This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iFnsD1u0BjXnHbxfOJhKthUmOKo.roa File: iFnsD1u0BjXnHbxfOJhKthUmOKo.roa (raw, json) Hash identifier: 2KNfHb63b3dl9ZbsKWTJfzUnWmcRPDillfVJmjikG4o= Subject key identifier: 88:59:EC:0F:5B:B4:06:35:E7:1D:BC:5F:38:98:4A:B6:15:26:38:AA Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CC8433E4685C6AB1EC514070F46BF Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iFnsD1u0BjXnHbxfOJhKthUmOKo.roa Signing time: Fri 02 Jan 2026 06:19:51 +0000 ROA not before: Fri 02 Jan 2026 06:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 140098 IP address blocks: 2a0e:b107:700::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:c8:43:3e:46:85:c6:ab:1e:c5:14:07:0f:46:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8859ec0f5bb40635e71dbc5f38984ab6152638aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7c:2e:12:81:26:f9:99:8c:85:cb:16:de:df: 73:2d:7c:c0:75:b9:ba:9f:ee:7e:6a:1b:a6:8d:62: 2f:4c:d9:d1:b3:f2:9d:2c:13:49:5e:e7:73:66:74: eb:ec:d6:f0:30:1d:a2:f4:81:75:8d:97:30:bf:df: 30:9e:49:f2:0e:bc:76:f3:30:55:fa:5e:96:8b:93: 00:29:9f:4a:86:f4:8a:ac:64:f8:f8:cf:c9:c5:e3: bf:6e:b8:f8:27:06:12:3d:ab:b7:7f:73:73:07:6a: 7a:1e:f7:60:c1:f1:bd:89:35:5c:90:88:27:23:c9: bd:46:c8:f5:08:d1:85:c6:d9:09:c5:0d:a7:69:7f: 83:66:b4:84:0b:6a:42:a2:42:94:07:43:b0:14:7f: 76:ef:8a:73:db:c0:f2:3b:9c:2c:56:57:b4:8a:14: b6:84:b4:29:91:bd:dd:e5:c1:db:2e:28:96:20:d0: 50:0d:53:61:f6:5d:e1:ce:fa:4d:f2:26:b5:f0:d2: e7:d0:ae:d8:18:b6:08:e8:c2:07:8c:82:5b:25:82: fa:07:5e:3a:e1:49:00:c2:2b:a9:31:58:fc:56:fe: 54:67:23:e4:83:af:fc:34:36:3e:7c:4c:bf:5e:7e: c2:a3:21:a2:2f:35:f5:58:0a:57:1f:a8:e6:b6:ff: 7e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:59:EC:0F:5B:B4:06:35:E7:1D:BC:5F:38:98:4A:B6:15:26:38:AA X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iFnsD1u0BjXnHbxfOJhKthUmOKo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:700::/48 Signature Algorithm: sha256WithRSAEncryption 28:ff:90:50:eb:a3:e6:b8:76:e1:cb:10:27:ad:41:d9:af:f5: 75:70:29:a3:4e:83:03:de:80:ee:67:0c:24:fa:19:0c:d3:c6: 8f:15:0f:a1:d6:5f:63:42:47:54:58:2a:12:4f:fc:58:d6:21: be:9a:02:b0:23:e9:a1:5e:6f:a2:f3:15:3e:7c:d4:f7:4d:c6: 58:be:ad:2e:d1:a4:54:ef:63:63:69:d1:df:4a:68:55:83:38: 5e:b9:22:25:c0:26:f2:eb:93:21:d4:7a:50:51:e2:af:a7:b6: d6:fe:40:87:c5:0b:d0:79:6a:5d:ef:67:6c:c0:0b:43:3f:5d: 6e:3e:c5:5c:9a:cd:ed:15:6f:84:85:38:7b:d6:43:2f:32:81: f7:b3:96:3e:63:ec:2b:0f:cb:33:fe:a9:1e:05:2a:aa:43:79: c6:78:e9:6d:70:ac:0e:57:93:09:84:61:81:7b:20:df:e2:dd: c4:a5:cd:71:d1:40:ef:5f:53:78:c9:f3:e5:3d:4b:a4:49:f1: 02:ad:d8:95:63:b3:4f:fe:d0:21:b7:3d:75:96:56:e7:c8:8d: ab:53:30:ec:77:f3:1a:de:82:1b:17:75:d3:89:4c:3a:63:08: 7a:ee:e5:ff:c8:eb:7e:a7:57:db:a9:aa:d2:9a:35:0a:87:b3: 7d:c6:2b:b6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XMhDPkaFxqsexRQHD0a/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODU5ZWMwZjViYjQwNjM1ZTcxZGJjNWYzODk4NGFiNjE1MjYzOGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XwuEoEm+ZmMhcsW3t9zLXzAdbm6 n+5+ahumjWIvTNnRs/KdLBNJXudzZnTr7NbwMB2i9IF1jZcwv98wnknyDrx28zBV +l6Wi5MAKZ9KhvSKrGT4+M/JxeO/brj4JwYSPau3f3NzB2p6HvdgwfG9iTVckIgn I8m9Rsj1CNGFxtkJxQ2naX+DZrSEC2pCokKUB0OwFH9274pz28DyO5wsVle0ihS2 hLQpkb3d5cHbLiiWINBQDVNh9l3hzvpN8ia18NLn0K7YGLYI6MIHjIJbJYL6B146 4UkAwiupMVj8Vv5UZyPkg6/8NDY+fEy/Xn7CoyGiLzX1WApXH6jmtv9+kQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIhZ7A9btAY15x28XziYSrYVJjiqMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvaUZuc0QxdTBCalhuSGJ4Zk9KaEt0aFVtT0tvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBwcA MA0GCSqGSIb3DQEBCwUAA4IBAQAo/5BQ66PmuHbhyxAnrUHZr/V1cCmjToMD3oDu Zwwk+hkM08aPFQ+h1l9jQkdUWCoST/xY1iG+mgKwI+mhXm+i8xU+fNT3TcZYvq0u 0aRU72NjadHfSmhVgzheuSIlwCby65Mh1HpQUeKvp7bW/kCHxQvQeWpd72dswAtD P11uPsVcms3tFW+EhTh71kMvMoH3s5Y+Y+wrD8sz/qkeBSqqQ3nGeOltcKwOV5MJ hGGBeyDf4t3Epc1x0UDvX1N4yfPlPUukSfECrdiVY7NP/tAhtz11llbnyI2rUzDs d/Ma3oIbF3XTiUw6Ywh67uX/yOt+p1fbqarSmjUKh7N9xiu2 -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:26 2026 by rpki-client