This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/1Cwbh-EBkqRBbTaTb-Y36KV1_f4.roa File: 1Cwbh-EBkqRBbTaTb-Y36KV1_f4.roa (raw, json) Hash identifier: KaOvvLBbfyfPARr7O7r9zR6vas9QNYiMvTjqvCPXEUI= Subject key identifier: D4:2C:1B:87:E1:01:92:A4:41:6D:36:93:6F:E6:37:E8:A5:75:FD:FE Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Certificate serial: 019B7F8419796C72096A905ADC405D0F4425 Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/1Cwbh-EBkqRBbTaTb-Y36KV1_f4.roa Signing time: Fri 02 Jan 2026 16:22:02 +0000 ROA not before: Fri 02 Jan 2026 16:22:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397519 IP address blocks: 2a01:488:bb0c::/48 maxlen: 48 2a01:488:bb1e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:19:79:6c:72:09:6a:90:5a:dc:40:5d:0f:44:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Validity Not Before: Jan 2 16:22:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d42c1b87e10192a4416d36936fe637e8a575fdfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:09:e5:a5:22:a5:11:47:85:2a:93:ad:2d:5f: 8f:95:b1:14:62:cb:cf:05:52:02:99:0e:eb:32:07: d0:49:62:52:18:0f:c3:8a:26:76:a3:b6:b6:87:66: d0:23:58:bb:ad:0f:c9:6e:fd:1d:e7:e3:5f:a0:69: 5f:2a:42:bf:69:a4:cb:d1:b7:2b:9c:26:da:57:a7: ab:c8:9c:5b:33:c5:fe:ae:93:ff:6b:02:ea:d1:0b: 9e:a9:27:de:b0:22:76:81:ee:2a:02:2a:b9:cd:38: ca:fd:27:ca:ed:a1:c0:c4:dd:38:33:11:34:4d:45: c0:af:dc:3e:30:10:c9:c5:43:f8:24:26:b3:38:93: 4b:a9:f2:2c:32:b6:62:d0:52:10:2b:c2:00:97:f9: 6e:1d:fe:81:74:c4:01:a4:87:83:50:8e:d9:9c:57: 43:cb:2d:4c:11:1c:53:5d:c9:f7:f3:27:2d:b6:53: 09:59:e7:05:09:74:0c:55:46:94:10:2a:db:f7:ef: ca:23:d7:a0:42:67:9f:42:b5:02:ac:e0:fe:f3:ca: a1:66:5b:a4:00:54:cf:44:6a:5e:60:6a:e1:b3:f0: 2b:a2:16:60:a2:e8:ec:2b:cd:75:61:cc:8c:f4:e0: 58:77:ef:79:cc:b4:6c:6f:ac:6b:78:f9:7e:94:85: 7a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:2C:1B:87:E1:01:92:A4:41:6D:36:93:6F:E6:37:E8:A5:75:FD:FE X509v3 Authority Key Identifier: keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/1Cwbh-EBkqRBbTaTb-Y36KV1_f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:488:bb0c::/48 2a01:488:bb1e::/48 Signature Algorithm: sha256WithRSAEncryption 04:f3:27:37:45:ad:26:61:08:a7:44:25:b4:de:ee:b7:fe:7d: 21:38:1c:7a:3b:f9:d9:de:20:0f:d8:75:21:23:d6:c1:64:50: 03:b9:f4:50:af:b5:1e:8d:1a:b2:9a:c3:8e:6e:01:62:fa:af: 9f:d6:fc:ca:f6:dc:5f:5d:93:fa:82:18:6e:21:8e:a7:79:4e: a4:af:e9:9d:68:d4:b1:ed:6e:61:68:f1:6a:86:4b:8a:a0:0d: 06:ac:87:c6:b5:fb:7e:17:e2:8b:03:76:27:20:23:0f:dd:33: fe:df:8c:9f:a2:01:80:65:5a:26:c3:ba:2f:b8:7e:41:f9:50: 19:66:03:29:6e:c7:2d:38:6a:3e:12:e1:66:89:ca:55:e7:24: 09:7b:4f:f2:82:67:c5:e8:78:75:ff:8e:b2:71:e5:c1:80:02: fe:c2:8d:2a:0f:93:ef:3a:11:a5:82:fb:d0:3e:de:a2:0c:d4: 3d:bc:53:aa:1c:5f:2c:6d:d8:a2:39:e1:bd:10:fa:4d:30:61: 82:49:58:ac:14:db:5a:ef:a1:5c:43:a1:5c:98:22:e0:f9:ba: 20:78:50:87:45:1a:05:fe:e2:15:05:f3:68:c8:23:e1:59:ec: 9f:39:cb:9b:53:93:9a:e1:e1:4a:11:93:3e:43:e3:42:98:d4: 8b:3b:7c:b3 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hBl5bHIJapBa3EBdD0QlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0 ZTk4MWIwHhcNMjYwMTAyMTYyMjAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDJjMWI4N2UxMDE5MmE0NDE2ZDM2OTM2ZmU2MzdlOGE1NzVmZGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgnlpSKlEUeFKpOtLV+PlbEUYsvP BVICmQ7rMgfQSWJSGA/DiiZ2o7a2h2bQI1i7rQ/Jbv0d5+NfoGlfKkK/aaTL0bcr nCbaV6eryJxbM8X+rpP/awLq0QueqSfesCJ2ge4qAiq5zTjK/SfK7aHAxN04MxE0 TUXAr9w+MBDJxUP4JCazOJNLqfIsMrZi0FIQK8IAl/luHf6BdMQBpIeDUI7ZnFdD yy1MERxTXcn38ycttlMJWecFCXQMVUaUECrb9+/KI9egQmefQrUCrOD+88qhZluk AFTPRGpeYGrhs/ArohZgoujsK811YcyM9OBYd+95zLRsb6xrePl+lIV6CwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNQsG4fhAZKkQW02k2/mN+ildf3+MB8GA1UdIwQY MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt MTYxZjM0MjM4N2QxLzEvMUN3YmgtRUJrcVJCYlRhVGItWTM2S1YxX2Y0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgEEiLsM AwcAKgEEiLseMA0GCSqGSIb3DQEBCwUAA4IBAQAE8yc3Ra0mYQinRCW03u63/n0h OBx6O/nZ3iAP2HUhI9bBZFADufRQr7UejRqymsOObgFi+q+f1vzK9txfXZP6ghhu IY6neU6kr+mdaNSx7W5haPFqhkuKoA0GrIfGtft+F+KLA3YnICMP3TP+34yfogGA ZVomw7ovuH5B+VAZZgMpbsctOGo+EuFmicpV5yQJe0/ygmfF6Hh1/46yceXBgAL+ wo0qD5PvOhGlgvvQPt6iDNQ9vFOqHF8sbdiiOeG9EPpNMGGCSVisFNta76FcQ6Fc mCLg+bogeFCHRRoF/uIVBfNoyCPhWeyfOcubU5Oa4eFKEZM+Q+NCmNSLO3yz -----END CERTIFICATE-----Generated at Sun Jan 25 12:46:40 2026 by rpki-client