This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/4C1BpphaktIg8MA2zeClb4YsyU4.roa File: 4C1BpphaktIg8MA2zeClb4YsyU4.roa (raw, json) Hash identifier: imbIDYBoq85nxOoVD1lZJskVrwlvW9PzNxybvG5zr1Y= Subject key identifier: E0:2D:41:A6:98:5A:92:D2:20:F0:C0:36:CD:E0:A5:6F:86:2C:C9:4E Certificate issuer: /CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928 Certificate serial: 019B7CED98126321DF646501CC95D7B7B6DB Authority key identifier: 97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/4C1BpphaktIg8MA2zeClb4YsyU4.roa Signing time: Fri 02 Jan 2026 04:18:24 +0000 ROA not before: Fri 02 Jan 2026 04:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201409 IP address blocks: 2a13:29c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:98:12:63:21:df:64:65:01:cc:95:d7:b7:b6:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928 Validity Not Before: Jan 2 04:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e02d41a6985a92d220f0c036cde0a56f862cc94e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1d:b4:0b:83:e1:66:93:6d:47:94:65:23:37: 16:50:dd:03:76:b1:ec:bc:10:2d:e4:42:e9:0e:72: 66:37:25:f3:3e:8d:86:2e:34:68:f5:b5:0d:6f:fb: 4a:f8:11:0a:c6:90:cb:52:46:86:5c:c1:66:b1:60: 12:61:e3:10:c8:a9:a4:ec:39:f2:bb:49:08:98:ee: 8c:fd:c6:25:5e:9b:1b:12:e7:6f:cf:ac:15:14:b0: 4a:25:36:2e:4a:11:2c:6f:cb:f2:46:ae:15:c4:95: 61:df:31:6d:d6:b3:de:96:38:9d:f8:df:b6:94:87: d3:20:06:61:f8:20:6b:a0:9f:85:a4:41:07:5e:bc: 1a:dc:dd:09:c4:13:bb:24:85:da:4c:43:67:be:d8: 0d:f8:fd:4b:19:ad:9b:8a:ff:7f:21:6e:b9:22:06: 60:30:f5:42:ff:7f:d8:2f:6f:82:fa:8b:e9:02:88: 5f:b2:e9:63:1b:b4:3f:ce:fb:8c:ef:f0:d1:61:d3: e6:b2:22:a4:97:c7:f2:5b:00:f4:c9:1e:85:79:d2: ce:f9:2e:a1:97:d3:61:09:c4:47:a9:e8:f0:59:ec: 13:f4:15:b7:0f:99:4f:e8:9e:64:f6:44:d7:15:59: 32:bd:7f:48:b1:17:7b:44:f4:33:d8:c4:1a:5d:2b: a9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:2D:41:A6:98:5A:92:D2:20:F0:C0:36:CD:E0:A5:6F:86:2C:C9:4E X509v3 Authority Key Identifier: keyid:97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/4C1BpphaktIg8MA2zeClb4YsyU4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:29c0::/29 Signature Algorithm: sha256WithRSAEncryption 26:f1:db:b2:cd:ed:fd:7b:e2:bf:c8:6b:41:ba:ab:d2:08:c7: c0:cf:1f:5b:67:3b:3a:38:b6:56:41:37:7f:db:b3:1e:33:67: 9d:16:a2:88:30:f3:61:85:73:df:cf:5d:52:76:6d:3b:31:c3: 73:75:4c:5d:c7:c1:5f:c5:99:09:2b:ce:0c:a3:4d:f2:4a:6a: 88:f1:98:06:4f:36:d7:86:5e:bf:ec:0e:c7:ee:5b:73:14:03: 68:fb:59:93:b4:48:41:cc:58:fb:7e:e1:cc:5b:3c:92:81:e8: dd:dd:05:3d:ef:b1:f8:d1:b1:67:82:d0:07:e1:cb:27:09:b1: 49:db:b6:39:04:60:0c:c9:be:1b:2e:91:0c:b2:10:b8:65:a7: f6:65:81:b8:eb:71:1b:c9:2d:9e:a4:01:49:41:4f:37:58:ed: 00:a1:5c:66:a6:99:15:e1:1e:7b:56:e7:b2:1f:fd:ba:c0:f8: 2f:73:b4:3e:a9:3f:b0:04:8b:1d:4c:4e:bb:24:10:aa:9b:95: 28:38:12:96:32:d8:06:77:c1:a1:f5:8f:10:6c:78:67:01:91: e3:26:d9:51:f0:aa:f4:4f:97:4c:df:d3:56:e8:af:35:90:75: 1a:96:f9:f2:b3:9a:2a:e2:68:58:3f:89:57:a6:bf:f2:a2:fc: 5e:cd:6e:74 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt87ZgSYyHfZGUBzJXXt7bbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ZDIzYWUyOGNkODYwYzhlZGZkNjE4MzU2ZjhiMzFmNWU0 ZGM5MjgwHhcNMjYwMTAyMDQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDJkNDFhNjk4NWE5MmQyMjBmMGMwMzZjZGUwYTU2Zjg2MmNjOTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB20C4PhZpNtR5RlIzcWUN0DdrHs vBAt5ELpDnJmNyXzPo2GLjRo9bUNb/tK+BEKxpDLUkaGXMFmsWASYeMQyKmk7Dny u0kImO6M/cYlXpsbEudvz6wVFLBKJTYuShEsb8vyRq4VxJVh3zFt1rPeljid+N+2 lIfTIAZh+CBroJ+FpEEHXrwa3N0JxBO7JIXaTENnvtgN+P1LGa2biv9/IW65IgZg MPVC/3/YL2+C+ovpAohfsuljG7Q/zvuM7/DRYdPmsiKkl8fyWwD0yR6FedLO+S6h l9NhCcRHqejwWewT9BW3D5lP6J5k9kTXFVkyvX9IsRd7RPQz2MQaXSupywIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFOAtQaaYWpLSIPDANs3gpW+GLMlOMB8GA1UdIwQY MBaAFJfSOuKM2GDI7f1hg1b4sx9eTckoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDlJNjRvellZTWp0X1dHRFZ2aXpIMTVOeVNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9jYTY0MWYtZGIzYS00ZjY0LWEyNWIt Y2ZhNmE5MTQ4MWUyLzEvNEMxQnBwaGFrdElnOE1BMnplQ2xiNFlzeVU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9jYTY0MWYtZGIzYS00ZjY0LWEyNWItY2ZhNmE5MTQ4MWUy LzEvbDlJNjRvellZTWp0X1dHRFZ2aXpIMTVOeVNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhMpwDAN BgkqhkiG9w0BAQsFAAOCAQEAJvHbss3t/Xviv8hrQbqr0gjHwM8fW2c7Oji2VkE3 f9uzHjNnnRaiiDDzYYVz389dUnZtOzHDc3VMXcfBX8WZCSvODKNN8kpqiPGYBk82 14Zev+wOx+5bcxQDaPtZk7RIQcxY+37hzFs8koHo3d0FPe+x+NGxZ4LQB+HLJwmx Sdu2OQRgDMm+Gy6RDLIQuGWn9mWBuOtxG8ktnqQBSUFPN1jtAKFcZqaZFeEee1bn sh/9usD4L3O0Pqk/sASLHUxOuyQQqpuVKDgSljLYBnfBofWPEGx4ZwGR4ybZUfCq 9E+XTN/TVuivNZB1Gpb58rOaKuJoWD+JV6a/8qL8Xs1udA== -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:27 2026 by rpki-client