This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/R4HUGaPeCwpmGyYfmB_w_FLU9aU.roa File: R4HUGaPeCwpmGyYfmB_w_FLU9aU.roa (raw, json) Hash identifier: 9kclGgorPQiy/7RiiESZuIbnKKNKbn26RfPmhg3Nf9M= Subject key identifier: 47:81:D4:19:A3:DE:0B:0A:66:1B:26:1F:98:1F:F0:FC:52:D4:F5:A5 Certificate issuer: /CN=ffb2627672877d0f6de9bc4e7e186eedd1356110 Certificate serial: 019B790FFFD3C733A60A29E8DD1417555372 Authority key identifier: FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/R4HUGaPeCwpmGyYfmB_w_FLU9aU.roa Signing time: Thu 01 Jan 2026 10:17:30 +0000 ROA not before: Thu 01 Jan 2026 10:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47464 IP address blocks: 2a07:ca00::/30 maxlen: 30 2a07:ca04::/32 maxlen: 32 2a07:ca05::/32 maxlen: 32 2a07:ca06::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:ff:d3:c7:33:a6:0a:29:e8:dd:14:17:55:53:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffb2627672877d0f6de9bc4e7e186eedd1356110 Validity Not Before: Jan 1 10:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4781d419a3de0b0a661b261f981ff0fc52d4f5a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ae:91:3b:51:47:7d:b4:91:68:95:b2:6c:ac: 5b:1e:e7:7a:ad:60:42:19:71:ad:f3:99:68:b8:38: ba:c1:d3:18:d7:21:18:0d:e7:27:32:3a:4b:d8:e1: d6:d2:e9:78:d4:c9:d7:e4:07:80:7e:61:8b:a0:33: 8d:9e:c5:41:20:13:f9:33:9a:55:dc:7f:24:ed:f1: b6:14:37:e0:39:56:a4:d0:27:97:64:c9:77:3a:e6: 48:90:c2:ca:9c:fe:f6:e3:4e:d0:13:3c:18:c1:fb: d5:92:11:dd:91:c9:12:a4:57:32:6c:67:03:bd:10: 5c:04:b7:77:ff:aa:46:cf:55:2e:5d:71:ef:8c:05: 06:e9:9d:3d:75:94:e2:52:27:16:37:b7:18:c0:b2: f3:d3:09:b1:aa:6b:d6:2f:cf:a4:b2:4a:2c:4a:2a: 93:2e:09:cb:36:bd:83:5a:88:a0:b8:74:89:4c:12: e0:6f:a6:2d:f0:c8:93:90:cd:7d:d7:46:a3:71:9b: c6:2f:0e:84:f1:4e:9a:ba:b8:cf:2f:94:a1:54:45: cc:95:a2:e6:16:24:9b:f0:5d:79:2d:0e:9e:5c:be: a9:d5:62:be:7d:1f:75:6c:81:3c:5a:1f:08:dc:fc: b9:94:23:b6:ab:20:ac:1b:98:10:91:44:20:e0:1c: 9a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:81:D4:19:A3:DE:0B:0A:66:1B:26:1F:98:1F:F0:FC:52:D4:F5:A5 X509v3 Authority Key Identifier: keyid:FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/R4HUGaPeCwpmGyYfmB_w_FLU9aU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:ca00::-2a07:ca06:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 37:06:c1:7e:87:56:db:f2:72:a0:95:40:38:d5:da:b7:63:7c: 99:70:bf:5e:af:f7:99:8e:0d:a8:d7:65:25:a9:a4:05:ac:e2: 