This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5Vtj0rY0BVDSeoBSb-gLMzvn89U.roa File: 5Vtj0rY0BVDSeoBSb-gLMzvn89U.roa (raw, json) Hash identifier: jiZUajW2taD8XYHN4AMLcQUW8PXT0MgW/iENmVEA9gw= Subject key identifier: E5:5B:63:D2:B6:34:05:50:D2:7A:80:52:6F:E8:0B:33:3B:E7:F3:D5 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D8D13A5DCFDCFF8D4C32EC6CF9E91 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5Vtj0rY0BVDSeoBSb-gLMzvn89U.roa Signing time: Fri 02 Jan 2026 06:20:41 +0000 ROA not before: Fri 02 Jan 2026 06:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216427 IP address blocks: 2a06:de00:ad00::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:8d:13:a5:dc:fd:cf:f8:d4:c3:2e:c6:cf:9e:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e55b63d2b6340550d27a80526fe80b333be7f3d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:61:6a:d4:11:b5:6d:fa:a1:cc:8a:e1:ea:14: 5c:b0:e5:ae:13:bc:e7:f1:61:99:4e:2d:50:9a:32: d5:b2:06:4c:5c:99:18:d0:a2:d3:5f:61:8f:3b:97: a0:ce:c0:1f:4b:3a:c9:7f:3a:a7:28:03:94:b8:08: 13:75:4f:85:90:60:d4:de:e7:de:26:94:af:f9:70: c4:36:83:15:ba:95:60:05:31:80:39:1c:32:a1:5f: b6:94:26:ff:48:58:b6:b3:1b:83:3c:0a:a3:ff:7c: 96:ec:b6:50:ad:6d:51:5b:a1:50:d0:0c:9a:89:ca: a0:94:83:68:88:af:4e:17:80:41:42:e1:bb:d0:13: 12:e4:4e:6c:b9:f2:f1:6b:c7:63:a8:4e:1d:4a:c4: 74:34:a2:ec:28:88:78:b6:66:a7:ef:8b:75:08:1b: a2:2f:05:25:98:cc:08:ec:7b:e6:68:d9:2a:3c:b8: 98:49:77:20:35:4e:45:4b:f2:8b:63:cf:e1:bc:6c: 61:6a:b4:a8:b2:2f:eb:ed:b6:40:79:2d:50:dc:ad: 32:93:28:ee:8a:dc:cd:1f:ae:34:69:84:23:6e:e6: 4d:56:3f:f6:d3:3e:cb:89:d3:af:df:79:ea:c1:39: d7:56:55:2e:a7:bd:2c:00:b6:cf:d0:b1:37:43:90: 8a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:5B:63:D2:B6:34:05:50:D2:7A:80:52:6F:E8:0B:33:3B:E7:F3:D5 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5Vtj0rY0BVDSeoBSb-gLMzvn89U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:de00:ad00::/44 Signature Algorithm: sha256WithRSAEncryption 74:d6:95:9b:8b:d8:32:1f:6a:6e:5f:51:2d:90:29:b8:48:0e: 83:c7:b5:ec:de:b0:43:76:0a:fb:77:02:26:35:5c:6c:55:78: 17:07:f2:22:4a:00:b5:46:f0:25:71:77:71:30:6b:fc:42:75: 42:b5:13:4b:f5:82:91:06:c3:03:3f:37:04:88:fb:6a:a3:1a: e6:9e:05:73:f8:51:69:e7:a1:30:f7:a8:8b:99:bd:25:74:00: f8:d9:f8:6a:44:c1:83:95:44:91:3a:3a:b1:71:c5:7d:9d:75: d1:96:6a:e1:52:f1:70:39:38:02:76:82:08:fc:74:8e:31:bf: 3d:f9:62:65:76:84:68:a1:f7:2c:03:51:5b:de:5c:15:f4:f3: d7:0e:70:cb:c3:51:55:62:90:8b:a0:7f:62:50:7c:c5:ae:14: 65:da:bc:3a:b7:75:f6:9f:09:5f:3b:0d:fc:87:b1:26:56:b4: 5d:3f:8a:f2:36:c1:a8:6d:3a:d5:bc:38:52:c6:df:47:7a:4e: 68:7f:7a:81:cd:a6:c2:17:9e:4d:b8:59:b7:4f:06:8d:c9:3b: f8:be:76:eb:ed:51:7e:58:ba:0c:99:7b:03:01:d9:0c:f7:8c: 56:4c:b1:eb:14:a8:f3:b5:a5:72:1e:f7:48:69:54:ee:8f:07: 46:e7:36:89 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XY0Tpdz9z/jUwy7Gz56RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTViNjNkMmI2MzQwNTUwZDI3YTgwNTI2ZmU4MGIzMzNiZTdmM2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmFq1BG1bfqhzIrh6hRcsOWuE7zn 8WGZTi1QmjLVsgZMXJkY0KLTX2GPO5egzsAfSzrJfzqnKAOUuAgTdU+FkGDU3ufe JpSv+XDENoMVupVgBTGAORwyoV+2lCb/SFi2sxuDPAqj/3yW7LZQrW1RW6FQ0Aya icqglINoiK9OF4BBQuG70BMS5E5sufLxa8djqE4dSsR0NKLsKIh4tman74t1CBui LwUlmMwI7HvmaNkqPLiYSXcgNU5FS/KLY8/hvGxharSosi/r7bZAeS1Q3K0ykyju itzNH640aYQjbuZNVj/20z7LidOv33nqwTnXVlUup70sALbP0LE3Q5CKbwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOVbY9K2NAVQ0nqAUm/oCzM75/PVMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvNVZ0ajByWTBCVkRTZW9CU2ItZ0xNenZuODlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgbeAK0A MA0GCSqGSIb3DQEBCwUAA4IBAQB01pWbi9gyH2puX1EtkCm4SA6Dx7Xs3rBDdgr7 dwImNVxsVXgXB/IiSgC1RvAlcXdxMGv8QnVCtRNL9YKRBsMDPzcEiPtqoxrmngVz +FFp56Ew96iLmb0ldAD42fhqRMGDlUSROjqxccV9nXXRlmrhUvFwOTgCdoII/HSO Mb89+WJldoRoofcsA1Fb3lwV9PPXDnDLw1FVYpCLoH9iUHzFrhRl2rw6t3X2nwlf Ow38h7EmVrRdP4ryNsGobTrVvDhSxt9Hek5of3qBzabCF55NuFm3TwaNyTv4vnbr 7VF+WLoMmXsDAdkM94xWTLHrFKjztaVyHvdIaVTujwdG5zaJ -----END CERTIFICATE-----Generated at Sun Jan 11 23:47:27 2026 by rpki-client