This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/4h6lcQgIZNPNn6orDQ61-yTtwWo.roa File: 4h6lcQgIZNPNn6orDQ61-yTtwWo.roa (raw, json) Hash identifier: 3IoAe85ki8GRw4jFh+5yx1kZwJzMdssvyjliLQy2iM8= Subject key identifier: E2:1E:A5:71:08:08:64:D3:CD:9F:AA:2B:0D:0E:B5:FB:24:ED:C1:6A Certificate issuer: /CN=f20c28d19e0dfb534826aa23aa506af68a305b7a Certificate serial: 019B7A5B7136E62EC2728AAD5B7D087272BE Authority key identifier: F2:0C:28:D1:9E:0D:FB:53:48:26:AA:23:AA:50:6A:F6:8A:30:5B:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/4h6lcQgIZNPNn6orDQ61-yTtwWo.roa Signing time: Thu 01 Jan 2026 16:19:31 +0000 ROA not before: Thu 01 Jan 2026 16:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1715 IP address blocks: 138.63.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:71:36:e6:2e:c2:72:8a:ad:5b:7d:08:72:72:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f20c28d19e0dfb534826aa23aa506af68a305b7a Validity Not Before: Jan 1 16:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e21ea571080864d3cd9faa2b0d0eb5fb24edc16a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:54:bb:b9:62:5e:f9:61:e8:6b:64:66:9e:72: c3:19:f2:1f:ad:7e:70:40:bc:52:1a:1c:37:64:a8: a4:d2:13:02:e8:77:67:af:2c:3d:5e:93:e6:d3:36: 84:aa:bd:cf:f3:d0:e6:12:bb:f3:74:a5:01:af:a6: ba:7d:26:01:bf:b7:4f:ac:d1:b4:9a:17:95:a3:39: d4:bc:67:dc:72:06:c7:df:9d:f1:ed:16:03:c4:82: 0b:7b:84:0c:c5:61:44:47:21:47:86:f9:1e:d1:b9: 20:7a:29:83:40:61:c4:2a:66:87:9c:b6:2e:ca:91: 7b:53:a4:5c:5d:df:e9:97:65:e9:fa:d5:db:df:85: 08:35:a1:7d:c1:b1:f0:dc:17:3c:6f:5c:57:7a:87: 04:f3:8d:60:d0:f8:50:91:00:1c:e8:c4:f4:ff:cc: 22:b1:21:cc:23:1c:2b:fd:5d:99:42:e7:45:d1:6a: 57:f0:72:09:35:3d:73:ba:b3:85:88:c3:fa:e7:82: d4:57:78:a3:fb:39:fd:b3:df:95:37:83:c3:60:bc: 7d:f6:d3:a9:a9:83:53:78:d4:90:7b:7c:f2:3d:e6: 09:b7:f4:81:23:61:99:5a:2d:03:88:82:c0:88:57: ce:e9:2a:4f:e8:89:58:8f:1f:1e:5d:18:f9:b8:2b: d9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:1E:A5:71:08:08:64:D3:CD:9F:AA:2B:0D:0E:B5:FB:24:ED:C1:6A X509v3 Authority Key Identifier: keyid:F2:0C:28:D1:9E:0D:FB:53:48:26:AA:23:AA:50:6A:F6:8A:30:5B:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/4h6lcQgIZNPNn6orDQ61-yTtwWo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.63.0.0/16 Signature Algorithm: sha256WithRSAEncryption d3:0c:ed:f4:30:97:05:e0:0c:09:3a:ff:bb:8e:c4:4b:7b:99: c3:a8:69:1e:50:27:b2:82:8e:9e:92:54:fa:fe:b4:49:14:11: 