This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bFzgPlhPfg_FC7icm3xIxhQpq5Q.roa File: bFzgPlhPfg_FC7icm3xIxhQpq5Q.roa (raw, json) Hash identifier: 5CvRidncIdAoxaK/fM4MuH2OXh2q4/PJfM0x62xLfq0= Subject key identifier: 6C:5C:E0:3E:58:4F:7E:0F:C5:0B:B8:9C:9B:7C:48:C6:14:29:AB:94 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D02163418180D7C8DBC86DFA5E1FA Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bFzgPlhPfg_FC7icm3xIxhQpq5Q.roa Signing time: Fri 02 Jan 2026 06:20:05 +0000 ROA not before: Fri 02 Jan 2026 06:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205548 IP address blocks: 2a0e:97c0:3f0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:02:16:34:18:18:0d:7c:8d:bc:86:df:a5:e1:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c5ce03e584f7e0fc50bb89c9b7c48c61429ab94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e5:06:3d:38:94:7b:f1:26:40:ba:d3:1a:35: 6c:18:40:16:d1:db:a4:93:9d:e1:50:4f:f4:d4:43: 02:f6:5f:bd:7a:c1:7a:2d:74:05:ac:d8:4f:16:fc: 61:67:3d:26:31:a0:90:df:de:9d:a7:ee:2c:7c:1c: f8:16:17:6a:62:8a:8b:c5:5f:64:05:12:86:1a:72: 86:76:d0:29:c4:49:8e:85:81:b4:4a:a6:7b:b5:16: e1:59:48:dd:c2:a8:37:1b:d2:9f:a9:13:81:21:09: cf:7a:73:41:3c:7c:1a:0c:53:6c:12:04:1a:a7:bc: 96:71:0b:cb:57:9d:30:d0:86:59:ca:7e:c7:e0:e7: 1c:07:07:33:2c:20:df:54:09:94:0b:e5:c8:a3:33: 45:f5:fc:6e:ea:2d:79:d9:bb:7d:55:8d:8b:63:a3: 70:7f:87:a9:59:de:08:db:8d:50:fa:38:09:47:18: 09:96:10:60:28:c2:09:0e:ea:55:20:12:52:63:25: 8e:f2:9b:86:a5:11:a4:70:f0:e2:a6:37:28:1a:91: 97:24:04:05:d2:42:74:df:7d:d5:8c:46:b9:ee:14: 73:a4:26:9a:34:9c:37:b1:51:09:bc:0c:72:68:08: 84:19:11:1b:dd:f5:02:85:0b:65:f6:58:94:b8:9e: 01:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:5C:E0:3E:58:4F:7E:0F:C5:0B:B8:9C:9B:7C:48:C6:14:29:AB:94 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bFzgPlhPfg_FC7icm3xIxhQpq5Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:3f0::/44 Signature Algorithm: sha256WithRSAEncryption 8f:3e:83:41:8d:1f:6a:90:3a:1b:d0:b3:c5:9c:a9:90:5e:cd: ff:66:b1:24:ff:68:b0:03:f4:27:a4:5d:9b:67:ce:97:a6:e0: 01:eb:3b:2b:a2:4a:8a:df:18:00:04:ae:99:83:8d:38:4f:66: 56:c2:6e:7a:ab:a6:71:3d:c8:f3:06:d2:28:d6:dd:ac:e8:23: d5:a1:a0:3c:65:01:39:ab:7d:7e:6f:80:be:d2:e2:a2:50:3a: b7:5b:0a:aa:3d:8b:98:30:f9:29:98:27:24:05:82:b9:5a:59: d7:18:6a:b4:46:d7:15:92:6a:35:01:07:66:d8:b8:74:9d:74: c9:db:7d:ca:1b:bc:3f:9b:c5:19:3d:ac:5c:ae:56:54:b6:5f: 99:6d:7e:f2:7d:9a:49:13:ac:42:64:eb:e8:44:74:9f:67:e8: 88:0b:3c:10:84:1e:01:97:e3:00:26:92:b3:9d:a2:b4:8e:3c: de:83:91:94:73:42:3f:0f:c2:4a:8a:c1:4e:5b:b0:de:65:71: 8c:cd:c5:cf:d2:70:b5:3a:d5:32:05:b0:8f:e6:ba:bf:74:34: b2:2f:c5:85:56:c8:d6:f0:24:d4:8f:2c:27:94:43:62:3f:ac: c5:63:16:3e:f2:94:ba:99:f6:24:a1:b1:d0:5e:ae:8b:6b:a7: e6:f9:aa:f4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XQIWNBgYDXyNvIbfpeH6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzVjZTAzZTU4NGY3ZTBmYzUwYmI4OWM5YjdjNDhjNjE0MjlhYjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeUGPTiUe/EmQLrTGjVsGEAW0duk k53hUE/01EMC9l+9esF6LXQFrNhPFvxhZz0mMaCQ396dp+4sfBz4FhdqYoqLxV9k BRKGGnKGdtApxEmOhYG0SqZ7tRbhWUjdwqg3G9KfqROBIQnPenNBPHwaDFNsEgQa p7yWcQvLV50w0IZZyn7H4OccBwczLCDfVAmUC+XIozNF9fxu6i152bt9VY2LY6Nw f4epWd4I241Q+jgJRxgJlhBgKMIJDupVIBJSYyWO8puGpRGkcPDipjcoGpGXJAQF 0kJ0333VjEa57hRzpCaaNJw3sVEJvAxyaAiEGREb3fUChQtl9liUuJ4BLQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFGxc4D5YT34PxQu4nJt8SMYUKauUMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvYkZ6Z1BsaFBmZ19GQzdpY20zeEl4aFFwcTVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAPw MA0GCSqGSIb3DQEBCwUAA4IBAQCPPoNBjR9qkDob0LPFnKmQXs3/ZrEk/2iwA/Qn pF2bZ86XpuAB6zsrokqK3xgABK6Zg404T2ZWwm56q6ZxPcjzBtIo1t2s6CPVoaA8 ZQE5q31+b4C+0uKiUDq3WwqqPYuYMPkpmCckBYK5WlnXGGq0RtcVkmo1AQdm2Lh0 nXTJ233KG7w/m8UZPaxcrlZUtl+ZbX7yfZpJE6xCZOvoRHSfZ+iICzwQhB4Bl+MA JpKznaK0jjzeg5GUc0I/D8JKisFOW7DeZXGMzcXP0nC1OtUyBbCP5rq/dDSyL8WF VsjW8CTUjywnlENiP6zFYxY+8pS6mfYkobHQXq6La6fm+ar0 -----END CERTIFICATE-----Generated at Mon Jan 12 01:58:37 2026 by rpki-client