This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XKdBkj4ew4OOSWzdRb8atYjimio.roa File: XKdBkj4ew4OOSWzdRb8atYjimio.roa (raw, json) Hash identifier: 2JWDLcPay1lVc9OsLg76CC2hhNZ3GB3TQnOCgvEFWrE= Subject key identifier: 5C:A7:41:92:3E:1E:C3:83:8E:49:6C:DD:45:BF:1A:B5:88:E2:9A:2A Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D17D8160A933E5B7B6ABE949B5AA1 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XKdBkj4ew4OOSWzdRb8atYjimio.roa Signing time: Fri 02 Jan 2026 06:20:11 +0000 ROA not before: Fri 02 Jan 2026 06:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209025 IP address blocks: 2a0e:b107:800::/44 maxlen: 48 2a0e:b107:9b0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:17:d8:16:0a:93:3e:5b:7b:6a:be:94:9b:5a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ca741923e1ec3838e496cdd45bf1ab588e29a2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bb:61:3f:e5:1e:44:18:ea:20:89:07:97:2f: bc:49:8f:7b:83:bf:82:c6:69:f1:9b:77:1b:53:67: 24:4d:d1:c9:39:96:86:c1:37:bc:4d:7d:9a:e5:eb: 28:e4:72:8a:0e:c5:88:c9:ab:fa:03:a5:5d:66:26: 4e:76:b2:13:6f:46:01:85:c4:b5:ac:4d:3e:08:bf: 3c:48:92:1c:d5:58:b5:f9:85:33:5a:b0:c5:14:7b: 1e:10:e6:97:b5:92:8a:3f:b7:2b:55:82:ca:c0:0d: df:ee:bd:16:ca:61:5d:34:88:44:1f:d3:3f:a7:ee: 50:74:79:1c:12:3a:b7:df:51:db:d9:fe:a2:2f:63: 35:65:0d:42:45:67:68:ba:21:16:fa:65:23:73:bd: c4:62:51:30:f7:a1:51:12:42:cd:b7:a5:cc:54:94: 24:d1:74:57:62:4d:44:ee:02:a6:de:bc:c3:fc:7e: a8:be:5b:d9:6c:4b:dc:1f:7b:9a:f3:7a:50:b5:c3: 1a:c9:b7:6a:7f:11:1c:be:8f:a7:6c:f5:a4:8f:6c: 70:da:f4:96:fe:33:0c:44:ff:27:6c:a6:3c:e8:dd: ee:4d:4d:cb:0b:97:d9:fc:35:b3:47:2f:b3:de:4b: 9b:cd:24:f6:61:66:e9:c0:78:8a:7e:da:07:05:00: fc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A7:41:92:3E:1E:C3:83:8E:49:6C:DD:45:BF:1A:B5:88:E2:9A:2A X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XKdBkj4ew4OOSWzdRb8atYjimio.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:800::/44 2a0e:b107:9b0::/44 Signature Algorithm: sha256WithRSAEncryption 5a:d2:32:58:eb:40:d6:02:84:82:7c:5a:e8:14:9a:44:87:8f: 99:05:58:e4:6c:7b:4b:ee:b3:df:a7:06:30:6c:73:8e:1b:5b: 85:de:56:ff:a4:80:79:93:51:8d:05:80:d6:35:d0:7e:09:bc: 9d:e7:04:c1:0c:8e:26:8c:a6:e5:f0:67:dc:58:6a:87:0b:16: e6:fd:fb:f5:a4:e5:b3:c5:0f:67:90:68:00:af:3c:89:37:bc: a1:9f:0e:68:00:18:71:1f:c3:66:2c:3d:4a:67:96:65:a0:36: 2b:29:09:5a:0d:19:e8:95:24:9a:20:1b:84:c9:eb:93:27:ac: b7:a8:d9:bb:63:81:28:ca:4f:dd:e2:cc:f2:b5:22:ab:08:c6: 3b:66:77:0a:fb:67:63:da:5c:d3:d7:ae:79:0b:98:5b:50:34: 22:e1:b0:09:4b:bf:11:fd:5d:c7:21:a4:b1:bb:d8:c4:5e:1b: aa:54:3e:2c:97:5b:75:c6:2a:56:2a:97:8e:64:af:bb:65:bd: a8:5c:26:1c:41:40:22:7d:41:8d:d8:3b:a0:57:10:d4:9e:7f: 60:e7:90:b5:3d:ae:4e:76:e9:c5:c9:8a:ae:44:83:43:bd:23: f2:d7:41:5a:d5:4c:b4:c5:32:a7:76:64:32:36:f8:c4:6d:ee: bb:46:75:86 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XRfYFgqTPlt7ar6Um1qhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2E3NDE5MjNlMWVjMzgzOGU0OTZjZGQ0NWJmMWFiNTg4ZTI5YTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLthP+UeRBjqIIkHly+8SY97g7+C xmnxm3cbU2ckTdHJOZaGwTe8TX2a5eso5HKKDsWIyav6A6VdZiZOdrITb0YBhcS1 rE0+CL88SJIc1Vi1+YUzWrDFFHseEOaXtZKKP7crVYLKwA3f7r0WymFdNIhEH9M/ p+5QdHkcEjq331Hb2f6iL2M1ZQ1CRWdouiEW+mUjc73EYlEw96FREkLNt6XMVJQk 0XRXYk1E7gKm3rzD/H6ovlvZbEvcH3ua83pQtcMaybdqfxEcvo+nbPWkj2xw2vSW /jMMRP8nbKY86N3uTU3LC5fZ/DWzRy+z3kubzST2YWbpwHiKftoHBQD8TQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFynQZI+HsODjkls3UW/GrWI4poqMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvWEtkQmtqNGV3NE9PU1d6ZFJiOGF0WWppbWlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg6xBwgA AwcEKg6xBwmwMA0GCSqGSIb3DQEBCwUAA4IBAQBa0jJY60DWAoSCfFroFJpEh4+Z BVjkbHtL7rPfpwYwbHOOG1uF3lb/pIB5k1GNBYDWNdB+Cbyd5wTBDI4mjKbl8Gfc WGqHCxbm/fv1pOWzxQ9nkGgArzyJN7yhnw5oABhxH8NmLD1KZ5ZloDYrKQlaDRno lSSaIBuEyeuTJ6y3qNm7Y4Eoyk/d4szytSKrCMY7ZncK+2dj2lzT1655C5hbUDQi 4bAJS78R/V3HIaSxu9jEXhuqVD4sl1t1xipWKpeOZK+7Zb2oXCYcQUAifUGN2Dug VxDUnn9g55C1Pa5OdunFyYquRINDvSPy10Fa1Uy0xTKndmQyNvjEbe67RnWG -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:48 2026 by rpki-client