This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/djE_Mlio-wIqjSk1t0_cjoM36co.roa File: djE_Mlio-wIqjSk1t0_cjoM36co.roa (raw, json) Hash identifier: ejgbIAHVDXncRAl3sezZeiqpo4G5cSOgRdNj4F3gCnc= Subject key identifier: 76:31:3F:32:58:A8:FB:02:2A:8D:29:35:B7:4F:DC:8E:83:37:E9:CA Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D085D9ADC07B047B1E0727668B835 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/djE_Mlio-wIqjSk1t0_cjoM36co.roa Signing time: Fri 02 Jan 2026 06:20:07 +0000 ROA not before: Fri 02 Jan 2026 06:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207401 IP address blocks: 2a0e:b107:4e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:08:5d:9a:dc:07:b0:47:b1:e0:72:76:68:b8:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76313f3258a8fb022a8d2935b74fdc8e8337e9ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0a:2e:0a:c6:6c:39:bb:96:f2:13:6a:8c:fb: e1:eb:40:e2:37:fa:54:4f:08:10:11:e7:12:fa:23: 35:bc:bf:ed:fa:8a:51:25:bd:fa:69:ae:7d:b7:ca: d7:c1:21:68:3a:e9:8a:ac:7b:2b:a0:65:08:ea:d4: 14:b5:0d:d6:be:31:b9:30:07:d5:4b:96:5b:dd:7f: 2f:d7:67:93:35:73:7a:86:59:de:33:68:af:56:34: 79:3d:5a:36:23:87:dd:91:1f:cc:92:ca:14:1e:53: c9:79:2f:46:e0:0f:31:ca:d4:dd:dd:27:47:46:cd: a1:a4:d5:a2:d6:ef:06:3e:82:ed:81:88:2f:2e:57: 12:89:8e:2e:cd:77:14:6b:5f:85:a2:26:59:72:04: 08:4d:67:ec:50:25:a0:ce:f7:48:bf:b1:53:c4:ca: 49:2a:89:0d:96:e6:5f:07:40:01:b4:45:42:6f:35: c5:89:de:a6:16:fa:4e:f3:f9:2a:13:93:91:f7:ef: 99:d7:e3:17:a3:3e:cc:31:fa:d7:2a:92:49:df:03: 8d:4b:0d:00:1e:95:01:a6:8b:09:e1:3c:3f:9b:c1: 62:e8:3a:b6:6c:be:49:8e:37:79:a2:4a:1c:93:6d: 66:47:1f:c0:6e:fa:5c:65:9f:dc:f4:2d:5c:8b:63: 77:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:31:3F:32:58:A8:FB:02:2A:8D:29:35:B7:4F:DC:8E:83:37:E9:CA X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/djE_Mlio-wIqjSk1t0_cjoM36co.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:4e0::/48 Signature Algorithm: sha256WithRSAEncryption a4:85:f1:66:cc:ed:a3:a1:9b:96:95:09:48:9f:c4:04:91:4b: ea:db:56:94:36:8e:bb:fc:7b:56:11:82:32:5f:38:0d:b0:23: 1d:87:f2:dd:c4:c9:54:cd:6a:5b:d8:0c:ee:0d:2b:a4:0b:c0: 2a:4e:ef:59:62:28:03:4d:f4:7f:dd:84:c6:5d:27:5b:ac:52: 98:12:1b:d8:a6:c4:dc:b6:98:2f:c7:1f:f8:34:2f:25:40:75: dc:6e:33:eb:77:7f:4c:3d:ca:24:50:37:28:9d:2c:b4:cf:49: 7b:34:df:df:0a:84:14:e1:73:8e:37:22:ea:9b:56:e6:7f:2f: 31:14:ba:8a:17:23:ee:d2:30:70:e0:71:ec:a2:35:30:43:9d: 06:e5:07:e0:44:7b:3b:9d:94:d8:b1:a6:41:ea:08:11:56:c1: c0:2b:16:40:78:52:7a:a2:26:95:a3:6a:5a:72:56:b9:e3:81: 5c:87:c4:c2:13:24:68:f3:59:42:ab:1a:4c:cb:e6:80:12:87: e6:69:4a:3b:ff:03:d2:ce:69:39:39:1e:8d:5c:0e:4b:b8:dc: 82:31:92:45:93:16:c1:46:68:c5:1e:0e:f2:e3:83:6e:c5:5e: 3f:c2:fe:69:d5:f4:4c:d8:a4:d0:ce:67:9e:23:bf:18:e1:07: 55:42:35:a4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XQhdmtwHsEex4HJ2aLg1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjMxM2YzMjU4YThmYjAyMmE4ZDI5MzViNzRmZGM4ZTgzMzdlOWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAouCsZsObuW8hNqjPvh60DiN/pU TwgQEecS+iM1vL/t+opRJb36aa59t8rXwSFoOumKrHsroGUI6tQUtQ3WvjG5MAfV S5Zb3X8v12eTNXN6hlneM2ivVjR5PVo2I4fdkR/MksoUHlPJeS9G4A8xytTd3SdH Rs2hpNWi1u8GPoLtgYgvLlcSiY4uzXcUa1+FoiZZcgQITWfsUCWgzvdIv7FTxMpJ KokNluZfB0ABtEVCbzXFid6mFvpO8/kqE5OR9++Z1+MXoz7MMfrXKpJJ3wONSw0A HpUBposJ4Tw/m8Fi6Dq2bL5Jjjd5okock21mRx/AbvpcZZ/c9C1ci2N3jwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHYxPzJYqPsCKo0pNbdP3I6DN+nKMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvZGpFX01saW8td0lxalNrMXQwX2Nqb00zNmNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBwTg MA0GCSqGSIb3DQEBCwUAA4IBAQCkhfFmzO2joZuWlQlIn8QEkUvq21aUNo67/HtW EYIyXzgNsCMdh/LdxMlUzWpb2AzuDSukC8AqTu9ZYigDTfR/3YTGXSdbrFKYEhvY psTctpgvxx/4NC8lQHXcbjPrd39MPcokUDconSy0z0l7NN/fCoQU4XOONyLqm1bm fy8xFLqKFyPu0jBw4HHsojUwQ50G5QfgRHs7nZTYsaZB6ggRVsHAKxZAeFJ6oiaV o2pacla544Fch8TCEyRo81lCqxpMy+aAEofmaUo7/wPSzmk5OR6NXA5LuNyCMZJF kxbBRmjFHg7y44NuxV4/wv5p1fRM2KTQzmeeI78Y4QdVQjWk -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:26 2026 by rpki-client