This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nEhySERrEZnBLEEyE4YLCRqwuQQ.roa File: nEhySERrEZnBLEEyE4YLCRqwuQQ.roa (raw, json) Hash identifier: GvZna1m9qwJ3rZmpDGTCc9OUTTuM2m89gb4fpbNDk1U= Subject key identifier: 9C:48:72:48:44:6B:11:99:C1:2C:41:32:13:86:0B:09:1A:B0:B9:04 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D84393047DA542ABD63A9B0C5438A Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nEhySERrEZnBLEEyE4YLCRqwuQQ.roa Signing time: Fri 02 Jan 2026 06:20:39 +0000 ROA not before: Fri 02 Jan 2026 06:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215828 IP address blocks: 2a0e:b107:27d0::/46 maxlen: 48 2a0e:b107:27d4::/46 maxlen: 48 2a0e:b107:27f4::/46 maxlen: 48 2a0e:b107:27f8::/46 maxlen: 48 2a0e:b107:27fc::/46 maxlen: 48 2a0e:b107:2800::/46 maxlen: 48 2a0e:b107:2804::/46 maxlen: 48 2a0e:b107:2810::/46 maxlen: 48 2a0e:b107:2814::/46 maxlen: 48 2a0e:b107:2818::/46 maxlen: 48 2a0e:b107:281c::/46 maxlen: 48 2a0e:b107:2820::/46 maxlen: 48 2a0e:b107:2824::/46 maxlen: 48 2a0e:b107:2828::/46 maxlen: 48 2a0e:b107:282c::/46 maxlen: 48 2a0e:b107:2840::/46 maxlen: 48 2a0e:b107:2844::/46 maxlen: 48 2a0e:b107:2858::/46 maxlen: 48 2a0e:b107:285c::/46 maxlen: 48 2a0e:b107:2860::/46 maxlen: 48 2a0e:b107:2864::/46 maxlen: 48 2a0e:b107:2868::/46 maxlen: 48 2a0e:b107:286c::/46 maxlen: 48 2a0e:b107:2870::/46 maxlen: 48 2a0e:b107:2874::/46 maxlen: 48 2a0e:b107:2878::/46 maxlen: 48 2a0e:b107:287c::/46 maxlen: 48 2a0e:b107:2888::/46 maxlen: 48 2a0e:b107:288c::/46 maxlen: 48 2a0e:b107:2890::/46 maxlen: 48 2a0e:b107:2894::/46 maxlen: 48 2a0e:b107:2898::/46 maxlen: 48 2a0e:b107:289c::/46 maxlen: 48 2a0e:b107:28a0::/46 maxlen: 48 2a0e:b107:28b0::/46 maxlen: 48 2a0e:b107:28b4::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:84:39:30:47:da:54:2a:bd:63:a9:b0:c5:43:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c487248446b1199c12c413213860b091ab0b904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:86:d1:c7:36:ad:bc:38:dc:af:d2:63:8b:d4: 44:61:cf:e7:cc:8c:c3:20:bf:10:73:f7:76:8c:bb: af:67:44:ed:d7:c1:f4:39:ff:18:f6:0b:fa:3e:37: 62:65:1e:b1:5c:66:af:c1:39:1e:28:d0:5e:84:9e: d7:50:99:83:7e:cf:b9:db:d4:0f:7e:2d:8f:34:1e: f9:98:03:44:1b:4f:3b:67:f0:fc:52:55:8c:9a:c7: 60:da:3c:93:0f:81:7d:23:18:ac:76:ad:47:69:95: 87:0e:74:eb:83:be:6a:ec:4b:11:db:a9:25:e4:08: d3:8d:2b:2b:9d:7f:4c:24:f8:1c:c7:46:bf:7f:fd: 4c:c3:35:6e:47:40:33:b1:48:4a:97:79:f3:77:bc: 85:c5:6b:51:51:26:9a:77:d9:6f:af:23:50:1f:86: 22:80:68:71:d5:18:a2:05:d9:f3:a9:b8:37:7b:46: 52:62:d2:ef:46:76:58:91:92:17:aa:8d:05:9f:ef: b8:d2:2d:f4:f3:1d:5c:b6:66:41:1e:67:d5:2e:7b: ef:29:e8:bf:bf:90:f8:6c:4f:35:a3:b3:31:e8:50: 3d:10:1e:55:c7:cb:95:ce:56:97:76:be:65:e5:86: 69:c3:c6:ea:66:e2:28:84:f4:8a:1e:1b:12:ab:30: