This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/u_3zSLZ83N-g5dViVgAcDF8qSi4.roa File: u_3zSLZ83N-g5dViVgAcDF8qSi4.roa (raw, json) Hash identifier: 8lL/+Sl2C96kdrrnDsjlckRvIP+ccIN1CNU4Xa5kDkI= Subject key identifier: BB:FD:F3:48:B6:7C:DC:DF:A0:E5:D5:62:56:00:1C:0C:5F:2A:4A:2E Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D50994BE10E6483B0D737C4EF054F Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/u_3zSLZ83N-g5dViVgAcDF8qSi4.roa Signing time: Fri 02 Jan 2026 06:20:26 +0000 ROA not before: Fri 02 Jan 2026 06:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212360 IP address blocks: 2a0e:b107:1350::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:50:99:4b:e1:0e:64:83:b0:d7:37:c4:ef:05:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbfdf348b67cdcdfa0e5d56256001c0c5f2a4a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ff:27:18:6b:b9:14:ed:a8:69:63:b3:e9:f4: 58:a3:67:94:4b:f6:8f:a8:24:8b:d7:c2:71:67:ce: 76:76:2f:d5:c9:3d:bd:b3:72:20:b0:6a:8c:dd:5c: d6:06:70:8c:a3:97:8e:70:eb:f6:5b:80:2d:67:29: 2d:45:e4:15:e2:8b:48:1b:f2:be:c8:df:95:20:44: 1d:a1:1d:6c:6b:5b:dd:d3:ef:c3:aa:30:07:0e:bc: 9b:b5:aa:26:02:a5:33:c7:a3:d7:00:d4:b1:46:e6: 53:73:1a:b7:91:fb:c8:06:7c:d7:2a:4d:ea:54:47: fa:d1:3e:73:a6:32:8e:91:4f:8a:f7:4c:40:77:fb: e9:ca:e6:49:a8:d8:ce:89:83:14:d4:75:29:42:2e: 1c:22:3d:ef:3b:f6:3c:9a:07:9c:79:67:63:15:ef: 3f:bf:f3:25:50:8d:10:bf:a1:c8:3f:06:b2:12:cc: 3e:f9:67:e3:92:bc:90:a3:62:8a:88:13:43:7f:c9: a6:83:36:54:35:99:93:9f:5c:18:74:b6:a3:20:fb: a8:4b:f3:af:87:39:55:57:5b:11:76:bd:07:20:53: 7d:06:be:94:f6:d3:5d:fe:c1:bc:ac:f3:de:0d:b3: 6d:de:5a:9d:fc:05:7c:22:e8:1f:62:ea:f5:a6:f9: 8b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:FD:F3:48:B6:7C:DC:DF:A0:E5:D5:62:56:00:1C:0C:5F:2A:4A:2E X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/u_3zSLZ83N-g5dViVgAcDF8qSi4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1350::/44 Signature Algorithm: sha256WithRSAEncryption 72:d9:f3:eb:d6:47:4d:f4:33:6a:e6:7d:f5:f5:7e:d8:8b:aa: 68:0c:cf:5e:ea:12:bc:c6:84:db:07:87:4e:a1:f8:8f:cb:fe: a1:72:b3:16:56:ed:fb:db:62:da:cf:a5:57:65:13:b3:8d:84: bb:76:9e:3c:3c:46:46:25:43:98:f7:0f:90:d0:2a:2b:bc:b4: 4e:15:08:9f:69:80:48:f7:1f:4e:97:00:da:23:f3:8a:a9:2d: c4:ec:04:a5:d2:04:cc:5d:56:c2:2a:cf:6d:38:cd:c4:97:a0: 5a:34:63:4c:1b:ec:4a:ae:d4:1a:29:3a:b0:8b:03:d1:9d:15: ea:af:db:dc:80:49:ba:cf:fc:f4:c0:86:f4:0b:df:ed:b9:79: f7:20:76:48:4e:ba:1e:e3:5c:fe:f1:aa:88:84:21:c4:58:eb: b8:b9:f2:da:15:88:48:59:8c:4e:9b:82:4f:4b:ce:cb:df:d1: c8:92:c1:21:c0:16:ad:ba:89:04:37:bd:28:98:6b:3f:a1:d3: 0a:14:0b:df:df:bc:17:8f:ec:8c:fb:d6:82:f7:16:67:da:53: ae:ff:d9:19:d7:49:47:88:36:3c:8d:c2:6b:64:0a:b4:74:f5: 8c:37:39:1e:2e:cc:d4:9b:97:0c:cd:77:2b:57:21:8a:c4:28: 2a:8a:be:0b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XVCZS+EOZIOw1zfE7wVPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmZkZjM0OGI2N2NkY2RmYTBlNWQ1NjI1NjAwMWMwYzVmMmE0YTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApv8nGGu5FO2oaWOz6fRYo2eUS/aP qCSL18JxZ852di/VyT29s3IgsGqM3VzWBnCMo5eOcOv2W4AtZyktReQV4otIG/K+ yN+VIEQdoR1sa1vd0+/DqjAHDrybtaomAqUzx6PXANSxRuZTcxq3kfvIBnzXKk3q VEf60T5zpjKOkU+K90xAd/vpyuZJqNjOiYMU1HUpQi4cIj3vO/Y8mgeceWdjFe8/ v/MlUI0Qv6HIPwayEsw++WfjkryQo2KKiBNDf8mmgzZUNZmTn1wYdLajIPuoS/Ov hzlVV1sRdr0HIFN9Br6U9tNd/sG8rPPeDbNt3lqd/AV8IugfYur1pvmLyQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLv980i2fNzfoOXVYlYAHAxfKkouMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvdV8zelNMWjgzTi1nNWRWaVZnQWNERjhxU2k0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxNQ MA0GCSqGSIb3DQEBCwUAA4IBAQBy2fPr1kdN9DNq5n319X7Yi6poDM9e6hK8xoTb B4dOofiPy/6hcrMWVu3722Laz6VXZROzjYS7dp48PEZGJUOY9w+Q0CorvLROFQif aYBI9x9OlwDaI/OKqS3E7ASl0gTMXVbCKs9tOM3El6BaNGNMG+xKrtQaKTqwiwPR nRXqr9vcgEm6z/z0wIb0C9/tuXn3IHZITroe41z+8aqIhCHEWOu4ufLaFYhIWYxO m4JPS87L39HIksEhwBatuokEN70omGs/odMKFAvf37wXj+yM+9aC9xZn2lOu/9kZ 10lHiDY8jcJrZAq0dPWMNzkeLszUm5cMzXcrVyGKxCgqir4L -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:26 2026 by rpki-client