This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/4BSkcYmhr5NVj087jPH0UVEqIOM.roa File: 4BSkcYmhr5NVj087jPH0UVEqIOM.roa (raw, json) Hash identifier: K3WcOTsUriKcpWXE1oQcG3kJpx5GuCFTz9zkPDyBd4I= Subject key identifier: E0:14:A4:71:89:A1:AF:93:55:8F:4F:3B:8C:F1:F4:51:51:2A:20:E3 Certificate issuer: /CN=1e4c32086e1e984505691b01f5985df7a36b24ae Certificate serial: 019B7DCA468A7F4A14AE6950B462A562F3CD Authority key identifier: 1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/4BSkcYmhr5NVj087jPH0UVEqIOM.roa Signing time: Fri 02 Jan 2026 08:19:26 +0000 ROA not before: Fri 02 Jan 2026 08:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48586 IP address blocks: 2001:678:74c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:46:8a:7f:4a:14:ae:69:50:b4:62:a5:62:f3:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e4c32086e1e984505691b01f5985df7a36b24ae Validity Not Before: Jan 2 08:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e014a47189a1af93558f4f3b8cf1f451512a20e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2a:6a:34:17:46:51:70:c6:1d:5e:9c:07:03: 56:3c:bf:71:6a:bb:4b:96:13:4a:c1:cb:26:a4:9c: 74:82:f0:9c:c9:da:28:5e:99:95:51:06:20:5e:ad: 6a:67:d9:f3:18:55:23:38:14:7e:1c:b8:72:36:db: 08:90:59:73:5f:a5:e5:c1:53:e2:e3:73:0d:1b:aa: 17:45:e3:cf:49:8a:f7:2d:ca:25:89:44:5f:e4:af: 6c:4f:07:4e:2d:bc:fb:51:bf:67:97:9a:3b:f0:19: 89:27:fb:8d:d9:2b:61:c0:d0:38:a7:6a:3b:44:ee: a7:88:30:f6:92:f8:b3:8b:cf:68:73:33:68:4c:5d: 0c:68:2c:98:71:13:5b:41:ab:9d:a1:9d:35:a9:55: 26:90:5a:2b:de:a9:cd:1e:26:7f:26:ff:12:32:c9: fd:8d:5a:0a:9e:5d:46:c5:f5:94:61:43:89:28:c0: 78:8d:64:7c:f6:27:e1:95:8c:dd:92:9b:09:b3:73: b8:34:b3:4a:5a:07:e5:54:47:66:14:97:60:ad:27: e1:b4:1a:1e:3a:48:be:a6:c0:be:0c:e8:31:4a:94: 40:06:26:f8:fa:17:dc:90:06:dc:5d:9b:42:c8:f7: b4:3f:43:ea:5c:70:8c:6a:06:6d:d4:b8:04:02:ea: 4d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:14:A4:71:89:A1:AF:93:55:8F:4F:3B:8C:F1:F4:51:51:2A:20:E3 X509v3 Authority Key Identifier: keyid:1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/4BSkcYmhr5NVj087jPH0UVEqIOM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:74c::/48 Signature Algorithm: sha256WithRSAEncryption 79:37:e1:d0:bb:f4:a7:59:56:bf:27:f3:95:63:cd:d6:9e:c0: 11:d6:6d:64:03:72:ae:2e:f8:06:ce:6f:6d:12:43:5e:f5:ee: d8:10:28:0d:b9:1b:f0:8a:4b:92:3b:95:c7:65:ac:a4:9e:52: d1:39:b3:93:b4:d9:c6:51:0d:d2:8e:59:d9:2d:11:4b:65:0a: 85:2b:20:a7:ce:91:3e:31:46:cf:e7:9c:1c:9b:ae:a1:d5:61: d2:c7:6f:42:d4:e2:fc:d1:56:59:c4:6f:1b:e0:27:ad:b8:64: a8:85:1b:90:66:e6:30:e9:b4:d1:00:65:21:e2:c4:50:8b:cf: fd:c5:ec:76:a1:68:1a:a6:ee:f5:74:52:b1:19:2b:ac:a6:c7: d4:3e:91:66:30:16:2b:aa:5b:60:be:ff:17:c5:a3:62:e8:6a: 8b:ec:64:0a:e4:a2:4e:fa:ec:05:c2:88:97:85:9f:e8:9b:1a: 7b:2d:63:01:eb:5a:f2:16:f0:fa:c3:08:1e:2d:85:3a:e4:bf: 94:32:5f:e2:cc:7c:d5:91:2b:00:94:ee:a1:6e:d3:ed:be:5e: cc:a9:ad:c3:be:d1:a8:16:93:df:2b:1c:6e:77:e9:89:a5:5a: 31:a9:e5:92:86:4f:aa:41:fd:36:cd:56:69:b3:ab:42:f8:be: 00:7e:38:42 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9ykaKf0oUrmlQtGKlYvPNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNGMzMjA4NmUxZTk4NDUwNTY5MWIwMWY1OTg1ZGY3YTM2 YjI0YWUwHhcNMjYwMTAyMDgxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDE0YTQ3MTg5YTFhZjkzNTU4ZjRmM2I4Y2YxZjQ1MTUxMmEyMGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCpqNBdGUXDGHV6cBwNWPL9xartL lhNKwcsmpJx0gvCcydooXpmVUQYgXq1qZ9nzGFUjOBR+HLhyNtsIkFlzX6XlwVPi 43MNG6oXRePPSYr3LcoliURf5K9sTwdOLbz7Ub9nl5o78BmJJ/uN2SthwNA4p2o7 RO6niDD2kvizi89oczNoTF0MaCyYcRNbQaudoZ01qVUmkFor3qnNHiZ/Jv8SMsn9 jVoKnl1GxfWUYUOJKMB4jWR89ifhlYzdkpsJs3O4NLNKWgflVEdmFJdgrSfhtBoe Oki+psC+DOgxSpRABib4+hfckAbcXZtCyPe0P0PqXHCMagZt1LgEAupNqQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOAUpHGJoa+TVY9PO4zx9FFRKiDjMB8GA1UdIwQY MBaAFB5MMghuHphFBWkbAfWYXfejaySuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGt3eUNHNGVtRVVGYVJzQjlaaGQ5Nk5ySks0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9kNDgwOTAtMmRiZi00Yjg0LTg1OTYt OThjZTE0NmYxODI0LzEvNEJTa2NZbWhyNU5WajA4N2pQSDBVVkVxSU9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9kNDgwOTAtMmRiZi00Yjg0LTg1OTYtOThjZTE0NmYxODI0 LzEvSGt3eUNHNGVtRVVGYVJzQjlaaGQ5Nk5ySks0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAdM MA0GCSqGSIb3DQEBCwUAA4IBAQB5N+HQu/SnWVa/J/OVY83WnsAR1m1kA3KuLvgG zm9tEkNe9e7YECgNuRvwikuSO5XHZayknlLRObOTtNnGUQ3SjlnZLRFLZQqFKyCn zpE+MUbP55wcm66h1WHSx29C1OL80VZZxG8b4CetuGSohRuQZuYw6bTRAGUh4sRQ i8/9xex2oWgapu71dFKxGSuspsfUPpFmMBYrqltgvv8XxaNi6GqL7GQK5KJO+uwF woiXhZ/omxp7LWMB61ryFvD6wwgeLYU65L+UMl/izHzVkSsAlO6hbtPtvl7Mqa3D vtGoFpPfKxxud+mJpVoxqeWShk+qQf02zVZps6tC+L4AfjhC -----END CERTIFICATE-----Generated at Mon Jan 26 06:56:08 2026 by rpki-client