This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/v5vo9pfKOLC2WShJ4sZmw7TdzQM.roa File: v5vo9pfKOLC2WShJ4sZmw7TdzQM.roa (raw, json) Hash identifier: 1jAySAdhWfbN2O11EJwEGJE/RzC6qIE9BO3znEEK6lA= Subject key identifier: BF:9B:E8:F6:97:CA:38:B0:B6:59:28:49:E2:C6:66:C3:B4:DD:CD:03 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D19B2BBD22DDE7A3AD9F56C1A9333 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/v5vo9pfKOLC2WShJ4sZmw7TdzQM.roa Signing time: Fri 02 Jan 2026 06:20:12 +0000 ROA not before: Fri 02 Jan 2026 06:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209105 IP address blocks: 2a10:2f00:17f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:19:b2:bb:d2:2d:de:7a:3a:d9:f5:6c:1a:93:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf9be8f697ca38b0b6592849e2c666c3b4ddcd03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:06:ff:b2:25:c5:9b:66:1f:eb:cd:d9:9b:fc: 4f:2e:c1:1a:b2:33:b4:f2:58:09:4f:16:74:c5:a4: 54:09:8c:d5:46:76:a5:0d:0b:61:52:08:f8:a8:35: ab:8f:3e:09:51:bd:bf:a3:85:ed:46:db:23:85:05: 41:bb:f4:12:4e:ff:c6:7e:57:6d:b9:f8:0c:79:1b: f2:f0:7d:79:65:fc:6b:6d:93:0f:03:3d:56:7b:6c: 92:90:af:7e:21:68:38:68:2a:1a:58:12:3e:2f:8e: e0:97:26:d7:ce:bd:01:44:23:81:25:ae:c9:7f:a0: ec:91:70:87:b2:1d:de:c8:d8:e5:bf:8b:5a:fe:1f: 76:4d:80:cd:d7:f6:27:90:38:1d:68:88:3e:f0:ad: ef:00:69:6d:9c:50:24:a6:e7:a5:a9:f1:19:13:dc: 64:04:a4:de:50:93:be:19:50:0b:66:f5:8e:33:0c: e7:3a:0e:5c:c3:67:44:85:d0:7a:ac:3a:eb:e0:07: 70:ab:4d:ce:88:af:bc:5c:40:ce:9b:ad:c5:3e:29: 9a:75:ec:1f:a4:2c:fc:7d:fc:46:0d:38:eb:20:3c: 9e:8b:51:05:24:a6:4d:38:91:28:25:9e:4f:52:a2: 89:bc:22:da:6a:8a:48:f2:74:5c:92:b2:0a:ce:d7: 1a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:9B:E8:F6:97:CA:38:B0:B6:59:28:49:E2:C6:66:C3:B4:DD:CD:03 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/v5vo9pfKOLC2WShJ4sZmw7TdzQM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:2f00:17f::/48 Signature Algorithm: sha256WithRSAEncryption 01:2e:78:cd:08:c8:a6:a3:4d:41:ad:25:73:a9:85:1d:c0:83: fc:0c:71:a8:eb:cf:de:95:3b:a6:c6:4b:55:c6:2b:57:fa:59: d0:54:6d:a5:87:c3:41:c3:bd:fb:41:74:c9:94:2c:b6:72:1b: 03:dc:25:7e:66:56:e4:bb:46:c3:a8:b2:88:74:26:d0:9f:8d: cb:d1:05:97:53:b5:4c:e2:25:41:c1:15:54:b6:e7:47:5c:6d: 8c:8b:80:ea:09:b1:3e:0d:1a:b2:58:ca:13:56:9b:c9:90:6a: e2:ce:b7:ec:4a:b3:ed:51:a1:8c:ef:07:6b:c8:2b:f8:a0:46: 1e:fa:a0:67:2f:22:bc:6c:a7:18:e3:34:e7:2e:06:cb:7b:d6: 70:2b:46:c2:3b:52:8d:55:b3:c6:b4:ab:89:f6:9f:4f:8f:5d: 3b:06:c3:44:83:fb:f0:99:3a:13:3a:5e:b8:fe:6d:2e:f7:0e: 11:03:bf:63:2c:fa:21:7b:1f:c5:b8:4f:89:06:95:9e:57:b5: 1b:7c:58:c3:0b:37:94:67:ef:0c:bb:5f:9c:dc:6f:03:7d:cf: c6:24:e5:af:20:02:2f:c0:6f:09:b7:10:08:2f:6b:20:7e:d2: 6e:ac:ba:1c:c9:d1:bb:93:94:6f:11:ad:59:19:33:e4:e2:34: 23:70:ce:2b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XRmyu9It3no62fVsGpMzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjliZThmNjk3Y2EzOGIwYjY1OTI4NDllMmM2NjZjM2I0ZGRjZDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Qb/siXFm2Yf683Zm/xPLsEasjO0 8lgJTxZ0xaRUCYzVRnalDQthUgj4qDWrjz4JUb2/o4XtRtsjhQVBu/QSTv/Gfldt ufgMeRvy8H15ZfxrbZMPAz1We2ySkK9+IWg4aCoaWBI+L47glybXzr0BRCOBJa7J f6DskXCHsh3eyNjlv4ta/h92TYDN1/YnkDgdaIg+8K3vAGltnFAkpuelqfEZE9xk BKTeUJO+GVALZvWOMwznOg5cw2dEhdB6rDrr4Adwq03OiK+8XEDOm63FPimadewf pCz8ffxGDTjrIDyei1EFJKZNOJEoJZ5PUqKJvCLaaopI8nRckrIKztcafwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFL+b6PaXyjiwtlkoSeLGZsO03c0DMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvdjV2bzlwZktPTEMyV1NoSjRzWm13N1RkelFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAvAAF/ MA0GCSqGSIb3DQEBCwUAA4IBAQABLnjNCMimo01BrSVzqYUdwIP8DHGo68/elTum xktVxitX+lnQVG2lh8NBw737QXTJlCy2chsD3CV+Zlbku0bDqLKIdCbQn43L0QWX U7VM4iVBwRVUtudHXG2Mi4DqCbE+DRqyWMoTVpvJkGrizrfsSrPtUaGM7wdryCv4 oEYe+qBnLyK8bKcY4zTnLgbLe9ZwK0bCO1KNVbPGtKuJ9p9Pj107BsNEg/vwmToT Ol64/m0u9w4RA79jLPohex/FuE+JBpWeV7UbfFjDCzeUZ+8Mu1+c3G8Dfc/GJOWv IAIvwG8JtxAIL2sgftJurLocydG7k5RvEa1ZGTPk4jQjcM4r -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:24 2026 by rpki-client