2e:dd:17:79:30:54:7b:b6:0f:4a:61:4f:fe:19:83:ec:24:92: 56:40:e5:e4:3f:09:05:1c:f7:76:b1:bc:ba:cd:86:70:69:d4: 67:8c:f4:77:d0:ee:26:6b:8b:e2:49:51:ec:c1:0b:78:09:13: e4:0b:b4:a3:03:15:7c:c8:14:16:e0:c2:03:b3:97:a9:76:5f: ce:b8:f4:8b:62:7a:9c:6f:a5:59:09:6e:5d:32:4d:20:04:f4: c5:22:a6:2a:87:67:4b:34:c8:61:32:64:b8:d9:97:8b:c9:c5: c7:94:1c:01:b8:5a:80:15:e6:8b:94:5e:21:2b:f4:6e:1a:03: f4:af:17:58:4e:99:37:30:bc:d3:af:d9:6a:74:fe:8b:2b:f3: 60:03:cc:a3:f7:10:58:94:b4:04:76:42:e5:49:0d:b4:79:6e: 9a:2d:69:7c:ba:92:a8:fe:92:0d:93:47:4c:18:a7:12:cc:45: 8a:13:b9:2d:fe:4e:3b:a6:8b:e7:b8:9f:1a:a5:af:d5:33:a2: 91:59:52:c9:f1:1b:4b:43:7f:e6:8f:22:b3:82:c6:28:64:13: 5f:6a:a1:37 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgISAZt5D//TxzOmCino3RQXVVNyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYjI2Mjc2NzI4NzdkMGY2ZGU5YmM0ZTdlMTg2ZWVkZDEz NTYxMTAwHhcNMjYwMTAxMTAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzgxZDQxOWEzZGUwYjBhNjYxYjI2MWY5ODFmZjBmYzUyZDRmNWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn66RO1FHfbSRaJWybKxbHud6rWBC GXGt85louDi6wdMY1yEYDecnMjpL2OHW0ul41MnX5AeAfmGLoDONnsVBIBP5M5pV 3H8k7fG2FDfgOVak0CeXZMl3OuZIkMLKnP72407QEzwYwfvVkhHdkckSpFcybGcD vRBcBLd3/6pGz1UuXXHvjAUG6Z09dZTiUicWN7cYwLLz0wmxqmvWL8+kskosSiqT LgnLNr2DWoiguHSJTBLgb6Yt8MiTkM1910ajcZvGLw6E8U6aurjPL5ShVEXMlaLm FiSb8F15LQ6eXL6p1WK+fR91bIE8Wh8I3Py5lCO2qyCsG5gQkUQg4ByaTQIDAQAB o4ICEjCCAg4wHQYDVR0OBBYEFEeB1Bmj3gsKZhsmH5gf8PxS1PWlMB8GA1UdIwQY MBaAFP+yYnZyh30Pbem8Tn4Ybu3RNWEQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzdKaWRuS0hmUTl0NmJ4T2ZoaHU3ZEUxWVJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8yMmM1MTAtMzQ4MC00Y2UxLThkZDgt MTk3NDY5NDc1NThkLzEvUjRIVUdhUGVDd3BtR3lZZm1CX3dfRkxVOWFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8yMmM1MTAtMzQ4MC00Y2UxLThkZDgtMTk3NDY5NDc1NThk LzEvXzdKaWRuS0hmUTl0NmJ4T2ZoaHU3ZEUxWVJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCgGCCsGAQUFBwEHAQH/BBkwFzAVBAIAAjAPMA0DBAEqB8oD BQAqB8oGMA0GCSqGSIb3DQEBCwUAA4IBAQA3BsF+h1bb8nKglUA41dq3Y3yZcL9e r/eZjg2o12UlqaQFrOIu3Rd5MFR7tg9KYU/+GYPsJJJWQOXkPwkFHPd2sby6zYZw adRnjPR30O4ma4viSVHswQt4CRPkC7SjAxV8yBQW4MIDs5epdl/OuPSLYnqcb6VZ CW5dMk0gBPTFIqYqh2dLNMhhMmS42ZeLycXHlBwBuFqAFeaLlF4hK/RuGgP0rxdY Tpk3MLzTr9lqdP6LK/NgA8yj9xBYlLQEdkLlSQ20eW6aLWl8upKo/pINk0dMGKcS zEWKE7kt/k47povnuJ8apa/VM6KRWVLJ8RtLQ3/mjyKzgsYoZBNfaqE3 -----END CERTIFICATE-----Generated at Mon Jan 26 06:03:19 2026 by rpki-client