: 0d:12:72:d7:f8:a9:f5:f4:db:c7:05:6b:ad:bd:ad: 45:8e:4c:65:e0:52:5a:3f:d4:59:cc:15:2e:f3:91: 71:7c:d8:c1:43:34:d2:4d:50:d5:19:93:43:bd:0d: 58:0a:7b:69:0e:3c:04:2e:b2:25:11:04:56:43:62: 32:7e:83:04:03:44:2c:10:44:a4:a7:df:ca:b8:55: 35:e2:69:bc:37:9c:a8:0b:13:d2:a0:4b:d6:c4:70: a0:20:56:0d:be:5c:23:c4:cd:9e:79:c3:04:c3:86: 5d:7d:86:22:9a:0f:97:7f:68:eb:a3:43:3f:c4:80: 57:a9:40:24:a3:a5:74:66:77:36:64:05:48:83:49: c7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:3E:6A:07:B1:7B:3A:63:5B:48:68:E1:37:E5:55:7C:CB:05:31:40 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tz5qB7F7OmNbSGjhN-VVfMsFMUA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1d30::/44 Signature Algorithm: sha256WithRSAEncryption 36:94:dd:b2:d9:44:8a:94:75:4a:f6:08:80:21:58:cd:d0:ff: c3:35:6e:ea:26:af:6f:c5:f2:76:f6:81:56:85:ab:76:bb:64: d8:04:a8:57:aa:e6:93:f5:b1:c8:6e:5b:31:3e:c3:75:b1:1c: 59:36:88:5b:9d:ac:e2:33:f7:78:00:02:7e:fc:c9:70:68:64: 85:ef:a0:15:6c:65:80:94:e2:ec:97:4c:bc:71:95:43:0e:2e: d3:65:a4:60:33:ff:bd:cf:5a:68:19:12:66:e1:2b:99:14:e9: b6:c2:18:55:29:62:2d:ed:25:06:98:e2:db:af:a3:23:fc:ea: d1:f8:f2:e0:0e:8e:28:59:36:9e:08:de:cf:df:45:43:8b:5c: c1:9a:3d:31:5a:6b:54:f0:4c:40:51:d9:21:1c:73:49:50:12: 2c:63:46:1e:cc:4d:eb:29:f9:0c:94:a3:68:17:9e:c5:1a:4d: 35:1b:ea:bb:11:72:57:41:2b:3c:05:1f:67:3e:26:a1:8b:e6: 6d:9f:4c:38:6e:eb:0e:30:7c:58:3c:49:67:c7:d9:ef:d3:42: 31:0c:52:b0:32:cc:e1:49:d7:42:c4:2b:b2:09:b5:34:e3:64: 41:56:33:39:79:10:26:e6:e0:d5:24:ae:9c:8f:5d:10:d9:06: 13:00:ad:cd -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XOSRnYfqS2D5OX20mEWSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzNlNmEwN2IxN2IzYTYzNWI0ODY4ZTEzN2U1NTU3Y2NiMDUzMTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDMClanRmyeua5gUwlb4IeDiRDID 2uVePLIKY/lh4k5gjdDyunP/ZV06kM+GINE37h6jk6DoaNj8HmXBdDlP4zrIjn3I lYh2zGUJe7n0gGaGlQl5Wg9Vqxg76aApfFhIxtf8wmCi0avT2r7n7JOq7gClW0RB 5HENEnLX+Kn19NvHBWutva1Fjkxl4FJaP9RZzBUu85FxfNjBQzTSTVDVGZNDvQ1Y CntpDjwELrIlEQRWQ2IyfoMEA0QsEESkp9/KuFU14mm8N5yoCxPSoEvWxHCgIFYN vlwjxM2eecMEw4ZdfYYimg+Xf2jro0M/xIBXqUAko6V0Znc2ZAVIg0nH6wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLc+agexezpjW0ho4TflVXzLBTFAMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvdHo1cUI3RjdPbU5iU0dqaE4tVlZmTXNGTVVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBx0w MA0GCSqGSIb3DQEBCwUAA4IBAQA2lN2y2USKlHVK9giAIVjN0P/DNW7qJq9vxfJ2 9oFWhat2u2TYBKhXquaT9bHIblsxPsN1sRxZNohbnaziM/d4AAJ+/MlwaGSF76AV bGWAlOLsl0y8cZVDDi7TZaRgM/+9z1poGRJm4SuZFOm2whhVKWIt7SUGmOLbr6Mj /OrR+PLgDo4oWTaeCN7P30VDi1zBmj0xWmtU8ExAUdkhHHNJUBIsY0YezE3rKfkM lKNoF57FGk01G+q7EXJXQSs8BR9nPiahi+Ztn0w4busOMHxYPElnx9nv00IxDFKw MszhSddCxCuyCbU042RBVjM5eRAm5uDVJK6cj10Q2QYTAK3N -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:28 2026 by rpki-client