This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aAK0x0DioFQ3MkFbjJH_MVWk_50.roa File: aAK0x0DioFQ3MkFbjJH_MVWk_50.roa (raw, json) Hash identifier: EJdauUqlFHY0H5vtaKHm24peaROmarbOLDVxZOREjv8= Subject key identifier: 68:02:B4:C7:40:E2:A0:54:37:32:41:5B:8C:91:FF:31:55:A4:FF:9D Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D69646B6FEE2D5B3ADB6BEEC4116C Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aAK0x0DioFQ3MkFbjJH_MVWk_50.roa Signing time: Fri 02 Jan 2026 06:20:32 +0000 ROA not before: Fri 02 Jan 2026 06:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214194 IP address blocks: 2a06:de01:160::/44 maxlen: 48 2a06:de01:180::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:69:64:6b:6f:ee:2d:5b:3a:db:6b:ee:c4:11:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6802b4c740e2a0543732415b8c91ff3155a4ff9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5a:d8:2a:0c:67:65:b7:77:54:16:4e:ee:ed: 24:a4:e5:94:61:69:ce:66:af:00:06:6b:58:61:70: 5e:23:cf:e1:51:5b:65:13:54:3d:90:88:33:79:27: ce:1c:bf:33:4d:24:8a:6d:3c:6d:d3:5a:4b:05:52: 6e:3e:fa:78:55:9a:bd:80:5a:ef:20:59:89:02:8b: b4:35:13:84:09:71:70:82:a2:2f:5b:f7:55:99:be: b7:8e:43:4f:4e:da:21:ca:23:5f:05:25:31:70:1e: bc:8b:ff:af:45:ca:ef:d2:14:79:2c:4a:82:e2:54: 8a:69:cd:38:f4:b7:c0:e2:70:0b:6f:6e:cd:43:2c: 50:97:a3:13:1a:d1:1d:04:0d:67:76:71:5d:d9:8a: cf:d9:30:bb:89:df:c6:84:ab:19:cf:95:83:53:f1: 57:11:5d:3d:3b:0d:5e:27:5e:09:68:f7:f4:8d:8f: b0:79:c9:6b:54:11:26:db:bf:21:5d:f5:39:24:63: 58:ad:4a:4b:e2:f2:89:eb:85:0f:a0:02:c2:b4:cc: 37:00:9c:97:2b:77:6a:52:4f:26:12:3a:af:30:08: 30:58:e0:0a:ad:33:21:91:79:21:f7:76:62:66:5a: 41:a2:7a:f7:cb:aa:b3:05:26:43:66:1f:8f:14:57: 8f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:02:B4:C7:40:E2:A0:54:37:32:41:5B:8C:91:FF:31:55:A4:FF:9D X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aAK0x0DioFQ3MkFbjJH_MVWk_50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:de01:160::/44 2a06:de01:180::/44 Signature Algorithm: sha256WithRSAEncryption b0:5b:d0:18:e4:ec:0c:e0:b8:2a:ad:39:d5:84:ad:85:c2:3c: 16:2c:b1:b8:5e:3f:94:f9:93:af:d2:a1:b1:42:a5:d3:d1:38: 62:d5:27:25:b3:9f:1e:96:c6:2b:62:f3:87:f7:d2:78:f5:6f: 87:d1:18:71:ea:4c:03:7b:84:26:58:d3:18:89:3a:f7:15:b3: 1f:75:91:d3:ff:8e:4d:39:0d:f6:41:50:2d:f8:b8:36:33:a4: db:0d:e2:0e:81:95:5b:9f:14:77:b1:0e:55:ce:a9:40:44:a7: 5c:cc:69:ab:34:41:08:12:07:3b:07:95:58:9f:df:8c:5f:d7: 70:13:0c:0a:a4:5c:38:25:1b:52:af:ed:aa:43:ec:3a:5a:e5: 18:9c:90:79:0b:57:d8:82:1b:88:d1:c1:4b:cb:f3:c9:4a:02: 55:4d:a5:28:ca:3c:06:fa:d4:05:b6:1f:b2:21:6b:f8:45:9f: d1:17:59:f6:db:ff:32:70:6a:0a:07:df:26:4e:2a:64:99:19: 8c:84:66:a2:2d:45:b9:8f:c3:3e:c1:ec:56:dc:cc:f3:ae:33: 27:93:ac:18:52:87:d8:da:3e:0f:33:2b:99:73:99:e0:2d:96: 60:c3:fd:68:08:d7:b7:bd:8d:51:5c:ab:af:f2:97:c6:93:1e: e6:88:46:6d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XWlka2/uLVs622vuxBFsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODAyYjRjNzQwZTJhMDU0MzczMjQxNWI4YzkxZmYzMTU1YTRmZjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1rYKgxnZbd3VBZO7u0kpOWUYWnO Zq8ABmtYYXBeI8/hUVtlE1Q9kIgzeSfOHL8zTSSKbTxt01pLBVJuPvp4VZq9gFrv IFmJAou0NROECXFwgqIvW/dVmb63jkNPTtohyiNfBSUxcB68i/+vRcrv0hR5LEqC 4lSKac049LfA4nALb27NQyxQl6MTGtEdBA1ndnFd2YrP2TC7id/GhKsZz5WDU/FX EV09Ow1eJ14JaPf0jY+weclrVBEm278hXfU5JGNYrUpL4vKJ64UPoALCtMw3AJyX K3dqUk8mEjqvMAgwWOAKrTMhkXkh93ZiZlpBonr3y6qzBSZDZh+PFFePeQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGgCtMdA4qBUNzJBW4yR/zFVpP+dMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvYUFLMHgwRGlvRlEzTWtGYmpKSF9NVldrXzUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgbeAQFg AwcEKgbeAQGAMA0GCSqGSIb3DQEBCwUAA4IBAQCwW9AY5OwM4LgqrTnVhK2FwjwW LLG4Xj+U+ZOv0qGxQqXT0Thi1Scls58elsYrYvOH99J49W+H0Rhx6kwDe4QmWNMY iTr3FbMfdZHT/45NOQ32QVAt+Lg2M6TbDeIOgZVbnxR3sQ5VzqlARKdczGmrNEEI Egc7B5VYn9+MX9dwEwwKpFw4JRtSr+2qQ+w6WuUYnJB5C1fYghuI0cFLy/PJSgJV TaUoyjwG+tQFth+yIWv4RZ/RF1n22/8ycGoKB98mTipkmRmMhGaiLUW5j8M+wexW 3MzzrjMnk6wYUofY2j4PMyuZc5ngLZZgw/1oCNe3vY1RXKuv8pfGkx7miEZt -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:27 2026 by rpki-client