This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/w02QtaKPCbGfEdlrdEynQYVnCxw.roa File: w02QtaKPCbGfEdlrdEynQYVnCxw.roa (raw, json) Hash identifier: NB868lzV+NsqkyC47MHUIGw77btJK5W64W2T8RlKpto= Subject key identifier: C3:4D:90:B5:A2:8F:09:B1:9F:11:D9:6B:74:4C:A7:41:85:67:0B:1C Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CE64C0D53633E4747775C932347B2 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/w02QtaKPCbGfEdlrdEynQYVnCxw.roa Signing time: Fri 02 Jan 2026 06:19:58 +0000 ROA not before: Fri 02 Jan 2026 06:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200866 IP address blocks: 2a0e:b107:1400::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e6:4c:0d:53:63:3e:47:47:77:5c:93:23:47:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c34d90b5a28f09b19f11d96b744ca74185670b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3d:62:2a:ed:c4:f8:16:0d:51:dd:54:89:ee: bb:c1:9b:db:f6:f5:9d:81:87:5d:17:98:91:72:dd: b0:72:d3:93:d8:74:b8:08:88:21:24:cf:93:a9:83: 64:82:a9:ae:34:1d:34:25:ea:25:17:44:51:db:23: 33:e5:9c:5a:05:2f:47:2e:e3:c2:9a:24:ef:77:4b: 85:00:29:2b:db:10:62:3f:ba:bd:38:75:f0:15:d6: d1:44:1d:96:b4:71:c9:21:1b:22:6c:79:80:15:4b: 00:5d:fa:b3:64:94:ea:9f:e7:41:f3:84:29:da:73: ad:08:f3:0f:98:c8:61:eb:cf:03:b1:92:0b:8c:3c: 1a:0b:3f:de:cb:de:ef:fd:2f:22:9c:1d:6a:d8:0e: c6:60:6d:30:58:a6:a3:72:f9:4a:e5:25:8e:b0:fb: b4:c8:d0:64:c2:7e:3d:0c:2b:18:95:4f:48:bb:4e: 6a:1e:d0:68:01:c2:8e:7e:4a:61:da:e5:45:14:47: ea:35:3c:fd:c6:2e:91:89:91:95:b8:e9:c8:ed:c3: 32:9e:db:a2:52:ad:7a:0a:14:27:f7:e4:c2:d8:8c: 5c:6a:65:a5:27:25:b6:e6:69:bd:27:3f:5e:70:52: ea:e8:81:9a:ed:40:18:77:45:21:1f:3a:e7:a5:dd: ed:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:4D:90:B5:A2:8F:09:B1:9F:11:D9:6B:74:4C:A7:41:85:67:0B:1C X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/w02QtaKPCbGfEdlrdEynQYVnCxw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1400::/44 Signature Algorithm: sha256WithRSAEncryption ac:ef:a1:15:fd:c8:4a:5d:94:e0:14:38:39:a8:1d:f8:2a:31: f5:85:05:01:4f:72:eb:f7:62:c4:5e:4e:5e:30:a4:0c:d3:07: fe:00:2e:d5:ee:86:60:00:83:f6:04:f6:72:d2:ae:63:08:32: 08:f3:a2:e9:a2:40:01:0f:3a:15:0a:2a:0f:f5:28:8f:39:e9: 4d:b2:f8:8e:b3:b2:a4:31:61:43:eb:e1:dd:07:1c:12:c8:9f: 47:df:e5:d2:3b:c0:a3:8b:43:ae:16:2a:9d:50:cc:41:03:04: ec:f6:1f:1a:69:4f:a0:74:64:fa:34:e3:1d:c0:23:07:60:cd: 6b:cc:49:e0:44:ef:33:7c:c5:5b:10:90:e5:4d:26:1e:b9:bf: 79:83:47:db:07:af:51:30:03:ab:cc:68:7e:91:13:9a:a6:c6: 63:13:ef:d5:82:cc:24:34:3c:b5:25:e8:d8:c7:30:a2:ca:b3: c5:3e:37:32:1b:e0:ca:ac:1a:04:19:58:9e:a6:91:e6:b7:a1: b1:2c:5d:a1:8c:08:b5:b0:19:23:f3:d4:e2:75:a4:07:11:fc: 53:9d:d7:34:d0:17:79:db:97:05:b7:e0:1c:51:4d:74:e1:6a: e5:3a:32:41:d6:0b:6c:5b:89:d1:16:c4:b5:a2:92:13:4a:93: e4:52:91:e2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XOZMDVNjPkdHd1yTI0eyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzRkOTBiNWEyOGYwOWIxOWYxMWQ5NmI3NDRjYTc0MTg1NjcwYjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvT1iKu3E+BYNUd1Uie67wZvb9vWd gYddF5iRct2wctOT2HS4CIghJM+TqYNkgqmuNB00JeolF0RR2yMz5ZxaBS9HLuPC miTvd0uFACkr2xBiP7q9OHXwFdbRRB2WtHHJIRsibHmAFUsAXfqzZJTqn+dB84Qp 2nOtCPMPmMhh688DsZILjDwaCz/ey97v/S8inB1q2A7GYG0wWKajcvlK5SWOsPu0 yNBkwn49DCsYlU9Iu05qHtBoAcKOfkph2uVFFEfqNTz9xi6RiZGVuOnI7cMyntui Uq16ChQn9+TC2IxcamWlJyW25mm9Jz9ecFLq6IGa7UAYd0UhHzrnpd3tBwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMNNkLWijwmxnxHZa3RMp0GFZwscMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvdzAyUXRhS1BDYkdmRWRscmRFeW5RWVZuQ3h3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxQA MA0GCSqGSIb3DQEBCwUAA4IBAQCs76EV/chKXZTgFDg5qB34KjH1hQUBT3Lr92LE Xk5eMKQM0wf+AC7V7oZgAIP2BPZy0q5jCDII86LpokABDzoVCioP9SiPOelNsviO s7KkMWFD6+HdBxwSyJ9H3+XSO8Cji0OuFiqdUMxBAwTs9h8aaU+gdGT6NOMdwCMH YM1rzEngRO8zfMVbEJDlTSYeub95g0fbB69RMAOrzGh+kROapsZjE+/VgswkNDy1 JejYxzCiyrPFPjcyG+DKrBoEGVieppHmt6GxLF2hjAi1sBkj89TidaQHEfxTndc0 0Bd525cFt+AcUU104WrlOjJB1gtsW4nRFsS1opITSpPkUpHi -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:26 2026 by rpki-client