This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2x-aLT8SF6-RmEj76WPwTne1Kss.roa File: 2x-aLT8SF6-RmEj76WPwTne1Kss.roa (raw, json) Hash identifier: wOj0Wg9ETiJXAFrmO4Rqm4+bInBOVz+Y5rtaYBMHekU= Subject key identifier: DB:1F:9A:2D:3F:12:17:AF:91:98:48:FB:E9:63:F0:4E:77:B5:2A:CB Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CAB969DAA871E8EDCD8BFD1A36CF1 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2x-aLT8SF6-RmEj76WPwTne1Kss.roa Signing time: Fri 02 Jan 2026 06:19:43 +0000 ROA not before: Fri 02 Jan 2026 06:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39753 IP address blocks: 2a0e:b107:24::/46 maxlen: 48 2a10:2f01:100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ab:96:9d:aa:87:1e:8e:dc:d8:bf:d1:a3:6c:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db1f9a2d3f1217af919848fbe963f04e77b52acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ff:42:c1:e4:b1:11:78:90:0d:13:36:c2:47: e2:46:3c:08:0c:14:1c:dc:66:4c:bb:11:17:34:aa: 87:bb:b6:9e:08:90:24:65:48:08:c0:7b:d6:fc:eb: d2:e1:02:5f:f0:bc:58:da:e8:ac:25:79:8a:2e:2d: 58:62:3c:c5:68:f4:69:a3:1e:d7:80:37:60:e1:f6: 8f:c4:28:22:e1:9d:15:0c:79:0c:5f:25:cb:94:25: d2:49:2b:24:45:ef:2c:0e:45:10:99:fb:67:37:e7: a5:cf:0a:79:48:9b:e6:0b:15:5e:da:08:9d:01:8b: e1:00:79:07:50:b4:f0:4f:50:bc:0c:cb:91:78:64: 49:98:79:82:fc:01:cd:53:bf:b4:e3:89:c3:5b:87: f5:99:fe:50:b4:bf:69:ab:02:29:f1:05:de:ab:e9: ed:59:6b:ed:0f:7b:e0:57:56:11:54:df:46:74:e1: 5f:40:4c:2f:20:5e:f7:0a:f7:65:a0:a5:3c:b7:8e: 0e:76:35:3b:8c:52:ae:2f:00:8f:96:40:1f:ee:49: 54:57:29:15:5e:b4:b3:eb:39:79:d1:78:32:87:95: a9:db:72:dd:d5:77:76:58:f7:8c:9a:a4:87:99:ba: 52:e5:3f:40:00:e9:c9:f0:d7:55:f3:42:00:11:36: 1d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:1F:9A:2D:3F:12:17:AF:91:98:48:FB:E9:63:F0:4E:77:B5:2A:CB X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2x-aLT8SF6-RmEj76WPwTne1Kss.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:24::/46 2a10:2f01:100::/40 Signature Algorithm: sha256WithRSAEncryption 1b:d7:bc:de:cb:a4:f4:c5:0a:af:fb:86:10:09:74:6c:22:5a: 19:4d:fe:84:b2:61:bc:b8:8a:b0:bc:5c:c9:fd:d6:27:6c:51: 69:5b:43:ce:20:d5:a6:34:ef:52:13:eb:6d:0f:f8:52:c8:a8: c1:02:38:4e:00:89:87:3b:f7:4f:34:f6:55:b3:8b:ee:a9:6f: 87:eb:9f:8c:4b:3a:96:d5:8e:94:a2:73:b6:be:ef:65:cc:63: 5e:b4:52:b5:fe:53:3b:48:c7:c5:55:1f:8c:24:0a:32:2a:fb: 0d:94:25:78:a4:3c:51:2d:58:14:f4:48:cc:74:1a:15:6f:0c: 93:dc:be:bd:5b:a0:9b:c8:7c:d2:8b:30:ea:65:a2:fa:bc:34: 1d:d2:64:ac:f5:c9:6c:c3:f7:53:8b:1b:88:50:61:07:d3:b4: 6d:02:aa:df:01:ba:1d:66:42:9c:b5:68:5c:f7:ab:c4:6c:d4: e8:cf:a2:ce:c0:a4:87:6f:bf:ca:1b:85:8e:14:47:7c:55:41: 56:18:f2:64:96:11:f5:44:14:e5:12:be:4e:6f:89:b7:33:e1: c7:ce:c6:6a:8d:6b:85:f2:92:32:62:7d:9f:ad:a7:14:77:6d: 61:54:4a:95:7a:a1:04:d2:78:04:f4:fb:b7:d7:d0:34:e1:bd: 19:83:9b:98 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt9XKuWnaqHHo7c2L/Ro2zxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjFmOWEyZDNmMTIxN2FmOTE5ODQ4ZmJlOTYzZjA0ZTc3YjUyYWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3f9CweSxEXiQDRM2wkfiRjwIDBQc 3GZMuxEXNKqHu7aeCJAkZUgIwHvW/OvS4QJf8LxY2uisJXmKLi1YYjzFaPRpox7X gDdg4faPxCgi4Z0VDHkMXyXLlCXSSSskRe8sDkUQmftnN+elzwp5SJvmCxVe2gid AYvhAHkHULTwT1C8DMuReGRJmHmC/AHNU7+044nDW4f1mf5QtL9pqwIp8QXeq+nt WWvtD3vgV1YRVN9GdOFfQEwvIF73CvdloKU8t44OdjU7jFKuLwCPlkAf7klUVykV XrSz6zl50Xgyh5Wp23Ld1Xd2WPeMmqSHmbpS5T9AAOnJ8NdV80IAETYdVwIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFNsfmi0/EhevkZhI++lj8E53tSrLMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvMngtYUxUOFNGNi1SbUVqNzZXUHdUbmUxS3NzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcCKg6xBwAk AwYAKhAvAQEwDQYJKoZIhvcNAQELBQADggEBABvXvN7LpPTFCq/7hhAJdGwiWhlN /oSyYby4irC8XMn91idsUWlbQ84g1aY071IT620P+FLIqMECOE4AiYc790809lWz i+6pb4frn4xLOpbVjpSic7a+72XMY160UrX+UztIx8VVH4wkCjIq+w2UJXikPFEt WBT0SMx0GhVvDJPcvr1boJvIfNKLMOplovq8NB3SZKz1yWzD91OLG4hQYQfTtG0C qt8Buh1mQpy1aFz3q8Rs1OjPos7ApIdvv8obhY4UR3xVQVYY8mSWEfVEFOUSvk5v ibcz4cfOxmqNa4XykjJifZ+tpxR3bWFUSpV6oQTSeAT0+7fX0DThvRmDm5g= -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:57 2026 by rpki-client