This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wY5K3KlY1x7LgilChYcoR1lIUS4.roa File: wY5K3KlY1x7LgilChYcoR1lIUS4.roa (raw, json) Hash identifier: irA5PNCkIwDR7jFyZKtjnoBLY0XuQUCq+CSMJW4OSW0= Subject key identifier: C1:8E:4A:DC:A9:58:D7:1E:CB:82:29:42:85:87:28:47:59:48:51:2E Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CFD0AB4BC89669E48F8AD62C76336 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wY5K3KlY1x7LgilChYcoR1lIUS4.roa Signing time: Fri 02 Jan 2026 06:20:04 +0000 ROA not before: Fri 02 Jan 2026 06:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204729 IP address blocks: 2a0e:b107:1b9d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:fd:0a:b4:bc:89:66:9e:48:f8:ad:62:c7:63:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c18e4adca958d71ecb822942858728475948512e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:87:56:ec:a9:a0:3b:12:0d:a0:54:56:71:a2: a5:d6:f7:cf:bf:49:73:08:aa:9c:8b:c8:0f:10:50: aa:2d:5e:ea:e2:25:6a:a6:fd:c6:7e:d1:21:96:9d: 79:13:c0:7b:3e:7a:df:ae:12:f4:8a:d4:cc:b0:2d: 37:16:0c:a7:5c:93:79:8c:37:40:c8:ef:7d:0f:9b: 2d:4b:1b:d0:82:3b:ff:f9:a3:b4:c5:9a:7b:31:49: 88:17:4e:9e:0a:ed:fe:ae:1a:be:59:e2:79:4e:be: b1:0d:64:f5:d6:a0:59:3f:da:a3:76:e2:69:51:42: 48:1a:b2:35:13:ba:46:c9:d5:2a:4c:78:ce:f8:74: be:98:fd:dd:a8:03:db:ec:5c:fe:1b:45:fb:34:1e: 25:3f:8f:a4:c4:ea:aa:ab:53:8d:d3:59:e1:fe:ec: d4:98:4a:cd:a9:5f:5b:c1:6a:66:25:de:38:0f:e6: 93:6a:6c:d7:bb:83:ae:8c:2a:ec:5e:99:5a:71:a6: 0c:bb:08:c5:5a:be:cb:49:c6:2c:18:25:8e:c2:91: 0b:c8:4f:dd:03:dd:07:b5:8d:a6:a0:80:84:37:fc: 2e:62:75:fc:f0:b7:e6:34:b9:f8:dc:93:f5:7f:3a: 2f:3b:52:2e:18:e1:bf:f4:33:61:53:c5:47:89:8d: 26:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:8E:4A:DC:A9:58:D7:1E:CB:82:29:42:85:87:28:47:59:48:51:2E X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wY5K3KlY1x7LgilChYcoR1lIUS4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1b9d::/48 Signature Algorithm: sha256WithRSAEncryption 26:35:45:96:17:01:d7:89:e3:77:b4:8a:a2:ad:8f:68:4f:0c: b4:67:db:f6:e1:c9:5d:22:58:cc:34:5b:74:38:04:a5:eb:20: fd:9c:ba:66:57:79:e1:25:9d:c9:2d:6b:49:12:b9:6f:cd:38: 5f:1a:48:4c:3e:c8:eb:3f:ce:f1:6d:40:6e:a5:01:b8:a5:34: aa:b8:08:a6:f8:54:3e:ad:dd:5b:36:67:72:70:10:33:b8:0a: 1c:05:9d:11:ac:99:db:f9:38:4d:e7:48:4a:c6:b7:4b:de:53: 9f:e4:76:4f:a9:dc:60:eb:11:12:17:ee:e5:45:46:4a:c7:0a: 3b:66:b6:aa:ea:11:c0:4d:ac:99:93:c2:28:00:67:3c:24:1f: 80:1f:a9:93:1c:5b:b2:82:1a:12:ed:4c:df:8c:35:de:47:99: 12:62:08:c5:fd:77:5c:42:28:7c:d2:6b:d8:ba:ee:49:7c:70: 41:98:12:35:3e:31:56:02:83:cc:da:70:ce:70:83:81:ad:b4: ae:e2:fe:b9:c2:bb:4b:a0:fb:1a:c1:5b:66:12:be:46:02:39: b3:54:0a:8c:6a:0d:0b:cc:7b:a5:1d:4c:95:89:5b:dc:43:1e: 9c:23:c4:74:f2:e8:39:c9:6f:93:71:07:cc:e9:ba:57:b2:1e: 86:74:14:dd -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XP0KtLyJZp5I+K1ix2M2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMThlNGFkY2E5NThkNzFlY2I4MjI5NDI4NTg3Mjg0NzU5NDg1MTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YdW7KmgOxINoFRWcaKl1vfPv0lz CKqci8gPEFCqLV7q4iVqpv3GftEhlp15E8B7PnrfrhL0itTMsC03FgynXJN5jDdA yO99D5stSxvQgjv/+aO0xZp7MUmIF06eCu3+rhq+WeJ5Tr6xDWT11qBZP9qjduJp UUJIGrI1E7pGydUqTHjO+HS+mP3dqAPb7Fz+G0X7NB4lP4+kxOqqq1ON01nh/uzU mErNqV9bwWpmJd44D+aTamzXu4OujCrsXplacaYMuwjFWr7LScYsGCWOwpELyE/d A90HtY2moICEN/wuYnX88LfmNLn43JP1fzovO1IuGOG/9DNhU8VHiY0mpwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMGOStypWNcey4IpQoWHKEdZSFEuMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvd1k1SzNLbFkxeDdMZ2lsQ2hZY29SMWxJVVM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBxud MA0GCSqGSIb3DQEBCwUAA4IBAQAmNUWWFwHXieN3tIqirY9oTwy0Z9v24cldIljM NFt0OASl6yD9nLpmV3nhJZ3JLWtJErlvzThfGkhMPsjrP87xbUBupQG4pTSquAim +FQ+rd1bNmdycBAzuAocBZ0RrJnb+ThN50hKxrdL3lOf5HZPqdxg6xESF+7lRUZK xwo7Zraq6hHATayZk8IoAGc8JB+AH6mTHFuyghoS7UzfjDXeR5kSYgjF/XdcQih8 0mvYuu5JfHBBmBI1PjFWAoPM2nDOcIOBrbSu4v65wrtLoPsawVtmEr5GAjmzVAqM ag0LzHulHUyViVvcQx6cI8R08ug5yW+TcQfM6bpXsh6GdBTd -----END CERTIFICATE-----Generated at Fri Jan 9 13:11:59 2026 by rpki-client