This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/4yhn0zab6G9Xm_NjzDhDVFNViNU.roa File: 4yhn0zab6G9Xm_NjzDhDVFNViNU.roa (raw, json) Hash identifier: A7LqIa0Mp3Sp/NDA4NIu51kIjL901Apj0xVFgoij29k= Subject key identifier: E3:28:67:D3:36:9B:E8:6F:57:9B:F3:63:CC:38:43:54:53:55:88:D5 Certificate issuer: /CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571 Certificate serial: 019B7CEE2ED83AC8EB28321E59A74CB3DC66 Authority key identifier: 18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/4yhn0zab6G9Xm_NjzDhDVFNViNU.roa Signing time: Fri 02 Jan 2026 04:19:02 +0000 ROA not before: Fri 02 Jan 2026 04:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 394996 IP address blocks: 2a03:b0c0:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:2e:d8:3a:c8:eb:28:32:1e:59:a7:4c:b3:dc:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571 Validity Not Before: Jan 2 04:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e32867d3369be86f579bf363cc384354535588d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cd:13:3b:6c:97:e5:40:20:bc:24:9b:eb:29: cc:cf:48:af:f2:27:fd:f1:26:cb:d6:02:17:a3:0f: 91:f3:82:82:9d:2d:58:5f:2b:c5:7c:28:58:3f:d4: fb:66:21:57:11:15:2a:34:e8:f1:61:33:76:3c:63: b0:68:48:ff:ac:ea:9b:9b:71:f1:29:1f:f3:af:8d: c8:7a:be:80:8c:70:60:0e:39:ce:0b:c8:21:b7:c6: 27:48:38:9f:f0:72:84:1e:8a:4e:b3:97:3f:f1:b2: dc:cb:49:91:ab:3e:85:af:3f:b4:c3:b7:7a:27:06: c9:5a:d1:be:92:d9:fa:a8:0f:66:70:f5:33:05:86: c5:b0:8a:02:a9:a9:5a:d3:37:ba:77:43:a5:19:53: 72:ff:15:62:8d:21:d7:16:8a:91:48:0b:fd:66:c7: 6d:d5:33:31:2f:1d:3e:6b:49:42:ce:17:df:b6:00: 34:7c:fe:90:54:b5:72:ed:42:a3:27:70:27:3c:98: ce:fc:dc:4e:fc:67:40:c0:fa:98:27:2f:bc:26:42: ac:c1:2b:c2:e9:72:90:07:b6:98:60:45:9d:27:38: 16:f3:4d:c9:c9:c0:c4:72:65:5b:7c:36:ec:b0:ea: 9b:46:78:c2:e0:13:25:b6:e0:50:e7:20:64:59:4d: 07:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:28:67:D3:36:9B:E8:6F:57:9B:F3:63:CC:38:43:54:53:55:88:D5 X509v3 Authority Key Identifier: keyid:18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/4yhn0zab6G9Xm_NjzDhDVFNViNU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:b0c0:4::/48 Signature Algorithm: sha256WithRSAEncryption 38:ec:94:f6:26:fb:64:e5:08:51:a4:94:4a:88:09:9e:24:03: 50:e1:79:fb:ef:c2:d1:f5:05:b6:e7:0b:ca:71:1c:43:07:ce: eb:f9:7e:26:07:3d:37:57:65:d7:c3:22:32:3d:9d:90:cc:8f: 3c:fd:27:cd:63:a6:57:c5:71:8c:d5:c6:fb:a2:9c:d9:f3:2f: 4b:6c:38:1a:cc:05:3e:21:9c:24:59:65:77:9c:14:57:c7:7d: f4:b0:01:0b:b2:fc:ff:d6:84:9e:90:cc:74:b3:14:da:80:2b: 0a:21:38:11:64:c0:33:0e:f8:38:21:c7:a8:de:10:25:8b:4b: db:d8:ed:83:1b:39:30:51:f4:9f:40:9a:da:f6:99:17:25:4f: a6:ec:a7:24:b4:07:26:e8:da:fb:2e:c0:72:5a:f1:1d:77:a1: e8:9b:4c:e5:e4:ba:9a:91:ad:19:b1:ce:bb:b0:9f:85:9f:83: 24:3c:f3:af:64:84:33:9a:1f:6f:31:62:47:9b:d7:d0:08:78: d6:15:bd:ab:c2:1c:11:23:d3:7d:e2:b9:d8:70:86:47:b3:fa: b4:3f:dc:60:d2:38:46:fa:e1:b1:8b:86:93:e5:94:27:d7:5b: c5:95:11:d0:6e:be:8d:3d:70:5f:96:59:cb:07:f3:84:a3:ee: 8d:a0:34:f6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87i7YOsjrKDIeWadMs9xmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MDhiZjdmZTQ4YjA1N2Y5ZjJmM2Q1ZDFhNjMxMGZkOWUx NGM1NzEwHhcNMjYwMTAyMDQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzI4NjdkMzM2OWJlODZmNTc5YmYzNjNjYzM4NDM1NDUzNTU4OGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1c0TO2yX5UAgvCSb6ynMz0iv8if9 8SbL1gIXow+R84KCnS1YXyvFfChYP9T7ZiFXERUqNOjxYTN2PGOwaEj/rOqbm3Hx KR/zr43Ier6AjHBgDjnOC8ght8YnSDif8HKEHopOs5c/8bLcy0mRqz6Frz+0w7d6 JwbJWtG+ktn6qA9mcPUzBYbFsIoCqala0ze6d0OlGVNy/xVijSHXFoqRSAv9Zsdt 1TMxLx0+a0lCzhfftgA0fP6QVLVy7UKjJ3AnPJjO/NxO/GdAwPqYJy+8JkKswSvC 6XKQB7aYYEWdJzgW803JycDEcmVbfDbssOqbRnjC4BMltuBQ5yBkWU0HnQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOMoZ9M2m+hvV5vzY8w4Q1RTVYjVMB8GA1UdIwQY MBaAFBgIv3/kiwV/ny89XRpjEP2eFMVxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0FpX2YtU0xCWC1mTHoxZEdtTVFfWjRVeFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MTBjM2ItZjg3MC00NzZiLWExNjMt OWQzOTJlZWUwZjY2LzEvNHlobjB6YWI2RzlYbV9OanpEaERWRk5WaU5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MTBjM2ItZjg3MC00NzZiLWExNjMtOWQzOTJlZWUwZjY2 LzEvR0FpX2YtU0xCWC1mTHoxZEdtTVFfWjRVeFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgOwwAAE MA0GCSqGSIb3DQEBCwUAA4IBAQA47JT2Jvtk5QhRpJRKiAmeJANQ4Xn778LR9QW2 5wvKcRxDB87r+X4mBz03V2XXwyIyPZ2QzI88/SfNY6ZXxXGM1cb7opzZ8y9LbDga zAU+IZwkWWV3nBRXx330sAELsvz/1oSekMx0sxTagCsKITgRZMAzDvg4Iceo3hAl i0vb2O2DGzkwUfSfQJra9pkXJU+m7KcktAcm6Nr7LsByWvEdd6Hom0zl5Lqaka0Z sc67sJ+Fn4MkPPOvZIQzmh9vMWJHm9fQCHjWFb2rwhwRI9N94rnYcIZHs/q0P9xg 0jhG+uGxi4aT5ZQn11vFlRHQbr6NPXBfllnLB/OEo+6NoDT2 -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:50 2026 by rpki-client