This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VyOq5wJhfWjHyxg00iiAXlMRMQc.roa File: VyOq5wJhfWjHyxg00iiAXlMRMQc.roa (raw, json) Hash identifier: sNNFl5ZdOLrAIvVm5qPAWEdXZvg5PrBrouRHWbIeF6c= Subject key identifier: 57:23:AA:E7:02:61:7D:68:C7:CB:18:34:D2:28:80:5E:53:11:31:07 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D2FE25ACCC47A0A11EE750CB4B38D Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VyOq5wJhfWjHyxg00iiAXlMRMQc.roa Signing time: Fri 02 Jan 2026 06:20:17 +0000 ROA not before: Fri 02 Jan 2026 06:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210956 IP address blocks: 2a0e:b107:158f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:2f:e2:5a:cc:c4:7a:0a:11:ee:75:0c:b4:b3:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5723aae702617d68c7cb1834d228805e53113107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:37:94:c3:19:3f:9a:89:5e:a8:4e:b3:4e:77: ca:6d:cb:f8:4a:33:4f:7c:40:a4:5d:61:17:33:f0: 47:ea:4e:7b:bc:1f:af:4e:8f:de:70:ff:ae:f4:f2: 83:da:93:68:69:99:bc:11:be:d9:10:e1:8b:e2:82: 5a:fd:47:da:c9:66:42:34:92:36:26:8a:d1:b4:f7: a3:1e:82:2f:8c:8d:a6:49:5c:38:26:18:be:05:6b: f1:56:de:45:4b:f2:a1:8f:56:a2:6b:db:19:b8:b9: 1d:de:7e:60:7b:fa:bc:5d:d1:4e:bc:13:45:6e:50: af:f0:9b:c4:7e:2e:15:2f:1e:d3:47:1b:96:44:91: 98:07:d0:6a:5d:1b:2d:fe:34:2a:af:7e:b9:52:b5: e0:c3:b2:f8:ad:fd:56:90:37:48:bd:b2:cd:98:e1: b3:de:8f:f8:00:d3:c7:c6:ed:4d:6e:53:7b:6e:e2: d9:61:ef:6e:9d:b8:2a:c7:e9:50:8e:2d:18:33:94: c1:8d:7f:fa:f3:cb:52:e1:fa:b9:c2:1f:37:f2:8c: 9e:72:5a:b3:26:4b:2e:fe:02:38:ca:69:7e:42:00: 7e:2d:c1:32:e4:fb:82:e1:71:40:79:85:52:cc:16: 15:76:67:f2:5d:a0:98:96:09:1d:43:df:a8:af:d3: 21:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:23:AA:E7:02:61:7D:68:C7:CB:18:34:D2:28:80:5E:53:11:31:07 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VyOq5wJhfWjHyxg00iiAXlMRMQc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:158f::/48 Signature Algorithm: sha256WithRSAEncryption 2e:70:f1:5a:a9:1f:42:e3:a6:b5:c1:1c:76:9d:1c:a1:c2:47: 1a:47:88:30:87:82:66:dd:c6:38:ac:e2:b7:fd:50:7d:60:c4: e5:26:70:3a:8f:1e:db:46:cf:d1:88:84:e5:7a:91:66:ff:2d: d2:a4:f7:08:40:52:48:67:ca:c9:45:29:ff:51:0f:57:ab:65: aa:2c:72:b6:ce:cd:cf:3f:97:26:64:e4:ee:84:0e:1a:fa:d9: c7:cb:63:d6:be:d8:02:f5:d9:07:a1:90:c7:2d:fc:7b:3d:3f: 67:47:5a:07:32:17:8f:26:6e:86:c0:07:2b:28:f2:d2:7a:cc: f4:a4:3d:1b:53:50:3c:82:70:08:d7:97:90:4e:1a:0d:5d:57: 96:48:9a:63:f2:af:2d:f0:a6:e0:e3:77:7c:31:60:48:33:c7: c2:f5:aa:20:af:33:a6:5a:8e:ec:fe:e1:3f:f3:b9:fe:4d:fe: 0e:eb:a4:fe:32:41:86:03:77:26:9b:57:dc:aa:8f:8e:c1:c5: 89:43:e5:9e:7d:20:3a:7a:af:67:08:06:cd:d5:03:c6:fe:2c: 99:7b:28:22:41:55:38:de:e8:1b:e1:6f:30:06:a0:be:29:43: 4b:ed:6d:93:5b:b4:d4:ca:d4:1f:e7:6a:e0:f1:ca:51:49:0e: 08:26:9f:d3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XS/iWszEegoR7nUMtLONMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzIzYWFlNzAyNjE3ZDY4YzdjYjE4MzRkMjI4ODA1ZTUzMTEzMTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjeUwxk/moleqE6zTnfKbcv4SjNP fECkXWEXM/BH6k57vB+vTo/ecP+u9PKD2pNoaZm8Eb7ZEOGL4oJa/UfayWZCNJI2 JorRtPejHoIvjI2mSVw4Jhi+BWvxVt5FS/Khj1aia9sZuLkd3n5ge/q8XdFOvBNF blCv8JvEfi4VLx7TRxuWRJGYB9BqXRst/jQqr365UrXgw7L4rf1WkDdIvbLNmOGz 3o/4ANPHxu1NblN7buLZYe9unbgqx+lQji0YM5TBjX/688tS4fq5wh838oyeclqz Jksu/gI4yml+QgB+LcEy5PuC4XFAeYVSzBYVdmfyXaCYlgkdQ9+or9MhEQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFcjqucCYX1ox8sYNNIogF5TETEHMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvVnlPcTV3SmhmV2pIeXhnMDBpaUFYbE1STVFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBxWP MA0GCSqGSIb3DQEBCwUAA4IBAQAucPFaqR9C46a1wRx2nRyhwkcaR4gwh4Jm3cY4 rOK3/VB9YMTlJnA6jx7bRs/RiITlepFm/y3SpPcIQFJIZ8rJRSn/UQ9Xq2WqLHK2 zs3PP5cmZOTuhA4a+tnHy2PWvtgC9dkHoZDHLfx7PT9nR1oHMhePJm6GwAcrKPLS esz0pD0bU1A8gnAI15eQThoNXVeWSJpj8q8t8Kbg43d8MWBIM8fC9aogrzOmWo7s /uE/87n+Tf4O66T+MkGGA3cmm1fcqo+OwcWJQ+WefSA6eq9nCAbN1QPG/iyZeygi QVU43ugb4W8wBqC+KUNL7W2TW7TUytQf52rg8cpRSQ4IJp/T -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:27 2026 by rpki-client