This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JxdvfPUUe2Gh2ytXw90XK3I-g4c.roa File: JxdvfPUUe2Gh2ytXw90XK3I-g4c.roa (raw, json) Hash identifier: A8UBzuKXRav5OYK/SWjLWGpMyxQ8JahZWY52ogaxqx8= Subject key identifier: 27:17:6F:7C:F5:14:7B:61:A1:DB:2B:57:C3:DD:17:2B:72:3E:83:87 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019BA924BFC504A27500FD3235AF204131E9 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JxdvfPUUe2Gh2ytXw90XK3I-g4c.roa Signing time: Sat 10 Jan 2026 18:21:56 +0000 ROA not before: Sat 10 Jan 2026 18:21:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213461 IP address blocks: 2a10:ccc1:1338::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a9:24:bf:c5:04:a2:75:00:fd:32:35:af:20:41:31:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 10 18:21:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27176f7cf5147b61a1db2b57c3dd172b723e8387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d0:cd:dc:b3:a6:a7:b1:27:b1:e3:9d:02:9b: 6e:2a:27:aa:78:a0:16:bc:77:7e:70:7c:64:ef:1a: d3:f3:91:6d:a3:43:6e:06:80:fc:26:3e:7e:05:76: 50:3d:52:36:1c:60:ad:66:03:1d:f7:a8:83:03:53: 6e:60:05:7d:44:85:b1:d8:9f:eb:3e:1c:e7:18:16: 57:d2:b8:bd:48:38:4b:3b:c8:e6:b6:29:fb:84:5a: 01:d0:2f:ce:95:05:68:89:27:1d:7e:5b:96:01:f3: fb:76:ab:3c:cd:a8:1b:37:8c:79:5f:ee:65:0d:f0: 32:b6:a0:fd:81:d1:88:18:4e:73:6f:54:d7:1d:13: 10:89:c6:e1:72:e4:f9:81:4b:7a:47:b0:4b:63:4f: 37:58:53:d6:58:72:5f:27:53:5e:12:1f:3e:22:d1: 3d:d0:53:3b:57:37:81:23:89:31:51:6a:f8:6e:a0: 99:ab:65:15:13:64:aa:63:e2:f4:32:94:7b:c7:a2: 92:a2:64:7b:74:c4:17:3a:de:c9:b0:10:17:60:b9: 3e:85:b8:f0:72:82:49:e9:59:d7:38:d8:1b:6c:6c: c5:b5:c9:4c:72:57:cd:3f:ca:96:24:6a:09:40:f6: 54:bb:86:f6:60:5d:44:3b:3b:39:56:a1:b9:6a:66: 99:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:17:6F:7C:F5:14:7B:61:A1:DB:2B:57:C3:DD:17:2B:72:3E:83:87 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JxdvfPUUe2Gh2ytXw90XK3I-g4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:ccc1:1338::/47 Signature Algorithm: sha256WithRSAEncryption 58:75:b1:39:5e:43:59:93:89:43:44:21:93:41:1b:9f:99:35: ff:98:88:e7:ae:e7:b5:e7:04:4c:a2:2b:c7:c2:27:c8:5b:2b: bc:c3:4e:30:d2:0a:cc:b7:de:52:00:8a:05:10:04:0a:58:33: 07:c5:0b:39:3a:06:8d:4f:a2:90:c3:d5:ba:b3:75:d5:6f:de: 7c:df:e7:72:a1:c7:84:2c:ee:f0:6f:11:91:8e:46:4c:b8:76: df:8c:0b:54:b4:05:5a:68:90:af:ba:24:1d:6e:8e:30:2d:16: 02:de:b0:e7:b4:ad:30:fe:35:02:5e:90:99:1d:6d:99:32:6c: a4:28:23:35:72:f6:63:b0:80:d7:40:39:32:44:a3:13:27:4b: 91:b3:5f:96:7f:37:56:0a:bf:fd:80:24:68:5d:a4:40:31:36: eb:cf:41:c8:07:22:82:53:e6:a5:71:8e:f5:53:50:0a:c0:88: 26:f9:ff:1e:c6:ca:4f:78:95:7d:d2:0d:b4:b4:22:42:52:da: d1:10:af:27:e9:84:9a:ef:f3:25:5c:1e:fb:1d:e8:20:68:ee: 16:2a:ec:05:41:0f:12:60:7c:53:fc:21:44:7e:d9:e6:a7:e3: 9f:a8:56:ac:81:cc:b2:41:ad:87:5b:73:37:8f:5e:aa:aa:d5: 5c:c7:cc:1e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZupJL/FBKJ1AP0yNa8gQTHpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTEwMTgyMTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzE3NmY3Y2Y1MTQ3YjYxYTFkYjJiNTdjM2RkMTcyYjcyM2U4Mzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9DN3LOmp7EnseOdAptuKieqeKAW vHd+cHxk7xrT85Fto0NuBoD8Jj5+BXZQPVI2HGCtZgMd96iDA1NuYAV9RIWx2J/r PhznGBZX0ri9SDhLO8jmtin7hFoB0C/OlQVoiScdfluWAfP7dqs8zagbN4x5X+5l DfAytqD9gdGIGE5zb1TXHRMQicbhcuT5gUt6R7BLY083WFPWWHJfJ1NeEh8+ItE9 0FM7VzeBI4kxUWr4bqCZq2UVE2SqY+L0MpR7x6KSomR7dMQXOt7JsBAXYLk+hbjw coJJ6VnXONgbbGzFtclMclfNP8qWJGoJQPZUu4b2YF1EOzs5VqG5amaZDQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCcXb3z1FHthodsrV8PdFytyPoOHMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvSnhkdmZQVVVlMkdoMnl0WHc5MFhLM0ktZzRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKhDMwRM4 MA0GCSqGSIb3DQEBCwUAA4IBAQBYdbE5XkNZk4lDRCGTQRufmTX/mIjnrue15wRM oivHwifIWyu8w04w0grMt95SAIoFEAQKWDMHxQs5OgaNT6KQw9W6s3XVb9583+dy oceELO7wbxGRjkZMuHbfjAtUtAVaaJCvuiQdbo4wLRYC3rDntK0w/jUCXpCZHW2Z MmykKCM1cvZjsIDXQDkyRKMTJ0uRs1+WfzdWCr/9gCRoXaRAMTbrz0HIByKCU+al cY71U1AKwIgm+f8exspPeJV90g20tCJCUtrREK8n6YSa7/MlXB77HeggaO4WKuwF QQ8SYHxT/CFEftnmp+OfqFasgcyyQa2HW3M3j16qqtVcx8we -----END CERTIFICATE-----Generated at Mon Jan 12 01:57:32 2026 by rpki-client