04:8d:f4:b0:1c:1b:bd:a0:57:dc:bb:04:4f:46:87:5d:fb:d0: 3a:3b:71:98:97:dc:81:19:22:dc:98:24:b2:8d:73:9e:84:6a: 4d:c0:a6:d2:d2:a6:91:f8:3c:07:4b:4d:b0:aa:8a:63:bc:68: da:83:c3:71:85:5f:c1:5a:69:5d:53:6a:b5:c9:7b:9c:5f:d8: 73:ed:4e:e0:b6:6b:a7:d7:65:25:69:6d:ae:20:76:44:61:3b: 3a:3b:8d:77:90:21:ab:b9:af:e8:e3:c0:64:23:ff:c3:1c:2a: 03:65:bc:56:88:66:d2:7b:64:de:92:f2:49:e4:32:77:0e:6d: b8:a9:21:4b:14:08:3e:05:31:21:f4:c6:3d:a1:1b:f7:41:e8: e3:5e:56:0f:d2:ec:cc:d0:bc:fa:65:60:72:28:71:e0:20:66: 21:8c:f1:da:6c:67:a9:4e:2c:5c:73:96:f4:8b:91:eb:97:09: 0b:36:bd:0e:fd:b7:a0:37:2d:52:e9:81:29:ae:db:20:d5:f7: c4:cf:90:63:54:98:58:06:e3:71:d8:84:9c:f1:b7:e8:59:d8: ec:42:35:ea -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt6W3E25i7CcoqtW30IcnK+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMGMyOGQxOWUwZGZiNTM0ODI2YWEyM2FhNTA2YWY2OGEz MDViN2EwHhcNMjYwMTAxMTYxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjFlYTU3MTA4MDg2NGQzY2Q5ZmFhMmIwZDBlYjVmYjI0ZWRjMTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VS7uWJe+WHoa2RmnnLDGfIfrX5w QLxSGhw3ZKik0hMC6Hdnryw9XpPm0zaEqr3P89DmErvzdKUBr6a6fSYBv7dPrNG0 mheVoznUvGfccgbH353x7RYDxIILe4QMxWFERyFHhvke0bkgeimDQGHEKmaHnLYu ypF7U6RcXd/pl2Xp+tXb34UINaF9wbHw3Bc8b1xXeocE841g0PhQkQAc6MT0/8wi sSHMIxwr/V2ZQudF0WpX8HIJNT1zurOFiMP654LUV3ij+zn9s9+VN4PDYLx99tOp qYNTeNSQe3zyPeYJt/SBI2GZWi0DiILAiFfO6SpP6IlYjx8eXRj5uCvZJwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFOIepXEICGTTzZ+qKw0Otfsk7cFqMB8GA1UdIwQY MBaAFPIMKNGeDftTSCaqI6pQavaKMFt6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGd3bzBaNE4tMU5JSnFvanFsQnE5b293VzNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hMDdlMTgtMmM2YS00OTMwLWJlMTct ZTVkN2YyZGRkNGMyLzEvNGg2bGNRZ0laTlBObjZvckRRNjEteVR0d1dvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9hMDdlMTgtMmM2YS00OTMwLWJlMTctZTVkN2YyZGRkNGMy LzEvOGd3bzBaNE4tMU5JSnFvanFsQnE5b293VzNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAij8wDQYJ KoZIhvcNAQELBQADggEBANMM7fQwlwXgDAk6/7uOxEt7mcOoaR5QJ7KCjp6SVPr+ tEkUEQSN9LAcG72gV9y7BE9Gh1370Do7cZiX3IEZItyYJLKNc56Eak3AptLSppH4 PAdLTbCqimO8aNqDw3GFX8FaaV1TarXJe5xf2HPtTuC2a6fXZSVpba4gdkRhOzo7 jXeQIau5r+jjwGQj/8McKgNlvFaIZtJ7ZN6S8knkMncObbipIUsUCD4FMSH0xj2h G/dB6ONeVg/S7MzQvPplYHIoceAgZiGM8dpsZ6lOLFxzlvSLkeuXCQs2vQ79t6A3 LVLpgSmu2yDV98TPkGNUmFgG43HYhJzxt+hZ2OxCNeo= -----END CERTIFICATE-----Generated at Mon Jan 26 15:00:41 2026 by rpki-client