This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/t8ADe-y-NQ_tlL8vpGdbluBACWs.roa File: t8ADe-y-NQ_tlL8vpGdbluBACWs.roa (raw, json) Hash identifier: tw0kI52bMJYi3p+Hl+srG4iOOFpB+y1veV4UOYoEv+Q= Subject key identifier: B7:C0:03:7B:EC:BE:35:0F:ED:94:BF:2F:A4:67:5B:96:E0:40:09:6B Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CE7E1B39CAC2EDC8D239284367A56 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/t8ADe-y-NQ_tlL8vpGdbluBACWs.roa Signing time: Fri 02 Jan 2026 06:19:59 +0000 ROA not before: Fri 02 Jan 2026 06:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200950 IP address blocks: 2a10:ccc0:100::/44 maxlen: 48 2a10:ccc0:100::/48 maxlen: 48 2a10:ccc0:101::/48 maxlen: 48 2a10:ccc0:102::/48 maxlen: 48 2a10:ccc0:103::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e7:e1:b3:9c:ac:2e:dc:8d:23:92:84:36:7a:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7c0037becbe350fed94bf2fa4675b96e040096b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:af:4d:09:30:cf:3a:22:80:b2:c9:36:b3:5b: 94:9b:14:b1:82:4d:79:51:3c:ee:5b:70:bc:1e:a4: a4:58:ed:e0:9b:87:84:c4:c6:d5:02:57:cf:2f:8c: 22:11:27:35:c9:a2:b0:47:86:ce:85:bc:7a:b1:c4: 5f:37:0c:8c:e5:af:3c:42:3e:59:c8:38:e7:78:13: 8d:df:a9:5f:ad:bc:7e:d9:ab:66:b3:3f:dd:1a:33: 76:c6:10:dd:fd:db:4b:ee:4c:2c:80:c6:21:91:2c: 64:57:b2:ae:ee:fa:e4:c6:ca:e0:94:6d:44:da:95: 06:b6:85:55:70:23:3b:d6:88:00:7b:cc:c9:2c:54: db:2c:fb:57:0a:9d:91:fb:9f:fe:74:b1:a5:81:8a: 75:3b:b0:57:6f:ca:46:b8:21:18:4f:c5:54:88:1d: e4:80:a4:5d:df:9f:55:1f:03:8c:3e:83:2f:5a:29: a1:0e:29:70:28:fb:e4:a2:31:fb:2b:ee:e6:9d:9c: 3e:b7:66:8f:18:0c:35:9f:4f:63:62:31:1b:19:ea: 8a:a2:f9:2b:e1:d7:89:3f:26:5a:6e:18:19:f3:28: 22:83:77:2b:04:8a:d3:b6:b7:5e:9c:05:23:8b:7c: 4f:44:27:36:5e:9a:be:65:49:00:00:fa:13:e9:87: 53:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C0:03:7B:EC:BE:35:0F:ED:94:BF:2F:A4:67:5B:96:E0:40:09:6B X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/t8ADe-y-NQ_tlL8vpGdbluBACWs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:ccc0:100::/44 Signature Algorithm: sha256WithRSAEncryption 14:b7:50:1e:2c:36:8e:e5:cd:5e:f6:15:19:92:9f:a0:29:88: 92:ef:45:60:73:17:ab:06:70:ff:09:3c:82:f9:17:65:03:ba: f5:74:ad:75:a2:27:e7:37:35:23:06:92:99:bc:af:a6:f0:88: 41:c9:e9:ad:5e:5c:7a:e5:0d:2c:2c:d9:55:e9:a5:57:b2:ea: 6d:ff:74:0b:ed:61:05:37:37:50:12:e6:cc:d5:b3:31:fd:af: 8a:91:67:5b:87:55:54:7d:0e:ed:87:56:4d:e1:26:71:b5:99: 01:7c:96:2a:57:88:d8:e4:98:c9:ea:c0:5d:97:91:ca:c1:ad: 54:99:74:d3:34:03:b6:d3:be:fc:74:87:88:13:76:01:76:61: b9:0d:99:53:16:ac:55:78:b9:e7:e8:0e:ce:5f:63:e2:a9:53: 87:42:e3:7d:29:99:a5:d6:b5:41:e2:08:a9:9c:80:cc:35:c3: cb:bb:c9:a1:a3:82:5c:f1:19:6c:70:50:0e:1f:bb:aa:d6:f6: 80:05:9d:c9:f1:13:0f:eb:a0:58:ec:5b:61:48:d7:5b:80:9e: f8:7f:b2:36:5c:39:fc:4f:73:6b:ef:49:a7:73:f2:15:7b:5b: 05:92:97:ca:96:1a:e9:cb:28:89:42:53:b6:57:0d:ac:91:3d: 5a:c1:33:2a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XOfhs5ysLtyNI5KENnpWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2MwMDM3YmVjYmUzNTBmZWQ5NGJmMmZhNDY3NWI5NmUwNDAwOTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq69NCTDPOiKAssk2s1uUmxSxgk15 UTzuW3C8HqSkWO3gm4eExMbVAlfPL4wiESc1yaKwR4bOhbx6scRfNwyM5a88Qj5Z yDjneBON36lfrbx+2atmsz/dGjN2xhDd/dtL7kwsgMYhkSxkV7Ku7vrkxsrglG1E 2pUGtoVVcCM71ogAe8zJLFTbLPtXCp2R+5/+dLGlgYp1O7BXb8pGuCEYT8VUiB3k gKRd359VHwOMPoMvWimhDilwKPvkojH7K+7mnZw+t2aPGAw1n09jYjEbGeqKovkr 4deJPyZabhgZ8ygig3crBIrTtrdenAUji3xPRCc2Xpq+ZUkAAPoT6YdTnwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLfAA3vsvjUP7ZS/L6RnW5bgQAlrMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvdDhBRGUteS1OUV90bEw4dnBHZGJsdUJBQ1dzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhDMwAEA MA0GCSqGSIb3DQEBCwUAA4IBAQAUt1AeLDaO5c1e9hUZkp+gKYiS70VgcxerBnD/ CTyC+RdlA7r1dK11oifnNzUjBpKZvK+m8IhByemtXlx65Q0sLNlV6aVXsupt/3QL 7WEFNzdQEubM1bMx/a+KkWdbh1VUfQ7th1ZN4SZxtZkBfJYqV4jY5JjJ6sBdl5HK wa1UmXTTNAO20778dIeIE3YBdmG5DZlTFqxVeLnn6A7OX2PiqVOHQuN9KZml1rVB 4gipnIDMNcPLu8mho4Jc8RlscFAOH7uq1vaABZ3J8RMP66BY7FthSNdbgJ74f7I2 XDn8T3Nr70mnc/IVe1sFkpfKlhrpyyiJQlO2Vw2skT1awTMq -----END CERTIFICATE-----Generated at Mon Jan 12 01:58:25 2026 by rpki-client