This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bs9HvYjC1H0G0_aUkVY13BCO2IU.roa File: bs9HvYjC1H0G0_aUkVY13BCO2IU.roa (raw, json) Hash identifier: 6q7pOdG+Vck/5NC2/iv9O6SScyarGGYnvaM/rrItM3I= Subject key identifier: 6E:CF:47:BD:88:C2:D4:7D:06:D3:F6:94:91:56:35:DC:10:8E:D8:85 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D6420B1454C0511E2CB983B2B3B98 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bs9HvYjC1H0G0_aUkVY13BCO2IU.roa Signing time: Fri 02 Jan 2026 06:20:31 +0000 ROA not before: Fri 02 Jan 2026 06:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213527 IP address blocks: 2a10:cc40:230::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:64:20:b1:45:4c:05:11:e2:cb:98:3b:2b:3b:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ecf47bd88c2d47d06d3f694915635dc108ed885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ea:d3:b8:08:bc:d7:fc:49:c9:a5:f5:53:0c: 1e:67:ba:1b:e7:36:2b:0a:45:f9:ad:b4:7e:29:6d: a3:01:9f:bd:aa:39:57:30:53:f0:c0:50:57:7a:a1: 43:f5:f2:96:87:79:4c:b5:9a:8a:74:30:30:3a:5b: 19:64:91:34:e2:14:7f:ee:a7:c6:ec:e7:51:39:24: d1:b0:53:0e:18:70:ef:dc:dd:d0:0c:2b:52:c2:ef: 05:2d:72:f4:be:50:45:8e:ed:a5:3c:9e:25:18:7b: 2a:00:37:b9:9c:ca:b2:e6:0b:43:ab:16:87:61:f0: 34:98:19:94:90:aa:d6:80:a0:ed:c2:3c:78:fd:58: b2:ab:cc:0f:73:b4:c4:7b:a7:d7:74:34:5d:7c:fa: 75:0d:65:39:5d:0e:37:92:48:a7:c5:bf:54:0f:a8: 8c:a8:aa:5f:67:de:65:93:6f:4f:5e:e8:e6:80:de: f5:01:70:bc:a9:0d:7f:a0:15:70:c1:f3:51:92:c8: 32:3b:49:b6:7c:84:08:c3:25:a2:58:80:e4:ec:a7: 37:1f:ae:9a:7d:35:87:91:03:8a:14:f2:fe:97:8f: 01:4c:1a:7f:5b:a9:14:97:ef:ac:01:c6:38:73:47: 2a:8b:40:50:a1:c8:89:d0:85:0d:08:b2:b5:fa:7e: a9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:CF:47:BD:88:C2:D4:7D:06:D3:F6:94:91:56:35:DC:10:8E:D8:85 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bs9HvYjC1H0G0_aUkVY13BCO2IU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:cc40:230::/44 Signature Algorithm: sha256WithRSAEncryption 4e:71:c2:87:5c:51:55:56:91:3a:ca:44:97:af:71:b1:97:79: a8:53:f2:6a:fb:96:6c:b8:e9:1a:ec:13:43:4a:85:6b:d5:86: f3:53:c3:72:16:80:c3:8b:86:90:b5:2c:02:67:40:78:6f:8b: 7b:eb:4a:ff:ca:b9:49:25:60:68:e8:d2:71:ca:31:c1:38:05: 2a:3a:54:fe:08:97:3d:18:51:05:45:06:ae:77:c2:ce:7b:3a: 6c:57:64:d6:df:10:42:e2:f8:b7:70:fc:a4:a3:a5:ee:ad:6b: 36:23:72:15:ac:b4:b6:5f:ff:ec:0b:8d:65:4a:48:39:d5:47: cd:b8:0c:45:d6:49:1d:0d:91:b4:3d:ae:e8:3e:c4:89:38:ab: b1:c0:90:21:e4:d8:e2:1b:9c:58:05:78:c9:4c:72:b9:15:f0: e9:31:74:bb:bc:a1:13:08:ee:7f:af:1f:36:b4:f6:e5:25:2f: d4:d3:04:90:16:22:ba:54:90:3b:1b:f2:62:a2:db:db:2a:b0: 1c:37:36:d1:29:99:ed:c7:23:52:36:d2:69:ba:ef:27:68:14: a2:2f:ab:2b:3e:11:54:60:df:05:89:e0:39:54:10:56:c5:98: 21:a5:e5:92:b7:b5:ae:ce:5b:37:77:31:fd:2d:71:d7:00:bb: 01:d2:8c:d3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XWQgsUVMBRHiy5g7KzuYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWNmNDdiZDg4YzJkNDdkMDZkM2Y2OTQ5MTU2MzVkYzEwOGVkODg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOrTuAi81/xJyaX1UwweZ7ob5zYr CkX5rbR+KW2jAZ+9qjlXMFPwwFBXeqFD9fKWh3lMtZqKdDAwOlsZZJE04hR/7qfG 7OdROSTRsFMOGHDv3N3QDCtSwu8FLXL0vlBFju2lPJ4lGHsqADe5nMqy5gtDqxaH YfA0mBmUkKrWgKDtwjx4/Viyq8wPc7TEe6fXdDRdfPp1DWU5XQ43kkinxb9UD6iM qKpfZ95lk29PXujmgN71AXC8qQ1/oBVwwfNRksgyO0m2fIQIwyWiWIDk7Kc3H66a fTWHkQOKFPL+l48BTBp/W6kUl++sAcY4c0cqi0BQociJ0IUNCLK1+n6p7QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFG7PR72IwtR9BtP2lJFWNdwQjtiFMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvYnM5SHZZakMxSDBHMF9hVWtWWTEzQkNPMklVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhDMQAIw MA0GCSqGSIb3DQEBCwUAA4IBAQBOccKHXFFVVpE6ykSXr3Gxl3moU/Jq+5ZsuOka 7BNDSoVr1YbzU8NyFoDDi4aQtSwCZ0B4b4t760r/yrlJJWBo6NJxyjHBOAUqOlT+ CJc9GFEFRQaud8LOezpsV2TW3xBC4vi3cPyko6XurWs2I3IVrLS2X//sC41lSkg5 1UfNuAxF1kkdDZG0Pa7oPsSJOKuxwJAh5NjiG5xYBXjJTHK5FfDpMXS7vKETCO5/ rx82tPblJS/U0wSQFiK6VJA7G/JiotvbKrAcNzbRKZntxyNSNtJpuu8naBSiL6sr PhFUYN8FieA5VBBWxZghpeWSt7Wuzls3dzH9LXHXALsB0ozT -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:57 2026 by rpki-client