This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/m610dYqPqVXc5d6IQHjpHxMDUxc.roa File: m610dYqPqVXc5d6IQHjpHxMDUxc.roa (raw, json) Hash identifier: hsCwEpAHBEjFxhnKmMwXYFpcZTvB5BeuJTVur+XGJvU= Subject key identifier: 9B:AD:74:75:8A:8F:A9:55:DC:E5:DE:88:40:78:E9:1F:13:03:53:17 Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Certificate serial: 019B7E37E4257E1077622ABC496FA50755F8 Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/m610dYqPqVXc5d6IQHjpHxMDUxc.roa Signing time: Fri 02 Jan 2026 10:19:10 +0000 ROA not before: Fri 02 Jan 2026 10:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215375 IP address blocks: 2a14:6781:1400::/38 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 03:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:e4:25:7e:10:77:62:2a:bc:49:6f:a5:07:55:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Validity Not Before: Jan 2 10:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bad74758a8fa955dce5de884078e91f13035317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e8:de:be:81:8a:00:9d:d0:73:0c:6f:1c:24: 94:09:10:a3:b8:53:96:73:c5:61:b0:15:46:6b:16: 72:28:48:af:b7:02:ca:fd:fb:4d:df:c2:4f:c1:c7: dc:0c:f3:36:91:6f:61:2d:6e:14:d5:3d:b7:fa:11: 24:a6:13:ef:b1:93:04:d1:38:b1:78:d0:45:fa:41: ca:c0:d8:5e:9b:75:d7:79:46:cd:c4:9f:dd:e8:38: 70:73:43:05:86:91:b4:7b:73:33:04:97:f2:7e:34: 95:8f:90:ff:db:6f:d4:0d:50:f1:4c:7e:e7:00:ab: f1:05:5a:46:d0:cb:eb:fa:13:ba:b2:76:26:cb:f5: f5:57:c0:6d:5b:9c:3d:62:cd:a0:6a:05:3d:da:8c: 5f:07:6f:df:4a:f5:16:2c:0c:5e:c9:ff:5f:e7:f9: 8c:24:58:79:cc:ab:e1:4a:2a:b8:ff:74:43:8a:51: 2b:7c:f1:00:7f:6f:14:08:b3:1b:39:28:c4:06:ad: e0:d3:76:20:37:3e:32:e5:d8:87:b9:f6:f6:0d:31: 37:ba:5a:a3:13:e2:9e:9f:ee:00:16:d0:2d:7c:b3: 5d:63:93:9b:4d:b8:0e:cf:69:58:55:ad:41:b8:8c: 63:31:8c:23:a9:be:18:76:0a:33:54:b9:50:dd:1e: e5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AD:74:75:8A:8F:A9:55:DC:E5:DE:88:40:78:E9:1F:13:03:53:17 X509v3 Authority Key Identifier: keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/m610dYqPqVXc5d6IQHjpHxMDUxc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:6781:1400::/38 Signature Algorithm: sha256WithRSAEncryption 6b:8b:53:9f:f1:eb:ea:8c:96:c8:0c:de:7b:04:41:78:64:2a: de:dd:3d:90:e1:64:77:59:f0:75:f7:cf:56:6e:8f:dd:db:80: 6e:8a:7a:ee:36:7a:2c:a5:b5:52:11:f2:ca:2d:4b:29:f5:d2: d1:5c:5e:82:48:6e:13:63:39:2b:90:77:39:2e:3f:93:dc:38: db:90:b3:3c:b6:2e:21:07:ff:a0:f0:5f:40:75:25:98:63:06: da:73:bb:84:cc:2f:c3:f7:77:08:90:0e:b7:49:23:2d:bc:c7: cb:46:b3:80:63:e7:1e:d8:34:c4:ce:0c:84:e9:b2:c7:30:64: bb:42:db:5b:0a:05:67:b5:6e:56:77:6f:8f:df:f4:20:55:e3: 5e:eb:be:73:58:b1:32:10:e7:14:9f:67:6c:27:a6:ec:02:d3: 5d:b9:26:05:1f:d6:d4:f8:46:62:20:a0:fc:c7:3f:ba:8a:f8: 49:60:09:76:f0:8f:18:0e:6e:6c:59:3e:67:de:83:41:c9:1f: 82:ce:da:f2:f9:3e:a0:01:2b:43:6b:1a:1b:ba:d9:79:58:80: 78:64:55:b5:92:28:08:6a:01:02:4b:fe:d5:21:06:e2:5c:82: b5:ba:4a:47:8d:72:9a:f9:ff:68:d8:52:af:ee:98:61:00:e5: 6d:75:7d:10 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+N+QlfhB3Yiq8SW+lB1X4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx YmM3N2YwHhcNMjYwMTAyMTAxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmFkNzQ3NThhOGZhOTU1ZGNlNWRlODg0MDc4ZTkxZjEzMDM1MzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOjevoGKAJ3QcwxvHCSUCRCjuFOW c8VhsBVGaxZyKEivtwLK/ftN38JPwcfcDPM2kW9hLW4U1T23+hEkphPvsZME0Tix eNBF+kHKwNhem3XXeUbNxJ/d6Dhwc0MFhpG0e3MzBJfyfjSVj5D/22/UDVDxTH7n AKvxBVpG0Mvr+hO6snYmy/X1V8BtW5w9Ys2gagU92oxfB2/fSvUWLAxeyf9f5/mM JFh5zKvhSiq4/3RDilErfPEAf28UCLMbOSjEBq3g03YgNz4y5diHufb2DTE3ulqj E+Ken+4AFtAtfLNdY5ObTbgOz2lYVa1BuIxjMYwjqb4YdgozVLlQ3R7liQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFJutdHWKj6lV3OXeiEB46R8TA1MXMB8GA1UdIwQY MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt YWE2ZWQ0ZGFmYjNiLzEvbTYxMGRZcVBxVlhjNWQ2SVFIanBIeE1EVXhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKhRngRQw DQYJKoZIhvcNAQELBQADggEBAGuLU5/x6+qMlsgM3nsEQXhkKt7dPZDhZHdZ8HX3 z1Zuj93bgG6Keu42eiyltVIR8sotSyn10tFcXoJIbhNjOSuQdzkuP5PcONuQszy2 LiEH/6DwX0B1JZhjBtpzu4TML8P3dwiQDrdJIy28x8tGs4Bj5x7YNMTODITpsscw ZLtC21sKBWe1blZ3b4/f9CBV417rvnNYsTIQ5xSfZ2wnpuwC0125JgUf1tT4RmIg oPzHP7qK+ElgCXbwjxgObmxZPmfeg0HJH4LO2vL5PqABK0NrGhu62XlYgHhkVbWS KAhqAQJL/tUhBuJcgrW6SkeNcpr5/2jYUq/umGEA5W11fRA= -----END CERTIFICATE-----Generated at Wed Jan 21 11:09:19 2026 by rpki-client