This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/4k3-HpRCXFW3j7_8C4stbYfFUYA.roa File: 4k3-HpRCXFW3j7_8C4stbYfFUYA.roa (raw, json) Hash identifier: C8f2KuD10zOuLUQcMwm5C74B3yZTjBcW9yOV/aVWErg= Subject key identifier: E2:4D:FE:1E:94:42:5C:55:B7:8F:BF:FC:0B:8B:2D:6D:87:C5:51:80 Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Certificate serial: 019B7758BA9EFB7E100CDD0261AED725D0A8 Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/4k3-HpRCXFW3j7_8C4stbYfFUYA.roa Signing time: Thu 01 Jan 2026 02:17:42 +0000 ROA not before: Thu 01 Jan 2026 02:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64474 IP address blocks: 2a0d:7440:22::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ba:9e:fb:7e:10:0c:dd:02:61:ae:d7:25:d0:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Validity Not Before: Jan 1 02:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e24dfe1e94425c55b78fbffc0b8b2d6d87c55180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b2:ad:61:62:71:6c:85:b0:15:3a:0d:be:dc: fc:0a:82:7b:d1:f3:ca:92:7e:00:de:e2:73:36:e8: 94:32:80:15:32:f9:65:df:66:dc:9e:2f:ed:eb:ed: a5:73:d9:0c:b8:53:c3:3f:ad:4a:18:f5:16:74:46: 9b:7e:55:e0:c8:f5:61:7f:7c:b8:dd:57:4d:46:80: 4a:0d:51:bc:60:cf:53:15:44:0c:a1:36:92:cd:6b: f9:8b:8d:b0:7c:fd:c6:2f:72:56:80:9b:df:da:2a: 71:c3:57:bb:1a:bf:73:a1:de:f8:a3:f6:c3:97:b6: 9e:e4:84:2c:6a:b3:68:18:91:cc:6a:a1:3a:0f:3d: 48:b7:20:e4:e3:db:b2:f1:00:a2:bd:f9:64:79:e6: 17:50:ef:59:b3:69:24:b2:a8:78:66:07:11:79:ac: 77:01:86:cc:ae:69:2e:fe:39:d4:bc:a1:63:0d:4a: bc:d5:d9:14:ac:12:5c:25:1a:90:fd:5d:f8:5d:95: 01:bb:7e:52:2c:47:b7:61:d1:33:06:b2:5b:ea:b2: 9c:a7:e3:b8:27:f6:e0:38:f2:3c:15:e7:4b:1d:f4: 08:82:f0:7c:54:d1:f3:ca:1d:95:4b:6a:cc:42:78: 2a:a9:aa:20:99:88:1a:ba:c2:a5:cd:24:30:b2:d1: c9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4D:FE:1E:94:42:5C:55:B7:8F:BF:FC:0B:8B:2D:6D:87:C5:51:80 X509v3 Authority Key Identifier: keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/4k3-HpRCXFW3j7_8C4stbYfFUYA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:7440:22::/48 Signature Algorithm: sha256WithRSAEncryption e8:6f:ba:b4:6e:fd:8b:02:73:cf:fa:bb:c1:4c:5f:33:97:9b: b7:ab:0f:fa:d8:99:dd:fc:74:ea:f9:b4:cf:15:4a:21:87:79: ae:74:61:48:42:09:17:d5:27:a1:cc:85:7c:fe:06:19:4c:4f: b4:3f:f3:c7:f0:ad:90:9a:7e:ab:16:65:da:e0:36:02:50:f2: e1:a0:02:e3:b1:c0:dc:cd:dd:11:d9:5a:a3:84:9b:50:53:4a: f2:e8:e6:45:06:45:63:70:d2:4f:81:73:7e:e6:d4:bd:4a:55: 34:7f:6f:96:39:c9:fc:74:c6:af:45:6d:1e:c4:22:c9:a0:f4: 3a:0a:dc:82:e7:16:60:c4:6b:17:85:41:37:c5:f8:9c:58:29: a2:49:d8:26:cf:8a:a9:3a:c3:ff:d0:2c:25:6a:c3:8a:95:78: 2a:f8:fb:35:7b:ae:40:84:c3:48:1f:b8:0a:31:0e:e8:c7:7d: 5a:2a:7c:b0:82:cf:41:92:59:7d:c2:97:76:8b:e7:6a:2a:d1: de:8e:8c:6c:55:c5:71:37:06:e4:ac:e1:41:2a:be:59:c5:18: 31:ae:02:55:f7:49:af:c1:64:9d:84:c2:54:d2:34:a5:56:66: 34:5c:51:2c:41:49:a2:f4:68:e3:0f:8a:82:2d:5c:75:3a:1b: 20:2a:53:fc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WLqe+34QDN0CYa7XJdCoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4 M2FjOTcwHhcNMjYwMTAxMDIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjRkZmUxZTk0NDI1YzU1Yjc4ZmJmZmMwYjhiMmQ2ZDg3YzU1MTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrKtYWJxbIWwFToNvtz8CoJ70fPK kn4A3uJzNuiUMoAVMvll32bcni/t6+2lc9kMuFPDP61KGPUWdEabflXgyPVhf3y4 3VdNRoBKDVG8YM9TFUQMoTaSzWv5i42wfP3GL3JWgJvf2ipxw1e7Gr9zod74o/bD l7ae5IQsarNoGJHMaqE6Dz1ItyDk49uy8QCivflkeeYXUO9Zs2kksqh4ZgcReax3 AYbMrmku/jnUvKFjDUq81dkUrBJcJRqQ/V34XZUBu35SLEe3YdEzBrJb6rKcp+O4 J/bgOPI8FedLHfQIgvB8VNHzyh2VS2rMQngqqaogmYgausKlzSQwstHJYwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOJN/h6UQlxVt4+//AuLLW2HxVGAMB8GA1UdIwQY MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt N2UwNWFiNDFiNmU0LzEvNGszLUhwUkNYRlczajdfOEM0c3RiWWZGVVlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0 LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg10QAAi MA0GCSqGSIb3DQEBCwUAA4IBAQDob7q0bv2LAnPP+rvBTF8zl5u3qw/62Jnd/HTq +bTPFUohh3mudGFIQgkX1SehzIV8/gYZTE+0P/PH8K2Qmn6rFmXa4DYCUPLhoALj scDczd0R2VqjhJtQU0ry6OZFBkVjcNJPgXN+5tS9SlU0f2+WOcn8dMavRW0exCLJ oPQ6CtyC5xZgxGsXhUE3xficWCmiSdgmz4qpOsP/0CwlasOKlXgq+Ps1e65AhMNI H7gKMQ7ox31aKnywgs9Bkll9wpd2i+dqKtHejoxsVcVxNwbkrOFBKr5ZxRgxrgJV 90mvwWSdhMJU0jSlVmY0XFEsQUmi9GjjD4qCLVx1OhsgKlP8 -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:58 2026 by rpki-client