This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/63yOiYKwU7JqEfSC9NxVJ01fCWk.roa File: 63yOiYKwU7JqEfSC9NxVJ01fCWk.roa (raw, json) Hash identifier: K4Ob2YWWp3LxgFe3+6MIi9FKOa85HqimBOJiSHujQxY= Subject key identifier: EB:7C:8E:89:82:B0:53:B2:6A:11:F4:82:F4:DC:55:27:4D:5F:09:69 Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c Certificate serial: 019B7834559C77B01587DFBBDC0255923554 Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/63yOiYKwU7JqEfSC9NxVJ01fCWk.roa Signing time: Thu 01 Jan 2026 06:17:34 +0000 ROA not before: Thu 01 Jan 2026 06:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211970 IP address blocks: 212.126.113.0/24 maxlen: 24 212.126.115.0/24 maxlen: 24 2a04:2dc0::/48 maxlen: 48 2a04:2dc0:18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:55:9c:77:b0:15:87:df:bb:dc:02:55:92:35:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c Validity Not Before: Jan 1 06:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb7c8e8982b053b26a11f482f4dc55274d5f0969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:56:0d:f7:5d:bc:fe:e5:1d:09:8d:20:da:88: fb:cf:3f:50:b7:47:a8:18:7a:e7:d9:cf:a6:98:43: 0b:f1:e9:05:64:1f:65:85:c1:de:6a:4e:83:ac:7b: 28:9f:ec:1e:e3:b4:cc:72:b8:c9:88:cf:87:df:30: f6:d4:7c:36:f7:dd:b9:eb:2f:fd:40:25:8d:c5:4d: 79:ae:5c:a2:69:c9:89:e4:6a:86:bd:5c:37:44:42: 07:05:0a:5f:2a:7f:30:0f:1a:c8:68:83:b7:88:cf: b7:e4:0f:4d:e9:80:84:a9:f6:b8:3f:1c:2c:a4:c6: 5c:3f:6a:48:20:cc:84:71:f4:b1:43:5f:7f:75:65: b1:ad:f6:82:6f:8d:af:c2:ea:01:6b:c8:97:cb:5b: f8:61:67:8f:40:8d:ac:0c:17:9d:9d:98:25:2a:b2: a1:01:26:5e:7c:ba:1d:26:e7:a1:c6:11:db:6e:d8: e9:a7:6a:48:fe:8c:83:4d:40:ff:43:e6:cd:02:1a: bf:e9:d9:09:47:4e:9d:84:37:f9:84:0d:dc:15:11: 86:e9:a1:1b:ad:98:62:43:cf:2a:07:28:dd:e1:da: 69:e1:73:3f:14:63:71:88:e1:b6:21:b1:8c:6c:5c: 07:fc:81:8e:21:f4:fd:c5:42:a2:b9:87:16:a3:c7: 3c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:7C:8E:89:82:B0:53:B2:6A:11:F4:82:F4:DC:55:27:4D:5F:09:69 X509v3 Authority Key Identifier: keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/63yOiYKwU7JqEfSC9NxVJ01fCWk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.126.113.0/24 212.126.115.0/24 IPv6: 2a04:2dc0::/48 2a04:2dc0:18::/48 Signature Algorithm: sha256WithRSAEncryption de:87:70:e5:b1:45:b6:b2:dc:55:4d:ad:ce:f4:44:41:9a:88: 5f:06:a1:4a:56:6a:71:92:ba:86:b2:a1:db:d6:e8:60:2e:95: 71:a1:8f:48:63:9e:09:7c:0b:55:30:2b:50:9a:60:b8:d1:c4: 