This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0lHYsJ3hUrZT31iOJbPyjY-f4ok.roa File: 0lHYsJ3hUrZT31iOJbPyjY-f4ok.roa (raw, json) Hash identifier: O6XWutQrOluVBKRkiuwGtK6M3zuq1c4UGZ7sXVeMlc4= Subject key identifier: D2:51:D8:B0:9D:E1:52:B6:53:DF:58:8E:25:B3:F2:8D:8F:9F:E2:89 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D8E34C12010F76FB7673A60AB7A2A Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0lHYsJ3hUrZT31iOJbPyjY-f4ok.roa Signing time: Fri 02 Jan 2026 06:20:41 +0000 ROA not before: Fri 02 Jan 2026 06:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 256257 IP address blocks: 2a0e:b107:219f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:8e:34:c1:20:10:f7:6f:b7:67:3a:60:ab:7a:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d251d8b09de152b653df588e25b3f28d8f9fe289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c8:bd:98:8d:0a:2b:1e:25:5e:99:1d:61:50: fb:7b:ec:4c:e3:59:70:d0:3d:45:5d:a2:09:df:c5: 01:10:dd:70:53:b9:eb:bb:82:e3:dd:06:d3:41:ea: 3f:b1:eb:4d:9e:52:68:6e:2c:75:6b:72:97:7b:97: e9:0c:17:5c:55:fc:d2:3a:9d:71:e7:95:e8:31:69: 5c:eb:1d:30:a6:62:94:ff:f0:24:9d:4d:c0:de:2a: 0b:da:29:9c:bc:cc:93:c2:f9:63:d7:d5:9f:94:d5: 11:21:9a:4d:3d:03:47:a0:7d:3f:ad:ba:e0:26:69: 6f:a7:44:08:fb:cb:0a:97:87:d8:a5:24:07:12:2b: 4c:67:c6:e8:b8:fb:05:07:e4:29:fa:95:98:19:f0: 44:77:b8:af:3d:06:b1:7d:36:96:fa:77:77:bf:83: 93:d3:cc:cc:4f:f7:42:04:0b:84:91:f7:e2:14:1b: 87:be:6c:c7:d8:4f:dc:51:13:8d:f1:d1:8f:ed:06: 75:09:7b:e3:ac:93:28:38:6c:3b:f8:7f:ee:7e:a9: 22:a7:9c:45:d7:00:be:ca:67:9c:58:c6:51:df:5d: c2:ec:1e:05:d7:8a:0c:c8:58:3f:a3:cd:1a:a9:17: a6:dc:a3:29:be:7d:be:8a:a9:45:e1:b3:c3:67:41: cb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:51:D8:B0:9D:E1:52:B6:53:DF:58:8E:25:B3:F2:8D:8F:9F:E2:89 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0lHYsJ3hUrZT31iOJbPyjY-f4ok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:219f::/48 Signature Algorithm: sha256WithRSAEncryption 68:b1:e6:ff:73:6a:9a:91:b8:22:98:66:5f:cf:b2:42:24:19: 68:0e:9d:f4:42:21:d6:98:c4:69:84:7d:07:42:78:62:36:f6: 1a:5d:1a:7b:2c:e0:4c:25:22:1b:51:0b:c5:a8:3a:bb:c4:8f: a8:87:f5:5a:d3:1b:8f:13:3d:16:b2:70:f4:b3:74:fa:ef:c4: 0e:eb:91:cf:0e:c2:99:c7:3c:7c:01:63:aa:ae:17:ce:a8:31: 9b:4c:80:c6:8e:2e:b4:fb:38:8a:bc:a2:83:d7:6d:92:e3:37: 72:89:79:6b:9b:7a:3b:9e:2c:b6:90:2a:88:e2:55:34:27:ec: 84:21:6d:64:73:c8:4b:ee:4a:8f:04:da:0e:17:3c:39:f5:70: 9c:93:4f:b7:e9:99:c2:76:79:2f:79:d6:56:73:aa:f5:20:e9: 6d:0d:03:c9:9e:24:4f:33:97:0b:6f:c8:18:ed:6d:a7:5f:b0: 56:a3:15:76:bd:50:c0:94:56:f9:84:65:ec:ef:8b:2f:1d:67: 1d:a3:69:ab:3b:8b:f7:4f:25:4d:99:69:4d:ad:fe:71:42:60: e6:5b:11:64:75:d0:08:e2:60:2a:93:f1:b8:7a:ec:40:9f:be: e7:4f:0d:ce:62:ce:cf:04:3c:98:02:b8:ef:8a:80:d5:48:79: b3:95:07:0d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XY40wSAQ92+3Zzpgq3oqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjUxZDhiMDlkZTE1MmI2NTNkZjU4OGUyNWIzZjI4ZDhmOWZlMjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsi9mI0KKx4lXpkdYVD7e+xM41lw 0D1FXaIJ38UBEN1wU7nru4Lj3QbTQeo/setNnlJobix1a3KXe5fpDBdcVfzSOp1x 55XoMWlc6x0wpmKU//AknU3A3ioL2imcvMyTwvlj19WflNURIZpNPQNHoH0/rbrg Jmlvp0QI+8sKl4fYpSQHEitMZ8bouPsFB+Qp+pWYGfBEd7ivPQaxfTaW+nd3v4OT 08zMT/dCBAuEkffiFBuHvmzH2E/cURON8dGP7QZ1CXvjrJMoOGw7+H/ufqkip5xF 1wC+ymecWMZR313C7B4F14oMyFg/o80aqRem3KMpvn2+iqlF4bPDZ0HLwwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNJR2LCd4VK2U99YjiWz8o2Pn+KJMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvMGxIWXNKM2hVclpUMzFpT0piUHlqWS1mNG9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xByGf MA0GCSqGSIb3DQEBCwUAA4IBAQBoseb/c2qakbgimGZfz7JCJBloDp30QiHWmMRp hH0HQnhiNvYaXRp7LOBMJSIbUQvFqDq7xI+oh/Va0xuPEz0WsnD0s3T678QO65HP DsKZxzx8AWOqrhfOqDGbTIDGji60+ziKvKKD122S4zdyiXlrm3o7niy2kCqI4lU0 J+yEIW1kc8hL7kqPBNoOFzw59XCck0+36ZnCdnkvedZWc6r1IOltDQPJniRPM5cL b8gY7W2nX7BWoxV2vVDAlFb5hGXs74svHWcdo2mrO4v3TyVNmWlNrf5xQmDmWxFk ddAI4mAqk/G4euxAn77nTw3OYs7PBDyYArjvioDVSHmzlQcN -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:25 2026 by rpki-client