This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xCMG6AugWK5aHczLuhYlKJDbgo0.roa File: xCMG6AugWK5aHczLuhYlKJDbgo0.roa (raw, json) Hash identifier: SjtdFuFLxZYV+CwhLM7m5ENNvvapHxNXJJhWnDnQYqs= Subject key identifier: C4:23:06:E8:0B:A0:58:AE:5A:1D:CC:CB:BA:16:25:28:90:DB:82:8D Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D42AFEF8607124FCABA9400349B4C Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xCMG6AugWK5aHczLuhYlKJDbgo0.roa Signing time: Fri 02 Jan 2026 06:20:22 +0000 ROA not before: Fri 02 Jan 2026 06:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211685 IP address blocks: 2a0e:97c0:250::/44 maxlen: 48 2a0e:97c0:250::/48 maxlen: 48 2a0e:97c0:251::/48 maxlen: 48 2a0e:97c0:252::/48 maxlen: 48 2a0e:97c0:253::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:42:af:ef:86:07:12:4f:ca:ba:94:00:34:9b:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c42306e80ba058ae5a1dcccbba16252890db828d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c8:69:d5:9c:cf:90:8e:2c:ee:9a:70:0e:ee: 04:1c:01:7b:ea:83:05:68:c5:7d:ca:cd:5c:52:bb: a0:50:9b:c5:f6:f7:11:2a:e2:68:5d:ad:71:b0:3f: 67:85:6b:4d:1d:67:0b:73:52:6b:83:d6:c8:7e:4c: 21:f2:1c:31:c0:9c:01:3d:4f:59:b3:94:a6:68:c2: f0:15:cd:c4:8c:e6:52:6c:cc:a5:99:ee:73:11:65: a5:38:9d:fb:55:19:38:97:55:cc:80:83:63:3b:95: f4:3c:3d:09:92:66:c4:e7:b0:ca:c8:95:f3:22:3f: 7a:89:76:0c:be:45:3d:f2:ec:e9:f1:ef:b4:2d:de: b3:35:44:69:bf:a9:ed:5c:06:2d:79:a7:52:13:0a: 7d:7b:18:fb:f8:f3:7a:9a:97:51:71:4d:fd:96:59: 95:6c:3c:e3:0b:11:11:f9:29:8f:1c:a8:64:01:82: b9:1b:0e:ad:59:32:be:77:4f:fe:a2:41:c3:f3:cc: e6:83:6a:c8:4a:a0:c8:85:88:cf:8c:a3:e8:d0:78: 1c:02:12:6a:33:24:79:af:bc:a7:36:ce:53:26:49: 4d:16:cf:ea:d7:6a:50:19:ba:57:9b:b4:ac:c9:7c: a6:ae:0e:3a:43:95:94:43:22:6b:12:7d:12:c1:bf: 0d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:23:06:E8:0B:A0:58:AE:5A:1D:CC:CB:BA:16:25:28:90:DB:82:8D X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xCMG6AugWK5aHczLuhYlKJDbgo0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:250::/44 Signature Algorithm: sha256WithRSAEncryption b0:03:a6:18:08:05:cf:b3:01:b7:5f:a8:24:23:fa:d8:1a:2f: 0c:c4:84:6f:93:fa:9e:2b:80:04:a9:89:52:f9:c5:5d:eb:e4: 15:a1:92:dc:f4:dd:40:02:84:2f:c7:46:db:44:99:2c:e9:42: a1:ed:11:72:0c:38:c1:f6:29:08:67:d7:1e:0f:e9:48:10:3d: 7a:1b:cc:ee:8e:7a:4f:c1:09:86:e9:93:f9:f7:ad:fa:c3:7a: 53:f6:99:b3:0d:c8:d3:1b:0e:b3:92:8e:6a:70:6e:8b:fd:d3: 9e:fd:90:5f:9c:ee:15:6c:f1:ee:2c:67:72:6a:6c:a0:c0:b5: f9:ba:30:28:d7:7f:dc:b7:de:a5:14:58:f1:d1:34:0f:e7:4b: 5d:a3:a6:ae:b7:41:b2:91:49:a9:6c:31:5c:e9:1d:1e:1f:31: f2:68:fa:d4:92:df:33:97:99:36:ce:c6:94:da:2d:58:fb:82: 0f:6a:a7:ae:51:f5:dd:57:c2:27:ea:04:58:af:83:70:15:a5: 89:a2:93:90:29:d3:1d:29:06:48:eb:3a:ee:87:1e:99:3b:d8: fa:ed:5f:37:88:ed:4b:65:86:bf:bd:d9:b9:f4:67:cf:7e:88: cd:3b:8c:42:64:3d:ce:e0:5c:10:4b:99:d0:fd:30:03:66:f0: 79:f1:8c:13 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XUKv74YHEk/KupQANJtMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDIzMDZlODBiYTA1OGFlNWExZGNjY2JiYTE2MjUyODkwZGI4MjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8hp1ZzPkI4s7ppwDu4EHAF76oMF aMV9ys1cUrugUJvF9vcRKuJoXa1xsD9nhWtNHWcLc1Jrg9bIfkwh8hwxwJwBPU9Z s5SmaMLwFc3EjOZSbMylme5zEWWlOJ37VRk4l1XMgINjO5X0PD0JkmbE57DKyJXz Ij96iXYMvkU98uzp8e+0Ld6zNURpv6ntXAYteadSEwp9exj7+PN6mpdRcU39llmV bDzjCxER+SmPHKhkAYK5Gw6tWTK+d0/+okHD88zmg2rISqDIhYjPjKPo0HgcAhJq MyR5r7ynNs5TJklNFs/q12pQGbpXm7SsyXymrg46Q5WUQyJrEn0Swb8NWQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMQjBugLoFiuWh3My7oWJSiQ24KNMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEveENNRzZBdWdXSzVhSGN6THVoWWxLSkRiZ28wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAJQ MA0GCSqGSIb3DQEBCwUAA4IBAQCwA6YYCAXPswG3X6gkI/rYGi8MxIRvk/qeK4AE qYlS+cVd6+QVoZLc9N1AAoQvx0bbRJks6UKh7RFyDDjB9ikIZ9ceD+lIED16G8zu jnpPwQmG6ZP59636w3pT9pmzDcjTGw6zko5qcG6L/dOe/ZBfnO4VbPHuLGdyamyg wLX5ujAo13/ct96lFFjx0TQP50tdo6aut0GykUmpbDFc6R0eHzHyaPrUkt8zl5k2 zsaU2i1Y+4IPaqeuUfXdV8In6gRYr4NwFaWJopOQKdMdKQZI6zruhx6ZO9j67V83 iO1LZYa/vdm59GfPfojNO4xCZD3O4FwQS5nQ/TADZvB58YwT -----END CERTIFICATE-----Generated at Fri Jan 9 13:12:02 2026 by rpki-client