This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/k4QCd5iCeexS9s3XqEzybIiHXIk.roa File: k4QCd5iCeexS9s3XqEzybIiHXIk.roa (raw, json) Hash identifier: OJ7jYAORVNCUq35Pop73cpRqTyITR/U1sh48mQsiFMM= Subject key identifier: 93:84:02:77:98:82:79:EC:52:F6:CD:D7:A8:4C:F2:6C:88:87:5C:89 Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907 Certificate serial: 019B7C122F6C49440F1C5982C2B3263A7E9D Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/k4QCd5iCeexS9s3XqEzybIiHXIk.roa Signing time: Fri 02 Jan 2026 00:18:45 +0000 ROA not before: Fri 02 Jan 2026 00:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1967 IP address blocks: 2001:a98:30::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:2f:6c:49:44:0f:1c:59:82:c2:b3:26:3a:7e:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907 Validity Not Before: Jan 2 00:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93840277988279ec52f6cdd7a84cf26c88875c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7e:55:1b:2f:65:d3:52:de:59:f7:fc:71:aa: 9a:7b:84:3c:e3:40:00:fb:4c:04:ec:96:6a:9c:d2: 25:bb:b5:7a:fc:f9:0e:84:16:7c:b1:bd:84:62:02: 79:2a:eb:0a:6c:dc:33:32:a2:62:9d:a0:80:4b:6f: cc:8a:28:1b:2f:69:e5:d4:8c:8d:1c:c0:56:93:dc: 8c:f1:14:60:98:e2:6e:5f:43:77:83:76:d0:af:60: b6:e2:22:b3:91:e7:08:c3:c4:c0:5f:46:e0:1e:b7: 4c:ab:38:43:e8:b8:3f:10:63:51:73:72:5a:33:61: b6:a5:f9:0c:23:24:d2:86:0e:06:ab:16:45:c9:1e: 53:d1:c5:cf:6b:cf:fb:01:ae:34:f4:8c:14:a7:60: fd:72:be:7b:f6:89:05:bd:26:1c:38:74:a7:94:22: 8e:2b:dc:d0:7f:18:17:17:6d:3d:69:29:8b:a3:ea: 0a:19:5a:42:3d:3d:18:e3:6f:f4:f2:2e:0d:80:d2: 79:1b:d4:5b:59:7c:e9:7c:23:59:8f:6a:b3:56:b9: d8:30:be:a7:1c:3a:5d:4c:6f:ca:b9:db:8d:15:e7: 11:14:cf:86:5a:08:5b:26:e7:26:be:9a:71:ef:cc: b9:39:84:7d:67:85:b9:ae:68:77:4a:d9:94:47:ac: 1f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:84:02:77:98:82:79:EC:52:F6:CD:D7:A8:4C:F2:6C:88:87:5C:89 X509v3 Authority Key Identifier: keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/k4QCd5iCeexS9s3XqEzybIiHXIk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:a98:30::/48 Signature Algorithm: sha256WithRSAEncryption 90:be:c8:6c:bb:da:aa:54:be:60:cb:ca:01:b6:65:07:20:01: f8:ec:ed:1e:38:be:aa:9a:77:31:98:29:ac:93:d8:d4:3a:04: 73:52:f7:a2:f1:3e:d9:29:12:dd:ec:c0:96:52:25:05:a5:8e: 13:0b:96:9c:ee:59:38:8c:0d:46:78:db:cf:e0:07:47:b8:85: e6:ad:c8:27:d8:a0:a5:86:cb:97:66:0c:0e:00:df:81:39:98: 81:56:83:69:21:fa:9b:85:bf:e3:d3:17:9b:37:cd:16:07:bd: 14:11:f0:fa:ad:d0:f2:ae:d0:7a:3c:68:11:f5:f6:79:e5:5c: ec:68:a2:85:dc:28:28:a6:e2:15:82:9d:e6:e8:ef:31:03:d1: bd:e7:4b:88:1f:d4:af:8e:f8:5f:c0:ad:ac:8c:ad:3c:a8:5b: 9a:49:53:c6:c2:a1:1f:c0:6d:4f:80:18:48:05:ee:95:88:e7: 83:0c:50:08:04:08:1e:e4:ee:56:8a:22:f3:de:7b:7d:04:72: 4e:ff:62:99:c7:7b:0d:e1:9c:82:87:f5:09:73:7a:55:f6:e9: ed:84:fe:fa:6e:77:4e:47:d8:62:98:9d:bc:0d:49:64:31:6f: 8d:0f:c9:79:30:45:03:28:39:0c:3d:a5:f2:03:a3:11:20:09: e4:58:35:45 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8Ei9sSUQPHFmCwrMmOn6dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NTE4ZDE4MDkyM2E3ZjNjMDA2NTNlYzEyYmM3MDJiOTVh YWI5MDcwHhcNMjYwMTAyMDAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Mzg0MDI3Nzk4ODI3OWVjNTJmNmNkZDdhODRjZjI2Yzg4ODc1Yzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0n5VGy9l01LeWff8caqae4Q840AA +0wE7JZqnNIlu7V6/PkOhBZ8sb2EYgJ5KusKbNwzMqJinaCAS2/MiigbL2nl1IyN HMBWk9yM8RRgmOJuX0N3g3bQr2C24iKzkecIw8TAX0bgHrdMqzhD6Lg/EGNRc3Ja M2G2pfkMIyTShg4GqxZFyR5T0cXPa8/7Aa409IwUp2D9cr579okFvSYcOHSnlCKO K9zQfxgXF209aSmLo+oKGVpCPT0Y42/08i4NgNJ5G9RbWXzpfCNZj2qzVrnYML6n HDpdTG/KuduNFecRFM+GWghbJucmvppx78y5OYR9Z4W5rmh3StmUR6wfewIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJOEAneYgnnsUvbN16hM8myIh1yJMB8GA1UdIwQY MBaAFDdRjRgJI6fzwAZT7BK8cCuVqrkHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgt NTk2NzE5MjBmYjYwLzEvazRRQ2Q1aUNlZXhTOXMzWHFFenliSWlIWElrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgtNTk2NzE5MjBmYjYw LzEvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEKmAAw MA0GCSqGSIb3DQEBCwUAA4IBAQCQvshsu9qqVL5gy8oBtmUHIAH47O0eOL6qmncx mCmsk9jUOgRzUvei8T7ZKRLd7MCWUiUFpY4TC5ac7lk4jA1GeNvP4AdHuIXmrcgn 2KClhsuXZgwOAN+BOZiBVoNpIfqbhb/j0xebN80WB70UEfD6rdDyrtB6PGgR9fZ5 5VzsaKKF3CgopuIVgp3m6O8xA9G950uIH9SvjvhfwK2sjK08qFuaSVPGwqEfwG1P gBhIBe6ViOeDDFAIBAge5O5WiiLz3nt9BHJO/2KZx3sN4ZyCh/UJc3pV9unthP76 bndOR9himJ28DUlkMW+ND8l5MEUDKDkMPaXyA6MRIAnkWDVF -----END CERTIFICATE-----Generated at Mon Jan 26 11:05:59 2026 by rpki-client