This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RG0BsFuPbavmXitKeDxC1FCFXcc.roa File: RG0BsFuPbavmXitKeDxC1FCFXcc.roa (raw, json) Hash identifier: SnoM4jKpdkfbeRzCqqeR0Unm+9JJvEG2qrsaSA/dQmI= Subject key identifier: 44:6D:01:B0:5B:8F:6D:AB:E6:5E:2B:4A:78:3C:42:D4:50:85:5D:C7 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CE12D73C6031052816966C3ED463E Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RG0BsFuPbavmXitKeDxC1FCFXcc.roa Signing time: Fri 02 Jan 2026 06:19:57 +0000 ROA not before: Fri 02 Jan 2026 06:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199613 IP address blocks: 2a0e:b107:11b0::/44 maxlen: 48 2a0e:b107:1f20::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e1:2d:73:c6:03:10:52:81:69:66:c3:ed:46:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=446d01b05b8f6dabe65e2b4a783c42d450855dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:78:07:5e:10:a5:79:87:e5:e7:b0:56:73:a7: 81:f3:04:b3:bc:35:9a:c4:5b:09:5a:0e:01:a2:84: d0:9e:43:68:10:99:9f:11:21:cb:96:fa:4b:ed:67: 82:fe:08:4a:a9:32:3a:1d:f0:9e:18:43:de:fc:e2: fc:74:fd:6c:ec:d1:d9:28:3b:1e:b3:13:4b:cf:e3: c6:ca:aa:78:6e:b2:db:5d:12:68:ef:ab:04:b4:7a: 48:05:ca:6b:8d:00:ca:62:2b:82:1d:ae:00:2a:2b: a2:80:31:a9:28:9c:8b:19:17:ed:a7:63:d1:fc:39: fb:46:37:42:56:f5:ad:28:1a:e0:97:4f:b8:6b:1f: c1:41:3b:ce:2b:26:5d:ca:88:d4:0c:67:f0:9a:d3: 8c:bb:16:49:80:4c:36:88:db:a5:9a:c2:a8:b0:99: 0c:12:c9:61:4f:d0:fa:e7:31:4c:fc:47:cc:cc:1e: 80:4c:cd:cd:dc:7c:f4:68:1d:e9:c8:7c:6f:e7:2b: 78:59:bc:04:a4:8b:96:b6:60:da:c7:d8:1d:28:78: 01:84:7e:36:8d:8c:ff:15:5f:8e:ab:d3:4c:e9:b4: eb:b0:08:aa:8f:2d:92:02:fa:b9:dd:39:c5:5e:38: e7:50:43:7e:de:f0:3e:cc:ec:27:10:62:24:4b:0c: 46:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6D:01:B0:5B:8F:6D:AB:E6:5E:2B:4A:78:3C:42:D4:50:85:5D:C7 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RG0BsFuPbavmXitKeDxC1FCFXcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:11b0::/44 2a0e:b107:1f20::/44 Signature Algorithm: sha256WithRSAEncryption 60:d4:1a:34:b6:d8:01:6d:33:4c:2b:f2:aa:81:5c:94:cb:c1: 7f:b9:80:b2:d9:e7:9d:a4:84:3a:de:f8:76:9b:79:2e:18:c4: 04:17:41:96:66:b0:19:68:b9:c0:35:42:d2:3b:18:6e:96:fe: 74:e4:42:86:bc:0e:29:56:54:f5:b8:b5:2b:f0:04:eb:11:ee: 97:b1:02:17:6c:11:56:47:2c:28:ae:50:c6:66:1b:7c:14:15: 0f:64:0d:32:45:e0:94:ab:b3:2e:f7:d5:9d:6c:2c:5f:7e:43: fb:cb:f9:45:f9:f3:3c:60:c4:7f:7a:56:4a:c4:f2:a3:83:ce: d0:e2:d0:52:ae:32:77:8b:0c:19:75:03:6d:c2:ac:d0:28:3a: 4d:a9:be:6d:d8:69:1a:cf:5c:32:51:c6:bd:a0:d2:69:14:55: 5f:d2:b9:86:92:00:3a:f4:50:04:3d:35:ac:f4:63:e2:db:6e: ab:2b:b5:b7:22:50:05:6c:ea:8a:a6:c0:eb:ca:95:74:bd:67: 05:40:6c:a2:44:89:f2:a0:ed:f0:05:68:d1:29:f5:bb:e3:ee: 42:20:d1:c6:6e:42:95:70:51:af:b3:fb:84:46:88:cd:83:a7: 76:95:67:82:9b:a3:e8:7c:c9:c3:94:ab:32:30:c9:43:14:d0: 38:7f:76:9f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XOEtc8YDEFKBaWbD7UY+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDZkMDFiMDViOGY2ZGFiZTY1ZTJiNGE3ODNjNDJkNDUwODU1ZGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXgHXhCleYfl57BWc6eB8wSzvDWa xFsJWg4BooTQnkNoEJmfESHLlvpL7WeC/ghKqTI6HfCeGEPe/OL8dP1s7NHZKDse sxNLz+PGyqp4brLbXRJo76sEtHpIBcprjQDKYiuCHa4AKiuigDGpKJyLGRftp2PR /Dn7RjdCVvWtKBrgl0+4ax/BQTvOKyZdyojUDGfwmtOMuxZJgEw2iNulmsKosJkM EslhT9D65zFM/EfMzB6ATM3N3Hz0aB3pyHxv5yt4WbwEpIuWtmDax9gdKHgBhH42 jYz/FV+Oq9NM6bTrsAiqjy2SAvq53TnFXjjnUEN+3vA+zOwnEGIkSwxGJQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFERtAbBbj22r5l4rSng8QtRQhV3HMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvUkcwQnNGdVBiYXZtWGl0S2VEeEMxRkNGWGNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg6xBxGw AwcEKg6xBx8gMA0GCSqGSIb3DQEBCwUAA4IBAQBg1Bo0ttgBbTNMK/KqgVyUy8F/ uYCy2eedpIQ63vh2m3kuGMQEF0GWZrAZaLnANULSOxhulv505EKGvA4pVlT1uLUr 8ATrEe6XsQIXbBFWRyworlDGZht8FBUPZA0yReCUq7Mu99WdbCxffkP7y/lF+fM8 YMR/elZKxPKjg87Q4tBSrjJ3iwwZdQNtwqzQKDpNqb5t2Gkaz1wyUca9oNJpFFVf 0rmGkgA69FAEPTWs9GPi226rK7W3IlAFbOqKpsDrypV0vWcFQGyiRInyoO3wBWjR KfW74+5CINHGbkKVcFGvs/uERojNg6d2lWeCm6PofMnDlKsyMMlDFNA4f3af -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:56 2026 by rpki-client