This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yP7gRVaFoZne3ZBW2hBqYvetWuQ.roa File: yP7gRVaFoZne3ZBW2hBqYvetWuQ.roa (raw, json) Hash identifier: JtSJQt9C0t1/aNJFWXmtOGts4dbPFiBVX/Pv6gDYR4I= Subject key identifier: C8:FE:E0:45:56:85:A1:99:DE:DD:90:56:DA:10:6A:62:F7:AD:5A:E4 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CD87A34CCF6A99D75B9843EF10A29 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yP7gRVaFoZne3ZBW2hBqYvetWuQ.roa Signing time: Fri 02 Jan 2026 06:19:55 +0000 ROA not before: Fri 02 Jan 2026 06:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198055 IP address blocks: 2a0e:b107:1d12::/48 maxlen: 48 2a0e:b107:28a8::/48 maxlen: 48 2a0e:b107:28a9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d8:7a:34:cc:f6:a9:9d:75:b9:84:3e:f1:0a:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8fee0455685a199dedd9056da106a62f7ad5ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a8:66:78:fd:71:92:4c:64:80:f4:bd:03:de: 57:d3:d7:70:12:06:29:ed:db:ab:c8:7c:98:74:16: db:33:44:43:44:ca:2d:2b:d2:c4:75:33:fa:28:7c: 8a:7f:c5:22:40:bc:98:d9:47:9e:a6:da:42:4d:f3: 75:04:6d:ce:b5:68:c3:f6:2b:ff:82:e4:1a:18:fb: 91:52:5d:35:ff:06:2b:aa:f5:18:de:e6:3d:3c:ad: ef:b4:0f:dd:bd:0a:6d:b4:b2:ff:30:88:34:e2:6c: 67:2a:7e:b6:b0:bd:d6:ac:8f:b4:70:58:a9:32:88: 15:01:e2:9f:83:cb:7f:e6:3d:4e:89:ff:18:d7:81: 5e:c9:1a:37:3f:9b:73:20:67:6b:a8:e1:79:8b:94: 32:7d:9a:db:1d:51:1f:aa:be:6c:43:0a:7d:d7:b8: 70:12:8d:98:e2:99:86:26:04:85:33:37:f9:31:fb: 12:1d:b1:4b:63:7a:a5:35:87:68:ee:fc:99:8b:04: 6c:1a:9d:bf:76:bd:3b:62:48:69:52:90:86:08:d6: 23:e2:1e:74:41:a7:9b:a0:ce:1b:21:2d:96:97:0e: 18:39:32:8b:c2:06:66:48:e0:35:9f:9c:56:37:ae: 66:9e:c1:5e:1b:25:d6:12:cc:26:e1:90:c5:f0:ad: 41:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:FE:E0:45:56:85:A1:99:DE:DD:90:56:DA:10:6A:62:F7:AD:5A:E4 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yP7gRVaFoZne3ZBW2hBqYvetWuQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1d12::/48 2a0e:b107:28a8::/47 Signature Algorithm: sha256WithRSAEncryption 2a:24:fb:95:e7:87:b0:1b:d4:7c:8b:6b:17:74:41:30:6b:d1: 96:30:77:a3:fe:99:1f:5e:6e:a6:e1:85:d5:fd:a1:10:9c:b9: d6:e7:89:63:7c:e1:5a:ed:d1:7b:4b:32:7f:fe:0d:b8:e7:80: 45:27:ce:c5:b7:2c:fd:e5:52:1e:1b:19:1e:a5:74:e6:77:ff: ad:6c:57:f0:1b:3a:fa:e4:d9:f8:17:d9:af:be:93:2b:40:81: 9c:d5:ae:e7:76:60:69:e9:6c:03:b3:ec:71:be:c5:8b:df:3e: ed:4a:d2:e3:4e:92:49:96:2b:07:61:89:c4:65:fc:68:34:38: e8:cd:7c:31:c9:22:e3:56:e3:dc:88:c6:bf:7d:1f:1c:b8:2c: 66:bb:b6:37:e4:70:c3:91:d1:ae:f7:7e:1b:b3:67:7d:82:ea: 99:51:2b:f7:6c:b3:6a:b6:7d:c8:da:92:32:38:98:72:0f:3f: ef:19:77:d1:20:9e:7a:c7:91:f3:4f:4c:5a:ff:90:54:c7:fd: 1d:56:cd:40:ca:16:03:09:7e:70:ce:f4:64:6b:df:4d:e7:eb: 4c:3a:fe:a5:3a:0a:47:45:a9:a5:fe:9f:d0:5e:af:ec:19:d3: 53:e7:52:1c:d5:bf:dc:eb:f1:96:52:d9:99:37:af:e8:36:50: c1:9a:b5:a6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XNh6NMz2qZ11uYQ+8QopMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGZlZTA0NTU2ODVhMTk5ZGVkZDkwNTZkYTEwNmE2MmY3YWQ1YWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56hmeP1xkkxkgPS9A95X09dwEgYp 7duryHyYdBbbM0RDRMotK9LEdTP6KHyKf8UiQLyY2UeeptpCTfN1BG3OtWjD9iv/ guQaGPuRUl01/wYrqvUY3uY9PK3vtA/dvQpttLL/MIg04mxnKn62sL3WrI+0cFip MogVAeKfg8t/5j1Oif8Y14FeyRo3P5tzIGdrqOF5i5QyfZrbHVEfqr5sQwp917hw Eo2Y4pmGJgSFMzf5MfsSHbFLY3qlNYdo7vyZiwRsGp2/dr07YkhpUpCGCNYj4h50 QaeboM4bIS2Wlw4YOTKLwgZmSOA1n5xWN65mnsFeGyXWEswm4ZDF8K1BNQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMj+4EVWhaGZ3t2QVtoQamL3rVrkMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEveVA3Z1JWYUZvWm5lM1pCVzJoQnFZdmV0V3VRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg6xBx0S AwcBKg6xByioMA0GCSqGSIb3DQEBCwUAA4IBAQAqJPuV54ewG9R8i2sXdEEwa9GW MHej/pkfXm6m4YXV/aEQnLnW54ljfOFa7dF7SzJ//g2454BFJ87Ftyz95VIeGxke pXTmd/+tbFfwGzr65Nn4F9mvvpMrQIGc1a7ndmBp6WwDs+xxvsWL3z7tStLjTpJJ lisHYYnEZfxoNDjozXwxySLjVuPciMa/fR8cuCxmu7Y35HDDkdGu934bs2d9guqZ USv3bLNqtn3I2pIyOJhyDz/vGXfRIJ56x5HzT0xa/5BUx/0dVs1AyhYDCX5wzvRk a99N5+tMOv6lOgpHRaml/p/QXq/sGdNT51Ic1b/c6/GWUtmZN6/oNlDBmrWm -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:44 2026 by rpki-client