This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bRoYTzfPKrZTV1SwEVhpi_H_QWE.roa File: bRoYTzfPKrZTV1SwEVhpi_H_QWE.roa (raw, json) Hash identifier: F/7R++ZEVBPYilaLO/+efR1HduLk0HfyWV/nPuMED50= Subject key identifier: 6D:1A:18:4F:37:CF:2A:B6:53:57:54:B0:11:58:69:8B:F1:FF:41:61 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CBE77E0FEEBE8D1343C9F7A2097E9 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bRoYTzfPKrZTV1SwEVhpi_H_QWE.roa Signing time: Fri 02 Jan 2026 06:19:48 +0000 ROA not before: Fri 02 Jan 2026 06:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58087 IP address blocks: 2a0e:97c0:3dd::/48 maxlen: 48 2a0e:97c0:3e3::/48 maxlen: 48 2a0e:97c0:710::/48 maxlen: 48 2a0e:97c0:711::/48 maxlen: 48 2a0e:97c0:712::/48 maxlen: 48 2a0e:97c0:713::/48 maxlen: 48 2a0e:97c0:714::/48 maxlen: 48 2a0e:97c0:715::/48 maxlen: 48 2a0e:97c0:716::/48 maxlen: 48 2a0e:97c0:717::/48 maxlen: 48 2a0e:97c0:718::/48 maxlen: 48 2a0e:97c0:719::/48 maxlen: 48 2a0e:97c0:71a::/48 maxlen: 48 2a0e:97c0:71b::/48 maxlen: 48 2a0e:97c0:71c::/48 maxlen: 48 2a0e:97c0:71d::/48 maxlen: 48 2a0e:97c0:71e::/48 maxlen: 48 2a0e:97c0:71f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:be:77:e0:fe:eb:e8:d1:34:3c:9f:7a:20:97:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d1a184f37cf2ab6535754b01158698bf1ff4161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:28:a1:00:a7:96:bd:5b:b3:8f:8d:ed:35:58: de:32:49:c4:70:63:4d:42:ff:c0:1d:eb:7b:fa:d7: 60:c3:d5:b0:de:3d:df:14:1f:18:5c:6b:d3:55:65: 4d:3c:ac:2e:f3:99:74:6e:60:20:03:ba:f1:7e:4a: 94:cf:f4:92:c5:b4:f6:e6:74:df:bf:83:90:ef:a4: 12:42:e0:78:46:da:b3:1e:31:4d:0e:12:01:ee:11: d9:9f:26:af:91:09:67:15:2d:05:38:ed:60:ba:79: dd:60:a9:40:bd:ef:b9:2d:2c:4c:3a:0e:a5:e9:64: d3:a8:f2:dc:1f:92:1d:5d:8c:90:da:49:ca:d7:9e: e2:ea:48:ad:99:cd:66:1c:cc:86:30:32:9b:49:e5: 0f:43:f2:72:b7:37:c4:d1:c3:7c:fe:ba:d4:fe:2e: 63:3d:9f:29:aa:f6:28:47:8e:31:71:38:d2:39:01: c5:4c:4a:59:18:68:a5:23:fd:5a:22:f7:53:1d:f8: 77:03:6c:43:e3:21:71:a0:02:df:20:03:09:8f:5d: fb:0b:e0:df:72:59:6a:f4:67:a9:50:a9:37:ad:99: 8c:e6:0e:84:19:f9:51:f7:ea:4c:da:a1:bc:7e:1e: e9:5d:ff:e3:a2:c7:68:5c:73:f9:3e:09:d3:8a:57: 73:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1A:18:4F:37:CF:2A:B6:53:57:54:B0:11:58:69:8B:F1:FF:41:61 