This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vUl8lw-y6q8Asyg0GJ4NcroRgj8.roa File: vUl8lw-y6q8Asyg0GJ4NcroRgj8.roa (raw, json) Hash identifier: QTdvwVV5xXVJMb2aMCxf7NHbZYdJQoVTqFeQYqwxgmw= Subject key identifier: BD:49:7C:97:0F:B2:EA:AF:00:B3:28:34:18:9E:0D:72:BA:11:82:3F Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D530E3A56475516E586EAA5927BDB Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vUl8lw-y6q8Asyg0GJ4NcroRgj8.roa Signing time: Fri 02 Jan 2026 06:20:26 +0000 ROA not before: Fri 02 Jan 2026 06:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212516 IP address blocks: 2a0e:97c0:64c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:53:0e:3a:56:47:55:16:e5:86:ea:a5:92:7b:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd497c970fb2eaaf00b32834189e0d72ba11823f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:dd:20:a0:a7:89:42:3a:4d:57:e5:4f:cd:7a: 23:ea:1c:4c:ce:d8:7d:d0:9f:17:bd:52:74:ad:8e: 37:f2:4c:4a:bf:e6:a3:5e:06:9a:9d:d5:56:1b:12: 45:5c:01:ee:3e:92:84:17:1e:7f:b1:dd:17:4a:5a: 5f:88:73:40:d4:3e:0f:17:4b:4b:fa:09:18:cf:3a: 15:22:61:d8:10:62:f2:8c:29:df:57:a7:20:a8:17: 39:25:34:19:4e:3f:b9:dc:28:43:f8:5e:79:c3:4f: e1:8b:65:7b:48:63:01:68:10:de:fd:17:3b:b2:a9: 9f:0c:d1:cd:e5:f9:cd:b9:f7:85:5c:52:cf:39:82: 61:e4:43:ae:65:51:0f:22:af:eb:b2:bb:eb:4b:9d: a6:22:86:3b:e3:da:a7:54:66:ff:62:37:4b:d4:40: b0:e7:1c:fc:36:87:b6:36:46:84:6f:6f:13:db:9c: 1b:03:09:36:2e:32:80:b7:4d:e0:39:8b:4a:2f:87: 53:13:c3:8b:ec:65:3e:1a:e0:df:71:f4:97:d6:be: 50:e2:88:6c:f1:21:e7:38:09:f4:06:1c:32:c4:c0: cd:86:e6:6f:08:ca:8e:77:ad:9b:06:15:ef:33:14: fc:72:7f:12:2f:c0:a0:90:39:af:20:03:6e:80:65: 6c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:49:7C:97:0F:B2:EA:AF:00:B3:28:34:18:9E:0D:72:BA:11:82:3F X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vUl8lw-y6q8Asyg0GJ4NcroRgj8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:64c::/48 Signature Algorithm: sha256WithRSAEncryption 98:1a:3b:df:e8:99:1e:c0:43:80:6c:5b:6e:df:b4:40:28:aa: b0:ac:86:c1:71:8f:15:44:ef:7a:89:cb:c4:b5:c1:92:5c:19: 01:80:24:8f:8d:27:69:58:6a:11:1f:cc:52:89:80:cd:6a:93: d1:6e:f6:10:4f:9c:3f:75:75:96:fc:a2:1c:38:ab:28:4c:ea: 11:8d:98:31:d8:0b:e9:f9:79:04:8d:ea:bb:a9:3b:fd:dc:f5: da:60:08:77:10:25:18:b6:da:55:4d:66:2d:28:eb:c1:48:4d: 4a:79:d5:70:0e:ba:81:65:cd:d9:25:b7:c4:49:36:c7:fa:05: ab:43:23:4f:08:26:5d:88:bd:ca:a0:d0:8c:a0:71:42:39:de: ba:a3:27:49:05:59:8a:b6:e8:19:93:cf:ea:d0:8f:9e:3a:d3: 8a:ba:6c:c0:c4:7c:4d:f7:c9:56:be:70:a2:8c:52:f1:8a:3b: 6c:1e:96:d1:ee:3a:2e:7c:b0:4e:ca:1d:d8:2b:57:cf:f6:6b: 9b:9a:88:c5:16:d5:94:18:fb:fd:86:6e:89:c8:0d:68:e5:13: f2:49:99:f3:42:3a:78:8b:4b:1b:9c:5a:aa:4f:5e:7a:5f:17: ab:26:6e:29:ff:a0:2b:25:c9:58:33:f0:b8:73:46:3d:8c:b2: bb:62:a7:aa -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XVMOOlZHVRblhuqlknvbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDQ5N2M5NzBmYjJlYWFmMDBiMzI4MzQxODllMGQ3MmJhMTE4MjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlt0goKeJQjpNV+VPzXoj6hxMzth9 0J8XvVJ0rY438kxKv+ajXgaandVWGxJFXAHuPpKEFx5/sd0XSlpfiHNA1D4PF0tL +gkYzzoVImHYEGLyjCnfV6cgqBc5JTQZTj+53ChD+F55w0/hi2V7SGMBaBDe/Rc7 sqmfDNHN5fnNufeFXFLPOYJh5EOuZVEPIq/rsrvrS52mIoY749qnVGb/YjdL1ECw 5xz8Noe2NkaEb28T25wbAwk2LjKAt03gOYtKL4dTE8OL7GU+GuDfcfSX1r5Q4ohs 8SHnOAn0BhwyxMDNhuZvCMqOd62bBhXvMxT8cn8SL8CgkDmvIANugGVsMwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFL1JfJcPsuqvALMoNBieDXK6EYI/MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvdlVsOGx3LXk2cThBc3lnMEdKNE5jcm9SZ2o4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6XwAZM MA0GCSqGSIb3DQEBCwUAA4IBAQCYGjvf6JkewEOAbFtu37RAKKqwrIbBcY8VRO96 icvEtcGSXBkBgCSPjSdpWGoRH8xSiYDNapPRbvYQT5w/dXWW/KIcOKsoTOoRjZgx 2Avp+XkEjeq7qTv93PXaYAh3ECUYttpVTWYtKOvBSE1KedVwDrqBZc3ZJbfESTbH +gWrQyNPCCZdiL3KoNCMoHFCOd66oydJBVmKtugZk8/q0I+eOtOKumzAxHxN98lW vnCijFLxijtsHpbR7joufLBOyh3YK1fP9mubmojFFtWUGPv9hm6JyA1o5RPySZnz Qjp4i0sbnFqqT156XxerJm4p/6ArJclYM/C4c0Y9jLK7Yqeq -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:43 2026 by rpki-client