This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/4K1q5pyrLg6G5mdzDfF2ZixEXTc.roa File: 4K1q5pyrLg6G5mdzDfF2ZixEXTc.roa (raw, json) Hash identifier: x4iFDC399nLea2yiCcH1dctwkeZ1eJbyY4Ch1/iDkT4= Subject key identifier: E0:AD:6A:E6:9C:AB:2E:0E:86:E6:67:73:0D:F1:76:66:2C:44:5D:37 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 019B7DC972A2A2F0A78CF08394003F0C626C Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/4K1q5pyrLg6G5mdzDfF2ZixEXTc.roa Signing time: Fri 02 Jan 2026 08:18:32 +0000 ROA not before: Fri 02 Jan 2026 08:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50321 IP address blocks: 2a05:541:130::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:72:a2:a2:f0:a7:8c:f0:83:94:00:3f:0c:62:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Jan 2 08:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0ad6ae69cab2e0e86e667730df176662c445d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:16:c1:45:d3:2e:a9:1a:fc:00:85:fc:0c:09: 90:e6:ea:b5:d9:f2:f5:30:8b:fc:00:7a:2c:00:41: 16:4b:e6:3d:7d:18:f9:4b:f9:a6:d6:72:13:35:b0: dc:59:ba:b4:d4:24:db:c6:b9:73:9b:26:b4:b1:6c: 27:01:fd:a1:2e:c4:9c:85:50:c3:14:ca:4d:b1:52: 6c:73:2e:72:f8:ae:0d:71:b3:18:32:24:54:8e:d3: a7:94:75:f4:15:1f:b5:3d:36:05:5d:2f:c3:6d:59: f7:39:19:a4:1e:94:b0:c0:37:3d:75:bc:e1:b5:33: 8a:dd:39:81:ec:80:ba:f8:bd:89:41:46:86:84:32: b5:98:1f:32:7b:05:61:1f:68:fe:a5:cc:90:ff:8f: 70:e4:95:bd:68:e9:f3:a2:85:48:6c:cd:85:c8:3a: 93:0b:f8:ee:4a:55:ba:5b:fd:cd:ca:bb:ef:61:8c: 08:cf:42:17:46:d2:b6:72:1d:44:57:6c:f2:7b:88: ee:24:f3:db:93:ad:5d:da:3e:e7:0a:10:92:9c:89: 21:bc:3b:bf:3c:62:47:7a:49:88:7c:17:70:93:66: 82:fc:a4:20:c6:a1:e7:53:bf:d6:bf:26:72:64:a0: df:a8:52:77:8c:58:79:7b:50:eb:35:cb:13:9b:b5: ad:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:AD:6A:E6:9C:AB:2E:0E:86:E6:67:73:0D:F1:76:66:2C:44:5D:37 X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/4K1q5pyrLg6G5mdzDfF2ZixEXTc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:541:130::/48 Signature Algorithm: sha256WithRSAEncryption 07:fd:1e:cc:5d:36:ac:18:87:53:87:f1:2e:61:24:96:42:7a: ab:d8:0a:c7:9a:c4:b6:cc:65:0b:61:40:1b:c9:11:15:df:b2: 3a:c9:3e:a4:85:17:86:57:12:02:06:ad:49:e8:b4:8d:49:fa: 35:4b:38:35:1b:85:36:d7:57:a9:2e:6f:7c:e2:26:88:a3:71: d5:e3:87:14:85:eb:e4:5d:e8:48:50:b5:b4:81:0f:b4:d6:b8: 62:a5:e3:c6:97:66:07:a8:f8:90:79:2a:0b:84:6e:1e:89:0b: 60:6e:a6:13:32:2b:c0:15:c6:61:37:37:93:66:32:b6:26:8e: e2:3e:7b:78:c2:80:70:d1:21:37:26:a6:c7:2d:18:8b:05:f8: 4a:2c:c7:22:c2:f4:14:1d:dc:a3:7a:b4:aa:91:0e:35:61:0e: ea:68:a3:3d:e2:94:55:f9:22:96:59:3d:3c:39:a2:93:f3:0d: 42:42:e1:bb:88:2d:05:fb:74:f5:df:f2:45:68:a1:26:44:a8: 94:5a:c0:24:0c:f9:60:b8:f1:ca:11:f7:39:7a:5d:28:99:18: 96:d4:45:6a:fb:2b:5f:6d:c6:17:5f:53:71:53:25:9b:cc:54: 73:27:91:b7:d6:7a:a5:f3:82:29:16:c4:d5:3f:48:23:6b:78: b2:0a:94:09 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9yXKiovCnjPCDlAA/DGJsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjYwMTAyMDgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGFkNmFlNjljYWIyZTBlODZlNjY3NzMwZGYxNzY2NjJjNDQ1ZDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRbBRdMuqRr8AIX8DAmQ5uq12fL1 MIv8AHosAEEWS+Y9fRj5S/mm1nITNbDcWbq01CTbxrlzmya0sWwnAf2hLsSchVDD FMpNsVJscy5y+K4NcbMYMiRUjtOnlHX0FR+1PTYFXS/DbVn3ORmkHpSwwDc9dbzh tTOK3TmB7IC6+L2JQUaGhDK1mB8yewVhH2j+pcyQ/49w5JW9aOnzooVIbM2FyDqT C/juSlW6W/3NyrvvYYwIz0IXRtK2ch1EV2zye4juJPPbk61d2j7nChCSnIkhvDu/ PGJHekmIfBdwk2aC/KQgxqHnU7/WvyZyZKDfqFJ3jFh5e1DrNcsTm7WtIQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOCtauacqy4OhuZncw3xdmYsRF03MB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvNEsxcTVweXJMZzZHNW1kekRmRjJaaXhFWFRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgUFQQEw MA0GCSqGSIb3DQEBCwUAA4IBAQAH/R7MXTasGIdTh/EuYSSWQnqr2ArHmsS2zGUL YUAbyREV37I6yT6khReGVxICBq1J6LSNSfo1Szg1G4U211epLm984iaIo3HV44cU hevkXehIULW0gQ+01rhipePGl2YHqPiQeSoLhG4eiQtgbqYTMivAFcZhNzeTZjK2 Jo7iPnt4woBw0SE3JqbHLRiLBfhKLMciwvQUHdyjerSqkQ41YQ7qaKM94pRV+SKW WT08OaKT8w1CQuG7iC0F+3T13/JFaKEmRKiUWsAkDPlguPHKEfc5el0omRiW1EVq +ytfbcYXX1NxUyWbzFRzJ5G31nql84IpFsTVP0gja3iyCpQJ -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:11 2026 by rpki-client