This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pDTb9z9aOjRPAgVN5lOioIPoL3U.roa File: pDTb9z9aOjRPAgVN5lOioIPoL3U.roa (raw, json) Hash identifier: A5DKBRJ1n/4cZTC6xIR0ly8TuN9le0xYIrAbztQpsJU= Subject key identifier: A4:34:DB:F7:3F:5A:3A:34:4F:02:05:4D:E6:53:A2:A0:83:E8:2F:75 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D1FFA6F1968524C7239D2E3B192F8 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pDTb9z9aOjRPAgVN5lOioIPoL3U.roa Signing time: Fri 02 Jan 2026 06:20:13 +0000 ROA not before: Fri 02 Jan 2026 06:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209735 IP address blocks: 2a06:de01:f6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:1f:fa:6f:19:68:52:4c:72:39:d2:e3:b1:92:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a434dbf73f5a3a344f02054de653a2a083e82f75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ff:03:14:51:39:58:2b:26:74:1e:1e:f6:11: 74:3a:ee:54:c3:3c:16:49:16:d2:5e:ac:d1:97:e2: e2:3c:c8:81:2a:cc:88:b4:9d:4a:55:9d:81:ee:eb: 32:0d:b6:ff:59:2c:5d:60:09:41:a9:51:e1:5a:25: b0:f2:2f:c3:90:14:c9:ba:fd:93:37:19:7b:8c:1d: d1:2b:d2:e2:3d:5a:3c:33:7d:75:79:9b:f9:e0:b8: 4b:b0:a3:16:0d:2d:ac:19:39:6c:79:a1:27:e8:46: fa:63:a7:f1:ec:f9:fc:55:8b:3d:97:88:24:b5:d8: 57:30:7c:0c:f5:8c:ea:12:7d:fe:44:2a:f3:59:61: 40:78:a2:ce:d2:31:f7:e1:a3:c5:ba:5e:7a:26:0d: 04:7a:71:98:35:83:b8:47:40:a1:96:f3:8e:21:3f: 29:18:93:8c:14:b0:81:ea:70:21:6b:93:18:24:37: 9b:57:7c:8e:a5:ab:aa:2a:ad:84:62:72:c3:d6:00: a8:da:db:b1:3c:d4:89:15:3f:47:98:22:eb:d9:ef: 49:f1:94:95:93:72:97:96:e4:fe:7e:27:81:31:49: 43:b7:b5:03:fe:a1:1e:02:af:2d:45:f4:f4:79:26: 1c:1c:77:ab:3b:b8:b5:64:48:d6:11:d8:59:17:99: 49:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:34:DB:F7:3F:5A:3A:34:4F:02:05:4D:E6:53:A2:A0:83:E8:2F:75 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/pDTb9z9aOjRPAgVN5lOioIPoL3U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:de01:f6::/48 Signature Algorithm: sha256WithRSAEncryption 58:29:d4:d0:ac:bf:ee:47:85:75:b8:b5:6e:54:4f:4e:f1:8b: 99:3f:0d:09:b9:e1:f2:ca:e6:50:23:67:04:e8:be:16:3f:c3: 56:56:5c:2c:34:ed:79:cd:5f:85:0e:ef:b4:b2:11:97:78:ca: 1f:fd:75:13:41:d5:d7:36:49:30:16:70:5e:e8:2b:48:d3:cf: 2d:fd:50:97:51:f8:d4:1f:f9:88:cf:81:84:d9:16:b8:20:ce: 2f:da:5e:bb:32:97:6c:1b:95:bc:6b:08:f2:b4:a4:69:56:73: 9b:b6:a8:05:07:02:bd:97:57:4e:61:eb:93:95:a3:e4:2f:45: 10:85:1e:d0:3e:3d:62:32:9a:29:71:1c:8f:be:16:a8:1f:6c: 92:38:43:c0:63:12:13:66:6c:62:40:86:f2:76:03:bf:a1:91: 85:b0:34:fa:0c:65:fd:e8:aa:af:43:77:5f:ea:47:5f:31:c8: 5e:53:ae:0e:bf:f0:a6:8e:5e:15:5c:aa:35:4b:64:08:b6:ff: 67:41:dc:65:27:2a:01:c4:25:59:69:61:f5:71:ab:59:76:35: b6:55:42:f1:3d:0a:13:f0:1a:c2:73:5e:3b:96:47:01:57:e2: 5d:cc:56:09:8b:29:58:d2:8f:57:af:ff:a4:36:96:23:df:f1: cb:bb:41:c5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XR/6bxloUkxyOdLjsZL4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDM0ZGJmNzNmNWEzYTM0NGYwMjA1NGRlNjUzYTJhMDgzZTgyZjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/8DFFE5WCsmdB4e9hF0Ou5UwzwW SRbSXqzRl+LiPMiBKsyItJ1KVZ2B7usyDbb/WSxdYAlBqVHhWiWw8i/DkBTJuv2T Nxl7jB3RK9LiPVo8M311eZv54LhLsKMWDS2sGTlseaEn6Eb6Y6fx7Pn8VYs9l4gk tdhXMHwM9YzqEn3+RCrzWWFAeKLO0jH34aPFul56Jg0EenGYNYO4R0ChlvOOIT8p GJOMFLCB6nAha5MYJDebV3yOpauqKq2EYnLD1gCo2tuxPNSJFT9HmCLr2e9J8ZSV k3KXluT+fieBMUlDt7UD/qEeAq8tRfT0eSYcHHerO7i1ZEjWEdhZF5lJhQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKQ02/c/Wjo0TwIFTeZToqCD6C91MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvcERUYjl6OWFPalJQQWdWTjVsT2lvSVBvTDNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgbeAQD2 MA0GCSqGSIb3DQEBCwUAA4IBAQBYKdTQrL/uR4V1uLVuVE9O8YuZPw0JueHyyuZQ I2cE6L4WP8NWVlwsNO15zV+FDu+0shGXeMof/XUTQdXXNkkwFnBe6CtI088t/VCX UfjUH/mIz4GE2Ra4IM4v2l67MpdsG5W8awjytKRpVnObtqgFBwK9l1dOYeuTlaPk L0UQhR7QPj1iMpopcRyPvhaoH2ySOEPAYxITZmxiQIbydgO/oZGFsDT6DGX96Kqv Q3df6kdfMcheU64Ov/Cmjl4VXKo1S2QItv9nQdxlJyoBxCVZaWH1catZdjW2VULx PQoT8BrCc147lkcBV+JdzFYJiylY0o9Xr/+kNpYj3/HLu0HF -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:29 2026 by rpki-client