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bRoYTzfPKrZTV1SwEVhpi_H_QWE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:3dd::/48 2a0e:97c0:3e3::/48 2a0e:97c0:710::/44 Signature Algorithm: sha256WithRSAEncryption b4:cd:8f:06:86:31:70:4d:1d:95:cd:94:79:ab:39:34:e9:0b: 2d:8b:bb:6f:e5:e0:e2:4a:56:c4:de:fd:45:d4:c6:43:b6:01: 86:a6:1f:92:36:65:cf:1a:0b:b0:6c:69:a9:6b:a0:3b:e9:77: 3e:83:90:de:44:ad:4f:b3:5b:d0:4b:4e:8a:ad:a8:5f:43:ce: 16:fd:e2:c6:85:88:86:a0:ef:eb:b9:d8:22:21:f5:87:8f:32: c4:ca:33:f6:fe:df:2f:85:90:2e:23:bd:93:d1:3b:49:16:13: 8e:eb:5d:b3:26:16:db:25:80:a3:ff:99:95:76:03:12:15:51: 60:88:72:0a:39:08:bb:c7:90:b0:9c:08:a2:ff:f4:14:f4:9c: a8:c9:c8:51:d0:31:09:2b:9a:19:76:41:c3:ae:be:ba:34:f4: c9:b3:50:bf:d5:bc:be:34:eb:1a:ac:10:30:8d:46:63:0a:1e: a1:f4:8a:2b:38:6c:a9:ae:ef:0a:9c:3c:df:a7:6f:7b:21:6d: 11:48:01:5e:74:37:36:f0:22:6f:14:db:90:6f:78:bc:a9:4f: 87:ba:ae:3c:2b:78:ab:28:cb:c0:38:d9:26:3c:0b:db:2d:cd: a3:86:69:9a:b7:90:b9:55:f0:a8:06:f9:d3:94:e2:9d:6d:a6: cd:0e:c2:6e -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9XL534P7r6NE0PJ96IJfpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDFhMTg0ZjM3Y2YyYWI2NTM1NzU0YjAxMTU4Njk4YmYxZmY0MTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriihAKeWvVuzj43tNVjeMknEcGNN Qv/AHet7+tdgw9Ww3j3fFB8YXGvTVWVNPKwu85l0bmAgA7rxfkqUz/SSxbT25nTf v4OQ76QSQuB4RtqzHjFNDhIB7hHZnyavkQlnFS0FOO1gunndYKlAve+5LSxMOg6l 6WTTqPLcH5IdXYyQ2knK157i6kitmc1mHMyGMDKbSeUPQ/JytzfE0cN8/rrU/i5j PZ8pqvYoR44xcTjSOQHFTEpZGGilI/1aIvdTHfh3A2xD4yFxoALfIAMJj137C+Df cllq9GepUKk3rZmM5g6EGflR9+pM2qG8fh7pXf/josdoXHP5PgnTildz2wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFG0aGE83zyq2U1dUsBFYaYvx/0FhMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvYlJvWVR6ZlBLclpUVjFTd0VWaHBpX0hfUVdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAKg6XwAPd AwcAKg6XwAPjAwcEKg6XwAcQMA0GCSqGSIb3DQEBCwUAA4IBAQC0zY8GhjFwTR2V zZR5qzk06Qsti7tv5eDiSlbE3v1F1MZDtgGGph+SNmXPGguwbGmpa6A76Xc+g5De RK1Ps1vQS06KrahfQ84W/eLGhYiGoO/rudgiIfWHjzLEyjP2/t8vhZAuI72T0TtJ FhOO612zJhbbJYCj/5mVdgMSFVFgiHIKOQi7x5CwnAii//QU9JyoychR0DEJK5oZ dkHDrr66NPTJs1C/1by+NOsarBAwjUZjCh6h9IorOGypru8KnDzfp297IW0RSAFe dDc28CJvFNuQb3i8qU+Huq48K3irKMvAONkmPAvbLc2jhmmat5C5VfCoBvnTlOKd babNDsJu -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:28 2026 by rpki-client