This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A65VY6XXJPpI2MZHAsw3m7BMDSc.roa File: A65VY6XXJPpI2MZHAsw3m7BMDSc.roa (raw, json) Hash identifier: uJ+Gx8KlDFH4f7wJfU2gFutfcyMF95O1xrk4XL0sDcA= Subject key identifier: 03:AE:55:63:A5:D7:24:FA:48:D8:C6:47:02:CC:37:9B:B0:4C:0D:27 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D4AC4EEC4827CD6A47311B7852385 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A65VY6XXJPpI2MZHAsw3m7BMDSc.roa Signing time: Fri 02 Jan 2026 06:20:24 +0000 ROA not before: Fri 02 Jan 2026 06:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212154 IP address blocks: 2a0e:b107:1c00::/48 maxlen: 48 2a0e:b107:1c0e::/48 maxlen: 48 2a0e:b107:1c0f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:4a:c4:ee:c4:82:7c:d6:a4:73:11:b7:85:23:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03ae5563a5d724fa48d8c64702cc379bb04c0d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3e:c0:31:74:e4:9f:fb:e1:15:30:e7:f2:ea: e8:f1:97:82:0a:4e:bd:41:fa:82:5c:fb:79:af:cd: 81:58:47:aa:67:ed:21:21:ee:51:1b:ed:1d:8e:19: f0:27:22:7e:a1:b5:ea:26:c3:62:fc:35:e9:ca:28: ac:8f:23:4c:88:5a:de:cd:d3:3b:2b:b1:d7:68:3e: a8:7f:b2:55:2a:6b:3b:6e:33:3b:52:0a:da:5b:1e: 9e:81:89:13:0e:25:c4:2b:d4:cf:a2:e3:0b:1e:1b: 63:aa:b5:eb:c3:17:0c:4a:cf:e1:1c:3e:f4:b0:a7: de:43:72:ce:4b:7a:d7:29:17:9c:2d:20:ff:57:c3: 73:6b:6e:c7:8d:79:49:c8:cc:e5:a6:d8:9d:4f:5d: 01:f5:1c:ff:bf:34:cc:ce:ea:f6:80:5c:8e:bb:d9: cc:d4:20:30:56:ee:85:6a:01:31:2e:07:b3:60:f3: 13:d6:92:19:37:44:bc:96:fc:30:4f:92:ce:a2:eb: 36:10:dc:51:71:de:ce:56:88:9e:f4:19:95:48:cc: 99:c2:d5:e9:db:15:4d:d9:fa:47:23:b6:96:4c:31: 1a:2f:d8:eb:b7:75:f4:bb:49:1a:77:b2:37:41:9f: 7a:8b:38:58:ca:7e:d1:88:26:a3:16:95:e7:1c:48: ff:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:AE:55:63:A5:D7:24:FA:48:D8:C6:47:02:CC:37:9B:B0:4C:0D:27 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A65VY6XXJPpI2MZHAsw3m7BMDSc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1c00::/48 2a0e:b107:1c0e::/47 Signature Algorithm: sha256WithRSAEncryption ab:1c:36:ff:d0:41:a1:3a:2d:45:6c:47:42:16:fe:cc:c6:d7: d6:dc:16:b2:c9:d9:4e:e3:7a:90:3c:2b:9c:d9:f0:7b:30:43: 06:42:5e:2b:04:3e:30:b5:e0:30:3a:64:90:91:8d:63:7b:56: d1:b7:86:a0:1d:b5:0d:06:74:26:bd:32:1b:eb:a6:59:6c:bf: 02:40:00:5e:80:be:7a:5a:9b:5d:0b:98:aa:a7:a3:3b:69:4b: 35:05:ee:a0:48:c9:e7:7b:c4:47:5b:a3:ee:31:f4:f8:bc:cf: 75:97:42:be:ca:ae:e0:cf:46:a8:f6:2a:7d:cc:2a:6e:1a:ec: 7f:4c:77:86:d1:76:e9:50:6f:60:08:71:f8:8b:6f:ac:d9:64: af:bc:73:21:32:3d:f7:c2:5a:a7:1b:ef:02:99:e6:98:63:db: 7b:7b:07:d0:b9:b2:d3:ae:82:e2:18:c8:5f:9d:1f:f0:6b:d2: 0a:7b:03:9c:ab:69:da:ee:e0:f7:a4:dd:ea:3c:27:c2:ae:22: 74:18:1a:0e:6e:0d:72:7f:f9:a5:63:d1:38:cc:b3:3d:21:81: 37:a5:14:a2:4e:03:36:ec:10:51:5e:15:32:7d:c5:33:0e:0d: e0:1d:ee:5b:71:f4:13:76:2d:ff:ff:02:89:df:2e:6e:93:dc: bb:2b:85:af -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XUrE7sSCfNakcxG3hSOFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2FlNTU2M2E1ZDcyNGZhNDhkOGM2NDcwMmNjMzc5YmIwNGMwZDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkD7AMXTkn/vhFTDn8uro8ZeCCk69 QfqCXPt5r82BWEeqZ+0hIe5RG+0djhnwJyJ+obXqJsNi/DXpyiisjyNMiFrezdM7 K7HXaD6of7JVKms7bjM7UgraWx6egYkTDiXEK9TPouMLHhtjqrXrwxcMSs/hHD70 sKfeQ3LOS3rXKRecLSD/V8Nza27HjXlJyMzlptidT10B9Rz/vzTMzur2gFyOu9nM 1CAwVu6FagExLgezYPMT1pIZN0S8lvwwT5LOous2ENxRcd7OVoie9BmVSMyZwtXp 2xVN2fpHI7aWTDEaL9jrt3X0u0kad7I3QZ96izhYyn7RiCajFpXnHEj/mwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAOuVWOl1yT6SNjGRwLMN5uwTA0nMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvQTY1Vlk2WFhKUHBJMk1aSEFzdzNtN0JNRFNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg6xBxwA AwcBKg6xBxwOMA0GCSqGSIb3DQEBCwUAA4IBAQCrHDb/0EGhOi1FbEdCFv7MxtfW 3BayydlO43qQPCuc2fB7MEMGQl4rBD4wteAwOmSQkY1je1bRt4agHbUNBnQmvTIb 66ZZbL8CQABegL56WptdC5iqp6M7aUs1Be6gSMnne8RHW6PuMfT4vM91l0K+yq7g z0ao9ip9zCpuGux/THeG0XbpUG9gCHH4i2+s2WSvvHMhMj33wlqnG+8CmeaYY9t7 ewfQubLTroLiGMhfnR/wa9IKewOcq2na7uD3pN3qPCfCriJ0GBoObg1yf/mlY9E4 zLM9IYE3pRSiTgM27BBRXhUyfcUzDg3gHe5bcfQTdi3//wKJ3y5uk9y7K4Wv -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:27 2026 by rpki-client