This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Xt721NMfI-OblNY58ZufAmMkjeU.roa File: Xt721NMfI-OblNY58ZufAmMkjeU.roa (raw, json) Hash identifier: cA3BGWY5r9aRLCCrA16d1ab5+8KdMeUU2967+fTgYDU= Subject key identifier: 5E:DE:F6:D4:D3:1F:23:E3:9B:94:D6:39:F1:9B:9F:02:63:24:8D:E5 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D4B36BB56574FCF2FF2D273F30E0F Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Xt721NMfI-OblNY58ZufAmMkjeU.roa Signing time: Fri 02 Jan 2026 06:20:24 +0000 ROA not before: Fri 02 Jan 2026 06:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212164 IP address blocks: 2a0e:b107:1d20::/48 maxlen: 48 2a0e:b107:1d21::/48 maxlen: 48 2a0e:b107:1d22::/48 maxlen: 48 2a0e:b107:1d23::/48 maxlen: 48 2a0e:b107:1d24::/48 maxlen: 48 2a0e:b107:1d25::/48 maxlen: 48 2a0e:b107:1d2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:4b:36:bb:56:57:4f:cf:2f:f2:d2:73:f3:0e:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5edef6d4d31f23e39b94d639f19b9f0263248de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4c:a6:54:ae:e5:ab:c0:c5:37:ca:86:ab:d6: 3b:fc:3f:13:1d:2b:7a:2d:62:81:a1:5b:47:76:fb: 22:14:4b:d7:98:cf:78:21:a8:a6:4b:99:b9:57:48: ab:90:48:75:17:75:92:b8:72:e2:d1:48:e4:68:6c: fd:65:f8:1a:a0:31:4e:f9:a4:4d:1c:b9:59:42:dd: ce:2e:48:f8:5e:79:18:59:13:c9:3e:3c:fe:7e:20: ad:ac:2f:a9:d8:98:80:2a:22:be:86:e1:81:4a:14: 1c:df:fe:82:31:3b:2e:eb:93:c0:38:f2:07:ee:a0: e6:2f:ec:79:66:7b:67:e8:71:17:7d:03:49:e1:f7: 1e:dd:25:8a:77:70:19:7f:21:c7:40:38:c1:cb:db: 76:8f:9c:b5:22:5d:b5:55:58:93:ed:2f:7c:4a:a8: 5b:60:06:40:48:c2:13:64:00:89:2b:47:c0:35:42: 50:b6:d1:d5:c7:55:aa:fb:0b:ed:0e:c4:c6:3e:6f: 83:d7:3d:f1:01:3d:59:c0:a7:5b:d6:c0:de:ac:c7: 00:b9:79:d4:3b:91:b3:2d:71:6e:41:db:88:27:37: df:ad:9d:b7:26:07:58:d9:f3:0f:aa:bf:83:95:f6: c2:f8:9f:a1:8a:8d:65:06:43:d5:3b:1b:5d:cd:a9: ad:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:DE:F6:D4:D3:1F:23:E3:9B:94:D6:39:F1:9B:9F:02:63:24:8D:E5 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Xt721NMfI-OblNY58ZufAmMkjeU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1d20::-2a0e:b107:1d25:ffff:ffff:ffff:ffff:ffff 2a0e:b107:1d2a::/48 Signature Algorithm: sha256WithRSAEncryption c5:f2:a2:4e:6d:1b:03:7d:1e:2e:1c:61:d8:68:ec:03:5e:65: fd:d7:d3:55:9c:21:7f:1e:39:79:9f:0a:e9:8b:6d:bc:06:12: 12:67:f0:cb:35:61:5f:2c:a5:62:7e:93:dc:e7:a3:2a:55:4a: fa:76:64:dd:28:4a:81:9b:de:0e:ec:7b:20:64:f9:6b:45:8f: 75:be:ab:d5:8a:79:a4:24:7e:25:73:57:4c:f1:d7:d3:d6:fb: e3:26:9f:9c:5d:6f:53:0c:c0:96:fb:07:1e:76:a5:ac:03:97: f5:16:25:52:38:d8:ee:e9:3e:2e:cb:c0:78:b5:48:ec:0a:b5: 7b:45:a3:1e:ab:fc:74:70:d4:13:47:82:fa:48:e5:b9:c5:c6: 61:bf:0c:70:0e:75:f7:1f:ee:ad:9e:b0:f5:46:0b:08:b9:27: a0:4e:3c:11:57:95:96:be:23:54:50:ec:8b:5d:0b:14:d2:7b: 48:79:c9:bc:48:da:24:c6:37:05:8b:b2:5e:66:db:db:a9:e9: a7:38:2e:78:fa:4b:0f:05:da:e9:ab:bc:13:f0:78:87:fe:d9: 5e:a2:ea:24:20:a8:06:55:6a:34:6d:3b:1a:dc:18:dd:d8:bb: 27:a2:3a:c3:a2:a6:2a:3b:ab:7c:7d:a3:a8:55:6d:36:40:e2: 6d:b2:84:b5 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt9XUs2u1ZXT88v8tJz8w4PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWRlZjZkNGQzMWYyM2UzOWI5NGQ2MzlmMTliOWYwMjYzMjQ4ZGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUymVK7lq8DFN8qGq9Y7/D8THSt6 LWKBoVtHdvsiFEvXmM94IaimS5m5V0irkEh1F3WSuHLi0UjkaGz9ZfgaoDFO+aRN HLlZQt3OLkj4XnkYWRPJPjz+fiCtrC+p2JiAKiK+huGBShQc3/6CMTsu65PAOPIH 7qDmL+x5Zntn6HEXfQNJ4fce3SWKd3AZfyHHQDjBy9t2j5y1Il21VViT7S98Sqhb YAZASMITZACJK0fANUJQttHVx1Wq+wvtDsTGPm+D1z3xAT1ZwKdb1sDerMcAuXnU O5GzLXFuQduIJzffrZ23JgdY2fMPqr+DlfbC+J+hio1lBkPVOxtdzamtVQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFF7e9tTTHyPjm5TWOfGbnwJjJI3lMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvWHQ3MjFOTWZJLU9ibE5ZNThadWZBbU1ramVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdMBIDBwUqDrEH HSADBwEqDrEHHSQDBwAqDrEHHSowDQYJKoZIhvcNAQELBQADggEBAMXyok5tGwN9 Hi4cYdho7ANeZf3X01WcIX8eOXmfCumLbbwGEhJn8Ms1YV8spWJ+k9znoypVSvp2 ZN0oSoGb3g7seyBk+WtFj3W+q9WKeaQkfiVzV0zx19PW++Mmn5xdb1MMwJb7Bx52 pawDl/UWJVI42O7pPi7LwHi1SOwKtXtFox6r/HRw1BNHgvpI5bnFxmG/DHAOdfcf 7q2esPVGCwi5J6BOPBFXlZa+I1RQ7ItdCxTSe0h5ybxI2iTGNwWLsl5m29up6ac4 Lnj6Sw8F2umrvBPweIf+2V6i6iQgqAZVajRtOxrcGN3YuyeiOsOipio7q3x9o6hV bTZA4m2yhLU= -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:26 2026 by rpki-client