This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/4kfyvx6IcqlCxed7fdvb4m5sTD4.roa File: 4kfyvx6IcqlCxed7fdvb4m5sTD4.roa (raw, json) Hash identifier: KVGLl3eS3kXmc+q2aJ0R4MjOlnAmyZYkvCj/Q8Juapc= Subject key identifier: E2:47:F2:BF:1E:88:72:A9:42:C5:E7:7B:7D:DB:DB:E2:6E:6C:4C:3E Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Certificate serial: 019B797ED2A1727C81844D7CC5616C30FDFE Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/4kfyvx6IcqlCxed7fdvb4m5sTD4.roa Signing time: Thu 01 Jan 2026 12:18:33 +0000 ROA not before: Thu 01 Jan 2026 12:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211056 IP address blocks: 2a03:9381::/48 maxlen: 48 2a03:9381:5::/48 maxlen: 48 2a03:9381:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d2:a1:72:7c:81:84:4d:7c:c5:61:6c:30:fd:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Validity Not Before: Jan 1 12:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e247f2bf1e8872a942c5e77b7ddbdbe26e6c4c3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d7:d7:c3:db:f7:26:d4:d6:0c:38:de:fd:a6: 61:40:1f:b5:3d:b4:b3:7b:9c:a0:89:30:58:f6:7b: 10:20:09:f3:a8:4a:e5:4e:63:89:c0:81:5f:44:63: 2c:01:65:82:f7:22:33:92:c9:33:09:71:1d:51:99: ef:00:9c:b7:ae:1b:6a:d0:72:63:7f:0d:2d:7e:43: 25:17:03:72:d7:1e:5e:7a:a1:8f:df:40:9f:82:b4: 63:31:cf:95:d6:36:30:a5:44:96:89:1c:ed:3f:3b: bd:96:76:fc:21:65:09:9f:42:f2:1a:90:ca:bf:f6: 55:ba:fe:e2:e5:25:c0:56:0e:6d:c8:57:78:19:db: 46:50:25:d6:77:5e:88:8d:ce:e0:89:74:8f:1c:69: ec:1d:49:28:d6:b6:4e:10:13:c9:3e:bd:59:e2:4d: 51:f9:85:e7:48:7b:a2:a5:a3:b2:16:af:e9:75:b1: cb:3b:7a:ff:d4:d8:ef:94:76:1c:ef:6d:7f:4d:5e: f4:2d:d2:e3:1d:de:ff:da:f5:bc:24:fb:7d:48:68: fb:e0:47:f1:35:14:2c:bb:d4:60:34:ac:fc:86:24: d5:b0:32:58:48:39:5c:99:8e:b5:ca:1a:21:7c:90: f3:1d:d1:5a:ac:af:91:5d:5d:47:87:06:9e:4f:51: 32:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:47:F2:BF:1E:88:72:A9:42:C5:E7:7B:7D:DB:DB:E2:6E:6C:4C:3E X509v3 Authority Key Identifier: keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/4kfyvx6IcqlCxed7fdvb4m5sTD4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:9381::/48 2a03:9381:5::-2a03:9381:6:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 73:e7:f6:7f:55:9c:d4:96:a0:82:95:6c:94:b7:6e:fd:7d:c3: 65:7e:f2:ac:3b:ab:bf:09:31:5c:a0:71:55:1b:00:ac:48:29: 51:7e:11:92:a9:eb:01:16:1c:c1:02:4b:9a:23:b9:53:47:fc: 99:ec:f7:b7:e0:64:7f:02:d7:ff:82:c5:3f:32:12:fa:60:72: 49:26:cd:98:7f:a1:d8:e1:56:d2:58:71:d1:44:34:15:c2:40: a9:d8:44:71:52:ea:eb:e8:07:7d:c8:81:0e:d7:9e:38:ec:59: be:df:d8:bf:e3:ae:a6:21:98:30:bc:66:22:64:d6:e7:3d:9f: 5a:bc:2d:1a:18:9c:10:79:42:8e:63:7f:d2:3b:49:42:10:f0: 6d:be:f1:18:59:dd:a7:c3:4e:cf:0f:51:77:f5:7e:d9:a3:20: b6:1a:30:0a:79:6d:32:5f:bf:53:ad:24:4c:93:d7:31:a9:ea: 06:e3:93:d0:e9:5f:df:8f:55:cd:3b:a3:05:69:eb:e9:f4:41: e5:9e:20:9e:6b:b3:00:28:a0:32:6a:7f:50:55:68:9e:ef:04: 28:c0:ac:16:77:b8:80:d6:ea:ba:01:e2:4f:9f:7d:ed:44:4a: 20:45:90:d2:c9:b7:2d:93:c9:d4:ad:9d:31:fb:57:a2:f3:2d: 66:71:ed:85 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt5ftKhcnyBhE18xWFsMP3+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1 NTEwNTUwHhcNMjYwMTAxMTIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjQ3ZjJiZjFlODg3MmE5NDJjNWU3N2I3ZGRiZGJlMjZlNmM0YzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdfXw9v3JtTWDDje/aZhQB+1PbSz e5ygiTBY9nsQIAnzqErlTmOJwIFfRGMsAWWC9yIzkskzCXEdUZnvAJy3rhtq0HJj fw0tfkMlFwNy1x5eeqGP30CfgrRjMc+V1jYwpUSWiRztPzu9lnb8IWUJn0LyGpDK v/ZVuv7i5SXAVg5tyFd4GdtGUCXWd16Ijc7giXSPHGnsHUko1rZOEBPJPr1Z4k1R +YXnSHuipaOyFq/pdbHLO3r/1NjvlHYc721/TV70LdLjHd7/2vW8JPt9SGj74Efx NRQsu9RgNKz8hiTVsDJYSDlcmY61yhohfJDzHdFarK+RXV1HhwaeT1EyxwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFOJH8r8eiHKpQsXne33b2+JubEw+MB8GA1UdIwQY MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct YjUzZTMwZTE0MTJhLzEvNGtmeXZ4NkljcWxDeGVkN2ZkdmI0bTVzVEQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdAwcAKgOTgQAA MBIDBwAqA5OBAAUDBwAqA5OBAAYwDQYJKoZIhvcNAQELBQADggEBAHPn9n9VnNSW oIKVbJS3bv19w2V+8qw7q78JMVygcVUbAKxIKVF+EZKp6wEWHMECS5ojuVNH/Jns 97fgZH8C1/+CxT8yEvpgckkmzZh/odjhVtJYcdFENBXCQKnYRHFS6uvoB33IgQ7X njjsWb7f2L/jrqYhmDC8ZiJk1uc9n1q8LRoYnBB5Qo5jf9I7SUIQ8G2+8RhZ3afD Ts8PUXf1ftmjILYaMAp5bTJfv1OtJEyT1zGp6gbjk9DpX9+PVc07owVp6+n0QeWe IJ5rswAooDJqf1BVaJ7vBCjArBZ3uIDW6roB4k+ffe1ESiBFkNLJty2TydStnTH7 V6LzLWZx7YU= -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:18 2026 by rpki-client