This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/44ls1Ot2TsSjM3u7_9xbzdgP1dE.roa File: 44ls1Ot2TsSjM3u7_9xbzdgP1dE.roa (raw, json) Hash identifier: diS1WtL7QOGleYLoVJALvIsHNlOgWNrcW3aHc9v3JBE= Subject key identifier: E3:89:6C:D4:EB:76:4E:C4:A3:33:7B:BB:FF:DC:5B:CD:D8:0F:D5:D1 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D255D23885FC72D4AB6163A9AFE3D Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/44ls1Ot2TsSjM3u7_9xbzdgP1dE.roa Signing time: Fri 02 Jan 2026 06:20:14 +0000 ROA not before: Fri 02 Jan 2026 06:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210354 IP address blocks: 2a0e:97c0:690::/44 maxlen: 48 2a0e:97c0:690::/48 maxlen: 48 2a0e:97c0:691::/48 maxlen: 48 2a0e:97c0:692::/48 maxlen: 48 2a0e:97c0:693::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:25:5d:23:88:5f:c7:2d:4a:b6:16:3a:9a:fe:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3896cd4eb764ec4a3337bbbffdc5bcdd80fd5d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:69:a6:29:22:f0:cc:0c:b7:14:06:5d:6b:fd: 20:36:19:8a:49:9b:23:b6:e9:53:df:34:73:b2:c4: a0:dc:bd:6a:94:e3:b2:87:aa:3b:77:c3:3f:15:ef: 85:13:92:19:a9:b7:9c:97:f7:13:64:6e:ae:3a:82: 9c:df:43:a9:09:44:7a:d5:b9:34:e8:bc:c1:72:b7: 74:cb:90:3d:13:8b:ca:72:cc:34:2a:05:eb:24:bf: 89:83:c7:62:ee:d8:3a:12:b9:bd:60:de:c1:86:1e: 26:cc:62:ca:c4:df:96:65:d7:aa:97:ed:d8:52:43: 98:6d:5d:5d:4a:5d:a9:e9:3f:15:b2:f2:9b:f9:3c: f5:52:6e:4c:d9:7c:95:71:f8:79:7d:40:1d:37:fe: 1d:e1:21:0d:1e:6c:88:1d:cc:e1:09:ef:75:ec:f9: 9b:34:47:b0:5b:91:70:ff:cc:2a:dc:a8:df:9e:e9: 0c:9f:50:98:21:37:5c:e1:89:7f:e4:56:e0:0a:a9: ed:61:50:92:65:eb:a0:ef:ad:87:e8:60:d7:78:d3: a3:2a:3a:45:d9:f2:b7:cf:7a:8a:64:e0:a8:d6:3b: 05:c5:5f:ed:70:2e:cd:21:c9:c3:bf:fb:b7:74:02: 56:dc:de:b2:8a:3b:ed:5e:36:22:51:dd:e6:3a:f9: 62:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:89:6C:D4:EB:76:4E:C4:A3:33:7B:BB:FF:DC:5B:CD:D8:0F:D5:D1 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/44ls1Ot2TsSjM3u7_9xbzdgP1dE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:690::/44 Signature Algorithm: sha256WithRSAEncryption 45:9c:83:65:8d:da:10:06:d8:c7:cb:7e:10:09:5c:a7:eb:d8: 07:71:94:75:ad:51:8f:fa:c9:65:95:f2:25:13:0b:84:2a:10: f7:08:df:e1:6f:5a:44:13:03:b2:d0:de:dd:30:8c:31:bf:dd: 26:60:ec:2b:d5:59:0a:42:fb:b1:51:67:35:23:6e:72:4c:d7: ab:c9:d9:d1:b7:60:7a:61:22:6a:50:a1:fd:82:b6:98:16:f2: 1d:4d:d9:02:04:f0:fc:91:6b:52:a1:a6:c8:83:3a:b2:3d:a2: de:92:c4:04:6a:27:bb:b2:2e:4f:36:36:53:9e:e2:d3:2f:51: f3:91:14:90:63:ff:0f:d2:ef:94:30:d2:fd:4c:d3:8f:af:2b: 64:3b:f6:e4:35:a4:e2:00:8c:27:6c:f4:ed:4e:53:2d:df:87: 1c:9d:8c:86:c5:af:79:59:68:a6:fd:4a:2e:4b:0a:fb:ac:d3: 23:1e:8b:f3:3b:35:63:c4:ac:1a:04:bd:34:84:2e:0b:bd:76: 30:b3:ed:b9:0d:3c:47:a2:32:ce:0a:45:9d:71:dc:23:e7:97: b6:c4:01:b9:d3:46:89:ea:6e:f3:69:65:01:14:dc:49:9e:c2: 89:d0:de:35:c9:45:9b:8d:e7:c0:85:54:a1:c2:2d:4a:78:38: 45:1b:ee:1b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XSVdI4hfxy1KthY6mv49MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzg5NmNkNGViNzY0ZWM0YTMzMzdiYmJmZmRjNWJjZGQ4MGZkNWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmmmKSLwzAy3FAZda/0gNhmKSZsj tulT3zRzssSg3L1qlOOyh6o7d8M/Fe+FE5IZqbecl/cTZG6uOoKc30OpCUR61bk0 6LzBcrd0y5A9E4vKcsw0KgXrJL+Jg8di7tg6Erm9YN7Bhh4mzGLKxN+WZdeql+3Y UkOYbV1dSl2p6T8VsvKb+Tz1Um5M2XyVcfh5fUAdN/4d4SENHmyIHczhCe917Pmb NEewW5Fw/8wq3KjfnukMn1CYITdc4Yl/5FbgCqntYVCSZeug762H6GDXeNOjKjpF 2fK3z3qKZOCo1jsFxV/tcC7NIcnDv/u3dAJW3N6yijvtXjYiUd3mOvliiwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOOJbNTrdk7EozN7u//cW83YD9XRMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvNDRsczFPdDJUc1NqTTN1N185eGJ6ZGdQMWRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAaQ MA0GCSqGSIb3DQEBCwUAA4IBAQBFnINljdoQBtjHy34QCVyn69gHcZR1rVGP+sll lfIlEwuEKhD3CN/hb1pEEwOy0N7dMIwxv90mYOwr1VkKQvuxUWc1I25yTNerydnR t2B6YSJqUKH9graYFvIdTdkCBPD8kWtSoabIgzqyPaLeksQEaie7si5PNjZTnuLT L1HzkRSQY/8P0u+UMNL9TNOPrytkO/bkNaTiAIwnbPTtTlMt34ccnYyGxa95WWim /UouSwr7rNMjHovzOzVjxKwaBL00hC4LvXYws+25DTxHojLOCkWdcdwj55e2xAG5 00aJ6m7zaWUBFNxJnsKJ0N41yUWbjefAhVShwi1KeDhFG+4b -----END CERTIFICATE-----Generated at Sat Jan 3 06:40:34 2026 by rpki-client