This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jRxDcBkhuPV1-_AUoWp1MupSyHc.roa File: jRxDcBkhuPV1-_AUoWp1MupSyHc.roa (raw, json) Hash identifier: aT/Pb3J3QdBPmZKSt6KtMaQFWwETn01glmUVj6HdUkQ= Subject key identifier: 8D:1C:43:70:19:21:B8:F5:75:FB:F0:14:A1:6A:75:32:EA:52:C8:77 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D7C76A4B94A9EEF185C382424EDEE Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jRxDcBkhuPV1-_AUoWp1MupSyHc.roa Signing time: Fri 02 Jan 2026 06:20:37 +0000 ROA not before: Fri 02 Jan 2026 06:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215614 IP address blocks: 2a10:2f00:167::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:7c:76:a4:b9:4a:9e:ef:18:5c:38:24:24:ed:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d1c43701921b8f575fbf014a16a7532ea52c877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:37:e1:10:4f:5b:34:3d:6d:d6:6c:57:61:05: 56:bd:ad:2c:08:81:b3:71:6f:b9:15:42:4f:29:ff: 45:c3:c5:de:a1:02:49:51:6b:ac:ab:01:c3:0c:fc: ad:ef:53:f5:65:02:85:eb:0f:e9:c1:11:58:db:12: b2:5c:6a:ec:09:dd:61:de:44:33:70:8d:ea:d2:1f: 77:b3:18:e7:ee:dc:86:9d:ef:34:d1:9a:14:a3:69: c4:db:43:f6:73:d3:1c:f2:51:24:bf:c9:1e:88:c4: e9:fc:bf:e6:21:63:0e:ef:39:2f:13:46:4e:5e:be: fd:9c:ff:49:ea:0c:bb:a6:69:95:91:08:76:11:3c: 35:e6:8b:04:c8:d0:0e:1a:8a:08:81:e2:aa:00:68: 8b:b8:bb:c6:c9:c7:3e:29:5a:a9:75:99:10:89:a9: 24:47:80:c7:c4:4c:fa:e2:86:5e:d7:b8:9e:33:35: 5d:02:85:49:a8:3a:d2:a1:ad:bd:9a:e9:1a:cf:a7: 69:2f:d9:57:b0:0f:e3:98:67:9c:ec:f7:bf:20:3d: c4:c2:c5:ac:9b:33:ad:bc:08:1c:bb:7e:c0:fc:29: db:f7:8f:1c:8c:ef:96:75:86:8c:93:10:28:68:c8: 84:f8:fb:76:bf:73:ad:3a:7e:18:f5:83:20:5e:a4: 55:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:1C:43:70:19:21:B8:F5:75:FB:F0:14:A1:6A:75:32:EA:52:C8:77 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jRxDcBkhuPV1-_AUoWp1MupSyHc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:2f00:167::/48 Signature Algorithm: sha256WithRSAEncryption 7a:7b:53:6d:df:71:5c:af:31:03:df:2c:74:fa:19:7a:28:29: 8b:da:f0:08:50:6f:26:bf:7c:d6:31:e9:94:f3:a9:57:c7:0a: 59:00:1d:99:be:a3:2c:a6:68:97:7a:02:ba:18:09:00:fd:8d: 66:32:28:04:77:b3:e9:ec:91:46:95:b0:b3:d8:ba:9a:e4:9f: b7:61:be:25:4d:6c:6d:1a:2a:15:74:fd:63:8b:ed:7a:c5:09: 5c:ca:9a:26:7c:6a:68:56:5c:79:36:36:a1:2a:95:39:ef:ff: 2e:47:d1:34:db:62:7a:db:0f:83:23:63:3c:fd:d5:c1:d0:5f: 58:f9:52:97:19:09:e5:7d:49:70:b6:f6:77:91:21:60:be:51: 0e:45:60:43:a7:f2:67:a7:f5:ee:41:df:4c:f2:74:0f:b4:19: c1:a1:d1:21:71:05:d5:a9:f2:58:36:92:aa:1d:12:f8:04:53: 61:cb:8b:a3:81:10:c6:d3:6a:cf:0e:87:2e:b5:60:c1:e8:7b: b9:42:b2:50:71:1c:27:e0:b9:31:93:e4:aa:85:69:25:47:4b: 2e:d5:5b:3f:f5:55:55:e2:e5:39:b9:dd:85:56:1e:6d:76:8a: bf:a9:f8:9a:c6:c3:9e:9a:77:38:0f:82:3f:ca:20:1a:41:0c: dd:40:ae:07 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XXx2pLlKnu8YXDgkJO3uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDFjNDM3MDE5MjFiOGY1NzVmYmYwMTRhMTZhNzUzMmVhNTJjODc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jfhEE9bND1t1mxXYQVWva0sCIGz cW+5FUJPKf9Fw8XeoQJJUWusqwHDDPyt71P1ZQKF6w/pwRFY2xKyXGrsCd1h3kQz cI3q0h93sxjn7tyGne800ZoUo2nE20P2c9Mc8lEkv8keiMTp/L/mIWMO7zkvE0ZO Xr79nP9J6gy7pmmVkQh2ETw15osEyNAOGooIgeKqAGiLuLvGycc+KVqpdZkQiakk R4DHxEz64oZe17ieMzVdAoVJqDrSoa29mukaz6dpL9lXsA/jmGec7Pe/ID3EwsWs mzOtvAgcu37A/Cnb948cjO+WdYaMkxAoaMiE+Pt2v3OtOn4Y9YMgXqRVPwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFI0cQ3AZIbj1dfvwFKFqdTLqUsh3MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvalJ4RGNCa2h1UFYxLV9BVW9XcDFNdXBTeUhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAvAAFn MA0GCSqGSIb3DQEBCwUAA4IBAQB6e1Nt33FcrzED3yx0+hl6KCmL2vAIUG8mv3zW MemU86lXxwpZAB2ZvqMspmiXegK6GAkA/Y1mMigEd7Pp7JFGlbCz2Lqa5J+3Yb4l TWxtGioVdP1ji+16xQlcypomfGpoVlx5NjahKpU57/8uR9E022J62w+DI2M8/dXB 0F9Y+VKXGQnlfUlwtvZ3kSFgvlEORWBDp/Jnp/XuQd9M8nQPtBnBodEhcQXVqfJY NpKqHRL4BFNhy4ujgRDG02rPDocutWDB6Hu5QrJQcRwn4Lkxk+SqhWklR0su1Vs/ 9VVV4uU5ud2FVh5tdoq/qfiaxsOemnc4D4I/yiAaQQzdQK4H -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:29 2026 by rpki-client