This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/93Dd5LlqoQp6iKYdx6lcOcDR9oc.roa File: 93Dd5LlqoQp6iKYdx6lcOcDR9oc.roa (raw, json) Hash identifier: AJlYL2EFP/0kQaoDXjXnYGJqco+B4D+CiQvUKCb/WIw= Subject key identifier: F7:70:DD:E4:B9:6A:A1:0A:7A:88:A6:1D:C7:A9:5C:39:C0:D1:F6:87 Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Certificate serial: 019B7EA55348B4B089F31AC3344402AC5132 Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/93Dd5LlqoQp6iKYdx6lcOcDR9oc.roa Signing time: Fri 02 Jan 2026 12:18:42 +0000 ROA not before: Fri 02 Jan 2026 12:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47484 IP address blocks: 2a10:4646:6::/48 maxlen: 48 2a10:4646:2f0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:53:48:b4:b0:89:f3:1a:c3:34:44:02:ac:51:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Validity Not Before: Jan 2 12:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f770dde4b96aa10a7a88a61dc7a95c39c0d1f687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:64:20:d6:7c:15:2b:97:9c:0b:94:b0:5a:7c: 84:16:81:ff:45:7b:01:30:14:fe:88:77:ee:c1:7a: aa:b0:2d:21:3d:c2:0e:ee:d0:cd:41:fa:19:09:0f: eb:8d:aa:e2:74:36:35:ca:f5:aa:d6:fa:dd:83:bc: 5c:71:82:6e:82:b7:61:1c:dc:52:92:04:82:f5:93: 9a:af:5f:cb:29:f4:07:bd:67:5f:59:94:8e:39:bc: 0b:39:13:6c:36:2d:91:f8:8c:27:b3:cd:95:90:b9: c2:53:ed:2c:14:10:df:8a:92:ec:29:50:26:e4:39: c9:cd:fb:ca:8f:ac:35:35:94:c8:54:01:e5:22:b9: 8f:9a:97:42:64:a3:c4:ae:66:50:75:c8:4a:00:68: c3:0f:09:ba:5e:a4:57:7b:b4:51:fb:d6:01:6e:e6: db:df:9e:b6:64:75:02:51:f6:ff:52:47:7b:63:e4: 97:ad:84:a9:5f:cf:e2:c3:ae:76:84:77:c1:d5:1c: 7d:94:88:7e:ac:ae:6a:83:af:ef:a0:ce:39:28:4d: 9a:3f:33:a8:39:bc:f2:6f:6c:ae:6f:27:c3:6a:29: a1:c2:24:42:61:2c:30:dd:09:47:18:73:2d:9c:2d: 6c:bc:0c:60:aa:8f:01:de:25:df:32:df:78:01:99: 30:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:70:DD:E4:B9:6A:A1:0A:7A:88:A6:1D:C7:A9:5C:39:C0:D1:F6:87 X509v3 Authority Key Identifier: keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/93Dd5LlqoQp6iKYdx6lcOcDR9oc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:4646:6::/48 2a10:4646:2f0::/44 Signature Algorithm: sha256WithRSAEncryption c7:f2:e6:21:d3:aa:b2:88:2a:39:da:fd:d0:f1:5a:b0:23:0b: e4:86:af:09:75:a2:19:03:96:e2:78:30:e8:1c:77:df:d6:62: 4c:68:f3:04:d1:aa:ca:67:9a:d9:61:82:98:5d:c5:11:ff:50: 9e:f1:90:09:08:5c:73:43:41:33:29:43:1b:4e:34:36:94:5a: 7b:22:5e:e9:c3:90:e8:9c:81:c9:76:31:7a:f8:d0:50:ec:fd: 58:94:55:b6:a1:91:14:45:ec:61:19:f1:2c:6e:2e:50:94:7d: 92:02:52:50:91:fb:67:bc:2e:8c:9f:74:d8:1b:6a:6c:12:4b: d4:52:f9:48:19:61:e7:79:92:12:bf:e9:60:19:be:ea:c8:05: 72:13:b7:06:08:67:1f:21:36:d3:28:71:3b:78:fc:67:79:44: 7f:01:62:03:f5:c6:d5:87:1f:7d:97:89:bb:d7:7e:a5:39:c1: d3:29:b8:68:aa:7a:db:e1:56:ba:71:1c:9c:4a:27:bc:7a:7e: 1f:3e:fe:f0:34:85:e7:9f:55:9d:c3:d1:f4:a5:80:72:b3:b4: 75:2c:f0:fc:88:95:97:41:77:e0:bd:3d:d6:da:f1:90:d0:a0: 52:8f:0a:1c:96:1d:2e:24:27:23:26:29:0a:3d:e9:ce:8c:ce: d4:43:63:b0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+pVNItLCJ8xrDNEQCrFEyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2 N2RmMDIwHhcNMjYwMTAyMTIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzcwZGRlNGI5NmFhMTBhN2E4OGE2MWRjN2E5NWMzOWMwZDFmNjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGQg1nwVK5ecC5SwWnyEFoH/RXsB MBT+iHfuwXqqsC0hPcIO7tDNQfoZCQ/rjaridDY1yvWq1vrdg7xccYJugrdhHNxS kgSC9ZOar1/LKfQHvWdfWZSOObwLORNsNi2R+Iwns82VkLnCU+0sFBDfipLsKVAm 5DnJzfvKj6w1NZTIVAHlIrmPmpdCZKPErmZQdchKAGjDDwm6XqRXe7RR+9YBbubb 3562ZHUCUfb/Ukd7Y+SXrYSpX8/iw652hHfB1Rx9lIh+rK5qg6/voM45KE2aPzOo Obzyb2yubyfDaimhwiRCYSww3QlHGHMtnC1svAxgqo8B3iXfMt94AZkwWQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPdw3eS5aqEKeoimHcepXDnA0faHMB8GA1UdIwQY MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt YWU5MjgzZTc5NjRlLzEvOTNEZDVMbHFvUXA2aUtZZHg2bGNPY0RSOW9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKhBGRgAG AwcEKhBGRgLwMA0GCSqGSIb3DQEBCwUAA4IBAQDH8uYh06qyiCo52v3Q8VqwIwvk hq8JdaIZA5bieDDoHHff1mJMaPME0arKZ5rZYYKYXcUR/1Ce8ZAJCFxzQ0EzKUMb TjQ2lFp7Il7pw5DonIHJdjF6+NBQ7P1YlFW2oZEURexhGfEsbi5QlH2SAlJQkftn vC6Mn3TYG2psEkvUUvlIGWHneZISv+lgGb7qyAVyE7cGCGcfITbTKHE7ePxneUR/ AWID9cbVhx99l4m7136lOcHTKbhoqnrb4Va6cRycSie8en4fPv7wNIXnn1Wdw9H0 pYBys7R1LPD8iJWXQXfgvT3W2vGQ0KBSjwoclh0uJCcjJikKPenOjM7UQ2Ow -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:31 2026 by rpki-client