This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/4LXmO1mBpvWdzyh9MqgW8Gj3a1Q.roa File: 4LXmO1mBpvWdzyh9MqgW8Gj3a1Q.roa (raw, json) Hash identifier: OunJOL5HEILyL9m7t5dEYPqRv7jpw7K8aUGQLIwTyDk= Subject key identifier: E0:B5:E6:3B:59:81:A6:F5:9D:CF:28:7D:32:A8:16:F0:68:F7:6B:54 Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA53A1D47AB2F1C473800D8AEDB4285 Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/4LXmO1mBpvWdzyh9MqgW8Gj3a1Q.roa Signing time: Thu 01 Jan 2026 22:19:44 +0000 ROA not before: Thu 01 Jan 2026 22:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50013 IP address blocks: 2a01:5a8:2:2::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:3a:1d:47:ab:2f:1c:47:38:00:d8:ae:db:42:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0b5e63b5981a6f59dcf287d32a816f068f76b54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d3:85:3b:da:42:5f:bf:dc:08:45:d7:69:e2: c8:cb:7d:f6:ac:81:75:ed:1d:f7:92:6d:2f:07:be: c2:5c:e1:37:f5:33:c7:59:a7:ff:c6:30:bc:cd:44: 67:b3:fd:83:6a:3a:2a:b4:9a:de:54:38:50:e7:e4: f8:a1:ec:cb:c6:77:61:d4:17:88:24:84:28:eb:d8: 78:f9:c9:46:2a:fc:e4:89:f8:2b:77:fe:aa:10:1c: 1e:7d:5f:32:2d:3e:0d:6c:1c:af:08:e4:59:ac:32: 41:d8:5c:e9:cb:20:d3:31:9a:33:df:ce:58:4d:e6: 5f:1a:47:4f:d6:ea:59:69:54:ad:5c:2d:7f:02:cc: 12:ab:93:56:0e:29:21:4b:d8:68:d2:c8:44:15:5d: 83:bc:a7:f2:03:8e:bd:2b:64:08:94:51:b0:a7:16: 83:4c:21:e6:e2:20:ad:33:85:ce:ad:10:de:16:bf: e1:11:1f:c1:40:c8:74:e9:ff:a3:4a:5f:07:7a:0c: 40:27:d7:53:1b:34:c1:bd:58:70:8f:82:ff:3c:7d: 27:58:65:87:6d:4e:fc:fa:93:be:59:c6:d2:ee:16: b2:8f:ab:2e:07:6d:8f:1b:31:50:25:d2:78:b3:40: 26:15:94:f9:43:0b:31:99:06:cc:9b:49:f7:33:2b: 39:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B5:E6:3B:59:81:A6:F5:9D:CF:28:7D:32:A8:16:F0:68:F7:6B:54 X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/4LXmO1mBpvWdzyh9MqgW8Gj3a1Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:5a8:2:2::/64 Signature Algorithm: sha256WithRSAEncryption 38:bb:79:24:38:ee:50:d5:60:e9:22:4a:62:ba:7e:77:a3:9f: 47:a4:51:23:01:5a:13:2a:58:ca:68:d6:79:e9:35:ae:c6:5b: b6:11:ec:95:d0:4e:fd:69:07:54:8e:be:12:6f:8d:c8:eb:87: 7e:20:73:36:02:ec:1d:f0:03:10:16:2a:bb:ae:4f:bf:df:92: 3e:13:db:fa:fa:4e:74:41:b6:03:9f:a6:5d:c9:e6:0d:d2:a4: d4:09:47:64:a1:a3:1a:b9:6d:69:06:c0:2c:bb:74:17:de:78: bf:b6:b6:f4:f6:1d:6a:b7:f5:92:fe:73:98:52:f6:c8:2b:79: 93:84:13:01:d8:ae:fb:d4:af:49:9c:87:20:9b:af:d6:1a:a2: cd:f9:f0:fc:cb:45:6e:95:cb:68:ad:02:56:c0:e0:e5:29:b2: b6:7e:fb:ff:27:36:ee:ce:c5:b8:90:aa:5e:fd:09:a6:18:46: da:e0:fa:a3:19:73:d8:0a:fe:b4:65:6d:3a:5f:9b:4a:c0:7a: 2f:83:b0:d3:7f:a0:2c:55:2d:b0:39:88:39:1b:60:3a:45:97: cd:50:f3:0c:e5:93:c2:28:bc:1e:4d:71:84:77:01:d8:6f:05: d7:36:ac:a2:6a:29:12:94:7a:5a:29:ba:3d:71:66:e2:a5:f6: 2d:21:a5:5d -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt7pTodR6svHEc4ANiu20KFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGI1ZTYzYjU5ODFhNmY1OWRjZjI4N2QzMmE4MTZmMDY4Zjc2YjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtOFO9pCX7/cCEXXaeLIy332rIF1 7R33km0vB77CXOE39TPHWaf/xjC8zURns/2DajoqtJreVDhQ5+T4oezLxndh1BeI JIQo69h4+clGKvzkifgrd/6qEBwefV8yLT4NbByvCORZrDJB2FzpyyDTMZoz385Y TeZfGkdP1upZaVStXC1/AswSq5NWDikhS9ho0shEFV2DvKfyA469K2QIlFGwpxaD TCHm4iCtM4XOrRDeFr/hER/BQMh06f+jSl8HegxAJ9dTGzTBvVhwj4L/PH0nWGWH bU78+pO+WcbS7hayj6suB22PGzFQJdJ4s0AmFZT5QwsxmQbMm0n3Mys5cwIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFOC15jtZgab1nc8ofTKoFvBo92tUMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvNExYbU8xbUJwdldkenloOU1xZ1c4R2ozYTFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAKgEFqAAC AAIwDQYJKoZIhvcNAQELBQADggEBADi7eSQ47lDVYOkiSmK6fnejn0ekUSMBWhMq WMpo1nnpNa7GW7YR7JXQTv1pB1SOvhJvjcjrh34gczYC7B3wAxAWKruuT7/fkj4T 2/r6TnRBtgOfpl3J5g3SpNQJR2Shoxq5bWkGwCy7dBfeeL+2tvT2HWq39ZL+c5hS 9sgreZOEEwHYrvvUr0mchyCbr9Yaos358PzLRW6Vy2itAlbA4OUpsrZ++/8nNu7O xbiQql79CaYYRtrg+qMZc9gK/rRlbTpfm0rAei+DsNN/oCxVLbA5iDkbYDpFl81Q 8wzlk8IovB5NcYR3AdhvBdc2rKJqKRKUelopuj1xZuKl9i0hpV0= -----END CERTIFICATE-----Generated at Sun Jan 25 10:09:50 2026 by rpki-client