This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_8LFZirvGkm_IFDEtWSSGlHe6lY.roa File: _8LFZirvGkm_IFDEtWSSGlHe6lY.roa (raw, json) Hash identifier: GSeATDKKkbcMczDEawpQvLSPZjL0GuDooA98AGOO10I= Subject key identifier: FF:C2:C5:66:2A:EF:1A:49:BF:20:50:C4:B5:64:92:1A:51:DE:EA:56 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CFA751AA2421027527980C6F33845 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_8LFZirvGkm_IFDEtWSSGlHe6lY.roa Signing time: Fri 02 Jan 2026 06:20:03 +0000 ROA not before: Fri 02 Jan 2026 06:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204406 IP address blocks: 2a0e:b107:1b94::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 11:09:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:fa:75:1a:a2:42:10:27:52:79:80:c6:f3:38:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffc2c5662aef1a49bf2050c4b564921a51deea56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:52:fb:16:99:41:19:f8:c5:07:4b:a6:bd:28: 16:9f:34:6b:d0:83:c9:f3:ad:13:ea:ed:2e:dc:8d: 08:82:57:a9:23:ea:cf:ff:6c:83:f9:8c:80:32:be: 45:d1:5e:bb:fc:c1:74:19:1f:eb:d6:e6:ac:d2:d2: a0:2b:83:f1:92:56:64:c2:b6:a4:59:4d:c8:dd:e6: 0d:64:b4:af:f6:89:8c:b9:a8:f4:a0:2f:95:9f:4c: 24:3b:17:70:d6:a8:66:07:a9:9e:fa:4b:97:58:95: af:ff:ac:96:0f:07:b7:b6:e0:eb:c5:0d:ea:62:80: 39:3f:10:49:79:c7:91:2f:1c:bb:c6:be:39:d9:f5: 46:c6:95:12:6f:39:90:d2:01:62:6c:46:97:18:1f: b7:f1:bd:e3:2f:84:ad:b6:94:4c:09:76:80:51:3d: 75:19:8a:9a:6c:0a:9a:71:d8:69:5c:93:7f:fd:dc: 22:cd:1c:25:3c:5f:4f:15:b5:fb:c0:8a:b7:3e:dd: 47:d4:22:3a:bb:8b:2b:c5:42:e7:61:d0:06:19:29: 6a:47:7d:f4:72:20:f2:a4:eb:df:57:ac:42:05:32: 64:66:ca:41:aa:09:09:8b:de:c6:bd:6d:8b:d2:cb: ca:e0:d6:31:e8:0f:91:fa:12:0b:00:96:4a:04:8b: 46:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C2:C5:66:2A:EF:1A:49:BF:20:50:C4:B5:64:92:1A:51:DE:EA:56 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_8LFZirvGkm_IFDEtWSSGlHe6lY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1b94::/48 Signature Algorithm: sha256WithRSAEncryption 17:38:d8:e5:50:65:88:5c:91:4c:44:b8:c1:e0:e6:60:97:85: e0:d0:9a:ad:86:18:eb:7f:0e:9a:4d:1d:c8:7a:17:b1:3a:c7: 16:33:b4:d2:9d:f7:a3:91:36:d4:71:69:66:b3:64:0c:e8:6a: db:b7:79:d1:3c:06:fb:06:0b:7d:d9:db:2f:96:0e:aa:95:61: 53:d3:a2:1c:e6:3d:df:e0:6f:c5:f1:42:ad:9c:a0:8b:58:23: 66:67:b6:b0:5c:3d:c6:31:10:f8:ac:9a:13:3f:1d:a1:5d:db: 3d:ea:24:c4:a7:7a:e1:f3:43:18:fb:a3:18:dd:4f:0f:f4:93: 90:21:34:41:2f:c6:95:ae:f8:52:f0:e2:85:33:5f:f8:92:55: c9:86:a5:2a:44:5e:3e:b5:97:6b:08:d5:a0:a6:70:91:47:9a: 92:13:b6:3f:db:f5:77:fd:de:5a:0b:44:21:be:a1:5a:ac:4c: f1:43:77:45:2a:7d:7d:51:a2:ed:b0:f7:2a:0c:d8:1c:f4:48: d3:d8:5a:72:08:5b:3b:ee:6e:a3:a2:7a:f0:31:94:fc:1f:79: 65:47:88:ce:e4:e9:25:eb:13:95:69:f5:b6:1f:23:51:08:3b: 32:6a:15:eb:40:26:7a:de:0b:b5:08:5a:33:3e:2f:55:d7:ee: 06:7e:12:9b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XPp1GqJCECdSeYDG8zhFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmMyYzU2NjJhZWYxYTQ5YmYyMDUwYzRiNTY0OTIxYTUxZGVlYTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51L7FplBGfjFB0umvSgWnzRr0IPJ 860T6u0u3I0IglepI+rP/2yD+YyAMr5F0V67/MF0GR/r1uas0tKgK4PxklZkwrak WU3I3eYNZLSv9omMuaj0oC+Vn0wkOxdw1qhmB6me+kuXWJWv/6yWDwe3tuDrxQ3q YoA5PxBJeceRLxy7xr452fVGxpUSbzmQ0gFibEaXGB+38b3jL4SttpRMCXaAUT11 GYqabAqacdhpXJN//dwizRwlPF9PFbX7wIq3Pt1H1CI6u4srxULnYdAGGSlqR330 ciDypOvfV6xCBTJkZspBqgkJi97GvW2L0svK4NYx6A+R+hILAJZKBItG/wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFP/CxWYq7xpJvyBQxLVkkhpR3upWMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvXzhMRlppcnZHa21fSUZERXRXU1NHbEhlNmxZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBxuU MA0GCSqGSIb3DQEBCwUAA4IBAQAXONjlUGWIXJFMRLjB4OZgl4Xg0Jqthhjrfw6a TR3IehexOscWM7TSnfejkTbUcWlms2QM6Grbt3nRPAb7Bgt92dsvlg6qlWFT06Ic 5j3f4G/F8UKtnKCLWCNmZ7awXD3GMRD4rJoTPx2hXds96iTEp3rh80MY+6MY3U8P 9JOQITRBL8aVrvhS8OKFM1/4klXJhqUqRF4+tZdrCNWgpnCRR5qSE7Y/2/V3/d5a C0QhvqFarEzxQ3dFKn19UaLtsPcqDNgc9EjT2FpyCFs77m6jonrwMZT8H3llR4jO 5Okl6xOVafW2HyNRCDsyahXrQCZ63gu1CFozPi9V1+4GfhKb -----END CERTIFICATE-----Generated at Fri Jan 9 15:59:06 2026 by rpki-client