This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/s_uxKxXKkLCC-C4BC2mnSd54nl4.roa File: s_uxKxXKkLCC-C4BC2mnSd54nl4.roa (raw, json) Hash identifier: YqfcUcq/Bid3mw9NkTkySJ0dtF38FkaieHkvvPCj0FQ= Subject key identifier: B3:FB:B1:2B:15:CA:90:B0:82:F8:2E:01:0B:69:A7:49:DE:78:9E:5E Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CB48613211B95BAAC5E827ACF2C72 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/s_uxKxXKkLCC-C4BC2mnSd54nl4.roa Signing time: Fri 02 Jan 2026 06:19:46 +0000 ROA not before: Fri 02 Jan 2026 06:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49459 IP address blocks: 2a10:2f00:173::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b4:86:13:21:1b:95:ba:ac:5e:82:7a:cf:2c:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3fbb12b15ca90b082f82e010b69a749de789e5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4a:6d:04:c5:a4:76:5a:4f:37:8b:a3:cf:f6: ea:60:dd:cc:d4:f3:1f:47:7a:23:bc:03:87:d9:f7: 21:42:bb:0b:e6:c3:e8:c0:47:47:6b:23:54:34:e6: 1e:c0:56:52:b0:39:25:a9:47:ee:59:8f:7a:81:28: 9e:31:0d:bb:c0:d7:04:60:28:75:fd:5d:87:83:49: b8:40:83:89:62:81:b7:ef:a2:81:17:cf:45:bd:3a: 5f:2c:18:dd:9b:a8:4b:70:72:68:0d:a8:48:74:9c: 18:f4:ba:fe:9d:bb:ea:0f:d7:ba:b9:91:8e:e4:35: a3:2d:15:69:a0:b2:ec:ea:c0:02:15:b0:f6:48:a4: 9e:b2:7e:ec:8e:09:7d:8e:e2:1d:5b:3c:6d:6b:39: 0e:7f:d9:7d:93:5f:f9:5a:b8:87:f7:13:33:60:43: c1:f3:7e:56:f4:29:49:d7:ca:17:53:f3:d6:04:fa: 3f:55:c8:e7:28:99:ac:ae:44:bb:b6:4c:bf:e6:9f: 54:ff:ec:c4:92:b3:1a:b0:d2:0a:2a:dc:19:9c:73: dd:6e:bb:17:fb:2f:ca:c4:04:42:10:cc:ec:26:77: fa:85:93:ac:ef:45:38:7a:80:f5:3b:11:7e:0a:05: 1d:5c:e9:41:94:95:be:3d:1d:a6:b3:ab:56:58:a0: f9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:FB:B1:2B:15:CA:90:B0:82:F8:2E:01:0B:69:A7:49:DE:78:9E:5E X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/s_uxKxXKkLCC-C4BC2mnSd54nl4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:2f00:173::/48 Signature Algorithm: sha256WithRSAEncryption 87:0f:88:d9:88:2b:d9:7e:f8:d2:9f:b9:b7:00:2b:a8:22:f8: 29:1e:f4:bb:a9:43:c8:71:3c:c0:50:98:90:f4:eb:a8:02:28: 18:5e:bd:97:30:63:5a:0a:42:df:96:57:d4:d5:fa:05:42:62: 6b:5f:1c:fa:b7:33:ee:d3:36:2d:a7:a5:fc:dc:d4:2b:bf:6f: 4d:98:11:ef:49:4c:1d:40:99:83:18:00:68:ed:47:60:49:4f: 24:b8:29:d9:93:07:a7:fa:6b:76:90:de:f7:11:23:3b:0b:b3: 70:d9:1f:94:a0:97:b3:2b:ea:0c:2b:54:a9:b2:0d:f6:15:7d: 2f:47:c9:68:bf:53:d0:c1:4e:bc:b0:26:ae:3f:b4:e2:4b:37: b6:dc:39:53:6e:02:5d:21:32:4a:37:ef:0c:0c:d5:7f:80:ed: 42:61:6b:0e:f3:f8:9b:75:40:67:de:b7:94:e0:da:c6:19:9c: 02:34:f6:09:d6:28:86:62:f6:54:fd:e5:c2:d7:8b:e0:02:cb: dc:e3:c0:df:d2:64:8f:44:ca:a4:62:cd:98:31:93:6b:c9:92: 35:90:9c:13:44:f3:4e:3a:08:ab:14:77:ac:2f:06:b5:55:ff: 5f:86:3a:9a:eb:eb:32:87:45:8e:1c:ac:47:c9:be:d2:e4:f6: 6d:b4:cf:e8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XLSGEyEblbqsXoJ6zyxyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2ZiYjEyYjE1Y2E5MGIwODJmODJlMDEwYjY5YTc0OWRlNzg5ZTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkptBMWkdlpPN4ujz/bqYN3M1PMf R3ojvAOH2fchQrsL5sPowEdHayNUNOYewFZSsDklqUfuWY96gSieMQ27wNcEYCh1 /V2Hg0m4QIOJYoG376KBF89FvTpfLBjdm6hLcHJoDahIdJwY9Lr+nbvqD9e6uZGO 5DWjLRVpoLLs6sACFbD2SKSesn7sjgl9juIdWzxtazkOf9l9k1/5WriH9xMzYEPB 835W9ClJ18oXU/PWBPo/VcjnKJmsrkS7tky/5p9U/+zEkrMasNIKKtwZnHPdbrsX +y/KxARCEMzsJnf6hZOs70U4eoD1OxF+CgUdXOlBlJW+PR2ms6tWWKD5lQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLP7sSsVypCwgvguAQtpp0neeJ5eMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvc191eEt4WEtrTENDLUM0QkMybW5TZDU0bmw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAvAAFz MA0GCSqGSIb3DQEBCwUAA4IBAQCHD4jZiCvZfvjSn7m3ACuoIvgpHvS7qUPIcTzA UJiQ9OuoAigYXr2XMGNaCkLfllfU1foFQmJrXxz6tzPu0zYtp6X83NQrv29NmBHv SUwdQJmDGABo7UdgSU8kuCnZkwen+mt2kN73ESM7C7Nw2R+UoJezK+oMK1Spsg32 FX0vR8lov1PQwU68sCauP7TiSze23DlTbgJdITJKN+8MDNV/gO1CYWsO8/ibdUBn 3reU4NrGGZwCNPYJ1iiGYvZU/eXC14vgAsvc48Df0mSPRMqkYs2YMZNryZI1kJwT RPNOOgirFHesLwa1Vf9fhjqa6+syh0WOHKxHyb7S5PZttM/o -----END CERTIFICATE-----Generated at Sat Jan 3 06:40:34 2026 by rpki-client