This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rXD8ySEJfsUPaw5ycVl2JQbA9G0.roa File: rXD8ySEJfsUPaw5ycVl2JQbA9G0.roa (raw, json) Hash identifier: 3KyJh93x20kPbIepq0tkgYl2wVZkbV5LUonCiQOcm/A= Subject key identifier: AD:70:FC:C9:21:09:7E:C5:0F:6B:0E:72:71:59:76:25:06:C0:F4:6D Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D2D01F3BAC4F8EDCAEBF827A47EAD Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rXD8ySEJfsUPaw5ycVl2JQbA9G0.roa Signing time: Fri 02 Jan 2026 06:20:16 +0000 ROA not before: Fri 02 Jan 2026 06:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210738 IP address blocks: 2a0e:b107:1c81::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:2d:01:f3:ba:c4:f8:ed:ca:eb:f8:27:a4:7e:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad70fcc921097ec50f6b0e727159762506c0f46d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:66:74:19:9a:a0:f0:68:8c:8a:1e:25:42:6d: f0:d0:0c:4f:44:49:84:32:72:90:04:b1:7d:24:b6: 20:4b:ae:11:88:7f:ba:a6:ee:98:7b:54:9b:ab:ef: ec:c1:59:cb:2a:9c:5e:7b:d3:0e:a3:ba:0d:b4:dc: 1b:a5:cd:7d:fe:80:1b:ac:d4:1d:01:54:d7:ad:a3: 67:09:41:0b:65:2e:2a:c7:2d:1a:06:28:8f:a0:ae: f6:ab:bf:9d:f5:12:53:74:f3:15:29:29:76:3c:85: 21:2c:79:1f:9f:2f:35:5f:f8:70:71:62:08:bd:de: d7:1d:04:8c:52:fe:a5:12:e3:a7:e7:c6:78:7c:76: 9a:e7:67:99:e8:3a:77:1c:c3:84:d5:ff:f0:40:3b: 7c:29:c8:fa:58:1e:d1:fb:fe:2c:c0:74:8a:7a:b4: 14:10:f9:18:47:f6:f7:a2:25:ec:03:ea:66:22:14: dd:5f:14:10:46:ea:21:4f:64:5d:0f:de:d7:2c:36: 26:06:e1:99:2e:68:3d:48:b4:e9:0e:61:bd:ea:06: 62:73:ae:4a:34:7d:0e:8d:f6:99:4e:ea:66:67:97: 17:b0:44:76:1b:fa:07:ed:c8:99:ea:d0:78:a4:5f: 3e:56:8f:07:b1:45:20:b4:88:e4:75:f5:62:ca:86: dd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:70:FC:C9:21:09:7E:C5:0F:6B:0E:72:71:59:76:25:06:C0:F4:6D X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rXD8ySEJfsUPaw5ycVl2JQbA9G0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1c81::/48 Signature Algorithm: sha256WithRSAEncryption c5:56:9f:8c:9b:17:a5:3f:1c:5d:ce:bb:52:40:52:d3:43:2b: 45:7e:59:7b:b9:ae:a1:80:c2:ba:60:fb:3e:42:5d:99:28:e9: a2:05:47:d9:22:1b:cc:32:0d:49:ce:7d:64:b1:4d:23:ce:02: bc:03:20:67:93:47:63:d4:62:07:40:72:22:9b:de:e3:7c:2d: 48:d9:95:be:95:2a:e6:92:7c:31:b7:9d:ba:88:95:32:19:99: 7d:78:1f:1d:5a:af:5f:a8:83:57:1c:a7:3c:d4:2a:45:8e:c0: fd:3f:e8:ff:c2:08:28:19:3d:f3:e1:fc:97:60:d5:cc:15:5e: ba:77:c1:2c:ee:99:0b:bf:39:00:d4:64:7e:5b:6c:e4:ea:f9: ce:ef:64:51:e7:fd:04:26:e6:86:2f:38:e4:9f:46:1f:21:95: 48:97:4d:0a:38:3b:48:04:b0:fd:cb:f5:67:08:9d:d1:30:fb: ff:c9:1a:f2:ec:25:a9:a8:05:15:e3:4e:0b:db:0b:fb:22:45: 25:b1:a1:3a:19:48:39:02:ce:53:c5:44:c0:d9:36:2f:c6:56: 53:f7:1c:40:ec:1d:c4:0e:a2:2e:d6:3e:60:92:48:84:3b:ca: 5f:b9:21:08:bd:e7:63:03:ae:e2:e4:a4:69:85:db:a8:7a:50: 20:0e:73:87 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XS0B87rE+O3K6/gnpH6tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDcwZmNjOTIxMDk3ZWM1MGY2YjBlNzI3MTU5NzYyNTA2YzBmNDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWZ0GZqg8GiMih4lQm3w0AxPREmE MnKQBLF9JLYgS64RiH+6pu6Ye1Sbq+/swVnLKpxee9MOo7oNtNwbpc19/oAbrNQd AVTXraNnCUELZS4qxy0aBiiPoK72q7+d9RJTdPMVKSl2PIUhLHkfny81X/hwcWII vd7XHQSMUv6lEuOn58Z4fHaa52eZ6Dp3HMOE1f/wQDt8Kcj6WB7R+/4swHSKerQU EPkYR/b3oiXsA+pmIhTdXxQQRuohT2RdD97XLDYmBuGZLmg9SLTpDmG96gZic65K NH0OjfaZTupmZ5cXsER2G/oH7ciZ6tB4pF8+Vo8HsUUgtIjkdfViyobdtwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFK1w/MkhCX7FD2sOcnFZdiUGwPRtMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvclhEOHlTRUpmc1VQYXc1eWNWbDJKUWJBOUcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBxyB MA0GCSqGSIb3DQEBCwUAA4IBAQDFVp+MmxelPxxdzrtSQFLTQytFfll7ua6hgMK6 YPs+Ql2ZKOmiBUfZIhvMMg1Jzn1ksU0jzgK8AyBnk0dj1GIHQHIim97jfC1I2ZW+ lSrmknwxt526iJUyGZl9eB8dWq9fqINXHKc81CpFjsD9P+j/wggoGT3z4fyXYNXM FV66d8Es7pkLvzkA1GR+W2zk6vnO72RR5/0EJuaGLzjkn0YfIZVIl00KODtIBLD9 y/VnCJ3RMPv/yRry7CWpqAUV404L2wv7IkUlsaE6GUg5As5TxUTA2TYvxlZT9xxA 7B3EDqIu1j5gkkiEO8pfuSEIvedjA67i5KRphduoelAgDnOH -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:27 2026 by rpki-client