This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/m2-fOqlIAMah_w7Rt8QPUtEmm0E.roa File: m2-fOqlIAMah_w7Rt8QPUtEmm0E.roa (raw, json) Hash identifier: xcHZsCAWuNhQvcE2sQGd5urTZ6zJaFupTETz/yHezoU= Subject key identifier: 9B:6F:9F:3A:A9:48:00:C6:A1:FF:0E:D1:B7:C4:0F:52:D1:26:9B:41 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B76D2B63866933B4E18EE9687ED80961E Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/m2-fOqlIAMah_w7Rt8QPUtEmm0E.roa Signing time: Wed 31 Dec 2025 23:51:19 +0000 ROA not before: Wed 31 Dec 2025 23:51:19 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200993 IP address blocks: 2a0e:b107:2691::/48 maxlen: 48 2a0e:b107:278a::/48 maxlen: 48 2a10:ccc1:1337::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:d2:b6:38:66:93:3b:4e:18:ee:96:87:ed:80:96:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Dec 31 23:51:19 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9b6f9f3aa94800c6a1ff0ed1b7c40f52d1269b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b1:c3:5b:7f:88:df:b2:a5:75:21:4d:3c:58: ca:91:d4:98:af:d3:3b:2e:f1:83:5a:5d:d4:55:b4: a4:67:a2:c1:68:61:30:f7:ec:cd:cb:ca:f5:f4:10: 25:71:20:ac:98:2c:a2:17:1e:d2:8f:4b:6a:03:e2: 33:3e:85:28:9d:e4:07:20:4a:b2:e0:c0:d8:06:2c: 10:45:34:03:0a:22:69:a5:f0:bb:aa:ce:97:50:a5: b6:7b:e8:38:d7:e5:8b:79:6f:fc:5b:f5:40:0f:96: f9:2d:19:45:1c:60:bc:9b:cc:9f:65:b0:4b:0d:ee: 27:aa:03:4a:a5:38:3e:e2:c8:cd:80:b4:d2:a2:c6: 65:c6:c6:fa:24:4a:d9:94:68:13:52:1f:07:e2:ca: 74:21:35:4d:1c:81:86:ed:1f:61:9a:55:ba:f6:30: aa:a2:d6:cb:d7:13:18:20:91:87:8e:31:69:00:c5: 2b:59:e3:cf:47:49:48:1a:98:a3:c8:2f:d4:93:3a: 1c:4b:38:39:a8:8f:9a:e9:2f:33:a4:39:5c:3f:f6: 84:7c:39:13:d9:55:01:f2:5e:a7:7b:0e:87:be:55: 66:ff:9c:3f:d7:d9:15:39:35:06:ed:9d:fc:9b:ef: da:f9:2a:46:0e:6c:b5:62:74:09:40:ac:28:3a:91: 22:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:6F:9F:3A:A9:48:00:C6:A1:FF:0E:D1:B7:C4:0F:52:D1:26:9B:41 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/m2-fOqlIAMah_w7Rt8QPUtEmm0E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:2691::/48 2a0e:b107:278a::/48 2a10:ccc1:1337::/48 Signature Algorithm: sha256WithRSAEncryption c7:73:83:31:07:b1:87:d2:61:ba:c1:51:f3:0f:05:0f:64:ff: 23:4d:ff:3e:f7:18:55:5a:0e:23:8e:5e:58:83:dd:a0:dd:aa: f1:1f:8f:ca:9a:87:2b:ff:be:05:b9:fa:90:76:c1:f4:99:23: 5f:71:53:c9:94:f8:a8:fa:41:7e:54:21:1a:f9:c8:a4:18:45: 77:e6:98:56:e7:1d:1d:6b:a4:60:68:1b:3d:84:52:7a:72:39: da:90:ed:fd:32:0f:6e:5c:56:c2:54:62:48:74:b4:52:4a:0a: 32:47:af:49:11:40:99:35:06:8d:a1:c5:8d:97:32:41:80:65: ae:ab:b6:7f:09:bb:23:aa:d2:05:43:11:a0:43:48:49:cd:72: 63:e7:b9:06:ab:c9:0c:28:18:15:3c:6b:88:91:db:4e:61:70: a1:53:c6:bb:8c:f4:27:75:d5:b0:f2:e4:1e:fa:7e:99:ca:68: 0c:fd:bf:fa:7d:7d:13:c0:e0:59:7e:1a:f0:28:a4:53:38:ae: 26:25:16:63:5b:5e:d9:e9:4b:cf:d5:14:6e:df:ee:35:7b:74: a5:03:f5:e0:a2:7e:cd:8f:eb:20:1e:5c:db:c9:c0:ec:1c:8b: 14:f1:72:2f:d9:c0:e8:7e:f9:69:62:b4:44:09:ef:b5:6b:d7: a5:c4:7d:d1 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt20rY4ZpM7ThjuloftgJYeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjUxMjMxMjM1MTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjZmOWYzYWE5NDgwMGM2YTFmZjBlZDFiN2M0MGY1MmQxMjY5YjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLHDW3+I37KldSFNPFjKkdSYr9M7 LvGDWl3UVbSkZ6LBaGEw9+zNy8r19BAlcSCsmCyiFx7Sj0tqA+IzPoUoneQHIEqy 4MDYBiwQRTQDCiJppfC7qs6XUKW2e+g41+WLeW/8W/VAD5b5LRlFHGC8m8yfZbBL De4nqgNKpTg+4sjNgLTSosZlxsb6JErZlGgTUh8H4sp0ITVNHIGG7R9hmlW69jCq otbL1xMYIJGHjjFpAMUrWePPR0lIGpijyC/UkzocSzg5qI+a6S8zpDlcP/aEfDkT 2VUB8l6new6HvlVm/5w/19kVOTUG7Z38m+/a+SpGDmy1YnQJQKwoOpEiGwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJtvnzqpSADGof8O0bfED1LRJptBMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvbTItZk9xbElBTWFoX3c3UnQ4UVBVdEVtbTBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAKg6xByaR AwcAKg6xByeKAwcAKhDMwRM3MA0GCSqGSIb3DQEBCwUAA4IBAQDHc4MxB7GH0mG6 wVHzDwUPZP8jTf8+9xhVWg4jjl5Yg92g3arxH4/Kmocr/74FufqQdsH0mSNfcVPJ lPio+kF+VCEa+cikGEV35phW5x0da6RgaBs9hFJ6cjnakO39Mg9uXFbCVGJIdLRS SgoyR69JEUCZNQaNocWNlzJBgGWuq7Z/CbsjqtIFQxGgQ0hJzXJj57kGq8kMKBgV PGuIkdtOYXChU8a7jPQnddWw8uQe+n6ZymgM/b/6fX0TwOBZfhrwKKRTOK4mJRZj W17Z6UvP1RRu3+41e3SlA/Xgon7Nj+sgHlzbycDsHIsU8XIv2cDofvlpYrRECe+1 a9elxH3R -----END CERTIFICATE-----Generated at Thu Jan 1 09:05:18 2026 by rpki-client