This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VIgKGL4rtdrDUZL6uT7lI7qf1Z0.roa File: VIgKGL4rtdrDUZL6uT7lI7qf1Z0.roa (raw, json) Hash identifier: omoieO/GTXlgWpxxu7nWSgkGFPhRnFvBBmezy25CKew= Subject key identifier: 54:88:0A:18:BE:2B:B5:DA:C3:51:92:FA:B9:3E:E5:23:BA:9F:D5:9D Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D87B25E146ACBE45A530692E8A552 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VIgKGL4rtdrDUZL6uT7lI7qf1Z0.roa Signing time: Fri 02 Jan 2026 06:20:40 +0000 ROA not before: Fri 02 Jan 2026 06:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216049 IP address blocks: 2a0e:97c0:be0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:87:b2:5e:14:6a:cb:e4:5a:53:06:92:e8:a5:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54880a18be2bb5dac35192fab93ee523ba9fd59d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f9:02:d8:23:d5:0c:ec:7d:66:cc:a5:38:4b: 80:90:94:b7:fc:a9:25:db:b3:db:1c:81:e8:8c:e7: d9:fd:b6:03:37:b0:63:bf:c9:ca:28:3b:1c:19:e5: 78:4f:4d:59:c1:d4:d5:72:82:bc:df:3e:9a:e5:2a: b3:20:2a:75:ca:58:88:da:09:c2:78:93:16:27:c8: fc:dd:4d:7e:34:38:51:63:00:0a:63:ce:0a:73:75: e1:1f:7b:1e:d0:a7:f7:d3:f3:18:27:5a:b4:66:bf: 59:7c:62:c3:80:f1:9c:7e:1b:15:8e:3f:13:c8:ec: 21:e2:1a:11:3c:8e:b6:52:22:b0:6f:cd:96:eb:fb: 76:3f:49:58:ad:6d:e1:b2:22:d2:fe:7a:cf:86:a8: d3:14:20:e7:6e:a9:7f:76:01:b7:b5:e9:47:02:a7: cc:2a:48:c3:e1:6b:b0:25:9d:42:95:9f:38:40:56: 10:f8:f5:37:a9:9a:3f:e4:f3:9f:e7:1f:96:9e:98: 03:36:7c:3e:cf:d1:17:ad:2c:ec:d5:c0:e1:7f:93: 2b:71:6d:a4:9e:f1:79:80:f1:01:2f:d2:23:48:26: de:d6:72:2b:ef:3d:91:a6:a6:ea:07:31:31:d8:1e: 9f:4b:29:24:ad:70:52:7f:c1:8c:19:a2:1e:ab:83: 03:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:88:0A:18:BE:2B:B5:DA:C3:51:92:FA:B9:3E:E5:23:BA:9F:D5:9D X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VIgKGL4rtdrDUZL6uT7lI7qf1Z0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:be0::/44 Signature Algorithm: sha256WithRSAEncryption 2c:e6:96:80:7e:4f:65:b9:20:d1:b3:51:e6:96:05:00:4f:d0: d5:96:b2:34:ef:e0:e7:6f:45:04:ff:f5:7a:46:e6:8a:41:e4: ea:cc:3f:1a:fa:11:be:4f:d6:d4:8f:27:3e:17:8a:f7:4b:fa: 26:57:d8:89:61:e3:03:ea:44:cd:ef:fc:98:0d:d0:f1:af:5f: 08:e7:23:1b:8a:f8:e1:0a:50:00:37:72:17:72:75:4e:ef:7a: 3d:14:63:18:d7:06:aa:45:57:d8:b7:13:43:29:84:f6:dd:14: 45:db:8d:b8:7f:a2:a7:22:72:e0:7c:32:89:55:90:88:21:e6: d9:f8:79:30:40:8e:4c:6a:95:33:b6:98:7a:69:3d:75:f1:a4: ac:c2:f5:f4:13:9c:82:c2:5b:53:af:7d:f5:fb:c1:ee:5f:a2: 05:df:7e:03:cf:99:d4:58:9a:16:99:ee:4c:2a:26:6e:08:fc: c4:18:27:56:6b:b6:5c:14:f4:c3:0b:d1:53:b1:37:13:2c:1a: 6d:b2:40:af:95:75:fa:ec:6b:c2:31:bf:e8:c1:5a:25:5a:c0: 5c:8f:dc:6b:c5:e4:58:6a:34:95:be:78:16:04:62:0a:a0:7e: 8e:46:2f:32:4d:f5:1b:b7:15:5d:75:de:e6:2b:66:76:dd:ad: 1a:66:32:0f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XYeyXhRqy+RaUwaS6KVSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDg4MGExOGJlMmJiNWRhYzM1MTkyZmFiOTNlZTUyM2JhOWZkNTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfkC2CPVDOx9ZsylOEuAkJS3/Kkl 27PbHIHojOfZ/bYDN7Bjv8nKKDscGeV4T01ZwdTVcoK83z6a5SqzICp1yliI2gnC eJMWJ8j83U1+NDhRYwAKY84Kc3XhH3se0Kf30/MYJ1q0Zr9ZfGLDgPGcfhsVjj8T yOwh4hoRPI62UiKwb82W6/t2P0lYrW3hsiLS/nrPhqjTFCDnbql/dgG3telHAqfM KkjD4WuwJZ1ClZ84QFYQ+PU3qZo/5POf5x+WnpgDNnw+z9EXrSzs1cDhf5MrcW2k nvF5gPEBL9IjSCbe1nIr7z2RpqbqBzEx2B6fSykkrXBSf8GMGaIeq4MDNwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFSIChi+K7Xaw1GS+rk+5SO6n9WdMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvVklnS0dMNHJ0ZHJEVVpMNnVUN2xJN3FmMVowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAvg MA0GCSqGSIb3DQEBCwUAA4IBAQAs5paAfk9luSDRs1HmlgUAT9DVlrI07+Dnb0UE //V6RuaKQeTqzD8a+hG+T9bUjyc+F4r3S/omV9iJYeMD6kTN7/yYDdDxr18I5yMb ivjhClAAN3IXcnVO73o9FGMY1waqRVfYtxNDKYT23RRF2424f6KnInLgfDKJVZCI IebZ+HkwQI5MapUztph6aT118aSswvX0E5yCwltTr331+8HuX6IF334Dz5nUWJoW me5MKiZuCPzEGCdWa7ZcFPTDC9FTsTcTLBptskCvlXX67GvCMb/owVolWsBcj9xr xeRYajSVvngWBGIKoH6ORi8yTfUbtxVddd7mK2Z23a0aZjIP -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:43 2026 by rpki-client