This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/44AMMqmvNoiDppEMb4VyBdFRb6k.roa File: 44AMMqmvNoiDppEMb4VyBdFRb6k.roa (raw, json) Hash identifier: XuHl6E5KYbKKxmOV+3HfKdwfkMJLjC6ZpYjzZvCelew= Subject key identifier: E3:80:0C:32:A9:AF:36:88:83:A6:91:0C:6F:85:72:05:D1:51:6F:A9 Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 019B797F30CEF1D0C58A266D787C07F27C68 Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/44AMMqmvNoiDppEMb4VyBdFRb6k.roa Signing time: Thu 01 Jan 2026 12:18:57 +0000 ROA not before: Thu 01 Jan 2026 12:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29014 IP address blocks: 2a0b:2a40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:30:ce:f1:d0:c5:8a:26:6d:78:7c:07:f2:7c:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Jan 1 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3800c32a9af368883a6910c6f857205d1516fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:83:21:9f:c3:9a:1e:49:1f:30:5c:b5:df:b2: 6a:cd:cb:88:3a:52:92:82:ce:30:67:74:93:fd:70: 57:dc:19:2b:75:5b:46:f7:e6:7a:80:1f:d9:dd:c3: 70:2a:59:3b:30:81:fe:06:07:63:69:c5:7e:7a:ef: 32:ba:bf:4c:eb:72:80:ab:2a:a1:d9:7f:e2:f4:a0: 40:c0:f6:9b:6c:17:cf:8b:69:8b:4f:67:35:04:98: 6a:9d:29:4f:8a:28:2d:5d:76:1f:61:a4:6c:bc:f2: c0:2f:30:b8:f9:d9:8c:04:b5:3b:84:da:5a:2f:7d: 85:3b:f2:3b:63:bf:06:9f:c2:3b:ab:7a:04:1f:ed: 73:c3:0d:2f:fe:e2:22:90:b3:54:37:b5:ef:6b:87: e3:9c:9a:eb:64:8c:ae:f8:a3:b7:78:7d:2e:f5:22: b9:10:44:84:6e:a5:4a:e6:41:36:43:aa:88:9a:90: 27:10:c4:90:79:f5:38:96:0e:b9:4c:1b:02:6e:7e: 6c:6f:34:8e:38:a1:67:19:4e:e8:61:cf:4b:87:b6: 35:a8:e1:ff:b1:e6:83:d0:dc:16:8e:17:59:9b:3e: f4:c6:d7:07:f7:4e:16:9a:ac:7d:91:a0:7f:e4:13: 82:a9:2a:74:55:0e:30:a4:81:4c:22:18:1c:9f:03: 83:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:80:0C:32:A9:AF:36:88:83:A6:91:0C:6F:85:72:05:D1:51:6F:A9 X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/44AMMqmvNoiDppEMb4VyBdFRb6k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:2a40::/29 Signature Algorithm: sha256WithRSAEncryption 19:86:ce:dc:40:70:fb:01:2e:ab:6a:6b:b3:cf:5a:13:ef:ac: ad:10:59:47:8a:39:0a:33:8f:a6:7d:3c:b4:0d:b8:bd:69:64: de:93:f0:1c:59:a3:3a:86:11:fb:60:c2:f5:12:54:a9:88:e8: 77:79:9f:db:c5:8b:12:ff:2c:b2:d0:92:5f:ad:3c:8a:05:3f: 3a:c7:0f:ba:fa:69:ff:86:1f:6c:f9:38:bb:08:9f:d8:c7:31: de:8c:6c:4c:17:b2:16:4c:fa:54:d0:f2:74:05:a7:a4:e5:ef: 06:ea:b3:b3:7a:a9:af:b9:4c:3a:56:02:16:19:2b:bf:86:0f: 77:67:31:1f:c9:5a:24:fd:3c:ec:2c:ed:aa:2e:3c:4b:91:75: 95:58:94:5f:34:86:ed:d1:e7:ad:33:65:6b:d5:a3:ad:58:8c: 1b:a5:e6:8b:06:9a:95:fc:0a:79:97:21:19:d9:4c:82:78:db: d1:a3:1f:69:f6:0a:4b:65:6c:d5:a9:ba:3c:16:dc:44:5d:07: e7:42:3b:1a:20:56:a7:55:0b:ed:98:f5:fb:1c:60:48:99:0f: db:ff:24:4a:e7:c4:63:ac:c4:00:b9:38:75:b0:17:af:7a:d1: bb:89:48:7b:c5:bb:7f:47:47:db:ee:06:e0:dd:22:4d:52:9a: 47:55:06:07 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5fzDO8dDFiiZteHwH8nxoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjYwMTAxMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzgwMGMzMmE5YWYzNjg4ODNhNjkxMGM2Zjg1NzIwNWQxNTE2ZmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYMhn8OaHkkfMFy137JqzcuIOlKS gs4wZ3ST/XBX3BkrdVtG9+Z6gB/Z3cNwKlk7MIH+BgdjacV+eu8yur9M63KAqyqh 2X/i9KBAwPabbBfPi2mLT2c1BJhqnSlPiigtXXYfYaRsvPLALzC4+dmMBLU7hNpa L32FO/I7Y78Gn8I7q3oEH+1zww0v/uIikLNUN7Xva4fjnJrrZIyu+KO3eH0u9SK5 EESEbqVK5kE2Q6qImpAnEMSQefU4lg65TBsCbn5sbzSOOKFnGU7oYc9Lh7Y1qOH/ seaD0NwWjhdZmz70xtcH904Wmqx9kaB/5BOCqSp0VQ4wpIFMIhgcnwOD9wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFOOADDKprzaIg6aRDG+FcgXRUW+pMB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEvNDRBTU1xbXZOb2lEcHBFTWI0VnlCZEZSYjZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgsqQDAN BgkqhkiG9w0BAQsFAAOCAQEAGYbO3EBw+wEuq2prs89aE++srRBZR4o5CjOPpn08 tA24vWlk3pPwHFmjOoYR+2DC9RJUqYjod3mf28WLEv8sstCSX608igU/OscPuvpp /4YfbPk4uwif2Mcx3oxsTBeyFkz6VNDydAWnpOXvBuqzs3qpr7lMOlYCFhkrv4YP d2cxH8laJP087Cztqi48S5F1lViUXzSG7dHnrTNla9WjrViMG6XmiwaalfwKeZch GdlMgnjb0aMfafYKS2Vs1am6PBbcRF0H50I7GiBWp1UL7Zj1+xxgSJkP2/8kSufE Y6zEALk4dbAXr3rRu4lIe8W7f0dH2+4G4N0iTVKaR1UGBw== -----END CERTIFICATE-----Generated at Sun Jan 25 11:41:58 2026 by rpki-client