This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/4oZyLCfBt_PtcDqSB1D6VrV0TUM.roa File: 4oZyLCfBt_PtcDqSB1D6VrV0TUM.roa (raw, json) Hash identifier: 37kfxzMZjAEGlX1IGqlGrRZxkEO+b+KVXD2c+rB8lAQ= Subject key identifier: E2:86:72:2C:27:C1:B7:F3:ED:70:3A:92:07:50:FA:56:B5:74:4D:43 Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Certificate serial: 019B79ED5D3BE706238AB4565734DB9A0FB9 Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/4oZyLCfBt_PtcDqSB1D6VrV0TUM.roa Signing time: Thu 01 Jan 2026 14:19:17 +0000 ROA not before: Thu 01 Jan 2026 14:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205304 IP address blocks: 2a0e:e704:49::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:5d:3b:e7:06:23:8a:b4:56:57:34:db:9a:0f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Validity Not Before: Jan 1 14:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e286722c27c1b7f3ed703a920750fa56b5744d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f7:38:26:41:ac:66:bb:07:60:ff:9e:5e:d2: 36:95:a8:bb:fc:2c:ac:29:f7:c3:a1:3f:4a:c8:6c: 0b:11:9c:6f:c9:63:fe:e7:5c:89:01:95:79:b9:ca: 82:90:69:62:1d:06:9a:93:cb:1e:75:43:ea:03:52: 47:13:3d:79:ad:83:3d:b7:2e:5f:41:81:4c:04:91: 0b:f6:de:a7:0a:70:89:25:65:42:f3:2d:7f:b4:62: 68:f1:2b:a0:83:c9:a0:31:3d:46:65:f8:1e:c8:d1: 9e:62:ad:a8:3c:27:8e:4f:dc:23:d6:ae:9c:e0:c9: 5e:89:c4:62:e4:08:a9:6e:bf:cb:53:87:83:18:c5: 3a:e9:9a:48:95:3c:d4:bd:8a:b4:ff:31:fd:7d:83: f4:08:af:d2:ee:55:9a:51:d5:1f:96:e5:11:f0:3a: f1:44:4a:79:e2:fe:8b:f5:d0:16:6e:6e:c5:68:5b: 8e:e2:18:32:72:86:b8:e5:04:aa:7f:98:1e:63:0e: 40:d7:fa:7d:74:eb:41:f3:21:ff:f1:c6:b1:d2:16: 36:13:ea:c8:5b:2b:50:2b:75:59:b2:a6:b9:ae:6c: 12:41:03:ff:e4:88:b8:6f:20:2d:48:14:2a:89:e1: cb:97:34:3c:02:87:54:a4:59:6c:87:1f:49:08:7b: 67:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:86:72:2C:27:C1:B7:F3:ED:70:3A:92:07:50:FA:56:B5:74:4D:43 X509v3 Authority Key Identifier: keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/4oZyLCfBt_PtcDqSB1D6VrV0TUM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:e704:49::/48 Signature Algorithm: sha256WithRSAEncryption 28:50:d0:c7:0b:36:d1:1f:d5:84:45:62:49:7a:aa:9c:2d:08: 68:24:ed:91:87:9e:22:02:be:5a:6f:0f:a7:32:d3:25:35:86: 95:45:ab:48:4c:22:67:ba:65:44:92:07:5e:28:31:d7:fa:80: 63:1d:97:57:6c:6e:d8:69:11:a5:0a:35:9b:da:0d:ac:e3:7a: 13:f7:ab:da:c2:e8:5c:b2:e1:11:6c:73:6a:15:2d:6a:8f:91: fa:f0:30:50:aa:c4:8a:54:fd:8a:ba:90:e3:0f:1a:50:e4:6a: ef:97:80:14:12:e8:07:23:59:6a:4d:47:9a:8b:6d:de:bb:c0: 2b:43:47:ab:04:3d:7f:33:52:4a:0d:6a:db:f4:27:a5:05:39: 13:09:89:be:0d:aa:52:7e:29:d3:ae:c5:3c:e4:39:a0:dc:5e: c4:90:b9:8d:fb:ab:ef:79:5a:41:a4:84:0c:e7:16:27:ca:6a: 3e:8c:e6:ab:d3:2b:c1:a9:5a:b4:40:ee:f3:cf:f6:55:70:ce: 02:df:39:7e:b3:3e:c7:a9:3c:b9:f1:de:0d:8e:4d:4a:53:90: 18:4f:12:6a:6a:5a:7c:85:3b:d1:91:0c:1e:4d:75:c8:55:35: 09:01:22:be:f9:38:eb:ab:1b:6a:51:79:87:7c:55:38:40:8d: ce:5e:0f:b2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57V075wYjirRWVzTbmg+5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MGY0NWY3Y2M0YjY5MWZkNGEzMWMxZjFjMGI0ZjYwNWQ3 N2E2ZWYwHhcNMjYwMTAxMTQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjg2NzIyYzI3YzFiN2YzZWQ3MDNhOTIwNzUwZmE1NmI1NzQ0ZDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/c4JkGsZrsHYP+eXtI2lai7/Cys KffDoT9KyGwLEZxvyWP+51yJAZV5ucqCkGliHQaak8sedUPqA1JHEz15rYM9ty5f QYFMBJEL9t6nCnCJJWVC8y1/tGJo8Sugg8mgMT1GZfgeyNGeYq2oPCeOT9wj1q6c 4MleicRi5Aipbr/LU4eDGMU66ZpIlTzUvYq0/zH9fYP0CK/S7lWaUdUfluUR8Drx REp54v6L9dAWbm7FaFuO4hgycoa45QSqf5geYw5A1/p9dOtB8yH/8cax0hY2E+rI WytQK3VZsqa5rmwSQQP/5Ii4byAtSBQqieHLlzQ8AodUpFlshx9JCHtnhQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOKGciwnwbfz7XA6kgdQ+la1dE1DMB8GA1UdIwQY MBaAFNYPRffMS2kf1KMcHxwLT2Bdd6bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzkt YTk1NGQwNTM5OTRhLzEvNG9aeUxDZkJ0X1B0Y0RxU0IxRDZWclYwVFVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzktYTk1NGQwNTM5OTRh LzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg7nBABJ MA0GCSqGSIb3DQEBCwUAA4IBAQAoUNDHCzbRH9WERWJJeqqcLQhoJO2Rh54iAr5a bw+nMtMlNYaVRatITCJnumVEkgdeKDHX+oBjHZdXbG7YaRGlCjWb2g2s43oT96va wuhcsuERbHNqFS1qj5H68DBQqsSKVP2KupDjDxpQ5Grvl4AUEugHI1lqTUeai23e u8ArQ0erBD1/M1JKDWrb9CelBTkTCYm+DapSfinTrsU85Dmg3F7EkLmN+6vveVpB pIQM5xYnymo+jOar0yvBqVq0QO7zz/ZVcM4C3zl+sz7HqTy58d4Njk1KU5AYTxJq alp8hTvRkQweTXXIVTUJASK++TjrqxtqUXmHfFU4QI3OXg+y -----END CERTIFICATE-----Generated at Mon Jan 26 11:28:12 2026 by rpki-client