This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/u7AHI9FtRxCgTkIQxBQRVOmuw9Y.roa File: u7AHI9FtRxCgTkIQxBQRVOmuw9Y.roa (raw, json) Hash identifier: Dgv5Mjp1spPBA7Lu5+/arpuOWGA4tO3z3rtXMWqGkMo= Subject key identifier: BB:B0:07:23:D1:6D:47:10:A0:4E:42:10:C4:14:11:54:E9:AE:C3:D6 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D22B51D887530C7E145570295C966 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/u7AHI9FtRxCgTkIQxBQRVOmuw9Y.roa Signing time: Fri 02 Jan 2026 06:20:14 +0000 ROA not before: Fri 02 Jan 2026 06:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210041 IP address blocks: 2a0e:b107:272::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:22:b5:1d:88:75:30:c7:e1:45:57:02:95:c9:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbb00723d16d4710a04e4210c4141154e9aec3d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:75:19:fd:ec:8c:41:82:c7:29:08:95:6b:50: 0d:13:a4:14:fd:f8:e5:16:3f:23:bb:a1:92:b1:3a: 91:cc:4c:79:26:66:bd:ce:aa:e2:fa:00:e2:0e:be: d3:27:03:4d:36:5c:52:f3:71:e8:6d:56:9f:4e:fe: 2a:d3:95:e5:6a:c1:a1:a2:77:c8:d0:c6:d2:4c:9d: 96:45:c5:fd:bf:cf:e8:c2:61:04:05:d8:18:2e:ee: 85:9d:44:aa:56:90:df:ca:a5:5c:ae:3a:8a:b1:61: 64:9c:57:1a:3b:43:4c:bd:29:e7:ec:32:1e:60:e9: 1f:2f:73:69:8f:c7:2f:1e:6d:e8:9c:10:d4:2c:96: d7:0d:d3:0a:21:3f:53:8d:1e:16:e8:d3:7a:23:c6: 98:a2:0d:98:c6:d5:5e:e6:a1:95:57:4c:5d:4a:61: f7:97:7f:ff:33:24:7c:02:68:92:ff:e8:bf:a9:10: 13:ae:e9:9e:eb:6f:9f:de:ae:33:00:19:9f:8e:5a: df:70:dc:6f:3e:2c:f8:a3:7a:06:ab:3d:96:7f:7f: 36:ca:45:f8:4f:39:b0:05:61:28:63:8f:b0:50:3d: 85:28:51:80:16:3f:8d:5e:37:15:b1:33:3b:67:ae: 94:2e:10:28:d1:92:61:76:89:f0:85:0d:2f:96:b8: 70:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B0:07:23:D1:6D:47:10:A0:4E:42:10:C4:14:11:54:E9:AE:C3:D6 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/u7AHI9FtRxCgTkIQxBQRVOmuw9Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:272::/48 Signature Algorithm: sha256WithRSAEncryption b0:e6:26:11:8e:b3:7c:f0:88:ce:4e:3b:c1:b5:3b:88:e9:ac: f8:93:e7:c3:20:10:75:fa:1a:8e:c9:93:3f:1a:46:ac:8b:fb: 90:30:d8:05:e2:90:80:c3:5f:46:d6:0e:d0:e0:9e:55:bb:c5: 8f:42:ee:72:a6:52:02:08:a1:d2:e3:3c:cb:71:f9:6c:e5:41: 06:8f:89:59:8d:30:37:4f:0d:e3:af:09:9a:8d:5a:c5:bb:e4: af:3c:19:e4:21:2f:04:08:60:c2:a4:89:90:a6:8d:d8:47:fb: ae:3d:41:07:14:45:9d:9e:f5:ce:a3:10:12:9f:38:c9:b6:bf: 8e:33:fe:46:7f:a9:5f:75:41:42:fc:c8:bf:2a:cb:7f:0a:62: f4:a2:ae:ab:9f:a8:eb:56:c5:b8:e7:26:e6:da:78:cf:13:13: 39:47:fd:07:c2:b8:d9:a9:2e:86:d3:4c:94:3c:ec:7b:4d:3d: b0:56:cb:c8:e8:7e:1b:f7:ec:24:f5:0e:5e:18:77:9e:15:52: e8:7c:83:7d:57:81:9d:79:c0:27:70:90:1a:6c:91:24:07:a5: 56:d5:71:d4:c7:83:6e:66:3e:81:54:c3:1d:1a:ac:bd:d1:c2: 96:99:11:4f:40:c3:83:22:2d:9c:9d:f9:76:4b:77:58:f9:75: 2b:0a:87:90 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XSK1HYh1MMfhRVcClclmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmIwMDcyM2QxNmQ0NzEwYTA0ZTQyMTBjNDE0MTE1NGU5YWVjM2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHUZ/eyMQYLHKQiVa1ANE6QU/fjl Fj8ju6GSsTqRzEx5Jma9zqri+gDiDr7TJwNNNlxS83HobVafTv4q05XlasGhonfI 0MbSTJ2WRcX9v8/owmEEBdgYLu6FnUSqVpDfyqVcrjqKsWFknFcaO0NMvSnn7DIe YOkfL3Npj8cvHm3onBDULJbXDdMKIT9TjR4W6NN6I8aYog2YxtVe5qGVV0xdSmH3 l3//MyR8AmiS/+i/qRATrume62+f3q4zABmfjlrfcNxvPiz4o3oGqz2Wf382ykX4 TzmwBWEoY4+wUD2FKFGAFj+NXjcVsTM7Z66ULhAo0ZJhdonwhQ0vlrhwVwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLuwByPRbUcQoE5CEMQUEVTprsPWMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvdTdBSEk5RnRSeENnVGtJUXhCUVJWT211dzlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBwJy MA0GCSqGSIb3DQEBCwUAA4IBAQCw5iYRjrN88IjOTjvBtTuI6az4k+fDIBB1+hqO yZM/Gkasi/uQMNgF4pCAw19G1g7Q4J5Vu8WPQu5yplICCKHS4zzLcfls5UEGj4lZ jTA3Tw3jrwmajVrFu+SvPBnkIS8ECGDCpImQpo3YR/uuPUEHFEWdnvXOoxASnzjJ tr+OM/5Gf6lfdUFC/Mi/Kst/CmL0oq6rn6jrVsW45ybm2njPExM5R/0HwrjZqS6G 00yUPOx7TT2wVsvI6H4b9+wk9Q5eGHeeFVLofIN9V4GdecAncJAabJEkB6VW1XHU x4NuZj6BVMMdGqy90cKWmRFPQMODIi2cnfl2S3dY+XUrCoeQ -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:44 2026 by rpki-client