This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/t0v-4QCDI8IMmxlPilb53ojoGJM.roa File: t0v-4QCDI8IMmxlPilb53ojoGJM.roa (raw, json) Hash identifier: vZaP6sxkwC/0E4D+5kVuP6Kz64AvJZzcn0rKNde/r3s= Subject key identifier: B7:4B:FE:E1:00:83:23:C2:0C:9B:19:4F:8A:56:F9:DE:88:E8:18:93 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CAEA06CA8F4C2742DDAB3643DADD6 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/t0v-4QCDI8IMmxlPilb53ojoGJM.roa Signing time: Fri 02 Jan 2026 06:19:44 +0000 ROA not before: Fri 02 Jan 2026 06:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44024 IP address blocks: 2a06:de00:7000::/44 maxlen: 48 2a06:de00:7000::/48 maxlen: 48 2a06:de00:7001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ae:a0:6c:a8:f4:c2:74:2d:da:b3:64:3d:ad:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b74bfee1008323c20c9b194f8a56f9de88e81893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e4:29:d6:67:85:4b:04:56:73:2e:9c:0f:8a: b7:d3:39:be:f2:6e:4c:1f:ce:04:bd:ff:69:f2:d0: 2f:c5:d9:25:28:bc:7b:36:24:15:c9:07:9b:7a:0d: fd:b1:40:c8:64:cc:ca:eb:1e:1d:54:cd:d8:e0:98: 34:d8:dd:c5:a7:84:e5:eb:ba:23:81:a2:72:14:a9: c7:5a:ad:54:e7:54:e7:6f:41:c0:eb:4a:0e:b0:3f: eb:3b:d3:34:00:cd:df:f5:43:73:2d:63:cb:49:f7: d3:29:c3:ee:67:3b:4d:58:33:46:5b:d9:e3:cf:ed: 22:99:ca:70:bc:0b:07:57:a1:4f:84:d6:ec:85:2d: 13:47:01:89:e2:14:7f:08:fa:c9:2d:58:24:10:53: f5:a4:ab:34:4c:e2:c3:9f:3f:86:98:44:4f:d6:d4: d3:a0:87:db:4b:1f:f2:fd:ce:7b:f4:c1:c8:98:69: a4:f7:5b:11:87:e8:1b:09:a9:90:47:21:90:b1:8b: a0:e2:96:ac:18:a3:32:47:3d:9f:b0:b6:29:ca:08: 77:33:4b:a2:43:68:eb:35:ee:08:0f:9a:09:29:58: 86:24:82:f5:4c:63:fb:57:c1:27:9a:59:54:a3:7d: df:87:53:08:87:a0:a1:3f:1d:21:2c:ad:9a:b6:b6: a4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:4B:FE:E1:00:83:23:C2:0C:9B:19:4F:8A:56:F9:DE:88:E8:18:93 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/t0v-4QCDI8IMmxlPilb53ojoGJM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:de00:7000::/44 Signature Algorithm: sha256WithRSAEncryption 54:fc:94:76:1a:75:62:69:91:49:84:eb:48:67:3c:83:23:f9: 73:20:c2:e2:96:80:78:2a:ef:32:ba:99:87:d4:e8:d8:84:a8: cf:e8:64:41:a2:c1:f3:11:f0:67:21:d8:09:07:02:7c:36:f7: 68:78:ea:f4:d4:a4:86:ec:d6:b4:64:12:54:c6:d8:5e:3a:c5: 6e:fd:42:38:4a:4b:98:43:6d:50:aa:f1:62:06:2b:a9:96:8e: 7f:5d:97:d6:d6:d2:54:b2:2b:7b:5c:4c:d2:d2:38:ea:1c:46: 14:96:17:ba:52:72:96:49:74:02:35:24:ab:f6:5a:2c:89:0c: 37:05:db:61:4c:a7:c1:77:ad:12:9c:ad:00:00:a0:87:26:98: 88:ba:17:37:85:c5:70:9b:67:d0:21:25:df:1d:4e:57:8c:c5: c5:a1:6b:4f:99:9c:a0:23:39:85:bd:c8:81:d7:2c:62:67:fb: cf:70:ac:49:0a:01:59:97:85:5c:03:28:ee:7c:3e:1a:98:d6: cf:51:c8:46:7d:d4:00:eb:d7:ec:ca:84:4e:84:57:fb:38:6f: fe:b7:5a:18:9c:bd:31:41:5d:35:32:75:33:68:d0:f4:15:9e: 34:24:2d:01:31:c4:c6:2c:dd:80:0e:10:8a:68:cc:95:f0:cf: e1:dc:f1:f2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XK6gbKj0wnQt2rNkPa3WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzRiZmVlMTAwODMyM2MyMGM5YjE5NGY4YTU2ZjlkZTg4ZTgxODkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uQp1meFSwRWcy6cD4q30zm+8m5M H84Evf9p8tAvxdklKLx7NiQVyQebeg39sUDIZMzK6x4dVM3Y4Jg02N3Fp4Tl67oj gaJyFKnHWq1U51Tnb0HA60oOsD/rO9M0AM3f9UNzLWPLSffTKcPuZztNWDNGW9nj z+0imcpwvAsHV6FPhNbshS0TRwGJ4hR/CPrJLVgkEFP1pKs0TOLDnz+GmERP1tTT oIfbSx/y/c579MHImGmk91sRh+gbCamQRyGQsYug4pasGKMyRz2fsLYpygh3M0ui Q2jrNe4ID5oJKViGJIL1TGP7V8EnmllUo33fh1MIh6ChPx0hLK2atrakNwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLdL/uEAgyPCDJsZT4pW+d6I6BiTMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvdDB2LTRRQ0RJOElNbXhsUGlsYjUzb2pvR0pNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgbeAHAA MA0GCSqGSIb3DQEBCwUAA4IBAQBU/JR2GnViaZFJhOtIZzyDI/lzIMLiloB4Ku8y upmH1OjYhKjP6GRBosHzEfBnIdgJBwJ8NvdoeOr01KSG7Na0ZBJUxtheOsVu/UI4 SkuYQ21QqvFiBiuplo5/XZfW1tJUsit7XEzS0jjqHEYUlhe6UnKWSXQCNSSr9los iQw3BdthTKfBd60SnK0AAKCHJpiIuhc3hcVwm2fQISXfHU5XjMXFoWtPmZygIzmF vciB1yxiZ/vPcKxJCgFZl4VcAyjufD4amNbPUchGfdQA69fsyoROhFf7OG/+t1oY nL0xQV01MnUzaND0FZ40JC0BMcTGLN2ADhCKaMyV8M/h3PHy -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:50 2026 by rpki-client