This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2zZCldsNqHSTRssvJr9WGuOi894.roa File: 2zZCldsNqHSTRssvJr9WGuOi894.roa (raw, json) Hash identifier: CL3KJCgm48eqFDyHbTcNeWgqNPoj4KXsu61Xxgxpj0A= Subject key identifier: DB:36:42:95:DB:0D:A8:74:93:46:CB:2F:26:BF:56:1A:E3:A2:F3:DE Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D62579F88BAB91B603C2F2D2F2894 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2zZCldsNqHSTRssvJr9WGuOi894.roa Signing time: Fri 02 Jan 2026 06:20:30 +0000 ROA not before: Fri 02 Jan 2026 06:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213372 IP address blocks: 2a0e:b107:8e0::/44 maxlen: 48 2a10:2f00:128::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:62:57:9f:88:ba:b9:1b:60:3c:2f:2d:2f:28:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db364295db0da8749346cb2f26bf561ae3a2f3de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7e:55:68:a0:0a:70:e8:07:85:1e:ee:4b:2e: 8d:bf:e0:79:75:40:b9:19:8b:7b:77:82:ac:23:19: 7c:47:e3:25:4a:95:37:6a:4d:d8:46:13:93:99:b4: f4:4b:99:e7:06:9b:ac:57:e4:7a:73:0b:b3:5e:5d: 6a:76:7f:9d:3e:bb:a3:99:f8:2f:63:c9:a7:76:0f: 0d:bb:05:fb:a9:12:6a:c1:ea:45:2f:4a:67:bb:45: de:45:cc:c6:42:c6:fe:5a:50:48:48:ed:5a:f2:f1: b5:cc:8e:15:93:47:10:5f:4c:8f:0b:2d:ce:bb:6a: be:d6:88:7c:ef:91:af:80:ee:a9:b9:4a:a3:b5:17: 42:d5:c7:ec:c1:aa:06:e6:9d:70:0c:aa:85:b5:bb: 8e:ea:58:89:8b:8e:a9:14:6b:8f:ce:c0:73:29:fb: c8:3c:b5:90:11:fc:6b:83:89:ad:6f:7f:3c:6b:48: 77:0d:7c:1f:ea:10:0b:d4:cf:b9:59:97:40:f5:82: 04:13:79:13:a4:7d:0d:ef:3a:0c:da:bf:92:e2:8b: 6c:10:b6:37:9b:6b:14:84:d8:b9:6b:83:61:ff:eb: c7:bd:97:23:18:87:ed:5b:3a:37:5a:78:d0:72:e5: 89:d2:a5:e6:48:1a:e3:45:cf:da:34:86:e9:95:71: ef:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:36:42:95:DB:0D:A8:74:93:46:CB:2F:26:BF:56:1A:E3:A2:F3:DE X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2zZCldsNqHSTRssvJr9WGuOi894.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:8e0::/44 2a10:2f00:128::/48 Signature Algorithm: sha256WithRSAEncryption 99:1c:e5:90:f4:50:82:a2:c0:1c:6b:e9:23:10:6f:e8:53:f2: ac:59:14:34:ac:5a:c7:7b:86:22:c2:5a:77:e7:af:cc:b4:c7: 6a:9d:74:d9:37:19:62:ed:77:ba:f1:5d:5d:b7:fe:34:89:68: e3:b7:2a:6a:2d:15:e0:8a:27:dd:ba:ff:fa:0e:9e:8a:09:58: b4:6f:ee:68:06:17:fa:be:0f:66:5e:b5:8b:64:19:44:df:c0: b2:14:6f:92:05:f8:99:10:3f:d5:a3:db:dc:aa:4d:06:c4:0d: 4e:4c:1c:c8:0f:2f:e2:6f:66:94:97:70:b7:02:6c:d4:65:35: ae:44:e4:fd:b9:17:e3:68:e6:f4:8b:14:ae:d7:de:49:57:ed: d1:08:64:93:76:32:a5:7c:83:d2:29:f6:cd:bc:d0:14:71:dd: 45:bd:76:34:5c:76:f4:3a:05:45:87:56:b2:14:01:02:37:c9: 20:28:79:09:ad:0b:8b:07:e8:89:8c:83:e6:b8:8b:a8:b1:01: d8:ca:83:c7:81:2b:71:5f:63:9e:2a:4e:5c:18:74:4b:5c:75: 1b:dd:0c:00:bf:4e:f1:16:ed:34:76:d0:f1:44:c6:e5:0f:6c: ce:6c:ea:b1:0b:3c:97:f4:3a:e4:a5:2a:4f:d1:98:6f:30:8e: dc:7d:ef:54 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XWJXn4i6uRtgPC8tLyiUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjM2NDI5NWRiMGRhODc0OTM0NmNiMmYyNmJmNTYxYWUzYTJmM2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzn5VaKAKcOgHhR7uSy6Nv+B5dUC5 GYt7d4KsIxl8R+MlSpU3ak3YRhOTmbT0S5nnBpusV+R6cwuzXl1qdn+dPrujmfgv Y8mndg8NuwX7qRJqwepFL0pnu0XeRczGQsb+WlBISO1a8vG1zI4Vk0cQX0yPCy3O u2q+1oh875GvgO6puUqjtRdC1cfswaoG5p1wDKqFtbuO6liJi46pFGuPzsBzKfvI PLWQEfxrg4mtb388a0h3DXwf6hAL1M+5WZdA9YIEE3kTpH0N7zoM2r+S4otsELY3 m2sUhNi5a4Nh/+vHvZcjGIftWzo3WnjQcuWJ0qXmSBrjRc/aNIbplXHvLwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNs2QpXbDah0k0bLLya/VhrjovPeMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvMnpaQ2xkc05xSFNUUnNzdkpyOVdHdU9pODk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg6xBwjg AwcAKhAvAAEoMA0GCSqGSIb3DQEBCwUAA4IBAQCZHOWQ9FCCosAca+kjEG/oU/Ks WRQ0rFrHe4Yiwlp356/MtMdqnXTZNxli7Xe68V1dt/40iWjjtypqLRXgiifduv/6 Dp6KCVi0b+5oBhf6vg9mXrWLZBlE38CyFG+SBfiZED/Vo9vcqk0GxA1OTBzIDy/i b2aUl3C3AmzUZTWuROT9uRfjaOb0ixSu195JV+3RCGSTdjKlfIPSKfbNvNAUcd1F vXY0XHb0OgVFh1ayFAECN8kgKHkJrQuLB+iJjIPmuIuosQHYyoPHgStxX2OeKk5c GHRLXHUb3QwAv07xFu00dtDxRMblD2zObOqxCzyX9DrkpSpP0ZhvMI7cfe9U -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:48 2026 by rpki-client