This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tASzsXUADLJiplLFuM2XiAlr2Tk.roa File: tASzsXUADLJiplLFuM2XiAlr2Tk.roa (raw, json) Hash identifier: LzEz0mZIgW/0KaXkoqE5ZNz44E0brNfsvmPXtaaXYDA= Subject key identifier: B4:04:B3:B1:75:00:0C:B2:62:A6:52:C5:B8:CD:97:88:09:6B:D9:39 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CADA9AB1ED4D2B075F56A79B54200 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tASzsXUADLJiplLFuM2XiAlr2Tk.roa Signing time: Fri 02 Jan 2026 06:19:44 +0000 ROA not before: Fri 02 Jan 2026 06:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42641 IP address blocks: 2a0e:b107:17bf::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ad:a9:ab:1e:d4:d2:b0:75:f5:6a:79:b5:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b404b3b175000cb262a652c5b8cd9788096bd939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:74:6d:4d:5d:6e:60:a9:1e:e4:59:b1:a7:73: 46:63:21:9d:b2:f5:35:bc:0d:b1:25:c9:f4:7b:ad: 51:df:45:f1:4a:58:88:85:ad:8a:e2:37:a4:ea:66: 35:e2:2c:9b:07:a5:35:56:98:59:86:4f:12:1b:51: 51:fb:d3:5d:8e:a0:30:05:d3:f9:d6:7f:cf:0f:e7: d8:56:c3:a3:fa:8d:95:16:e5:3d:c0:91:97:a6:3e: ea:86:2f:ae:e1:bf:a1:51:42:e8:96:e6:8d:d6:53: a1:93:00:1b:8f:7b:7b:40:c8:7e:2e:75:f7:8d:d5: b1:d9:8f:78:c7:30:78:d5:83:d3:11:12:3b:3f:15: 5c:f5:ad:72:fa:c2:df:13:35:22:c2:e2:86:22:91: 23:dd:60:ca:44:c7:73:94:7c:f3:33:fc:e9:2d:04: 3a:6c:fc:6d:b6:84:ec:d3:fe:ef:da:3f:65:37:55: 3c:66:79:39:66:20:19:c1:f7:79:1e:0f:0c:f8:77: cd:92:b3:53:02:47:f5:e6:41:f8:c8:23:8c:06:2f: d8:c8:5b:44:89:86:64:bb:05:be:97:20:1d:55:3b: b8:ec:f3:fd:0e:85:ce:16:6a:f0:e2:2e:20:9d:f0: 97:c6:13:1f:e6:d4:b7:a3:9d:44:bd:77:79:58:3e: 2d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:04:B3:B1:75:00:0C:B2:62:A6:52:C5:B8:CD:97:88:09:6B:D9:39 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tASzsXUADLJiplLFuM2XiAlr2Tk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:17bf::/48 Signature Algorithm: sha256WithRSAEncryption 9b:18:4d:a7:17:26:eb:cc:2b:ef:9e:41:90:90:65:9f:8e:08: 3c:e3:f3:bd:53:44:7b:b4:2f:b6:76:a6:f5:d3:ef:22:0d:38: e3:cf:d7:62:37:03:f6:78:95:02:71:e4:4e:d2:be:e7:1f:39: 76:ff:10:75:1f:63:e4:56:94:d5:d6:8c:40:bf:18:3d:2a:9c: 75:9d:44:66:94:b8:62:9a:ba:84:5f:46:f1:ba:c4:3e:60:94: 43:99:cb:08:7b:f2:02:fd:d0:2e:72:08:f0:15:6e:39:5d:d0: 52:09:90:23:f4:b4:d7:7d:8a:49:d1:33:34:22:0b:f5:af:d0: 05:92:e7:ab:40:f8:4f:aa:d1:61:5c:ec:cf:01:e3:af:50:67: d8:3a:e8:c5:05:77:c4:e1:33:6b:1f:e1:13:92:5e:b6:cc:78: 8c:ac:a8:50:0d:6e:b7:29:c0:2f:66:b0:7c:9b:43:5a:19:f8: 00:8b:95:34:bd:e7:0f:df:9b:89:55:93:76:a2:8d:f9:fd:7d: 26:7e:50:0d:00:54:93:f5:60:97:44:3d:61:6d:ed:7f:5e:c9: c9:04:41:07:db:0d:08:60:f1:91:93:8e:50:70:6a:c2:f9:4f: be:c1:ec:d2:1e:cf:d6:44:4c:bf:cb:1b:86:b8:a5:66:38:9a: a0:79:59:1e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XK2pqx7U0rB19Wp5tUIAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDA0YjNiMTc1MDAwY2IyNjJhNjUyYzViOGNkOTc4ODA5NmJkOTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXRtTV1uYKke5Fmxp3NGYyGdsvU1 vA2xJcn0e61R30XxSliIha2K4jek6mY14iybB6U1VphZhk8SG1FR+9NdjqAwBdP5 1n/PD+fYVsOj+o2VFuU9wJGXpj7qhi+u4b+hUULoluaN1lOhkwAbj3t7QMh+LnX3 jdWx2Y94xzB41YPTERI7PxVc9a1y+sLfEzUiwuKGIpEj3WDKRMdzlHzzM/zpLQQ6 bPxttoTs0/7v2j9lN1U8Znk5ZiAZwfd5Hg8M+HfNkrNTAkf15kH4yCOMBi/YyFtE iYZkuwW+lyAdVTu47PP9DoXOFmrw4i4gnfCXxhMf5tS3o51EvXd5WD4txwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLQEs7F1AAyyYqZSxbjNl4gJa9k5MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvdEFTenNYVUFETEppcGxMRnVNMlhpQWxyMlRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBxe/ MA0GCSqGSIb3DQEBCwUAA4IBAQCbGE2nFybrzCvvnkGQkGWfjgg84/O9U0R7tC+2 dqb10+8iDTjjz9diNwP2eJUCceRO0r7nHzl2/xB1H2PkVpTV1oxAvxg9Kpx1nURm lLhimrqEX0bxusQ+YJRDmcsIe/IC/dAucgjwFW45XdBSCZAj9LTXfYpJ0TM0Igv1 r9AFkuerQPhPqtFhXOzPAeOvUGfYOujFBXfE4TNrH+ETkl62zHiMrKhQDW63KcAv ZrB8m0NaGfgAi5U0vecP35uJVZN2oo35/X0mflANAFST9WCXRD1hbe1/XsnJBEEH 2w0IYPGRk45QcGrC+U++wezSHs/WREy/yxuGuKVmOJqgeVke -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:54 2026 by rpki-client