This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zm0m5ynwxuHfYJFt8XuQkbR_f3g.roa File: zm0m5ynwxuHfYJFt8XuQkbR_f3g.roa (raw, json) Hash identifier: 3e84UlygA+7iOFp/a/z11ESv1r/2ephVLUQgzyQbw/c= Subject key identifier: CE:6D:26:E7:29:F0:C6:E1:DF:60:91:6D:F1:7B:90:91:B4:7F:7F:78 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CF454B7CB376F8CAF82509969ABDA Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zm0m5ynwxuHfYJFt8XuQkbR_f3g.roa Signing time: Fri 02 Jan 2026 06:20:02 +0000 ROA not before: Fri 02 Jan 2026 06:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203493 IP address blocks: 2a0e:b107:2791::/48 maxlen: 48 2a0e:b107:2792::/48 maxlen: 48 2a0e:b107:2796::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f4:54:b7:cb:37:6f:8c:af:82:50:99:69:ab:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce6d26e729f0c6e1df60916df17b9091b47f7f78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b9:a8:49:ab:64:66:5a:d1:b1:7e:f6:30:f2: b0:7d:ff:d9:c9:df:3c:3a:1a:96:cf:f3:e3:bf:42: 09:c7:1c:98:1d:2c:2d:47:26:4a:7e:61:92:46:17: f2:20:1c:e5:c0:03:ca:97:05:8e:06:a2:1c:7f:2a: 93:65:ea:f8:88:47:24:89:2c:26:11:61:69:66:b0: 3a:4a:2b:a3:eb:ec:ee:a1:46:5b:1c:6f:28:69:12: be:ea:ae:71:c8:bf:66:97:b2:8e:8a:2f:51:a0:04: c9:0b:77:20:c5:c0:65:4e:5c:48:4c:f9:96:9c:30: 80:a2:5d:49:4b:0a:4c:41:b1:0a:6e:0d:7d:ad:1d: 75:2b:0d:e8:23:a3:77:fb:a9:58:5d:05:20:45:69: f0:a3:d2:33:f5:1c:c3:56:40:50:e3:e2:ce:a3:47: 51:b8:b2:40:3e:94:d9:78:0c:1b:31:fe:04:9e:47: 2e:67:62:1e:a7:b2:de:7d:20:58:ea:68:ce:d0:9f: f1:43:c9:e3:44:d8:e1:92:a9:42:03:42:d1:9b:26: 76:01:f0:37:3a:4d:b5:a6:a0:a3:b9:0f:10:a5:f2: 03:89:84:bd:0c:20:ae:41:34:d5:c8:16:a8:7b:71: 56:37:93:3a:43:75:23:bd:1e:80:fa:44:28:6c:ab: 52:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:6D:26:E7:29:F0:C6:E1:DF:60:91:6D:F1:7B:90:91:B4:7F:7F:78 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zm0m5ynwxuHfYJFt8XuQkbR_f3g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:2791::-2a0e:b107:2792:ffff:ffff:ffff:ffff:ffff 2a0e:b107:2796::/48 Signature Algorithm: sha256WithRSAEncryption b2:0a:f0:41:d3:aa:3e:8d:64:5f:ba:c8:ee:84:a2:09:07:a6: a1:01:d3:19:dd:41:47:b3:51:7b:aa:05:6c:a8:36:be:de:44: de:5c:cf:45:22:e2:a2:72:26:69:55:64:23:3a:e7:04:4f:59: 39:48:97:e4:52:30:73:0e:ec:d9:01:bb:8d:b1:fd:35:8c:ed: 54:8d:c2:d2:12:48:58:b2:3c:aa:2e:04:03:09:e1:22:22:9e: 46:dd:61:6f:a1:3a:2d:56:24:1a:85:8a:fc:21:68:9c:0d:7c: 03:c2:49:82:73:c6:79:d2:4c:d8:2b:72:b5:14:53:c1:df:97: d7:63:5a:52:c8:02:53:6c:b5:99:70:db:25:a9:4f:e5:59:9b: 64:b0:7c:35:ba:b7:02:71:85:58:21:63:88:cd:bc:56:03:10: 19:73:b9:0b:de:aa:2b:a1:8a:04:71:54:d0:ba:b6:dc:78:e8: 97:5c:60:07:f4:2f:39:5b:92:d9:28:43:47:5a:47:74:48:1b: 5b:78:7a:5a:f2:d3:e6:a9:16:79:9e:b8:45:13:3b:60:85:80: 3e:73:07:fe:18:95:bb:23:75:16:ab:84:b6:ae:9a:e7:16:85: 69:93:30:06:fa:4d:b2:5d:b7:6d:38:7a:ff:fe:e7:25:34:a9: 4d:d8:23:b1 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt9XPRUt8s3b4yvglCZaavaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTZkMjZlNzI5ZjBjNmUxZGY2MDkxNmRmMTdiOTA5MWI0N2Y3Zjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7moSatkZlrRsX72MPKwff/Zyd88 OhqWz/Pjv0IJxxyYHSwtRyZKfmGSRhfyIBzlwAPKlwWOBqIcfyqTZer4iEckiSwm EWFpZrA6Siuj6+zuoUZbHG8oaRK+6q5xyL9ml7KOii9RoATJC3cgxcBlTlxITPmW nDCAol1JSwpMQbEKbg19rR11Kw3oI6N3+6lYXQUgRWnwo9Iz9RzDVkBQ4+LOo0dR uLJAPpTZeAwbMf4EnkcuZ2Iep7LefSBY6mjO0J/xQ8njRNjhkqlCA0LRmyZ2AfA3 Ok21pqCjuQ8QpfIDiYS9DCCuQTTVyBaoe3FWN5M6Q3UjvR6A+kQobKtSJwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFM5tJucp8Mbh32CRbfF7kJG0f394MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvem0wbTV5bnd4dUhmWUpGdDhYdVFrYlJfZjNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdMBIDBwAqDrEH J5EDBwAqDrEHJ5IDBwAqDrEHJ5YwDQYJKoZIhvcNAQELBQADggEBALIK8EHTqj6N ZF+6yO6EogkHpqEB0xndQUezUXuqBWyoNr7eRN5cz0Ui4qJyJmlVZCM65wRPWTlI l+RSMHMO7NkBu42x/TWM7VSNwtISSFiyPKouBAMJ4SIinkbdYW+hOi1WJBqFivwh aJwNfAPCSYJzxnnSTNgrcrUUU8Hfl9djWlLIAlNstZlw2yWpT+VZm2SwfDW6twJx hVghY4jNvFYDEBlzuQveqiuhigRxVNC6ttx46JdcYAf0LzlbktkoQ0daR3RIG1t4 elry0+apFnmeuEUTO2CFgD5zB/4YlbsjdRarhLaumucWhWmTMAb6TbJdt204ev/+ 5yU0qU3YI7E= -----END CERTIFICATE-----Generated at Mon Jan 12 01:58:38 2026 by rpki-client