This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_F0EN7QEgPr7L_u-M7oanuf_Fhc.roa File: _F0EN7QEgPr7L_u-M7oanuf_Fhc.roa (raw, json) Hash identifier: LCaIkXFBWtQsxuz0rhK2fBK2g8eLdwFOOAYkyN6Ap6U= Subject key identifier: FC:5D:04:37:B4:04:80:FA:FB:2F:FB:BE:33:BA:1A:9E:E7:FF:16:17 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CD4A3D90EBCCCDDDE95A945356DE9 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_F0EN7QEgPr7L_u-M7oanuf_Fhc.roa Signing time: Fri 02 Jan 2026 06:19:54 +0000 ROA not before: Fri 02 Jan 2026 06:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197469 IP address blocks: 2a0e:97c0:b50::/44 maxlen: 48 2a0e:97c0:b50::/48 maxlen: 48 2a0e:97c0:b51::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d4:a3:d9:0e:bc:cc:dd:de:95:a9:45:35:6d:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc5d0437b40480fafb2ffbbe33ba1a9ee7ff1617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:71:6a:6b:22:77:be:96:d2:7c:f6:6e:c9:93: 8e:c2:af:71:78:7d:41:23:ca:cf:ab:cb:c9:53:db: 80:e8:a1:4c:e5:97:d8:30:05:3a:c2:9c:80:5e:9e: fc:7c:fb:63:e9:db:27:24:ff:ae:90:59:b4:19:a7: 3b:a3:c1:42:56:f3:a0:11:be:39:3c:e8:c5:b8:fc: 3c:a1:c4:bd:a6:c8:18:20:54:9e:5a:02:c6:4c:a5: a2:09:9a:f1:1e:39:cb:4b:82:e4:2b:d0:81:cb:93: 6d:00:27:10:e5:a6:2d:bc:a5:a5:c6:d4:3f:be:04: 24:22:cc:ff:d8:7d:79:5c:01:e1:12:0f:25:9c:f8: a2:f7:77:22:b9:f4:5f:87:f4:dc:f7:78:ea:23:38: 1d:40:c9:9f:35:57:f5:3d:12:77:1e:cb:65:67:ce: 5c:f4:8e:6f:a5:53:66:d9:8c:c8:64:7e:46:6d:2b: 3f:b5:de:10:ed:bd:ce:b1:f3:53:f2:4a:49:f2:d1: 62:30:4b:b9:33:f3:cb:57:6f:bc:d2:a0:21:63:d3: a8:a2:34:ac:f2:0f:19:38:d5:70:07:1e:dc:60:fb: 67:d1:0d:66:cf:33:7b:23:2b:66:29:da:5d:9b:ee: 60:d2:5a:99:d8:ef:37:be:09:c0:3f:3c:86:cc:eb: 7e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5D:04:37:B4:04:80:FA:FB:2F:FB:BE:33:BA:1A:9E:E7:FF:16:17 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_F0EN7QEgPr7L_u-M7oanuf_Fhc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:b50::/44 Signature Algorithm: sha256WithRSAEncryption cd:5f:7a:96:8b:02:86:af:0e:d1:4b:4b:31:d2:03:e7:19:b1: 18:c4:8b:a2:1a:f5:ab:23:0f:12:50:47:32:87:6f:e3:f8:93: 4e:a5:97:8d:29:7f:80:26:ec:4c:28:cd:28:9e:67:26:56:37: 9d:12:2a:3f:8b:8c:45:75:78:25:e8:08:81:f9:d7:85:17:2f: a2:bf:41:76:4b:48:b8:63:e4:fe:0e:d2:0a:ab:b0:a7:69:7b: 8f:53:a5:30:63:fe:8a:a5:8a:3f:88:af:e3:93:81:8c:56:d4: 3a:5f:74:57:23:7d:68:ad:c6:51:1a:af:68:40:7a:d8:0c:cc: 4d:42:eb:7a:62:32:81:1d:b1:86:4d:4d:5f:a8:2b:e8:45:88: 01:9b:ea:f5:36:4c:ec:53:e2:78:de:14:8b:b6:f5:f4:fe:76: 10:3b:2d:98:ef:e5:cd:64:bd:4f:a2:54:b5:dc:8e:5c:58:0f: 91:80:ff:a5:16:32:bf:eb:1a:cd:3c:02:4f:04:49:8b:9a:9b: 5c:a0:53:64:34:98:2c:67:f5:50:5e:5c:94:2d:63:d1:ef:03: f7:d0:b7:06:22:62:db:2a:9d:52:48:93:c8:e5:52:04:83:bb: 0b:a5:29:cf:15:8a:3c:c8:16:ef:cd:e5:df:1e:6f:42:c1:8b: e9:05:a0:67 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XNSj2Q68zN3elalFNW3pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzVkMDQzN2I0MDQ4MGZhZmIyZmZiYmUzM2JhMWE5ZWU3ZmYxNjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8XFqayJ3vpbSfPZuyZOOwq9xeH1B I8rPq8vJU9uA6KFM5ZfYMAU6wpyAXp78fPtj6dsnJP+ukFm0Gac7o8FCVvOgEb45 POjFuPw8ocS9psgYIFSeWgLGTKWiCZrxHjnLS4LkK9CBy5NtACcQ5aYtvKWlxtQ/ vgQkIsz/2H15XAHhEg8lnPii93ciufRfh/Tc93jqIzgdQMmfNVf1PRJ3HstlZ85c 9I5vpVNm2YzIZH5GbSs/td4Q7b3OsfNT8kpJ8tFiMEu5M/PLV2+80qAhY9OoojSs 8g8ZONVwBx7cYPtn0Q1mzzN7IytmKdpdm+5g0lqZ2O83vgnAPzyGzOt+YwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPxdBDe0BID6+y/7vjO6Gp7n/xYXMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvX0YwRU43UUVnUHI3TF91LU03b2FudWZfRmhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAtQ MA0GCSqGSIb3DQEBCwUAA4IBAQDNX3qWiwKGrw7RS0sx0gPnGbEYxIuiGvWrIw8S UEcyh2/j+JNOpZeNKX+AJuxMKM0onmcmVjedEio/i4xFdXgl6AiB+deFFy+iv0F2 S0i4Y+T+DtIKq7CnaXuPU6UwY/6KpYo/iK/jk4GMVtQ6X3RXI31orcZRGq9oQHrY DMxNQut6YjKBHbGGTU1fqCvoRYgBm+r1NkzsU+J43hSLtvX0/nYQOy2Y7+XNZL1P olS13I5cWA+RgP+lFjK/6xrNPAJPBEmLmptcoFNkNJgsZ/VQXlyULWPR7wP30LcG ImLbKp1SSJPI5VIEg7sLpSnPFYo8yBbvzeXfHm9CwYvpBaBn -----END CERTIFICATE-----Generated at Mon Jan 12 01:57:32 2026 by rpki-client