c8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:48:72:48:44:6B:11:99:C1:2C:41:32:13:86:0B:09:1A:B0:B9:04 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nEhySERrEZnBLEEyE4YLCRqwuQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:27d0::/45 2a0e:b107:27f4::-2a0e:b107:2807:ffff:ffff:ffff:ffff:ffff 2a0e:b107:2810::-2a0e:b107:282f:ffff:ffff:ffff:ffff:ffff 2a0e:b107:2840::/45 2a0e:b107:2858::-2a0e:b107:287f:ffff:ffff:ffff:ffff:ffff 2a0e:b107:2888::-2a0e:b107:28a3:ffff:ffff:ffff:ffff:ffff 2a0e:b107:28b0::/45 Signature Algorithm: sha256WithRSAEncryption 24:c5:06:cb:c7:30:e5:24:4d:fc:0c:17:79:26:3a:fa:f7:53: fe:00:42:fb:1a:31:a5:01:9c:e8:b4:63:ca:c7:2f:da:fe:bb: 64:92:97:96:a7:74:4f:92:47:97:4e:29:ef:f5:d2:77:f6:ca: fd:b4:ff:ed:56:4e:30:21:d6:5c:29:8b:09:04:0e:2a:fc:96: 54:bd:8a:b0:83:e6:44:4a:62:35:8a:a2:87:e7:e2:28:9d:1b: 53:fd:ec:f2:1a:df:e6:8c:49:80:bc:fc:bc:51:71:78:c9:aa: b4:7c:ec:6f:34:cb:8b:e6:a9:89:6e:23:9d:fd:cd:3d:2d:c1: 5c:a8:99:98:c8:db:15:2b:dc:17:0d:98:8d:48:db:1f:a1:36: 90:20:05:c2:3d:81:af:5c:02:d3:1a:64:c0:fa:39:ff:b7:5d: 1d:3e:76:b3:f4:00:de:e4:9f:79:c9:17:e3:19:c4:d0:4d:4b: 3f:3b:c4:61:e9:b9:b8:e8:6c:70:af:e0:60:90:d5:9a:a7:ef: ca:31:d5:9e:74:e3:cf:f1:8e:5b:69:75:55:e8:36:e4:d3:c5: 8f:47:e2:ae:e8:0a:9e:0b:d4:b5:a6:c3:3f:82:0c:f4:e5:62: 68:66:0c:1c:65:ba:aa:c9:c8:83:ef:b1:dd:2b:40:c6:fc:6c: 56:12:cb:b4 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgISAZt9XYQ5MEfaVCq9Y6mwxUOKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzQ4NzI0ODQ0NmIxMTk5YzEyYzQxMzIxMzg2MGIwOTFhYjBiOTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4bRxzatvDjcr9Jji9REYc/nzIzD IL8Qc/d2jLuvZ0Tt18H0Of8Y9gv6PjdiZR6xXGavwTkeKNBehJ7XUJmDfs+529QP fi2PNB75mANEG087Z/D8UlWMmsdg2jyTD4F9Ixisdq1HaZWHDnTrg75q7EsR26kl 5AjTjSsrnX9MJPgcx0a/f/1MwzVuR0AzsUhKl3nzd7yFxWtRUSaad9lvryNQH4Yi gGhx1RiiBdnzqbg3e0ZSYtLvRnZYkZIXqo0Fn++40i308x1ctmZBHmfVLnvvKei/ v5D4bE81o7Mx6FA9EB5Vx8uVzlaXdr5l5YZpw8bqZuIohPSKHhsSqzDIxwIDAQAB o4ICbzCCAmswHQYDVR0OBBYEFJxIckhEaxGZwSxBMhOGCwkasLkEMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvbkVoeVNFUnJFWm5CTEVFeUU0WUxDUnF3dVFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGEBggrBgEFBQcBBwEB/wR1MHMwcQQCAAIwawMHAyoOsQcn 0DASAwcCKg6xByf0AwcDKg6xBygAMBIDBwQqDrEHKBADBwQqDrEHKCADBwMqDrEH KEAwEgMHAyoOsQcoWAMHByoOsQcoADASAwcDKg6xByiIAwcCKg6xByigAwcDKg6x ByiwMA0GCSqGSIb3DQEBCwUAA4IBAQAkxQbLxzDlJE38DBd5Jjr691P+AEL7GjGl AZzotGPKxy/a/rtkkpeWp3RPkkeXTinv9dJ39sr9tP/tVk4wIdZcKYsJBA4q/JZU vYqwg+ZESmI1iqKH5+IonRtT/ezyGt/mjEmAvPy8UXF4yaq0fOxvNMuL5qmJbiOd /c09LcFcqJmYyNsVK9wXDZiNSNsfoTaQIAXCPYGvXALTGmTA+jn/t10dPnaz9ADe 5J95yRfjGcTQTUs/O8Rh6bm46Gxwr+BgkNWap+/KMdWedOPP8Y5baXVV6Dbk08WP R+Ku6AqeC9S1psM/ggz05WJoZgwcZbqqyciD77HdK0DG/GxWEsu0 -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:28 2026 by rpki-client