This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wbZ7g6YOr-ysS7odJ8s1x971UbQ.roa File: wbZ7g6YOr-ysS7odJ8s1x971UbQ.roa (raw, json) Hash identifier: /1Ll9EBpDaCBlF4K4l7B53mwFJWFDXl8tbWOwEX8A3I= Subject key identifier: C1:B6:7B:83:A6:0E:AF:EC:AC:4B:BA:1D:27:CB:35:C7:DE:F5:51:B4 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CD3CDB573A4D99A650A9BEAA45E1F Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wbZ7g6YOr-ysS7odJ8s1x971UbQ.roa Signing time: Fri 02 Jan 2026 06:19:54 +0000 ROA not before: Fri 02 Jan 2026 06:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 151202 IP address blocks: 2a10:ccc0:cc0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d3:cd:b5:73:a4:d9:9a:65:0a:9b:ea:a4:5e:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1b67b83a60eafecac4bba1d27cb35c7def551b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d3:a3:7e:70:10:0e:5a:41:23:4e:e4:dc:1c: 07:27:58:2a:ff:f2:ae:ef:2e:be:ce:0b:ea:c8:be: 6c:a1:fa:45:75:dd:c1:f2:72:f2:1e:3d:38:cf:c9: 73:d8:ad:cc:94:77:f5:c4:63:31:5b:09:2e:45:74: 2f:3f:79:89:2c:57:42:31:ae:4d:e4:be:67:73:e7: c6:79:4e:61:9e:6e:77:ce:bd:83:4f:61:92:23:d8: be:f4:54:ca:4e:4d:8c:61:92:01:93:22:25:94:ff: 78:b3:11:39:20:13:72:28:d7:07:c4:ff:07:52:7b: 5a:73:e7:22:f0:fd:26:f9:97:98:c2:f7:b0:a1:42: 26:19:6f:e7:92:a4:ea:27:e5:24:27:b4:19:7c:cd: 88:cc:d1:03:50:4d:f1:1d:b2:95:c0:13:12:db:9f: cd:9a:1a:06:a4:44:78:a6:7f:83:dc:17:f8:a5:c4: b1:9a:38:07:1b:24:43:f1:f5:97:6a:04:97:fb:f2: 65:34:cc:4d:28:c2:89:69:9b:6f:d2:8f:4a:02:0e: 01:23:a6:1a:48:62:6a:f2:c0:fc:53:fd:49:bb:77: 1e:d4:6e:45:ef:23:7e:e4:2d:9e:1d:3e:ee:93:39: 4f:2c:e2:cb:17:0b:b7:83:8c:e5:22:05:69:f6:45: a1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B6:7B:83:A6:0E:AF:EC:AC:4B:BA:1D:27:CB:35:C7:DE:F5:51:B4 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wbZ7g6YOr-ysS7odJ8s1x971UbQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:ccc0:cc0::/44 Signature Algorithm: sha256WithRSAEncryption 3b:04:40:d9:42:5d:81:37:1c:b4:21:1d:5f:9b:c6:7d:f0:81: 4a:8d:7b:fc:23:06:eb:f7:4b:ea:59:2a:85:df:ec:01:58:a0: e3:13:0a:2e:49:9c:8b:d6:03:19:8f:5d:e1:89:91:89:36:01: b8:8b:b9:b2:44:70:18:d3:be:d6:3f:fa:48:b8:99:f3:d3:ef: 69:4b:0d:81:26:1f:88:94:17:0b:aa:ee:43:97:99:8f:3f:01: 61:e3:78:3e:22:bc:2a:50:58:bb:88:b9:a9:01:ee:b7:a0:26: 40:d5:4a:8e:be:b4:52:a9:48:31:37:a2:e0:ec:80:5f:d4:04: 57:a2:1c:e8:58:d9:bb:0d:2d:42:00:30:11:fa:e2:00:42:c9: f6:96:94:4f:55:ff:59:fb:7a:02:90:41:c5:c9:5b:f0:5a:a0: e5:8e:e2:9a:f7:ae:03:05:46:76:74:90:a7:a2:38:f0:4b:e2: 4e:64:1a:ae:2f:a2:31:ca:ba:11:d5:eb:06:6b:40:a2:43:8e: 5d:0b:4e:69:12:26:70:b2:b8:d1:a9:2f:54:ae:c2:f3:7b:15: f6:da:17:7d:98:95:05:58:fd:0f:c1:43:3e:ac:62:e0:72:54: 3b:52:e4:3c:b8:22:15:ec:0e:13:79:82:ea:73:7a:28:f1:39: c4:15:99:57 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XNPNtXOk2ZplCpvqpF4fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWI2N2I4M2E2MGVhZmVjYWM0YmJhMWQyN2NiMzVjN2RlZjU1MWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNOjfnAQDlpBI07k3BwHJ1gq//Ku 7y6+zgvqyL5sofpFdd3B8nLyHj04z8lz2K3MlHf1xGMxWwkuRXQvP3mJLFdCMa5N 5L5nc+fGeU5hnm53zr2DT2GSI9i+9FTKTk2MYZIBkyIllP94sxE5IBNyKNcHxP8H Untac+ci8P0m+ZeYwvewoUImGW/nkqTqJ+UkJ7QZfM2IzNEDUE3xHbKVwBMS25/N mhoGpER4pn+D3Bf4pcSxmjgHGyRD8fWXagSX+/JlNMxNKMKJaZtv0o9KAg4BI6Ya SGJq8sD8U/1Ju3ce1G5F7yN+5C2eHT7ukzlPLOLLFwu3g4zlIgVp9kWhiQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMG2e4OmDq/srEu6HSfLNcfe9VG0MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvd2JaN2c2WU9yLXlzUzdvZEo4czF4OTcxVWJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhDMwAzA MA0GCSqGSIb3DQEBCwUAA4IBAQA7BEDZQl2BNxy0IR1fm8Z98IFKjXv8Iwbr90vq WSqF3+wBWKDjEwouSZyL1gMZj13hiZGJNgG4i7myRHAY077WP/pIuJnz0+9pSw2B Jh+IlBcLqu5Dl5mPPwFh43g+IrwqUFi7iLmpAe63oCZA1UqOvrRSqUgxN6Lg7IBf 1ARXohzoWNm7DS1CADAR+uIAQsn2lpRPVf9Z+3oCkEHFyVvwWqDljuKa964DBUZ2 dJCnojjwS+JOZBquL6IxyroR1esGa0CiQ45dC05pEiZwsrjRqS9UrsLzexX22hd9 mJUFWP0PwUM+rGLgclQ7UuQ8uCIV7A4TeYLqc3oo8TnEFZlX -----END CERTIFICATE-----Generated at Fri Jan 9 13:11:40 2026 by rpki-client