This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/C0-0BB-du9eYRJlrPDaMMZR83IM.roa File: C0-0BB-du9eYRJlrPDaMMZR83IM.roa (raw, json) Hash identifier: T/KSuH+B/kzb7OY6AoiWXFMFrsZeATIpibsKN1KZohs= Subject key identifier: 0B:4F:B4:04:1F:9D:BB:D7:98:44:99:6B:3C:36:8C:31:94:7C:DC:83 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D179BEA166A68DE8CE5A61FB02991 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/C0-0BB-du9eYRJlrPDaMMZR83IM.roa Signing time: Fri 02 Jan 2026 06:20:11 +0000 ROA not before: Fri 02 Jan 2026 06:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208840 IP address blocks: 2a0e:97c0:bd0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:17:9b:ea:16:6a:68:de:8c:e5:a6:1f:b0:29:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b4fb4041f9dbbd79844996b3c368c31947cdc83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:05:5f:bb:4b:5e:75:8f:6c:4d:e9:fa:fc:ad: 8c:cc:c7:14:45:47:ba:9a:71:0e:4e:8a:86:b5:b1: 6c:8b:77:63:1e:06:49:7a:08:3a:1a:1a:69:a2:78: 47:0f:83:67:6f:9a:1f:d0:f2:41:ea:7f:db:5f:3b: 51:58:b4:2a:66:7f:41:43:51:de:6c:95:3a:b3:8b: f5:a7:ab:37:a6:50:90:1a:cd:a7:f5:88:74:4d:33: d1:2b:8e:e6:68:99:40:45:05:cc:49:5c:df:8f:c7: 14:c4:cc:59:bc:ae:20:3c:d7:49:c1:63:3c:18:cb: 23:67:24:fa:06:1b:5c:9b:4a:e1:d1:6f:01:40:7d: 8f:15:d8:96:c0:19:f4:9c:f8:df:6b:6d:44:9c:b9: 35:d6:88:d0:27:a4:bb:cd:36:80:a2:c5:72:7f:07: e6:98:b1:8c:df:59:56:02:92:ed:ce:7c:06:92:b9: 50:e4:ab:70:fe:5a:62:3e:ce:c6:b1:08:df:54:26: 65:33:23:b5:a1:ab:94:ab:c5:5d:60:9f:32:3a:23: ba:17:fb:b7:5b:5b:76:61:ef:97:9b:75:28:9c:30: c5:ae:bb:1b:a5:c5:e6:10:be:f4:6f:62:00:30:5a: 4a:fe:a8:04:22:e4:ce:78:b0:be:0f:38:77:a8:3d: e2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:4F:B4:04:1F:9D:BB:D7:98:44:99:6B:3C:36:8C:31:94:7C:DC:83 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/C0-0BB-du9eYRJlrPDaMMZR83IM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:bd0::/44 Signature Algorithm: sha256WithRSAEncryption b7:1d:32:51:c8:c0:40:2a:65:3c:7e:fa:da:1d:a4:8d:2a:b9: df:fb:cd:39:43:2a:fa:74:19:a5:7e:b9:ef:2b:da:22:c9:ee: c0:d5:70:33:37:78:d3:bc:9a:64:91:7e:f1:be:a6:78:5d:11: ad:80:c5:49:aa:0a:75:4c:32:6f:6e:f9:19:2e:5a:10:db:41: 26:df:d3:d4:c7:e8:99:39:b1:2f:70:60:d4:8e:79:44:27:53: ae:43:73:eb:5e:6c:fe:1c:95:72:ab:b5:4e:48:64:15:2f:7b: 05:1a:9e:13:b7:5c:39:02:19:41:1a:da:93:28:e4:36:ec:f6: aa:c4:89:3c:10:3d:38:d0:ea:54:da:35:0a:ae:1d:3a:f4:f3: 41:4b:71:80:a0:2a:da:e6:14:55:bc:d0:aa:f2:a0:53:07:f1: ae:67:04:38:3f:8d:52:20:bb:f5:76:10:3f:43:5b:e6:67:1d: 9b:09:23:82:be:f0:0f:5d:15:e2:79:d6:0b:bc:a3:03:8a:80: 8a:15:c4:c5:85:4a:ab:24:3d:76:a2:93:1a:cf:34:67:d3:bf: 58:0a:9f:7c:f9:0d:ad:fa:27:ef:81:a4:0a:99:5a:31:51:5c: d8:a3:9d:f1:40:a0:d6:ca:75:45:27:ed:c1:be:86:f3:6e:05: b3:20:66:c1 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XReb6hZqaN6M5aYfsCmRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjRmYjQwNDFmOWRiYmQ3OTg0NDk5NmIzYzM2OGMzMTk0N2NkYzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwVfu0tedY9sTen6/K2MzMcURUe6 mnEOToqGtbFsi3djHgZJegg6GhpponhHD4Nnb5of0PJB6n/bXztRWLQqZn9BQ1He bJU6s4v1p6s3plCQGs2n9Yh0TTPRK47maJlARQXMSVzfj8cUxMxZvK4gPNdJwWM8 GMsjZyT6Bhtcm0rh0W8BQH2PFdiWwBn0nPjfa21EnLk11ojQJ6S7zTaAosVyfwfm mLGM31lWApLtznwGkrlQ5Ktw/lpiPs7GsQjfVCZlMyO1oauUq8VdYJ8yOiO6F/u3 W1t2Ye+Xm3UonDDFrrsbpcXmEL70b2IAMFpK/qgEIuTOeLC+Dzh3qD3ixwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAtPtAQfnbvXmESZazw2jDGUfNyDMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvQzAtMEJCLWR1OWVZUkpsclBEYU1NWlI4M0lNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAvQ MA0GCSqGSIb3DQEBCwUAA4IBAQC3HTJRyMBAKmU8fvraHaSNKrnf+805Qyr6dBml frnvK9oiye7A1XAzN3jTvJpkkX7xvqZ4XRGtgMVJqgp1TDJvbvkZLloQ20Em39PU x+iZObEvcGDUjnlEJ1OuQ3PrXmz+HJVyq7VOSGQVL3sFGp4Tt1w5AhlBGtqTKOQ2 7PaqxIk8ED040OpU2jUKrh069PNBS3GAoCra5hRVvNCq8qBTB/GuZwQ4P41SILv1 dhA/Q1vmZx2bCSOCvvAPXRXiedYLvKMDioCKFcTFhUqrJD12opMazzRn079YCp98 +Q2t+ifvgaQKmVoxUVzYo53xQKDWynVFJ+3BvobzbgWzIGbB -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:50 2026 by rpki-client