This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KsOyfnubAOf9zafFlrYZz--4zyg.roa File: KsOyfnubAOf9zafFlrYZz--4zyg.roa (raw, json) Hash identifier: Bsgcs3/YaP9DCpCG2CaZBYlnVKEn3BpUUCEjyHnHmaA= Subject key identifier: 2A:C3:B2:7E:7B:9B:00:E7:FD:CD:A7:C5:96:B6:19:CF:EF:B8:CF:28 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D4083C99A713D7DA4806BB0A21CD0 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KsOyfnubAOf9zafFlrYZz--4zyg.roa Signing time: Fri 02 Jan 2026 06:20:21 +0000 ROA not before: Fri 02 Jan 2026 06:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211548 IP address blocks: 2a0e:97c0:2c0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:40:83:c9:9a:71:3d:7d:a4:80:6b:b0:a2:1c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ac3b27e7b9b00e7fdcda7c596b619cfefb8cf28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c6:b0:ee:3f:4d:46:db:9f:fc:11:0b:4a:0b: a2:c1:10:91:63:d1:de:08:dc:be:f9:d3:b3:f5:e3: a7:eb:fb:d2:4c:7b:08:e6:b3:98:80:28:21:7d:83: 2d:71:03:28:9a:27:b9:43:57:ed:92:5e:38:3c:b0: 02:3c:9f:3a:3e:cc:db:42:e2:a0:6a:46:d0:d8:bd: 35:fb:cd:35:6d:80:13:d7:d3:74:c4:a6:ec:36:4f: 5f:0f:6b:0b:f4:78:8a:ef:64:96:aa:69:04:73:8f: 47:26:c2:86:f4:6d:f7:ff:14:04:41:42:e8:b3:aa: c7:e3:aa:af:78:54:f0:32:d5:49:f8:b7:b9:9a:4a: 3b:eb:2b:50:8a:81:a5:3e:81:cd:6e:c3:25:57:f0: a6:09:f7:93:89:91:3f:c9:66:2d:e0:57:e3:e0:d0: 80:6f:8a:34:60:7a:98:a5:f8:9f:b2:12:f4:06:11: a4:6c:08:3f:ae:44:1e:fd:07:f8:72:7d:84:86:80: 5d:df:0e:e1:1d:6b:f5:d2:9d:55:9d:4a:d7:cc:01: 25:f1:f4:09:1c:dc:bf:2c:58:10:43:b3:21:16:06: 4a:c7:ec:58:b6:be:20:fb:e9:d3:d6:7e:03:30:7a: 2c:ff:ee:e4:bd:81:f2:3e:00:41:5a:dc:4d:fa:00: fa:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C3:B2:7E:7B:9B:00:E7:FD:CD:A7:C5:96:B6:19:CF:EF:B8:CF:28 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KsOyfnubAOf9zafFlrYZz--4zyg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:2c0::/44 Signature Algorithm: sha256WithRSAEncryption 39:fa:13:32:c0:b4:68:a0:4a:10:77:e0:46:db:b8:bb:b9:95: e3:19:83:a1:7b:b2:59:3a:dd:24:b6:3f:f6:32:c1:7c:7d:f5: 0c:d2:ff:05:b9:ad:7f:0d:84:7e:41:a3:38:39:55:95:54:3d: ad:cf:c4:8a:8f:06:c2:a5:c5:dc:be:75:23:f6:75:4d:36:7f: 0b:3f:a9:0d:c6:32:f6:66:b4:4c:c5:15:ed:91:43:69:d8:0a: 20:b3:69:2b:37:34:23:87:27:d4:f8:84:44:7e:a0:32:d0:67: c9:15:9a:d6:ae:9b:e6:97:7d:88:20:5e:95:cd:81:f1:b3:1f: 54:60:ad:7d:89:5e:e1:d0:14:23:56:a0:b6:fe:8e:5c:69:95: 9b:6f:a4:7b:f0:c2:ff:5e:7e:01:24:67:f6:ad:54:fd:bd:7f: a8:2a:bb:a0:4a:e9:2b:a5:14:ba:ac:1f:32:d4:fd:92:35:ce: 62:f5:0c:34:ce:5c:f7:7a:c9:af:c7:09:c8:92:b2:69:4d:d7: e4:cf:9c:d6:c2:2f:1f:c3:b5:03:45:ab:ae:a8:8d:47:4f:8f: 30:94:e8:d9:b8:16:15:83:1d:a2:ec:c3:d5:cc:0b:2d:d6:a7: eb:35:73:cf:cc:2f:6d:b4:80:9c:76:a8:e5:53:e1:1f:4c:56: 2f:93:4d:15 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XUCDyZpxPX2kgGuwohzQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWMzYjI3ZTdiOWIwMGU3ZmRjZGE3YzU5NmI2MTljZmVmYjhjZjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8aw7j9NRtuf/BELSguiwRCRY9He CNy++dOz9eOn6/vSTHsI5rOYgCghfYMtcQMomie5Q1ftkl44PLACPJ86PszbQuKg akbQ2L01+801bYAT19N0xKbsNk9fD2sL9HiK72SWqmkEc49HJsKG9G33/xQEQULo s6rH46qveFTwMtVJ+Le5mko76ytQioGlPoHNbsMlV/CmCfeTiZE/yWYt4Ffj4NCA b4o0YHqYpfifshL0BhGkbAg/rkQe/Qf4cn2EhoBd3w7hHWv10p1VnUrXzAEl8fQJ HNy/LFgQQ7MhFgZKx+xYtr4g++nT1n4DMHos/+7kvYHyPgBBWtxN+gD64wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFCrDsn57mwDn/c2nxZa2Gc/vuM8oMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvS3NPeWZudWJBT2Y5emFmRmxyWVp6LS00enlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwALA MA0GCSqGSIb3DQEBCwUAA4IBAQA5+hMywLRooEoQd+BG27i7uZXjGYOhe7JZOt0k tj/2MsF8ffUM0v8Fua1/DYR+QaM4OVWVVD2tz8SKjwbCpcXcvnUj9nVNNn8LP6kN xjL2ZrRMxRXtkUNp2Aogs2krNzQjhyfU+IREfqAy0GfJFZrWrpvml32IIF6VzYHx sx9UYK19iV7h0BQjVqC2/o5caZWbb6R78ML/Xn4BJGf2rVT9vX+oKrugSukrpRS6 rB8y1P2SNc5i9Qw0zlz3esmvxwnIkrJpTdfkz5zWwi8fw7UDRauuqI1HT48wlOjZ uBYVgx2i7MPVzAst1qfrNXPPzC9ttICcdqjlU+EfTFYvk00V -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:27 2026 by rpki-client