This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uHjv7sqLjaSv5_k4FvRlGg-3FjA.roa File: uHjv7sqLjaSv5_k4FvRlGg-3FjA.roa (raw, json) Hash identifier: 2dO49W6Q4ETcYhmhH8SgZyhd5+BrWrE2y7VAKp9Vu+8= Subject key identifier: B8:78:EF:EE:CA:8B:8D:A4:AF:E7:F9:38:16:F4:65:1A:0F:B7:16:30 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CB9BF62FDB278B5A9B7ABAE328E12 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uHjv7sqLjaSv5_k4FvRlGg-3FjA.roa Signing time: Fri 02 Jan 2026 06:19:47 +0000 ROA not before: Fri 02 Jan 2026 06:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53667 IP address blocks: 2a06:de05:6000::/38 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b9:bf:62:fd:b2:78:b5:a9:b7:ab:ae:32:8e:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b878efeeca8b8da4afe7f93816f4651a0fb71630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f3:e3:77:f8:92:6a:f2:d1:cc:7a:1d:a9:7a: 60:97:23:a6:ba:3a:a8:57:56:e9:a7:63:6b:30:93: 0b:d3:7d:d3:41:17:df:49:ea:ba:0e:9a:68:5e:6f: 02:2d:d8:03:2f:e5:09:11:2d:6f:d1:b0:b3:47:59: a2:5b:7f:e0:ae:fc:56:8e:39:1b:1b:3c:ca:ec:c8: e8:08:dc:06:bb:00:f5:7a:5f:4d:3f:86:ac:20:a7: 57:a0:d2:f1:50:b8:c1:7d:16:cd:10:c9:03:01:30: f0:45:7a:28:4b:eb:31:bf:8c:83:f4:b1:0c:be:25: c7:74:1a:37:bc:22:84:66:12:55:5d:70:17:b9:ce: 64:07:54:83:fd:24:f4:59:8d:ba:30:88:a2:af:65: eb:c0:a4:71:1d:b5:7e:f6:68:4e:93:5b:dc:48:b8: cc:13:1e:5b:e3:c2:1f:18:aa:44:fa:71:65:82:ed: 3b:b9:4d:9c:2c:11:79:ff:4d:8b:69:64:6f:04:76: 95:6b:8a:04:d0:4d:88:33:5e:02:75:c9:80:2f:f1: b0:25:a1:38:a6:5c:df:e5:d5:a4:d3:98:4c:09:87: 87:87:44:fd:1f:36:5d:3d:3b:a1:c9:0c:e4:b5:ec: 5d:a0:9f:ee:99:39:1b:d6:62:45:64:c8:cb:a5:17: 00:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:78:EF:EE:CA:8B:8D:A4:AF:E7:F9:38:16:F4:65:1A:0F:B7:16:30 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uHjv7sqLjaSv5_k4FvRlGg-3FjA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:de05:6000::/38 Signature Algorithm: sha256WithRSAEncryption 9a:ad:fe:11:fe:fe:31:46:40:8b:ad:c5:a9:32:46:67:0a:23: fc:d3:ff:38:09:18:73:a1:59:a2:5a:f7:69:07:fa:31:fe:ca: c1:bb:b3:ad:31:84:f0:70:30:ec:37:67:ab:d2:c4:d4:99:9a: 87:dc:57:a7:6d:2e:79:d2:d8:92:1b:dc:a0:cc:bd:ec:0e:75: ac:cd:2d:90:56:87:a2:31:e0:6f:ce:cb:34:59:41:df:8e:c7: d2:27:cd:d1:40:e8:77:a7:ff:9b:32:1a:16:5e:57:f8:6a:32: f3:68:03:04:3d:39:12:0e:5f:c8:75:41:0c:6a:80:4b:a8:1f: 93:5e:d7:2a:2d:ad:61:cd:37:b8:ae:de:ce:c0:0e:4c:e4:42: e2:12:e4:25:a4:88:52:42:64:0f:07:09:2f:6e:cc:68:3a:00: eb:31:3b:12:5a:c3:20:80:96:27:0e:2d:6b:28:03:b1:bf:a4: 41:d1:9a:32:81:12:76:42:73:f5:53:4e:95:c1:dc:2f:36:e6: 14:cc:b7:70:74:b2:a1:df:73:ac:93:66:d6:36:5d:ce:99:cf: 89:97:a3:e2:7e:5c:78:fe:83:f3:f9:ba:f2:67:13:53:44:43: 59:2f:ef:62:39:8b:dd:f4:c5:31:fc:56:b3:38:15:b8:b8:04: 95:e6:70:cd -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt9XLm/Yv2yeLWpt6uuMo4SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODc4ZWZlZWNhOGI4ZGE0YWZlN2Y5MzgxNmY0NjUxYTBmYjcxNjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofPjd/iSavLRzHodqXpglyOmujqo V1bpp2NrMJML033TQRffSeq6DppoXm8CLdgDL+UJES1v0bCzR1miW3/grvxWjjkb GzzK7MjoCNwGuwD1el9NP4asIKdXoNLxULjBfRbNEMkDATDwRXooS+sxv4yD9LEM viXHdBo3vCKEZhJVXXAXuc5kB1SD/ST0WY26MIiir2XrwKRxHbV+9mhOk1vcSLjM Ex5b48IfGKpE+nFlgu07uU2cLBF5/02LaWRvBHaVa4oE0E2IM14CdcmAL/GwJaE4 plzf5dWk05hMCYeHh0T9HzZdPTuhyQzktexdoJ/umTkb1mJFZMjLpRcA5wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFLh47+7Ki42kr+f5OBb0ZRoPtxYwMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvdUhqdjdzcUxqYVN2NV9rNEZ2UmxHZy0zRmpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKgbeBWAw DQYJKoZIhvcNAQELBQADggEBAJqt/hH+/jFGQIutxakyRmcKI/zT/zgJGHOhWaJa 92kH+jH+ysG7s60xhPBwMOw3Z6vSxNSZmofcV6dtLnnS2JIb3KDMvewOdazNLZBW h6Ix4G/OyzRZQd+Ox9InzdFA6Hen/5syGhZeV/hqMvNoAwQ9ORIOX8h1QQxqgEuo H5Ne1yotrWHNN7iu3s7ADkzkQuIS5CWkiFJCZA8HCS9uzGg6AOsxOxJawyCAlicO LWsoA7G/pEHRmjKBEnZCc/VTTpXB3C825hTMt3B0sqHfc6yTZtY2Xc6Zz4mXo+J+ XHj+g/P5uvJnE1NEQ1kv72I5i930xTH8VrM4Fbi4BJXmcM0= -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:04 2026 by rpki-client