This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mOk9w6qr8By2rwze8OMpAJePY_s.roa File: mOk9w6qr8By2rwze8OMpAJePY_s.roa (raw, json) Hash identifier: tYgwjc3+x4wFHbBX7lj7GXDDM8lQ3w/JgQ7UTWsby4c= Subject key identifier: 98:E9:3D:C3:AA:AB:F0:1C:B6:AF:0C:DE:F0:E3:29:00:97:8F:63:FB Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D0D6DB317152F2F6418006573C9CC Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mOk9w6qr8By2rwze8OMpAJePY_s.roa Signing time: Fri 02 Jan 2026 06:20:08 +0000 ROA not before: Fri 02 Jan 2026 06:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207650 IP address blocks: 2a10:2f00:109::/48 maxlen: 48 2a10:cc40:160::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:0d:6d:b3:17:15:2f:2f:64:18:00:65:73:c9:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98e93dc3aaabf01cb6af0cdef0e32900978f63fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:82:f9:62:c3:01:b0:b4:9e:19:85:a5:b5:1c: f1:8e:a3:1f:3a:48:f0:ee:a6:d1:65:d8:19:aa:a3: 1e:41:e0:29:03:8c:1d:ca:ab:9e:37:71:2d:b9:99: 5d:c9:0a:29:58:b1:1d:89:55:55:24:a7:46:36:3e: 89:68:a8:27:dd:d2:87:d9:32:7e:52:6a:0c:49:83: a7:43:ff:e7:7d:e2:18:6c:b4:6c:30:0d:02:e5:ca: 5d:0f:b1:31:83:aa:a2:05:40:25:72:f3:0b:77:dc: e4:37:ef:c7:cd:d1:ba:22:6d:52:ed:f8:ab:e9:15: 01:02:d0:b7:24:d0:c3:5d:6e:90:b6:32:03:7b:98: 4e:1d:8e:f9:08:6f:69:48:a8:71:6e:bf:53:a1:76: 3a:ef:85:3f:b1:eb:46:55:66:3d:94:58:36:bf:f3: 33:73:dd:16:8b:2c:2d:6a:93:3c:ef:f5:cc:7a:93: 39:da:bd:b5:59:c3:4a:d7:44:72:19:f0:4d:ac:59: 81:2c:aa:b6:23:59:44:1c:84:05:1f:6a:23:50:9b: 6b:62:bf:6a:d9:00:46:7d:91:f6:2b:ea:8a:5f:5b: 2c:39:10:5f:be:4b:97:5c:91:1e:ff:76:32:c7:64: 86:18:10:64:43:7f:30:7b:f6:94:b7:1e:69:da:84: de:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E9:3D:C3:AA:AB:F0:1C:B6:AF:0C:DE:F0:E3:29:00:97:8F:63:FB X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mOk9w6qr8By2rwze8OMpAJePY_s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:2f00:109::/48 2a10:cc40:160::/44 Signature Algorithm: sha256WithRSAEncryption 02:52:74:b8:fd:7b:b1:76:29:10:7f:70:e5:0b:69:7f:23:df: 94:b5:c0:e3:33:be:6a:66:61:d7:7f:5c:d6:4c:18:8a:53:f8: 63:72:05:c9:7c:db:e7:1d:cb:5f:07:b6:27:26:20:92:80:1a: a0:38:ad:17:75:09:44:e2:ca:9d:39:d8:ed:44:01:3f:d5:13: 67:fa:19:d1:23:cc:02:7d:ef:20:bf:9a:6c:ae:4e:43:e9:d5: 30:7d:62:d1:c0:dd:be:fc:b6:85:a3:44:af:90:00:5e:16:d2: 0f:cd:7b:7b:4a:49:5a:1f:87:7f:85:93:a4:db:29:ce:2d:82: 00:b2:ad:2c:9a:0a:92:86:5d:97:49:d6:ba:7b:1c:e0:56:d5: 10:87:9d:61:0c:f0:6f:d4:57:4c:13:71:37:33:6b:6c:4a:b3: f8:45:26:44:d8:8a:13:af:23:ce:80:2c:3d:4e:4e:50:f5:9e: a7:7b:b6:70:df:97:e3:5b:23:a1:26:8f:4f:92:87:9e:95:17: 5a:53:1c:17:67:3d:65:15:9e:94:ba:48:c0:97:c1:30:2b:86: 6c:d6:73:1d:f7:32:c7:87:26:2a:c0:79:61:38:84:f1:67:0c: 82:84:7b:36:48:d1:69:ad:ed:64:4a:09:2a:92:a3:3c:04:c6: a0:76:06:62 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XQ1tsxcVLy9kGABlc8nMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGU5M2RjM2FhYWJmMDFjYjZhZjBjZGVmMGUzMjkwMDk3OGY2M2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIL5YsMBsLSeGYWltRzxjqMfOkjw 7qbRZdgZqqMeQeApA4wdyqueN3EtuZldyQopWLEdiVVVJKdGNj6JaKgn3dKH2TJ+ UmoMSYOnQ//nfeIYbLRsMA0C5cpdD7Exg6qiBUAlcvMLd9zkN+/HzdG6Im1S7fir 6RUBAtC3JNDDXW6QtjIDe5hOHY75CG9pSKhxbr9ToXY674U/setGVWY9lFg2v/Mz c90WiywtapM87/XMepM52r21WcNK10RyGfBNrFmBLKq2I1lEHIQFH2ojUJtrYr9q 2QBGfZH2K+qKX1ssORBfvkuXXJEe/3Yyx2SGGBBkQ38we/aUtx5p2oTe/wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJjpPcOqq/Actq8M3vDjKQCXj2P7MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvbU9rOXc2cXI4Qnkycnd6ZThPTXBBSmVQWV9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKhAvAAEJ AwcEKhDMQAFgMA0GCSqGSIb3DQEBCwUAA4IBAQACUnS4/XuxdikQf3DlC2l/I9+U tcDjM75qZmHXf1zWTBiKU/hjcgXJfNvnHctfB7YnJiCSgBqgOK0XdQlE4sqdOdjt RAE/1RNn+hnRI8wCfe8gv5psrk5D6dUwfWLRwN2+/LaFo0SvkABeFtIPzXt7Skla H4d/hZOk2ynOLYIAsq0smgqShl2XSda6exzgVtUQh51hDPBv1FdME3E3M2tsSrP4 RSZE2IoTryPOgCw9Tk5Q9Z6ne7Zw35fjWyOhJo9PkoeelRdaUxwXZz1lFZ6UukjA l8EwK4Zs1nMd9zLHhyYqwHlhOITxZwyChHs2SNFpre1kSgkqkqM8BMagdgZi -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:28 2026 by rpki-client