This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XvVI74kAfu2tDC7rjxuBf28ozHw.roa File: XvVI74kAfu2tDC7rjxuBf28ozHw.roa (raw, json) Hash identifier: B12eYxCCiL/RmLsPqXmENwpsOww5icSdMHXJrgz/KXM= Subject key identifier: 5E:F5:48:EF:89:00:7E:ED:AD:0C:2E:EB:8F:1B:81:7F:6F:28:CC:7C Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D055C558216DDA3C00560EB8C7291 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XvVI74kAfu2tDC7rjxuBf28ozHw.roa Signing time: Fri 02 Jan 2026 06:20:06 +0000 ROA not before: Fri 02 Jan 2026 06:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206895 IP address blocks: 2a0e:97c0:a10::/48 maxlen: 48 2a0e:97c0:a11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:05:5c:55:82:16:dd:a3:c0:05:60:eb:8c:72:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ef548ef89007eedad0c2eeb8f1b817f6f28cc7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1f:d4:a7:04:22:88:91:62:cc:77:40:3f:69: e8:52:60:0e:26:98:dc:a8:4e:75:a8:f7:61:2d:8d: a3:86:a5:43:a7:07:45:c1:c3:5a:56:8d:e1:62:1a: 27:19:14:73:3b:af:db:86:4c:14:96:d9:c3:be:16: e4:ec:6a:35:4a:71:4c:6e:47:e9:f5:7c:01:60:ed: 1f:aa:c2:f1:a5:94:44:86:61:b7:99:53:4c:eb:f3: 04:80:90:a8:a5:29:dc:5b:6d:19:93:26:a2:f0:5f: 6a:94:12:ee:e6:bc:e3:04:08:51:da:c2:0c:68:a5: df:d9:99:8c:45:6f:7f:d9:81:e4:c8:5e:ce:66:d0: 8f:55:70:69:c9:27:9a:d3:3d:36:be:95:a6:7e:48: 06:e0:09:b5:ef:46:d4:a5:57:0f:2e:a5:0f:eb:fa: 6e:f3:3d:e9:31:51:25:a1:74:20:f5:d0:63:92:28: bf:85:e8:fe:da:85:51:f8:af:a0:f0:78:da:20:18: ff:aa:d2:88:9f:8e:2b:3f:85:0a:f2:14:47:e5:0d: af:fd:54:6c:f3:7e:ef:e8:7f:8e:6a:73:6b:11:bf: e2:2c:75:38:86:a6:a3:7c:4a:ff:76:69:3b:b2:5b: 5c:2c:c0:38:d3:74:e0:b5:3b:56:d6:50:c9:ef:39: e9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F5:48:EF:89:00:7E:ED:AD:0C:2E:EB:8F:1B:81:7F:6F:28:CC:7C X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XvVI74kAfu2tDC7rjxuBf28ozHw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:a10::/47 Signature Algorithm: sha256WithRSAEncryption 38:87:ac:c4:09:3c:67:03:ec:e5:dd:c2:a9:18:8b:5c:28:0d: 20:8a:8d:81:0d:3d:3b:46:9a:dd:8f:40:48:36:2c:e1:c9:a8: 02:0b:30:72:d8:e5:3f:3a:0e:7f:b0:15:7a:d2:92:57:aa:aa: b7:ef:b9:a6:db:b4:9f:6d:d0:85:df:74:12:dc:b7:06:fa:5b: f8:03:9c:7c:df:95:89:2f:70:74:1a:1c:5b:5c:b1:6e:b1:6a: 6c:59:f9:61:1a:d8:bb:28:f3:72:62:83:1c:d2:6d:08:f2:00: a7:75:90:e8:c4:c3:65:77:51:4e:d0:a0:54:49:2a:c2:7e:63: df:5c:f6:58:5c:d3:b6:07:3f:f0:ca:9f:6a:d4:a3:04:cf:26: 9f:93:9e:02:9c:44:3e:59:8b:34:df:8c:f0:f2:00:91:5e:d4: 17:a8:21:2a:b6:20:ae:39:48:22:6a:1c:60:57:6b:12:e5:89: 55:4b:ac:74:b1:a9:ed:13:3e:1f:d4:b7:a1:9e:ff:8d:45:ed: 16:e2:0d:23:b0:c3:3c:b6:21:24:62:b8:53:86:ec:47:07:b0: 5c:b3:dc:2a:82:28:5f:81:61:a4:77:e1:8f:c4:60:05:48:3e: 82:c3:fd:2a:65:96:97:17:0e:c2:3f:17:f5:63:4c:66:99:16: d9:3e:92:f8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XQVcVYIW3aPABWDrjHKRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWY1NDhlZjg5MDA3ZWVkYWQwYzJlZWI4ZjFiODE3ZjZmMjhjYzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx/UpwQiiJFizHdAP2noUmAOJpjc qE51qPdhLY2jhqVDpwdFwcNaVo3hYhonGRRzO6/bhkwUltnDvhbk7Go1SnFMbkfp 9XwBYO0fqsLxpZREhmG3mVNM6/MEgJCopSncW20Zkyai8F9qlBLu5rzjBAhR2sIM aKXf2ZmMRW9/2YHkyF7OZtCPVXBpySea0z02vpWmfkgG4Am170bUpVcPLqUP6/pu 8z3pMVEloXQg9dBjkii/hej+2oVR+K+g8HjaIBj/qtKIn44rP4UK8hRH5Q2v/VRs 837v6H+OanNrEb/iLHU4hqajfEr/dmk7sltcLMA403TgtTtW1lDJ7znpLwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFF71SO+JAH7trQwu648bgX9vKMx8MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvWHZWSTc0a0FmdTJ0REM3cmp4dUJmMjhvekh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKg6XwAoQ MA0GCSqGSIb3DQEBCwUAA4IBAQA4h6zECTxnA+zl3cKpGItcKA0gio2BDT07Rprd j0BINizhyagCCzBy2OU/Og5/sBV60pJXqqq377mm27SfbdCF33QS3LcG+lv4A5x8 35WJL3B0GhxbXLFusWpsWflhGti7KPNyYoMc0m0I8gCndZDoxMNld1FO0KBUSSrC fmPfXPZYXNO2Bz/wyp9q1KMEzyafk54CnEQ+WYs034zw8gCRXtQXqCEqtiCuOUgi ahxgV2sS5YlVS6x0santEz4f1Lehnv+NRe0W4g0jsMM8tiEkYrhThuxHB7Bcs9wq gihfgWGkd+GPxGAFSD6Cw/0qZZaXFw7CPxf1Y0xmmRbZPpL4 -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:26 2026 by rpki-client