This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/z54QQNYBFe2GLMqaldfunaKaZfc.roa File: z54QQNYBFe2GLMqaldfunaKaZfc.roa (raw, json) Hash identifier: EUnCFb8y+hStEDXvnerv16IpcvJuszQ3tIXKfujNzG0= Subject key identifier: CF:9E:10:40:D6:01:15:ED:86:2C:CA:9A:95:D7:EE:9D:A2:9A:65:F7 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CBD4EE3EC759F06652DE64A1DB18C Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/z54QQNYBFe2GLMqaldfunaKaZfc.roa Signing time: Fri 02 Jan 2026 06:19:48 +0000 ROA not before: Fri 02 Jan 2026 06:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57429 IP address blocks: 2a0e:b107:1340::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:bd:4e:e3:ec:75:9f:06:65:2d:e6:4a:1d:b1:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf9e1040d60115ed862cca9a95d7ee9da29a65f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:84:00:46:86:27:3b:92:78:3a:95:79:b2:4a: 78:c4:be:de:86:5f:12:95:ed:15:57:ef:f2:96:23: 3d:d6:47:d0:93:12:65:3c:3c:37:f3:30:28:16:9b: 17:78:7c:2c:94:03:b0:f3:c9:31:4a:f4:8a:cf:52: cb:51:41:91:51:77:8f:94:cd:8e:99:3b:24:d2:47: 45:37:2b:b5:34:f4:ca:ac:45:33:a1:fb:ef:bb:9e: a3:d3:c4:2c:33:45:9a:f6:18:8d:25:c7:d5:bc:4a: da:9c:ca:05:9a:b3:31:71:59:e0:d7:6d:5c:87:d6: 4d:1b:81:92:b1:4e:c9:f5:20:24:7c:4c:88:40:7a: bf:80:38:04:e5:e5:99:ce:8a:c1:f9:38:63:7b:22: 20:35:b9:12:8e:62:f8:7f:f7:b8:37:8a:11:4d:f1: 48:39:0e:b1:ac:53:ab:de:89:cf:75:c4:26:86:36: c5:0e:b2:8d:0f:65:41:4c:03:8e:df:13:63:ee:14: 99:a0:ea:a0:cf:c5:55:8c:1d:4c:cc:af:1c:62:3b: fe:e1:2a:9c:71:22:07:8b:3e:11:63:1f:5e:0c:a9: e6:58:b9:c1:fd:be:76:8d:de:79:5d:0d:13:a9:48: f7:22:8a:5d:f7:c2:0d:e1:af:6b:e1:c3:10:b4:d8: 44:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9E:10:40:D6:01:15:ED:86:2C:CA:9A:95:D7:EE:9D:A2:9A:65:F7 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/z54QQNYBFe2GLMqaldfunaKaZfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1340::/44 Signature Algorithm: sha256WithRSAEncryption 1c:6f:be:f8:b4:13:81:4b:e8:7c:0b:82:b4:04:b7:97:be:37: 1e:9c:07:b3:25:1c:62:cf:ac:68:b1:bd:93:39:99:b3:72:63: 1d:45:a8:95:13:e1:6c:9d:3a:c5:89:e5:dd:1e:6f:65:f1:ab: 00:fb:0f:50:ff:c8:41:ab:cb:7c:88:86:b4:f5:de:78:9f:f9: bb:e3:67:e7:33:b2:bd:16:83:3a:f3:f7:12:4f:98:48:c5:6d: 83:10:a6:28:c2:e1:4b:ea:22:7e:44:c2:5c:22:10:60:1f:69: 45:9d:4a:bf:ff:15:38:e0:51:62:45:48:31:7e:00:9d:bd:d3: d6:d6:26:5d:50:27:53:74:e3:1f:e6:ee:8a:cd:88:ec:d4:35: f7:4b:5d:b1:5a:39:05:40:dd:64:52:4a:56:63:a2:b9:17:5a: c8:ed:c2:0a:cd:3b:85:cc:a2:ee:36:18:e7:18:ee:96:79:dd: 5a:c2:4a:e4:9c:cf:ad:e4:8f:b1:51:99:ec:84:0c:e8:6f:9f: 3c:82:84:69:1d:cf:1f:25:b5:7a:f7:5e:b8:89:de:a3:95:93: 5a:94:5f:21:71:40:c4:15:b6:cd:6f:3e:b0:73:7e:c0:06:60: b1:c2:d0:b9:16:04:d5:77:ab:17:4a:8f:cf:40:c3:9b:b5:38: 8b:a3:c7:fc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XL1O4+x1nwZlLeZKHbGMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjllMTA0MGQ2MDExNWVkODYyY2NhOWE5NWQ3ZWU5ZGEyOWE2NWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoQARoYnO5J4OpV5skp4xL7ehl8S le0VV+/yliM91kfQkxJlPDw38zAoFpsXeHwslAOw88kxSvSKz1LLUUGRUXePlM2O mTsk0kdFNyu1NPTKrEUzofvvu56j08QsM0Wa9hiNJcfVvEranMoFmrMxcVng121c h9ZNG4GSsU7J9SAkfEyIQHq/gDgE5eWZzorB+ThjeyIgNbkSjmL4f/e4N4oRTfFI OQ6xrFOr3onPdcQmhjbFDrKND2VBTAOO3xNj7hSZoOqgz8VVjB1MzK8cYjv+4Sqc cSIHiz4RYx9eDKnmWLnB/b52jd55XQ0TqUj3Iopd98IN4a9r4cMQtNhEjwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFM+eEEDWARXthizKmpXX7p2immX3MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvejU0UVFOWUJGZTJHTE1xYWxkZnVuYUthWmZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxNA MA0GCSqGSIb3DQEBCwUAA4IBAQAcb774tBOBS+h8C4K0BLeXvjcenAezJRxiz6xo sb2TOZmzcmMdRaiVE+FsnTrFieXdHm9l8asA+w9Q/8hBq8t8iIa09d54n/m742fn M7K9FoM68/cST5hIxW2DEKYowuFL6iJ+RMJcIhBgH2lFnUq//xU44FFiRUgxfgCd vdPW1iZdUCdTdOMf5u6KzYjs1DX3S12xWjkFQN1kUkpWY6K5F1rI7cIKzTuFzKLu NhjnGO6Wed1awkrknM+t5I+xUZnshAzob588goRpHc8fJbV69164id6jlZNalF8h cUDEFbbNbz6wc37ABmCxwtC5FgTVd6sXSo/PQMObtTiLo8f8 -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:11 2026 by rpki-client