This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/4txRYI484TEAkKZQuGXE7v7kNFE.roa File: 4txRYI484TEAkKZQuGXE7v7kNFE.roa (raw, json) Hash identifier: 0LHuR+m3x801pvrNDlfkYNVRhvh7QTNXeF2avzGdu+o= Subject key identifier: E2:DC:51:60:8E:3C:E1:31:00:90:A6:50:B8:65:C4:EE:FE:E4:34:51 Certificate issuer: /CN=43c16595966afb0bacf1d7937f245d6a052221a3 Certificate serial: 019B7E38AD9C4B229BD101A1D3DF6FA40947 Authority key identifier: 43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/4txRYI484TEAkKZQuGXE7v7kNFE.roa Signing time: Fri 02 Jan 2026 10:20:02 +0000 ROA not before: Fri 02 Jan 2026 10:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212044 IP address blocks: 2a06:bbc2:1::/48 maxlen: 48 2a06:bbc2:2::/48 maxlen: 48 2a06:bbc2:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ad:9c:4b:22:9b:d1:01:a1:d3:df:6f:a4:09:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43c16595966afb0bacf1d7937f245d6a052221a3 Validity Not Before: Jan 2 10:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2dc51608e3ce1310090a650b865c4eefee43451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5a:be:2c:11:ff:a5:f5:9b:3b:40:6b:d3:84: 92:bd:8e:d6:7c:03:49:4b:4b:ff:de:42:93:23:e4: 78:63:ca:70:f0:d2:80:ff:2f:26:d7:bf:14:60:0c: f7:ed:e7:67:0b:92:16:f5:8b:68:1c:43:2d:2c:45: d5:8a:ae:76:8e:4d:fc:96:cd:d1:2c:77:9a:5a:f6: a0:ab:08:43:64:02:d2:85:13:e0:fb:c0:f1:7c:87: 3d:e1:66:0b:34:4e:02:79:56:a6:16:5f:f9:59:5a: 57:a6:80:18:bb:6b:7b:50:c9:8b:14:76:4a:33:0e: 22:23:bf:8f:83:26:7c:ee:56:ed:07:cc:df:ac:5c: 77:f3:50:9b:74:7d:b0:17:bd:38:d7:af:90:93:f3: a1:4f:5e:72:3e:ad:19:d2:95:21:2e:8b:66:06:9d: 4c:8e:cf:97:70:be:0a:c0:80:b9:1b:b0:96:0d:bd: fd:88:d3:f7:04:46:9d:b9:83:22:8c:da:bf:24:c4: 82:88:86:ef:bc:5a:dc:f2:c5:08:29:ea:fa:b2:a5: 5c:92:32:ee:00:fb:30:36:44:5b:cd:92:6e:0d:64: f4:fa:2b:db:3c:99:9d:04:b1:93:79:2d:55:92:af: ff:31:45:0c:04:9f:39:e5:87:7d:01:50:35:a7:4c: f7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:DC:51:60:8E:3C:E1:31:00:90:A6:50:B8:65:C4:EE:FE:E4:34:51 X509v3 Authority Key Identifier: keyid:43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/4txRYI484TEAkKZQuGXE7v7kNFE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:bbc2:1::-2a06:bbc2:3:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 17:e7:cb:63:4b:d4:02:11:de:53:ce:11:44:67:6a:92:a8:11: f9:96:2b:cb:42:a0:e8:6d:47:45:72:ac:fe:97:1a:97:1f:05: 8b:65:3f:93:ba:e0:cc:b0:4e:07:bc:f7:b8:6a:89:04:b6:15: a0:bf:20:b9:f8:6c:74:03:84:e7:79:97:28:d5:23:60:ad:bc: fe:65:fd:4a:67:c4:4d:31:86:3d:93:fa:08:22:f3:f8:46:63: 38:11:c5:b6:24:d0:a1:f4:d5:2c:20:9a:e0:a4:33:85:17:c9: e2:66:20:4a:3d:27:cb:48:11:3b:9f:56:ba:53:06:ca:e7:41: ca:76:42:38:11:f4:3e:2c:8a:d8:0d:59:b6:ed:f7:89:a3:c4: 27:4c:fd:bf:46:b0:dd:35:ac:79:b3:7e:9f:7e:61:d6:67:46: 71:b1:76:54:f3:51:0e:d4:54:1c:a6:b3:19:bc:32:e2:91:b7: f2:67:e6:5b:39:0c:97:82:d1:f8:39:e7:cf:59:af:de:a5:33: ec:67:e3:fd:e3:f3:79:39:a2:3e:06:ae:fd:23:6a:24:38:4b: b5:cf:eb:52:84:89:95:cc:5e:fd:0f:7d:c0:dd:60:70:7b:6f: 56:a6:d0:0c:fa:61:9a:e9:a8:87:47:aa:73:e4:65:6b:a3:76: fa:25:f5:93 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt+OK2cSyKb0QGh099vpAlHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYzE2NTk1OTY2YWZiMGJhY2YxZDc5MzdmMjQ1ZDZhMDUy MjIxYTMwHhcNMjYwMTAyMTAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmRjNTE2MDhlM2NlMTMxMDA5MGE2NTBiODY1YzRlZWZlZTQzNDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFq+LBH/pfWbO0Br04SSvY7WfANJ S0v/3kKTI+R4Y8pw8NKA/y8m178UYAz37ednC5IW9YtoHEMtLEXViq52jk38ls3R LHeaWvagqwhDZALShRPg+8DxfIc94WYLNE4CeVamFl/5WVpXpoAYu2t7UMmLFHZK Mw4iI7+PgyZ87lbtB8zfrFx381CbdH2wF70416+Qk/OhT15yPq0Z0pUhLotmBp1M js+XcL4KwIC5G7CWDb39iNP3BEaduYMijNq/JMSCiIbvvFrc8sUIKer6sqVckjLu APswNkRbzZJuDWT0+ivbPJmdBLGTeS1Vkq//MUUMBJ855Yd9AVA1p0z3wQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFOLcUWCOPOExAJCmULhlxO7+5DRRMB8GA1UdIwQY MBaAFEPBZZWWavsLrPHXk38kXWoFIiGjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUThGbGxaWnEtd3VzOGRlVGZ5UmRhZ1VpSWFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9kOTI5MTktOTYyYi00NDhkLTk4ZGIt NTk5MGVhNThlMDMwLzEvNHR4UllJNDg0VEVBa0taUXVHWEU3djdrTkZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9kOTI5MTktOTYyYi00NDhkLTk4ZGItNTk5MGVhNThlMDMw LzEvUThGbGxaWnEtd3VzOGRlVGZ5UmRhZ1VpSWFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqBrvC AAEDBwIqBrvCAAAwDQYJKoZIhvcNAQELBQADggEBABfny2NL1AIR3lPOEURnapKo EfmWK8tCoOhtR0VyrP6XGpcfBYtlP5O64MywTge897hqiQS2FaC/ILn4bHQDhOd5 lyjVI2CtvP5l/UpnxE0xhj2T+ggi8/hGYzgRxbYk0KH01SwgmuCkM4UXyeJmIEo9 J8tIETufVrpTBsrnQcp2QjgR9D4sitgNWbbt94mjxCdM/b9GsN01rHmzfp9+YdZn RnGxdlTzUQ7UVBymsxm8MuKRt/Jn5ls5DJeC0fg5589Zr96lM+xn4/3j83k5oj4G rv0jaiQ4S7XP61KEiZXMXv0PfcDdYHB7b1am0Az6YZrpqIdHqnPkZWujdvol9ZM= -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:36 2026 by rpki-client