This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mDeQ6iOsuIu54ynqavGcsLQpg2Q.roa File: mDeQ6iOsuIu54ynqavGcsLQpg2Q.roa (raw, json) Hash identifier: e7hd0mniOno4YLz2lptHCHmK1LdYTU4aQo3Fn4rOZLA= Subject key identifier: 98:37:90:EA:23:AC:B8:8B:B9:E3:29:EA:6A:F1:9C:B0:B4:29:83:64 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D218A2C8FCC5554E5F9B6C4A27504 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mDeQ6iOsuIu54ynqavGcsLQpg2Q.roa Signing time: Fri 02 Jan 2026 06:20:14 +0000 ROA not before: Fri 02 Jan 2026 06:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209935 IP address blocks: 2a0e:97c0:8c0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:21:8a:2c:8f:cc:55:54:e5:f9:b6:c4:a2:75:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=983790ea23acb88bb9e329ea6af19cb0b4298364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:65:2e:0e:8d:81:f9:db:46:87:43:41:e6:f3: 58:ff:dd:a8:ee:d3:be:f0:ae:b1:b5:a2:d1:71:e9: c6:9b:1a:9e:02:50:d2:ad:a3:7e:58:ff:02:ae:77: 12:c5:e4:96:57:a2:e5:6c:b4:00:6d:6c:93:ca:9b: 48:3f:2b:ee:95:f9:1a:f3:6f:aa:9a:7a:99:1c:a6: 8b:47:9d:0c:73:f7:b4:2b:bf:00:38:ac:00:aa:74: 7a:9a:f0:82:12:4d:1a:e0:1c:7f:34:a9:f5:73:e8: ca:75:21:06:f5:cb:a2:fa:42:c4:5e:c6:84:cf:46: dd:5d:06:d9:5a:ea:fe:64:72:ce:5d:d8:6e:e2:c2: 03:03:13:90:fe:ba:9e:f5:f6:87:fe:eb:f7:51:f9: aa:5f:7d:35:c5:85:be:59:ed:fe:40:97:d3:84:bd: fc:8f:41:44:eb:4f:e3:fe:84:36:f8:9c:fe:80:22: 31:e7:f1:83:f3:20:79:57:b8:2a:ef:ff:36:f9:c4: 42:cc:c1:b0:07:6d:d8:47:52:a0:f4:41:3c:b2:2a: f3:55:71:d3:ee:b3:f2:06:75:ec:ce:89:b6:b1:a9: b0:c5:ac:95:2e:d9:47:13:f5:3d:85:8e:79:3a:a1: 4c:39:64:e0:e6:04:6f:f2:72:57:ca:a6:a8:c5:b3: f8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:37:90:EA:23:AC:B8:8B:B9:E3:29:EA:6A:F1:9C:B0:B4:29:83:64 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mDeQ6iOsuIu54ynqavGcsLQpg2Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:97c0:8c0::/44 Signature Algorithm: sha256WithRSAEncryption b8:ed:d7:65:43:59:0e:1f:9d:d9:41:ad:e8:bc:43:0f:56:51: 81:07:5a:bc:d1:80:0d:30:fe:68:77:3a:b7:88:dc:23:58:ea: 18:48:1d:1d:73:d3:d3:2c:97:c4:7b:6d:0c:f6:f2:ed:38:bc: 87:1c:f9:76:7e:f0:36:26:d5:04:f7:0e:9d:f6:a5:1d:44:7a: 7e:47:44:e3:b7:10:63:9d:13:46:1f:67:d0:7e:15:4c:bf:69: 7c:cb:0b:9d:08:cf:4d:86:50:cb:29:ba:01:94:76:7a:78:2a: 50:9d:e3:b1:46:bd:a6:e7:c6:eb:f1:7d:ee:14:2d:84:ab:c4: 30:4f:8d:1d:bf:ff:03:a5:cc:8e:96:73:3a:81:ea:af:be:bd: ff:8e:08:c7:cc:88:65:5a:2a:b8:69:6c:9c:c7:f6:a5:f6:8b: c3:04:c9:17:48:b5:c6:53:cd:90:10:bb:9e:29:64:66:a5:25: 59:8e:79:0a:9a:a0:de:72:13:ab:63:d1:ba:a7:02:8c:94:55: bf:a7:29:f4:87:25:a7:e1:a3:26:12:71:d2:ce:c5:0b:86:a9: d3:13:88:35:86:48:ff:55:8c:cf:1c:8f:e6:14:2e:fc:17:1b: 70:12:0c:05:0b:b7:a1:f5:47:cc:c6:a0:b7:88:2b:42:37:a9: 62:ed:94:c1 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XSGKLI/MVVTl+bbEonUEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODM3OTBlYTIzYWNiODhiYjllMzI5ZWE2YWYxOWNiMGI0Mjk4MzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+mUuDo2B+dtGh0NB5vNY/92o7tO+ 8K6xtaLRcenGmxqeAlDSraN+WP8CrncSxeSWV6LlbLQAbWyTyptIPyvulfka82+q mnqZHKaLR50Mc/e0K78AOKwAqnR6mvCCEk0a4Bx/NKn1c+jKdSEG9cui+kLEXsaE z0bdXQbZWur+ZHLOXdhu4sIDAxOQ/rqe9faH/uv3UfmqX301xYW+We3+QJfThL38 j0FE60/j/oQ2+Jz+gCIx5/GD8yB5V7gq7/82+cRCzMGwB23YR1Kg9EE8sirzVXHT 7rPyBnXszom2samwxayVLtlHE/U9hY55OqFMOWTg5gRv8nJXyqaoxbP4SwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJg3kOojrLiLueMp6mrxnLC0KYNkMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvbURlUTZpT3N1SXU1NHlucWF2R2NzTFFwZzJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAjA MA0GCSqGSIb3DQEBCwUAA4IBAQC47ddlQ1kOH53ZQa3ovEMPVlGBB1q80YANMP5o dzq3iNwjWOoYSB0dc9PTLJfEe20M9vLtOLyHHPl2fvA2JtUE9w6d9qUdRHp+R0Tj txBjnRNGH2fQfhVMv2l8ywudCM9NhlDLKboBlHZ6eCpQneOxRr2m58br8X3uFC2E q8QwT40dv/8DpcyOlnM6geqvvr3/jgjHzIhlWiq4aWycx/al9ovDBMkXSLXGU82Q ELueKWRmpSVZjnkKmqDechOrY9G6pwKMlFW/pyn0hyWn4aMmEnHSzsULhqnTE4g1 hkj/VYzPHI/mFC78FxtwEgwFC7eh9UfMxqC3iCtCN6li7ZTB -----END CERTIFICATE-----Generated at Mon Jan 12 01:57:31 2026 by rpki-client