This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/4eivQ2nDLeDdl1fAIHvWW6YvmGo.roa File: 4eivQ2nDLeDdl1fAIHvWW6YvmGo.roa (raw, json) Hash identifier: bAX+3N2k8RlvVykaPe2LmehMRssiIT2G4C0pgs5YX9k= Subject key identifier: E1:E8:AF:43:69:C3:2D:E0:DD:97:57:C0:20:7B:D6:5B:A6:2F:98:6A Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362 Certificate serial: 019B7C7F7B0CA8817EC9D3E83877396B8D54 Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/4eivQ2nDLeDdl1fAIHvWW6YvmGo.roa Signing time: Fri 02 Jan 2026 02:18:07 +0000 ROA not before: Fri 02 Jan 2026 02:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205745 IP address blocks: 2a10:240::/30 maxlen: 30 2a10:244::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:7b:0c:a8:81:7e:c9:d3:e8:38:77:39:6b:8d:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362 Validity Not Before: Jan 2 02:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1e8af4369c32de0dd9757c0207bd65ba62f986a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d8:dd:23:0a:2b:b9:81:68:f7:de:22:42:b0: 8f:b3:cf:87:f9:f5:bd:30:e1:3a:b0:7d:0b:3e:a7: 5d:f7:53:5f:fb:07:75:93:c0:34:0d:8f:c6:64:61: e7:cb:42:1f:d4:47:be:d4:fb:56:ed:94:e2:44:8d: e7:81:0b:dc:83:8d:04:c3:dd:b3:d1:48:1c:92:e7: be:23:bb:11:80:08:f2:0e:34:80:6e:9d:9c:6b:0e: 0c:37:32:48:49:c5:86:3f:b1:42:09:66:11:ac:3b: 3f:cd:15:17:49:30:19:62:86:a7:84:23:b7:8d:ea: a1:ea:a6:6b:e7:64:e9:f1:74:89:f5:06:d8:60:07: ff:a6:a6:73:12:cf:67:01:f7:9c:64:56:59:f0:45: 31:68:91:b5:7a:1c:bb:5f:8f:17:d3:97:bd:94:8a: 9e:61:40:0d:6e:53:0c:b8:80:fa:a1:d8:49:8e:d0: dc:8a:0d:b8:7b:3e:ba:83:8b:36:68:93:c3:eb:39: cc:6f:e9:32:0b:23:4a:1e:ab:c8:f7:96:60:83:86: cc:ae:46:95:f1:54:3a:b2:ed:bc:97:75:8a:8b:8b: 15:19:15:82:67:ab:47:4c:f8:5b:9b:28:c5:d4:4c: 57:15:2a:e8:d7:47:a2:e7:fc:0b:44:46:ae:6d:1e: b5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E8:AF:43:69:C3:2D:E0:DD:97:57:C0:20:7B:D6:5B:A6:2F:98:6A X509v3 Authority Key Identifier: keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/4eivQ2nDLeDdl1fAIHvWW6YvmGo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:240::/29 Signature Algorithm: sha256WithRSAEncryption 3a:b1:fb:89:ac:f2:2f:48:24:87:c9:66:74:0f:ef:07:d8:91: a0:59:db:7e:a8:49:c6:c1:12:32:a8:28:ad:17:3b:fb:d7:bc: a2:a8:bf:b0:2e:d6:9a:14:90:57:9e:2f:83:c8:a1:35:c5:aa: ee:b2:b7:80:b9:0c:88:b4:c6:8c:99:35:2e:dc:8b:1a:3f:e8: 5b:83:45:6f:51:33:86:32:95:5f:45:e7:83:af:63:b5:3b:25: 9b:0d:d0:e3:a4:98:91:da:a4:62:c0:f1:79:65:a7:f7:dd:be: f5:e3:c3:be:18:18:8e:f6:a1:3d:9c:65:d0:23:6b:1f:c6:0b: 2e:7d:5e:0b:bd:94:73:33:f6:3f:29:1c:81:eb:58:d3:3b:c9: e3:17:d2:cd:8b:42:71:02:3b:39:62:32:2c:c6:66:1b:56:e0: 75:c2:6e:71:5d:1c:c1:3d:a6:eb:65:03:76:ba:96:79:77:22: d2:4b:03:c1:a5:01:db:3d:5c:26:cf:06:b7:8e:9c:d3:67:7c: d1:04:5e:4d:f0:e6:1e:89:b2:97:40:04:cd:bb:2e:ec:6c:41: 8e:be:d4:51:70:e5:5b:c6:87:be:88:39:5b:ec:59:8e:ed:15: 6a:10:f6:70:9c:bf:d5:b2:71:5d:17:59:16:03:8f:84:db:58: 4a:a2:de:5d -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8f3sMqIF+ydPoOHc5a41UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5 NjMzNjIwHhcNMjYwMTAyMDIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWU4YWY0MzY5YzMyZGUwZGQ5NzU3YzAyMDdiZDY1YmE2MmY5ODZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudjdIworuYFo994iQrCPs8+H+fW9 MOE6sH0LPqdd91Nf+wd1k8A0DY/GZGHny0If1Ee+1PtW7ZTiRI3ngQvcg40Ew92z 0Ugckue+I7sRgAjyDjSAbp2caw4MNzJIScWGP7FCCWYRrDs/zRUXSTAZYoanhCO3 jeqh6qZr52Tp8XSJ9QbYYAf/pqZzEs9nAfecZFZZ8EUxaJG1ehy7X48X05e9lIqe YUANblMMuID6odhJjtDcig24ez66g4s2aJPD6znMb+kyCyNKHqvI95Zgg4bMrkaV 8VQ6su28l3WKi4sVGRWCZ6tHTPhbmyjF1ExXFSro10ei5/wLREaubR613QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFOHor0Npwy3g3ZdXwCB71lumL5hqMB8GA1UdIwQY MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt YjE2Y2I0ZGZhZGQzLzEvNGVpdlEybkRMZURkbDFmQUlIdldXNll2bUdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhACQDAN BgkqhkiG9w0BAQsFAAOCAQEAOrH7iazyL0gkh8lmdA/vB9iRoFnbfqhJxsESMqgo rRc7+9e8oqi/sC7WmhSQV54vg8ihNcWq7rK3gLkMiLTGjJk1LtyLGj/oW4NFb1Ez hjKVX0Xng69jtTslmw3Q46SYkdqkYsDxeWWn992+9ePDvhgYjvahPZxl0CNrH8YL Ln1eC72UczP2PykcgetY0zvJ4xfSzYtCcQI7OWIyLMZmG1bgdcJucV0cwT2m62UD drqWeXci0ksDwaUB2z1cJs8Gt46c02d80QReTfDmHomyl0AEzbsu7GxBjr7UUXDl W8aHvog5W+xZju0VahD2cJy/1bJxXRdZFgOPhNtYSqLeXQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:01 2026 by rpki-client