This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EXj0kk6BxkD59Dct8_TnIpJ9Tn4.roa File: EXj0kk6BxkD59Dct8_TnIpJ9Tn4.roa (raw, json) Hash identifier: ek9zFDhqsuriFyfefATZYWBQcqeau1RBYSoAs6vTc0E= Subject key identifier: 11:78:F4:92:4E:81:C6:40:F9:F4:37:2D:F3:F4:E7:22:92:7D:4E:7E Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D425BB11F8C04233E13D38D1BB896 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EXj0kk6BxkD59Dct8_TnIpJ9Tn4.roa Signing time: Fri 02 Jan 2026 06:20:22 +0000 ROA not before: Fri 02 Jan 2026 06:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211640 IP address blocks: 2a10:2f00:168::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:42:5b:b1:1f:8c:04:23:3e:13:d3:8d:1b:b8:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1178f4924e81c640f9f4372df3f4e722927d4e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f9:e0:b4:db:c6:f5:c9:d7:9a:f5:ca:8d:cd: bd:49:5c:5f:10:6d:6a:24:df:0d:59:1e:cf:d7:d0: 6a:2a:a8:00:d2:b1:e9:c1:ad:93:73:35:2c:89:91: c3:c8:b9:7c:f2:22:51:cc:18:b1:72:7f:11:af:34: ea:ef:96:e6:47:10:12:e8:c8:02:5a:09:b1:62:f3: 26:92:2f:ef:fc:99:0b:12:f8:90:58:10:e8:af:05: 0e:78:aa:37:4d:97:46:0d:29:90:5e:ac:fe:09:3d: 4e:44:68:a1:3d:02:ec:bb:35:fb:89:97:d1:c9:b9: af:50:e2:36:a9:91:cb:44:d4:9c:50:a7:42:b8:ad: a3:64:61:25:08:60:8c:94:db:82:1d:62:ad:d0:38: 29:df:b7:ae:0e:29:7a:ec:1c:fc:ab:4d:ef:27:e7: cd:69:70:17:e6:00:3a:53:43:64:0f:56:4a:49:55: c7:cd:53:c0:3c:7f:45:a2:03:f0:de:90:ed:4d:de: 20:8a:08:a1:1a:d5:a6:7c:89:50:e6:4b:0c:72:e3: e9:3a:8c:c7:5b:6f:f5:40:68:60:b3:61:3a:7c:93: 73:52:70:b4:ae:f3:ee:c2:66:ea:7b:98:f3:6c:a6: 0d:45:d9:56:aa:f2:e2:27:4b:f0:6f:43:d4:19:28: 40:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:78:F4:92:4E:81:C6:40:F9:F4:37:2D:F3:F4:E7:22:92:7D:4E:7E X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EXj0kk6BxkD59Dct8_TnIpJ9Tn4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:2f00:168::/48 Signature Algorithm: sha256WithRSAEncryption 76:c7:be:d5:64:33:86:bb:66:07:d7:12:62:2e:fe:29:f5:45: fa:05:ce:46:3b:c6:07:f4:ab:c8:92:c6:38:35:24:00:b8:8e: 74:55:5c:93:44:a6:e8:a5:0e:7f:5c:d9:88:38:47:10:d7:27: ef:0e:31:95:d4:09:9d:3c:32:1f:ab:bc:5c:09:e3:e4:c5:e7: 52:ad:e9:d1:95:df:cc:f2:8d:a4:20:9d:d3:b4:59:74:2e:de: e9:7e:72:ae:cb:2a:fc:6f:b5:e5:52:bc:00:50:75:64:fc:2f: 83:c0:c9:c0:fd:4a:96:92:42:81:eb:89:4c:70:3b:32:5d:df: 76:57:c3:9d:ab:40:56:77:b4:f5:81:dc:60:df:5f:35:80:fc: 11:08:3e:a6:a1:b0:26:f3:1a:2d:e1:02:98:42:eb:c0:82:9c: 2a:4d:a8:ac:99:a0:2e:d1:5d:29:23:63:b7:1c:27:d9:f9:72: 25:b7:d9:1a:34:35:50:f9:63:94:75:43:4f:1e:e8:23:2f:7a: 2f:33:32:ff:0e:40:22:17:2d:55:71:ad:f3:cd:55:ff:7a:b2: 1a:64:08:08:f7:a7:ff:47:03:c5:cf:41:29:c9:e8:46:60:67: 9d:5f:e2:2b:5f:78:6e:67:ee:94:09:64:f8:ab:3c:6b:7a:0a: 6f:7a:f8:5d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XUJbsR+MBCM+E9ONG7iWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTc4ZjQ5MjRlODFjNjQwZjlmNDM3MmRmM2Y0ZTcyMjkyN2Q0ZTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfngtNvG9cnXmvXKjc29SVxfEG1q JN8NWR7P19BqKqgA0rHpwa2TczUsiZHDyLl88iJRzBixcn8RrzTq75bmRxAS6MgC WgmxYvMmki/v/JkLEviQWBDorwUOeKo3TZdGDSmQXqz+CT1ORGihPQLsuzX7iZfR ybmvUOI2qZHLRNScUKdCuK2jZGElCGCMlNuCHWKt0Dgp37euDil67Bz8q03vJ+fN aXAX5gA6U0NkD1ZKSVXHzVPAPH9FogPw3pDtTd4gigihGtWmfIlQ5ksMcuPpOozH W2/1QGhgs2E6fJNzUnC0rvPuwmbqe5jzbKYNRdlWqvLiJ0vwb0PUGShASwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBF49JJOgcZA+fQ3LfP05yKSfU5+MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvRVhqMGtrNkJ4a0Q1OURjdDhfVG5JcEo5VG40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAvAAFo MA0GCSqGSIb3DQEBCwUAA4IBAQB2x77VZDOGu2YH1xJiLv4p9UX6Bc5GO8YH9KvI ksY4NSQAuI50VVyTRKbopQ5/XNmIOEcQ1yfvDjGV1AmdPDIfq7xcCePkxedSrenR ld/M8o2kIJ3TtFl0Lt7pfnKuyyr8b7XlUrwAUHVk/C+DwMnA/UqWkkKB64lMcDsy Xd92V8Odq0BWd7T1gdxg3181gPwRCD6mobAm8xot4QKYQuvAgpwqTaismaAu0V0p I2O3HCfZ+XIlt9kaNDVQ+WOUdUNPHugjL3ovMzL/DkAiFy1Vca3zzVX/erIaZAgI 96f/RwPFz0EpyehGYGedX+IrX3huZ+6UCWT4qzxregpvevhd -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:25 2026 by rpki-client