5b:5b:15:cc:b2:ff:82:42:94:34:57:17:7f:89:bf:1f:83:85: c2:df:1b:e8:8f:20:91:44:47:18:fe:92:2d:f1:0c:dd:e0:f3: 22:2b:e4:64:81:8e:48:63:e7:64:4f:81:2f:a4:a7:de:d1:36: 79:bc:98:9b:8f:cb:23:79:23:70:59:06:0d:02:d3:ef:bb:3c: 5a:c9:05:7f:6f:bf:77:18:79:f3:64:a4:36:08:32:82:98:71: 8e:6a:5c:9a:5b:57:b6:ee:30:de:34:3e:7d:22:c0:90:02:36: 48:45:16:42:6c:b6:96:d0:f7:c9:ba:37:85:31:8d:d1:d3:88: 53:db:e0:8b:e2:24:85:d1:6a:c7:6d:9c:66:69:c6:3d:5a:12: f3:41:c4:d9:b0:72:55:7c:0f:2d:c0:e0:d7:e1:d2:2a:16:86: 4f:52:b7:f6:53:3f:d9:e2:6a:42:e5:b3:2f:df:84:fd:ba:3a: 59:c8:bb:5f:0d:f4:ff:af:74:a9:2e:fc:fe:2d:32:69:08:1c: 8d:1e:d6:ef -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt4NFWcd7AVh9+73AJVkjVUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhY2NiYjcyYWE5ODg0YTViZjhkMGU3NTc0MDRhMTdlNWUy MzMyMmMwHhcNMjYwMTAxMDYxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjdjOGU4OTgyYjA1M2IyNmExMWY0ODJmNGRjNTUyNzRkNWYwOTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVYN9128/uUdCY0g2oj7zz9Qt0eo GHrn2c+mmEML8ekFZB9lhcHeak6DrHson+we47TMcrjJiM+H3zD21Hw299256y/9 QCWNxU15rlyiacmJ5GqGvVw3REIHBQpfKn8wDxrIaIO3iM+35A9N6YCEqfa4Pxws pMZcP2pIIMyEcfSxQ19/dWWxrfaCb42vwuoBa8iXy1v4YWePQI2sDBednZglKrKh ASZefLodJuehxhHbbtjpp2pI/oyDTUD/Q+bNAhq/6dkJR06dhDf5hA3cFRGG6aEb rZhiQ88qByjd4dpp4XM/FGNxiOG2IbGMbFwH/IGOIfT9xUKiuYcWo8c8pQIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFOt8jomCsFOyahH0gvTcVSdNXwlpMB8GA1UdIwQY MBaAFPrMu3KqmISlv40OdXQEoX5eIzIsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1zeTdjcXFZaEtXX2pRNTFkQVNoZmw0ak1pdy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvZThjYjQ0LWE5NTQtNDY3Mi1iOWE0 LWE0OWU1YzY2MzNiZC8xLzYzeU9pWUt3VTdKcUVmU0M5TnhWSjAxZkNXay5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTMvZThjYjQ0LWE5NTQtNDY3Mi1iOWE0LWE0OWU1YzY2MzNi ZC8xLzEtc3k3Y3FxWWhLV19qUTUxZEFTaGZsNGpNaXcuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwPwYIKwYBBQUHAQcBAf8EMDAuMBIEAgABMAwDBADUfnED BADUfnMwGAQCAAIwEgMHACoELcAAAAMHACoELcAAGDANBgkqhkiG9w0BAQsFAAOC AQEA3odw5bFFtrLcVU2tzvREQZqIXwahSlZqcZK6hrKh29boYC6VcaGPSGOeCXwL VTArUJpguNHEW1sVzLL/gkKUNFcXf4m/H4OFwt8b6I8gkURHGP6SLfEM3eDzIivk ZIGOSGPnZE+BL6Sn3tE2ebyYm4/LI3kjcFkGDQLT77s8WskFf2+/dxh582SkNggy gphxjmpcmltXtu4w3jQ+fSLAkAI2SEUWQmy2ltD3ybo3hTGN0dOIU9vgi+IkhdFq x22cZmnGPVoS80HE2bByVXwPLcDg1+HSKhaGT1K39lM/2eJqQuWzL9+E/bo6Wci7 Xw30/690qS78/i0yaQgcjR7W7w== -----END CERTIFICATE-----Generated at Sun Jan 25 07:15:20 2026 by rpki-client