This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JTCYAxIz9dYMUqkGf1V9QKpowTc.roa File: JTCYAxIz9dYMUqkGf1V9QKpowTc.roa (raw, json) Hash identifier: 6msH6dZ6FcZ2MqjMoFiH/LelDPCxi9/vFh66ckr+qZ8= Subject key identifier: 25:30:98:03:12:33:F5:D6:0C:52:A9:06:7F:55:7D:40:AA:68:C1:37 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D212DE4C98CB5D59B1C1577B1C293 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JTCYAxIz9dYMUqkGf1V9QKpowTc.roa Signing time: Fri 02 Jan 2026 06:20:13 +0000 ROA not before: Fri 02 Jan 2026 06:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209861 IP address blocks: 2a0e:b107:f0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:21:2d:e4:c9:8c:b5:d5:9b:1c:15:77:b1:c2:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=253098031233f5d60c52a9067f557d40aa68c137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5e:ee:2c:ef:0a:b8:9b:e8:2b:8f:e6:08:ab: 51:86:1d:35:9f:2e:f0:15:41:dd:0e:a2:2b:1f:8f: f9:e8:e2:ec:f5:bc:ac:6b:4a:37:3d:a6:ad:58:4b: b4:c4:86:8a:d0:b3:6a:54:e8:0a:cd:38:84:58:ab: 9b:38:33:db:50:75:43:e7:6e:20:f4:0f:b8:d4:fb: b6:05:0f:06:c0:b1:66:96:7c:ea:73:c4:31:ea:bb: d4:ae:e1:7a:02:1e:d0:af:f4:66:35:9a:ec:d8:d5: 30:6e:41:46:8e:21:33:4f:d9:72:10:3b:a7:ed:c3: ca:3d:a4:75:0c:9c:f1:9d:89:57:f2:3d:69:26:0a: 58:39:8e:1b:8d:b1:07:1b:cd:31:ca:e7:f0:1c:2f: 11:bb:1f:3e:81:6d:9b:62:14:1d:50:84:1e:f5:ab: c2:14:b1:60:49:ff:05:6a:ba:54:a7:32:c6:4f:0d: 60:ff:e2:b6:91:43:98:1d:3c:1c:58:a7:c1:67:02: 84:4d:4c:de:23:8c:6a:a4:d4:40:04:5b:04:cd:00: 3f:37:ed:bc:81:3b:e3:0d:08:eb:00:ec:2c:a9:1f: 2c:bc:dc:5d:49:bb:4c:be:70:0b:dd:31:2d:5f:6b: 96:af:64:e9:79:13:77:e3:9f:0d:00:c7:f0:0c:fc: 25:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:30:98:03:12:33:F5:D6:0C:52:A9:06:7F:55:7D:40:AA:68:C1:37 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JTCYAxIz9dYMUqkGf1V9QKpowTc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:f0::/44 Signature Algorithm: sha256WithRSAEncryption b1:9d:a8:26:ef:cc:0d:96:35:04:f5:af:20:7e:c9:11:61:b9: 6f:8a:fc:55:33:18:f0:67:c7:92:85:fe:d2:ce:fb:af:4c:b3: d8:06:ad:a5:d1:84:23:6f:31:6c:07:a3:bb:63:87:6f:42:f5: 4c:59:ba:e3:e3:bb:10:e5:d8:41:59:75:f9:9f:18:81:45:34: f9:2c:48:e4:8f:51:15:ca:a2:df:3a:6f:44:6f:a7:ab:6c:09: ce:08:a2:0e:27:59:9a:69:5e:9c:8d:3c:d9:25:29:42:06:9a: 3b:8e:9f:ea:82:f7:f2:f2:5a:24:fe:cd:37:45:3a:e9:da:6c: 8d:b1:a6:97:80:65:6d:cd:84:59:02:42:e2:77:6f:98:9b:cb: af:5a:16:8d:73:2d:3f:d9:e4:bb:ab:1d:7c:c3:2c:76:53:28: a1:3c:98:5b:e2:ec:d8:59:0e:0c:ef:05:b7:98:93:0c:2c:5c: de:ee:80:30:2d:5f:f5:1d:91:4b:1d:24:d6:6f:a5:16:76:37: 4c:ac:e3:96:cd:4c:49:ac:04:2e:ea:38:e7:b4:09:dc:8b:54: a5:aa:0d:70:f4:ad:5c:fd:0e:2b:fc:e0:b4:41:d6:2b:86:7b: d5:2c:f0:e0:86:f7:6e:ce:e8:cc:6e:02:50:3d:fe:39:49:c3: f6:e4:0f:94 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XSEt5MmMtdWbHBV3scKTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTMwOTgwMzEyMzNmNWQ2MGM1MmE5MDY3ZjU1N2Q0MGFhNjhjMTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF7uLO8KuJvoK4/mCKtRhh01ny7w FUHdDqIrH4/56OLs9bysa0o3PaatWEu0xIaK0LNqVOgKzTiEWKubODPbUHVD524g 9A+41Pu2BQ8GwLFmlnzqc8Qx6rvUruF6Ah7Qr/RmNZrs2NUwbkFGjiEzT9lyEDun 7cPKPaR1DJzxnYlX8j1pJgpYOY4bjbEHG80xyufwHC8Rux8+gW2bYhQdUIQe9avC FLFgSf8FarpUpzLGTw1g/+K2kUOYHTwcWKfBZwKETUzeI4xqpNRABFsEzQA/N+28 gTvjDQjrAOwsqR8svNxdSbtMvnAL3TEtX2uWr2TpeRN3458NAMfwDPwl+wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCUwmAMSM/XWDFKpBn9VfUCqaME3MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvSlRDWUF4SXo5ZFlNVXFrR2YxVjlRS3Bvd1RjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBwDw MA0GCSqGSIb3DQEBCwUAA4IBAQCxnagm78wNljUE9a8gfskRYblvivxVMxjwZ8eS hf7SzvuvTLPYBq2l0YQjbzFsB6O7Y4dvQvVMWbrj47sQ5dhBWXX5nxiBRTT5LEjk j1EVyqLfOm9Eb6erbAnOCKIOJ1maaV6cjTzZJSlCBpo7jp/qgvfy8lok/s03RTrp 2myNsaaXgGVtzYRZAkLid2+Ym8uvWhaNcy0/2eS7qx18wyx2UyihPJhb4uzYWQ4M 7wW3mJMMLFze7oAwLV/1HZFLHSTWb6UWdjdMrOOWzUxJrAQu6jjntAnci1Slqg1w 9K1c/Q4r/OC0QdYrhnvVLPDghvduzujMbgJQPf45ScP25A+U -----END CERTIFICATE-----Generated at Mon Jan 12 01:57:31 2026 by rpki-client