This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/4vfCRtoiH1cndLSB-TTpHJwhG_I.roa File: 4vfCRtoiH1cndLSB-TTpHJwhG_I.roa (raw, json) Hash identifier: 09h5AAcqogX7HNRV00Ls3XC8qozaIbuTMOkY1F7yq6o= Subject key identifier: E2:F7:C2:46:DA:22:1F:57:27:74:B4:81:F9:34:E9:1C:9C:21:1B:F2 Certificate issuer: /CN=93608a0cda0133f876ab9ad83fa37bcef62df2df Certificate serial: 019B7EA7363D7A09C595A581D545210958C7 Authority key identifier: 93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/4vfCRtoiH1cndLSB-TTpHJwhG_I.roa Signing time: Fri 02 Jan 2026 12:20:46 +0000 ROA not before: Fri 02 Jan 2026 12:20:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210365 IP address blocks: 2001:67c:22cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:36:3d:7a:09:c5:95:a5:81:d5:45:21:09:58:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93608a0cda0133f876ab9ad83fa37bcef62df2df Validity Not Before: Jan 2 12:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2f7c246da221f572774b481f934e91c9c211bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a2:e6:45:7f:43:f1:fc:7a:e7:18:ae:3c:37: 00:c9:de:90:a4:9e:ee:4f:e4:10:74:96:9a:d3:f0: 97:32:0b:d8:34:8c:c6:7e:8b:68:fa:61:c6:1b:59: 18:c8:b0:77:2c:57:6b:1d:d2:7c:99:3d:56:24:a5: 7c:3c:51:e3:c4:c0:c2:4b:82:f6:ae:cf:50:51:d6: 1b:e8:e0:50:79:4b:68:24:24:d8:6b:46:ee:ce:c9: 3f:de:ed:66:7b:46:0f:12:43:4a:7b:e0:ab:ac:46: 89:a7:59:08:06:ee:2d:6b:42:d0:43:af:78:5b:94: dc:47:f0:75:2f:49:24:70:e3:e0:64:b2:a1:3e:77: cd:4e:f9:44:52:30:4c:2a:4b:35:b4:63:18:7c:3b: fc:e3:e8:8e:e4:c8:6d:d2:b9:88:2c:39:0a:9a:8e: 1d:40:4a:e3:c0:27:f4:63:91:e5:4c:c6:ea:23:86: 31:83:d8:cb:23:61:9e:09:81:b2:5c:dd:7a:bc:4f: ab:8a:16:e8:41:e4:52:23:cc:f2:1a:14:76:65:96: bd:25:c6:01:ee:60:da:3a:23:09:b8:98:92:6f:d1: 3a:ec:38:90:90:16:39:57:d1:78:80:be:fe:a7:9f: 50:4b:01:65:d0:80:44:eb:ea:57:80:49:26:78:b3: 00:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F7:C2:46:DA:22:1F:57:27:74:B4:81:F9:34:E9:1C:9C:21:1B:F2 X509v3 Authority Key Identifier: keyid:93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/4vfCRtoiH1cndLSB-TTpHJwhG_I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:22cc::/48 Signature Algorithm: sha256WithRSAEncryption 4f:8f:81:75:b8:bc:2d:82:93:b5:dd:61:24:6f:26:9d:53:5c: f3:7e:60:41:d9:39:fa:bb:dd:a3:31:c7:9d:f1:7d:81:bd:04: 4c:22:69:a4:4a:25:28:ef:38:aa:92:02:15:dd:de:8a:1b:45: f4:33:58:ff:e0:52:29:5e:cd:41:51:83:e9:df:8a:32:b7:59: 22:d5:e7:79:b9:f4:0c:82:4d:00:b1:5f:c9:1c:0d:90:53:d9: f0:f6:7e:ef:1f:4b:23:98:65:d6:25:8a:02:38:01:4b:e8:16: c1:45:44:b6:23:88:c5:37:cd:dc:a5:6b:2f:e0:66:10:49:1f: 04:f7:0f:52:03:52:6d:39:07:22:55:f6:0a:8f:82:81:db:4f: 70:b5:3e:7e:39:e9:38:a3:17:92:22:21:3c:89:d8:40:dd:66: 31:0c:34:d5:46:b0:46:20:09:54:b8:f7:62:21:e1:50:41:08: e6:e6:c0:53:67:85:ff:ed:13:8b:30:34:ff:da:0c:6e:1d:89: 8b:4d:69:eb:14:90:c4:c9:42:7a:74:fb:c2:6b:f3:12:42:87: 28:17:52:23:80:b0:61:f8:f9:16:5e:41:21:dc:0f:87:68:87: 16:50:48:32:c2:01:ce:8a:e8:b1:32:c6:e3:ab:67:65:43:ce: 64:b8:36:76 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pzY9egnFlaWB1UUhCVjHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjA4YTBjZGEwMTMzZjg3NmFiOWFkODNmYTM3YmNlZjYy ZGYyZGYwHhcNMjYwMTAyMTIyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmY3YzI0NmRhMjIxZjU3Mjc3NGI0ODFmOTM0ZTkxYzljMjExYmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qLmRX9D8fx65xiuPDcAyd6QpJ7u T+QQdJaa0/CXMgvYNIzGfoto+mHGG1kYyLB3LFdrHdJ8mT1WJKV8PFHjxMDCS4L2 rs9QUdYb6OBQeUtoJCTYa0buzsk/3u1me0YPEkNKe+CrrEaJp1kIBu4ta0LQQ694 W5TcR/B1L0kkcOPgZLKhPnfNTvlEUjBMKks1tGMYfDv84+iO5Mht0rmILDkKmo4d QErjwCf0Y5HlTMbqI4Yxg9jLI2GeCYGyXN16vE+rihboQeRSI8zyGhR2ZZa9JcYB 7mDaOiMJuJiSb9E67DiQkBY5V9F4gL7+p59QSwFl0IBE6+pXgEkmeLMAYwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOL3wkbaIh9XJ3S0gfk06RycIRvyMB8GA1UdIwQY MBaAFJNgigzaATP4dqua2D+je872LfLfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJDS0ROb0JNX2gycTVyWVA2Tjd6dll0OHQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8wOGNiMmEtMDM0Yi00N2I2LWIxMzIt N2Y4YmE5NmY1ZTQ5LzEvNHZmQ1J0b2lIMWNuZExTQi1UVHBISndoR19JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8wOGNiMmEtMDM0Yi00N2I2LWIxMzItN2Y4YmE5NmY1ZTQ5 LzEvazJDS0ROb0JNX2gycTVyWVA2Tjd6dll0OHQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCLM MA0GCSqGSIb3DQEBCwUAA4IBAQBPj4F1uLwtgpO13WEkbyadU1zzfmBB2Tn6u92j Mced8X2BvQRMImmkSiUo7ziqkgIV3d6KG0X0M1j/4FIpXs1BUYPp34oyt1ki1ed5 ufQMgk0AsV/JHA2QU9nw9n7vH0sjmGXWJYoCOAFL6BbBRUS2I4jFN83cpWsv4GYQ SR8E9w9SA1JtOQciVfYKj4KB209wtT5+Oek4oxeSIiE8idhA3WYxDDTVRrBGIAlU uPdiIeFQQQjm5sBTZ4X/7ROLMDT/2gxuHYmLTWnrFJDEyUJ6dPvCa/MSQocoF1Ij gLBh+PkWXkEh3A+HaIcWUEgywgHOiuixMsbjq2dlQ85kuDZ2 -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:28 2026 by rpki-client