This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cIR-7UnsiWClVJMdlYwpH2GlFRk.roa File: cIR-7UnsiWClVJMdlYwpH2GlFRk.roa (raw, json) Hash identifier: +xoh5XQL/3jrGhXucwqoqaN51z/rSQoX0LVnvD/c3m4= Subject key identifier: 70:84:7E:ED:49:EC:89:60:A5:54:93:1D:95:8C:29:1F:61:A5:15:19 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D2F152E9A2C03139262522E0F39FD Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cIR-7UnsiWClVJMdlYwpH2GlFRk.roa Signing time: Fri 02 Jan 2026 06:20:17 +0000 ROA not before: Fri 02 Jan 2026 06:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210951 IP address blocks: 2a0e:b107:15d0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:2f:15:2e:9a:2c:03:13:92:62:52:2e:0f:39:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70847eed49ec8960a554931d958c291f61a51519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:de:de:19:f2:44:69:e3:a3:21:71:25:01:ee: e3:6e:87:9c:4e:b8:5f:3d:4e:1b:ab:7b:e8:95:ba: a0:e0:5a:7f:bf:5d:f8:7e:10:40:4e:8e:35:09:63: 81:db:33:30:98:4d:07:59:ce:7a:f3:82:21:b7:95: 25:ed:46:3f:0d:18:3a:3f:a5:4f:b5:fc:68:32:28: 6d:b1:9d:5c:c3:52:ed:4e:02:40:09:65:ca:47:40: 72:fe:6d:84:13:c3:9b:b6:7f:83:21:0b:9d:38:96: ce:82:ac:f3:ba:9c:bc:39:11:5d:f2:47:b9:9b:c9: 71:2d:e2:d2:be:15:80:1c:74:a1:fe:f4:89:c6:c0: 4a:0d:62:fa:b2:b0:35:fd:54:cb:29:a6:dc:79:6a: d2:ed:a5:aa:15:ad:47:94:1a:ac:5e:fc:0a:d7:a3: d6:98:aa:89:05:b5:96:c3:1e:63:35:14:ab:d3:ca: 2b:df:7e:cb:a9:30:27:ea:11:e8:35:81:76:c2:e3: 41:8f:5a:1f:83:f2:06:c7:01:49:e1:b7:ce:a4:57: 6c:8c:77:15:f4:4c:9e:0f:1e:4a:09:06:9e:28:26: 98:e4:01:73:c2:b5:20:c9:e4:b2:53:7c:05:0a:3a: 24:c6:34:2c:d7:81:a9:78:84:f0:8b:08:d9:33:33: 28:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:84:7E:ED:49:EC:89:60:A5:54:93:1D:95:8C:29:1F:61:A5:15:19 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cIR-7UnsiWClVJMdlYwpH2GlFRk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:15d0::/44 Signature Algorithm: sha256WithRSAEncryption 49:5a:d5:bc:25:ef:19:2a:2e:90:fd:cc:ba:a7:64:b3:d0:e1: 52:aa:87:57:59:c3:cb:a7:df:1e:c1:f1:a3:82:38:ca:9f:55: 0f:9d:c6:9f:d3:3d:73:1e:7d:f3:fd:99:c7:ce:13:9a:6f:e5: 7a:53:4b:f8:67:f6:67:d5:01:84:f3:97:f9:66:25:fb:43:cf: 9c:a1:46:70:56:df:7b:ca:1a:7c:ca:f4:b9:20:19:19:db:4f: 10:26:4d:ac:59:0b:6b:d2:d6:be:3e:46:b9:d3:05:6d:15:8d: 76:38:e8:95:a3:16:66:21:b1:17:a7:8f:f0:29:0f:6e:9f:3e: 60:ae:17:c2:5d:76:bd:70:bc:83:7c:23:37:d7:33:3b:d5:e4: 9e:43:1a:6e:b9:a9:13:04:f4:5b:d5:07:31:c4:fb:13:0e:e2: 27:f1:2e:9b:f8:72:c9:da:59:f7:51:04:d6:33:a5:e0:97:a7: 63:23:19:26:58:b0:c6:15:e0:d2:5e:59:a6:00:dc:2d:fc:0e: f0:13:d6:2a:1e:6e:46:1e:50:13:c2:5a:49:41:cc:57:97:58: e9:17:86:6c:de:43:f1:4b:91:c1:b6:d8:8c:4d:9c:50:34:4a: 88:2b:ea:fa:0b:f7:81:39:d8:6d:14:2b:2a:69:aa:78:fa:a6: e7:76:ce:88 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XS8VLposAxOSYlIuDzn9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDg0N2VlZDQ5ZWM4OTYwYTU1NDkzMWQ5NThjMjkxZjYxYTUxNTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu97eGfJEaeOjIXElAe7jboecTrhf PU4bq3volbqg4Fp/v134fhBATo41CWOB2zMwmE0HWc5684Iht5Ul7UY/DRg6P6VP tfxoMihtsZ1cw1LtTgJACWXKR0By/m2EE8Obtn+DIQudOJbOgqzzupy8ORFd8ke5 m8lxLeLSvhWAHHSh/vSJxsBKDWL6srA1/VTLKabceWrS7aWqFa1HlBqsXvwK16PW mKqJBbWWwx5jNRSr08or337LqTAn6hHoNYF2wuNBj1ofg/IGxwFJ4bfOpFdsjHcV 9EyeDx5KCQaeKCaY5AFzwrUgyeSyU3wFCjokxjQs14GpeITwiwjZMzMoPQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHCEfu1J7IlgpVSTHZWMKR9hpRUZMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvY0lSLTdVbnNpV0NsVkpNZGxZd3BIMkdsRlJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxXQ MA0GCSqGSIb3DQEBCwUAA4IBAQBJWtW8Je8ZKi6Q/cy6p2Sz0OFSqodXWcPLp98e wfGjgjjKn1UPncaf0z1zHn3z/ZnHzhOab+V6U0v4Z/Zn1QGE85f5ZiX7Q8+coUZw Vt97yhp8yvS5IBkZ208QJk2sWQtr0ta+Pka50wVtFY12OOiVoxZmIbEXp4/wKQ9u nz5grhfCXXa9cLyDfCM31zM71eSeQxpuuakTBPRb1QcxxPsTDuIn8S6b+HLJ2ln3 UQTWM6Xgl6djIxkmWLDGFeDSXlmmANwt/A7wE9YqHm5GHlATwlpJQcxXl1jpF4Zs 3kPxS5HBttiMTZxQNEqIK+r6C/eBOdhtFCsqaap4+qbnds6I -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:50 2026 by rpki-client