This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xGRLZbhYo_cIgaZ97NEHUte8eHg.roa File: xGRLZbhYo_cIgaZ97NEHUte8eHg.roa (raw, json) Hash identifier: zXsBJo994u0kHGE57ILaT+Ghf/bJzW1ltgWTV7cvxDs= Subject key identifier: C4:64:4B:65:B8:58:A3:F7:08:81:A6:7D:EC:D1:07:52:D7:BC:78:78 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D20D79B9DAEFAFEA0C7D77F5E5623 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xGRLZbhYo_cIgaZ97NEHUte8eHg.roa Signing time: Fri 02 Jan 2026 06:20:13 +0000 ROA not before: Fri 02 Jan 2026 06:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209859 IP address blocks: 2a0e:b102:140::/43 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:20:d7:9b:9d:ae:fa:fe:a0:c7:d7:7f:5e:56:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4644b65b858a3f70881a67decd10752d7bc7878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:88:cf:16:ca:78:31:de:14:67:57:2d:bb:0d: b8:6d:73:61:a3:65:b9:59:1f:58:98:eb:f2:b6:40: d8:a2:71:4f:7d:6e:c4:ee:4c:bd:4e:26:de:a7:ec: 7a:44:5f:86:13:c3:c1:2b:c0:fc:cd:c6:71:c7:6c: 34:c1:ac:be:22:ee:b3:72:a6:23:58:5f:89:3c:7f: fc:01:ec:ae:18:78:c5:c6:54:5c:e4:e6:35:fb:1e: 23:1b:b6:c8:b9:c4:27:83:f4:1d:cc:a0:d9:a5:f7: 87:39:6c:87:f0:bd:54:13:c1:67:e9:2b:b2:82:74: 31:16:b0:2b:d1:09:3e:bf:1a:16:49:a5:60:07:4f: 7c:db:6c:4d:f2:de:8e:52:be:54:4c:69:5b:8a:94: 77:4b:ed:d9:87:e1:5f:8d:3f:f8:40:75:a5:a7:03: 4f:28:d2:a7:7d:e5:26:85:80:0d:2a:3d:fd:4c:ba: ab:a5:fc:ef:a4:75:50:06:50:26:91:b0:62:78:22: 88:d2:a2:7b:af:90:af:b0:e8:d8:b2:18:40:89:58: 5a:93:a4:01:a9:d1:ee:73:ee:03:01:78:fc:4b:55: a9:9b:19:c6:57:d8:bf:69:ed:02:ff:de:ef:c8:f3: fd:41:c6:b0:67:1e:f9:33:18:82:b7:6c:f2:08:cf: 3c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:64:4B:65:B8:58:A3:F7:08:81:A6:7D:EC:D1:07:52:D7:BC:78:78 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xGRLZbhYo_cIgaZ97NEHUte8eHg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b102:140::/43 Signature Algorithm: sha256WithRSAEncryption a4:ed:df:f5:08:89:8a:67:27:44:ba:34:27:d9:c9:02:9b:76: 63:95:d1:5a:72:63:e0:37:d6:21:20:02:00:06:c8:7d:e7:c0: e4:e8:43:dc:f2:45:3d:48:dc:80:6d:c2:8c:a4:1c:a0:49:51: c9:a3:c6:52:a1:dd:c9:32:1b:0a:4a:6d:f7:05:5f:fb:b5:94: ee:d0:73:e6:97:5e:c4:98:bc:ca:a8:72:23:df:6f:9c:c0:4a: 34:47:03:a9:bc:eb:f7:f8:18:35:27:bb:8e:b1:64:16:01:a6: ff:43:36:d3:63:48:db:9c:e4:03:c1:7f:a0:e7:e2:d2:bb:fb: a9:54:56:aa:e0:da:4d:91:f6:a5:55:e2:b3:cf:3b:bb:4d:40: 00:41:b2:04:49:fb:0c:1e:c0:d8:f0:ef:fc:c1:cc:01:f5:56: bc:8a:17:06:c8:17:6a:8c:3c:47:df:3a:2f:bc:9a:56:73:62: 6d:09:3f:8a:62:a0:57:3b:51:0d:7a:08:ec:35:1e:8e:6c:a6: 26:e7:eb:3a:95:13:c6:33:87:a1:fe:4a:20:51:4d:ac:0f:aa: ac:b4:dc:ac:e6:45:fc:aa:a7:8b:58:b4:59:aa:4d:2d:c3:60: a9:60:cd:68:3a:82:35:4a:b8:4d:0b:4a:11:0b:b4:d1:d3:4b: 64:5a:27:67 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XSDXm52u+v6gx9d/XlYjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDY0NGI2NWI4NThhM2Y3MDg4MWE2N2RlY2QxMDc1MmQ3YmM3ODc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ojPFsp4Md4UZ1ctuw24bXNho2W5 WR9YmOvytkDYonFPfW7E7ky9Tibep+x6RF+GE8PBK8D8zcZxx2w0way+Iu6zcqYj WF+JPH/8AeyuGHjFxlRc5OY1+x4jG7bIucQng/QdzKDZpfeHOWyH8L1UE8Fn6Suy gnQxFrAr0Qk+vxoWSaVgB09822xN8t6OUr5UTGlbipR3S+3Zh+FfjT/4QHWlpwNP KNKnfeUmhYANKj39TLqrpfzvpHVQBlAmkbBieCKI0qJ7r5CvsOjYshhAiVhak6QB qdHuc+4DAXj8S1WpmxnGV9i/ae0C/97vyPP9QcawZx75MxiCt2zyCM88uwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMRkS2W4WKP3CIGmfezRB1LXvHh4MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEveEdSTFpiaFlvX2NJZ2FaOTdORUhVdGU4ZUhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFKg6xAgFA MA0GCSqGSIb3DQEBCwUAA4IBAQCk7d/1CImKZydEujQn2ckCm3ZjldFacmPgN9Yh IAIABsh958Dk6EPc8kU9SNyAbcKMpBygSVHJo8ZSod3JMhsKSm33BV/7tZTu0HPm l17EmLzKqHIj32+cwEo0RwOpvOv3+Bg1J7uOsWQWAab/QzbTY0jbnOQDwX+g5+LS u/upVFaq4NpNkfalVeKzzzu7TUAAQbIESfsMHsDY8O/8wcwB9Va8ihcGyBdqjDxH 3zovvJpWc2JtCT+KYqBXO1ENegjsNR6ObKYm5+s6lRPGM4eh/kogUU2sD6qstNys 5kX8qqeLWLRZqk0tw2CpYM1oOoI1SrhNC0oRC7TR00tkWidn -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:24 2026 by rpki-client