This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/g6lHjRysidWTjVbdsDdk-itSfm8.roa File: g6lHjRysidWTjVbdsDdk-itSfm8.roa (raw, json) Hash identifier: 5Wk7ockhG5vHPVFmiypkmmTzS6D47Aqzc2kp4ZaMrlE= Subject key identifier: 83:A9:47:8D:1C:AC:89:D5:93:8D:56:DD:B0:37:64:FA:2B:52:7E:6F Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D3A5D797D9AD5B07554ED93675B33 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/g6lHjRysidWTjVbdsDdk-itSfm8.roa Signing time: Fri 02 Jan 2026 06:20:20 +0000 ROA not before: Fri 02 Jan 2026 06:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211275 IP address blocks: 2a0e:97c0:410::/48 maxlen: 48 2a0e:97c0:411::/48 maxlen: 48 2a0e:97c0:412::/48 maxlen: 48 2a0e:97c0:41c::/48 maxlen: 48 2a0e:97c0:41d::/48 maxlen: 48 2a0e:97c0:41f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:3a:5d:79:7d:9a:d5:b0:75:54:ed:93:67:5b:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83a9478d1cac89d5938d56ddb03764fa2b527e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:51:ca:f7:1d:f7:e5:9c:c9:c8:1f:93:8c:0b: e2:4f:39:b6:4e:15:61:2e:d5:f5:ea:0c:e0:fd:d7: 76:57:da:34:0b:63:9f:81:e8:5c:d8:73:c5:a6:97: 3b:3b:ce:8b:c7:ce:24:11:b4:37:2a:ac:1c:8a:65: 06:80:0e:8e:38:ca:48:0e:cb:3e:be:5a:5d:c5:bf: b1:25:a4:aa:ef:e5:a1:4a:ad:3a:8c:11:24:6a:86: 74:43:5a:ad:8f:b2:42:b4:b8:18:21:71:95:0f:88: e2:b4:0f:02:d5:fd:27:86:bf:d8:bb:05:6b:b6:1e: 96:73:b0:9f:a1:1c:10:fa:c8:76:5f:6e:ef:1b:c1: ac:02:9c:45:02:72:38:68:5c:bb:e2:a8:dc:d2:09: 57:ba:c6:28:8b:37:d1:c5:c2:bf:40:c8:8d:be:1f: 07:4b:21:b2:eb:0e:91:ae:4d:86:93:8f:86:4c:7d: c2:23:ef:00:cc:53:81:9d:45:bb:4f:9a:8d:58:89: da:55:f1:14:26:01:87:92:f1:80:83:34:d7:36:53: 23:a7:f0:0e:38:8f:03:36:b2:d2:42:7b:90:2b:35: ab:da:55:9a:25:56:c7:95:1a:14:15:df:dc:ca:c0: 93:41:f3:3c:cf:1d:ff:11:a5:43:4a:d1:c3:30:0a: 52:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A9:47:8D:1C:AC:89:D5:93:8D:56:DD:B0:37:64:FA:2B:52:7E:6F X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/g6lHjRysidWTjVbdsDdk-itSfm8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:410::-2a0e:97c0:412:ffff:ffff:ffff:ffff:ffff 2a0e:97c0:41c::/47 2a0e:97c0:41f::/48 Signature Algorithm: sha256WithRSAEncryption 8c:91:e1:0f:91:35:d6:24:12:98:0b:79:5a:e8:d8:52:dc:ba: 10:c0:33:3e:ac:14:93:28:fc:1f:b8:e9:16:9e:a4:d2:81:44: 31:19:1e:c9:a3:ca:6f:24:2d:47:f6:2c:b3:fc:d7:d3:45:09: 09:c8:eb:59:eb:40:57:47:85:6b:8c:75:30:3e:99:4f:43:14: 82:63:8a:67:15:ad:2b:6a:18:27:44:0d:3d:34:88:c1:32:20: d8:10:7f:54:38:9c:8e:51:7e:e6:63:72:2f:c2:5a:0f:72:f2: f9:73:4b:17:ff:69:73:1a:08:4e:06:95:dc:e3:a1:16:59:4c: 0d:e0:67:ec:ba:18:14:5e:b9:ae:d9:75:e0:18:e8:00:81:e8: 2b:99:0d:b8:30:d3:99:23:77:34:69:ed:03:d5:b4:9d:c8:62: d2:3b:cc:af:ba:ea:70:74:40:4b:59:9f:bc:4b:d8:62:74:14: 59:75:03:03:ec:3f:5f:ee:d9:da:dd:8b:44:99:60:50:5d:e4: dd:ef:15:37:e6:ce:ff:ab:49:b0:3f:42:77:84:55:2e:e2:92: aa:10:ac:8f:9f:09:6b:4f:7e:73:ce:6d:96:76:6a:f9:4e:cc: be:49:9b:ad:89:4a:5b:00:64:ad:31:86:f8:3f:37:35:1c:a6: a4:dd:2c:14 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt9XTpdeX2a1bB1VO2TZ1szMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2E5NDc4ZDFjYWM4OWQ1OTM4ZDU2ZGRiMDM3NjRmYTJiNTI3ZTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlHK9x335ZzJyB+TjAviTzm2ThVh LtX16gzg/dd2V9o0C2Ofgehc2HPFppc7O86Lx84kEbQ3KqwcimUGgA6OOMpIDss+ vlpdxb+xJaSq7+WhSq06jBEkaoZ0Q1qtj7JCtLgYIXGVD4jitA8C1f0nhr/YuwVr th6Wc7CfoRwQ+sh2X27vG8GsApxFAnI4aFy74qjc0glXusYoizfRxcK/QMiNvh8H SyGy6w6Rrk2Gk4+GTH3CI+8AzFOBnUW7T5qNWInaVfEUJgGHkvGAgzTXNlMjp/AO OI8DNrLSQnuQKzWr2lWaJVbHlRoUFd/cysCTQfM8zx3/EaVDStHDMApScwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFIOpR40crInVk41W3bA3ZPorUn5vMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvZzZsSGpSeXNpZFdUalZiZHNEZGstaXRTZm04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmMBIDBwQqDpfA BBADBwAqDpfABBIDBwEqDpfABBwDBwAqDpfABB8wDQYJKoZIhvcNAQELBQADggEB AIyR4Q+RNdYkEpgLeVro2FLcuhDAMz6sFJMo/B+46RaepNKBRDEZHsmjym8kLUf2 LLP819NFCQnI61nrQFdHhWuMdTA+mU9DFIJjimcVrStqGCdEDT00iMEyINgQf1Q4 nI5RfuZjci/CWg9y8vlzSxf/aXMaCE4GldzjoRZZTA3gZ+y6GBReua7ZdeAY6ACB 6CuZDbgw05kjdzRp7QPVtJ3IYtI7zK+66nB0QEtZn7xL2GJ0FFl1AwPsP1/u2drd i0SZYFBd5N3vFTfmzv+rSbA/QneEVS7ikqoQrI+fCWtPfnPObZZ2avlOzL5Jm62J SlsAZK0xhvg/NzUcpqTdLBQ= -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:48 2026 by rpki-client