This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XLeIYhN6Fy4mVNOi6AytcXvmyrM.roa File: XLeIYhN6Fy4mVNOi6AytcXvmyrM.roa (raw, json) Hash identifier: fSTp903pk5H5UDB1omw5TRJUBhoRGcOMvkXKbJlOMRA= Subject key identifier: 5C:B7:88:62:13:7A:17:2E:26:54:D3:A2:E8:0C:AD:71:7B:E6:CA:B3 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D80DE89C3A75953A47EFE28AC4D4C Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XLeIYhN6Fy4mVNOi6AytcXvmyrM.roa Signing time: Fri 02 Jan 2026 06:20:38 +0000 ROA not before: Fri 02 Jan 2026 06:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215747 IP address blocks: 2a06:de00:710::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:80:de:89:c3:a7:59:53:a4:7e:fe:28:ac:4d:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5cb78862137a172e2654d3a2e80cad717be6cab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1c:76:c9:90:6f:a7:a9:75:37:f4:50:e7:2e: 95:f5:af:52:a0:a8:b5:ae:64:61:cd:c5:7d:bc:ef: 1d:8c:4f:79:91:2e:53:9d:22:5b:34:6d:ba:27:13: 12:64:74:3e:b2:7f:3e:08:bd:58:03:d6:b2:9b:ed: f1:d3:9b:a5:95:e8:57:ff:6d:04:56:5e:c8:11:52: b8:d7:98:5c:ae:6a:93:1f:33:6d:fa:25:59:c7:09: ee:3a:9c:1d:f6:ed:62:4a:c9:4c:24:f4:05:e8:7e: c9:a7:cf:8a:62:d7:ac:58:12:66:59:3f:f1:ce:ab: cd:69:95:b5:e3:b7:18:8a:d1:3a:3e:84:1b:6d:45: 09:7b:90:0b:75:fe:b1:ef:c0:4a:df:b5:6f:94:c5: e2:76:34:90:33:29:02:1b:ab:8c:f9:bd:10:cb:4c: 8d:63:c7:00:f0:47:af:76:b2:20:0b:67:75:05:8d: 04:b0:32:b6:88:57:de:ec:7a:26:83:ef:7c:6b:d3: bd:76:ce:a7:d4:cd:d8:93:dd:1d:4c:92:88:a9:e8: 6a:df:93:a5:df:fa:a9:3d:1d:56:f4:fc:12:d5:b5: 41:36:3b:cc:38:ec:8b:d4:d2:11:fc:51:33:51:5f: 9c:80:6e:9f:0b:d6:c2:31:77:20:de:c9:3f:e3:89: bf:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B7:88:62:13:7A:17:2E:26:54:D3:A2:E8:0C:AD:71:7B:E6:CA:B3 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XLeIYhN6Fy4mVNOi6AytcXvmyrM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:de00:710::/44 Signature Algorithm: sha256WithRSAEncryption cb:58:3f:31:2f:08:9b:32:11:0b:c7:b9:14:6b:b7:18:df:15: 1c:f7:b3:b9:0f:6a:08:c6:ce:07:3a:f2:c2:fb:1f:aa:eb:2c: 0f:d9:96:ae:c4:e1:c1:46:6a:df:7e:cb:73:e3:51:b5:72:46: 64:f6:db:9d:01:10:ff:f0:04:93:57:4a:88:50:44:d6:de:a2: 9b:99:58:05:79:fb:05:85:e5:2a:4b:fe:d9:1f:e3:09:e8:de: 51:1c:80:22:10:a8:01:68:5d:df:54:55:56:fb:64:34:1e:ee: 54:c2:ec:a0:22:b1:06:4a:75:75:5a:8d:33:0a:1e:dc:9c:e2: 1e:9e:24:5b:7a:6d:1d:4e:2e:e5:df:9c:a2:a8:d8:4a:12:52: 35:06:7c:9d:4a:5e:d6:e4:0e:2f:63:71:14:0f:d8:29:13:1e: 2e:d8:bf:18:79:22:d3:56:1b:00:b1:84:9b:a0:27:a9:fe:38: bb:5e:79:18:8a:f6:13:17:cb:cb:a0:b4:fc:aa:40:92:35:b3: 82:8b:44:ae:15:8f:bb:22:ed:9d:74:4c:3e:42:40:06:af:84: 05:47:ff:aa:d1:93:3c:76:40:a3:f6:d3:91:d7:03:bb:00:54: 71:a8:1a:56:e5:01:8a:37:2a:8b:1d:83:98:83:f4:dd:53:6f: 6a:0a:42:2e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XYDeicOnWVOkfv4orE1MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2I3ODg2MjEzN2ExNzJlMjY1NGQzYTJlODBjYWQ3MTdiZTZjYWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshx2yZBvp6l1N/RQ5y6V9a9SoKi1 rmRhzcV9vO8djE95kS5TnSJbNG26JxMSZHQ+sn8+CL1YA9aym+3x05ullehX/20E Vl7IEVK415hcrmqTHzNt+iVZxwnuOpwd9u1iSslMJPQF6H7Jp8+KYtesWBJmWT/x zqvNaZW147cYitE6PoQbbUUJe5ALdf6x78BK37VvlMXidjSQMykCG6uM+b0Qy0yN Y8cA8EevdrIgC2d1BY0EsDK2iFfe7Homg+98a9O9ds6n1M3Yk90dTJKIqehq35Ol 3/qpPR1W9PwS1bVBNjvMOOyL1NIR/FEzUV+cgG6fC9bCMXcg3sk/44m/lQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFFy3iGITehcuJlTTougMrXF75sqzMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvWExlSVloTjZGeTRtVk5PaTZBeXRjWHZteXJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgbeAAcQ MA0GCSqGSIb3DQEBCwUAA4IBAQDLWD8xLwibMhELx7kUa7cY3xUc97O5D2oIxs4H OvLC+x+q6ywP2ZauxOHBRmrffstz41G1ckZk9tudARD/8ASTV0qIUETW3qKbmVgF efsFheUqS/7ZH+MJ6N5RHIAiEKgBaF3fVFVW+2Q0Hu5UwuygIrEGSnV1Wo0zCh7c nOIeniRbem0dTi7l35yiqNhKElI1BnydSl7W5A4vY3EUD9gpEx4u2L8YeSLTVhsA sYSboCep/ji7XnkYivYTF8vLoLT8qkCSNbOCi0SuFY+7Iu2ddEw+QkAGr4QFR/+q 0ZM8dkCj9tOR1wO7AFRxqBpW5QGKNyqLHYOYg/TdU29qCkIu -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:27 2026 by rpki-client