This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/4zRSOXGcMPUBw4LqLq1hTMnBjD4.roa File: 4zRSOXGcMPUBw4LqLq1hTMnBjD4.roa (raw, json) Hash identifier: ds1GzGRk8zHZrKe7fQIg55y7rMi/q3VJGCHKUXPIksM= Subject key identifier: E3:34:52:39:71:9C:30:F5:01:C3:82:EA:2E:AD:61:4C:C9:C1:8C:3E Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019B78A375493934B924E975730E5E0AA0DB Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/4zRSOXGcMPUBw4LqLq1hTMnBjD4.roa Signing time: Thu 01 Jan 2026 08:18:56 +0000 ROA not before: Thu 01 Jan 2026 08:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59692 IP address blocks: 2a03:f86:2::/48 maxlen: 48 2a03:f86:3::/48 maxlen: 48 2a03:f86:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:75:49:39:34:b9:24:e9:75:73:0e:5e:0a:a0:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Jan 1 08:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3345239719c30f501c382ea2ead614cc9c18c3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:87:e8:35:15:58:87:89:96:a3:2a:bc:80:de: 99:69:4b:4f:e3:c2:6e:15:02:81:db:b2:0c:49:c8: 1d:a0:27:8f:03:c9:8c:a1:78:43:27:6a:8b:39:d5: e0:e8:4a:30:ba:59:bb:e2:d0:5f:6c:da:95:85:b3: 52:9f:58:22:e0:15:7d:88:46:ab:79:59:6f:fd:c1: 46:7e:9a:b7:b7:39:82:7c:b8:d1:29:59:a4:82:2b: b1:d6:dc:28:d3:e8:96:3a:30:85:18:c7:94:29:7a: 29:c9:ff:51:f9:f7:1d:32:49:fd:bd:a4:37:fb:73: 6f:a4:01:ec:40:76:97:d5:7e:da:b9:41:d4:fa:c2: fc:4a:b1:e7:26:fa:49:92:b0:d8:9a:fe:64:06:16: 9c:12:ff:54:33:ea:a2:87:b3:2e:62:ef:5e:0c:9c: f5:8c:4c:2d:74:06:a8:32:4b:27:ce:cb:b2:d9:05: 1b:ee:9b:e7:25:4d:27:a6:f6:90:13:1c:1b:f8:7a: d5:28:de:8d:32:2c:9c:c6:47:e2:fc:69:96:de:4a: de:9a:20:c1:95:2e:db:98:3a:cd:8b:f9:59:0c:44: 89:4b:6f:11:46:8e:68:d6:4e:a4:ac:b7:81:b3:23: 8b:64:c4:1f:69:cc:5e:89:49:c4:25:8f:c7:15:64: c1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:34:52:39:71:9C:30:F5:01:C3:82:EA:2E:AD:61:4C:C9:C1:8C:3E X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/4zRSOXGcMPUBw4LqLq1hTMnBjD4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:f86:2::-2a03:f86:4:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 0f:a0:0a:0e:8c:79:dc:5d:57:ec:32:47:bb:3b:8c:8b:40:f7: ba:df:8a:36:1e:e1:36:60:e9:af:63:a2:3c:a2:ef:ab:7e:dc: aa:1c:a6:1c:5b:fe:b0:73:f0:27:68:20:ef:f1:04:7b:4a:f9: 9a:c5:df:e1:44:a5:28:8f:d5:f9:2d:5c:0e:26:94:d9:82:93: 74:b1:f9:c4:cf:ff:20:6b:4c:70:c9:7a:b7:2a:44:4a:1c:11: 9b:f8:a9:29:f2:cb:1e:b4:f3:f3:94:1c:4d:33:78:80:4c:ab: ee:a3:20:84:98:dd:58:20:d8:b4:2c:b7:8e:54:68:90:fe:f9: c1:a8:ca:0a:fa:f0:d2:53:cb:b3:bf:cc:d7:c6:e9:2f:41:40: 27:43:fc:6f:b2:b4:33:93:62:da:85:bf:5f:7d:3a:b2:33:98: 59:48:57:9f:09:93:07:b6:f1:b2:d9:c9:1f:83:54:66:d5:4c: aa:2c:09:2c:ba:5e:be:2c:5c:b9:9f:43:63:3f:d1:b4:19:15: f0:df:f1:06:2c:35:36:a7:92:68:4c:1d:06:7e:cd:34:5f:1b: 31:8a:c2:da:71:58:1e:89:e3:12:54:0c:30:52:b4:45:e2:be: bb:59:58:ab:02:b1:a2:51:cf:68:4f:a6:21:cd:66:ac:2a:37: 29:fb:63:32 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt4o3VJOTS5JOl1cw5eCqDbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjYwMTAxMDgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzM0NTIzOTcxOWMzMGY1MDFjMzgyZWEyZWFkNjE0Y2M5YzE4YzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IfoNRVYh4mWoyq8gN6ZaUtP48Ju FQKB27IMScgdoCePA8mMoXhDJ2qLOdXg6Eowulm74tBfbNqVhbNSn1gi4BV9iEar eVlv/cFGfpq3tzmCfLjRKVmkgiux1two0+iWOjCFGMeUKXopyf9R+fcdMkn9vaQ3 +3NvpAHsQHaX1X7auUHU+sL8SrHnJvpJkrDYmv5kBhacEv9UM+qih7MuYu9eDJz1 jEwtdAaoMksnzsuy2QUb7pvnJU0npvaQExwb+HrVKN6NMiycxkfi/GmW3kremiDB lS7bmDrNi/lZDESJS28RRo5o1k6krLeBsyOLZMQfacxeiUnEJY/HFWTBIwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFOM0UjlxnDD1AcOC6i6tYUzJwYw+MB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvNHpSU09YR2NNUFVCdzRMcUxxMWhUTW5CakQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwEqAw+G AAIDBwAqAw+GAAQwDQYJKoZIhvcNAQELBQADggEBAA+gCg6MedxdV+wyR7s7jItA 97rfijYe4TZg6a9jojyi76t+3Kocphxb/rBz8CdoIO/xBHtK+ZrF3+FEpSiP1fkt XA4mlNmCk3Sx+cTP/yBrTHDJercqREocEZv4qSnyyx608/OUHE0zeIBMq+6jIISY 3Vgg2LQst45UaJD++cGoygr68NJTy7O/zNfG6S9BQCdD/G+ytDOTYtqFv199OrIz mFlIV58Jkwe28bLZyR+DVGbVTKosCSy6Xr4sXLmfQ2M/0bQZFfDf8QYsNTankmhM HQZ+zTRfGzGKwtpxWB6J4xJUDDBStEXivrtZWKsCsaJRz2hPpiHNZqwqNyn7YzI= -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:45 2026 by rpki-client