This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/4bI_cAxjeL98oKNPynLTPPTudRg.roa File: 4bI_cAxjeL98oKNPynLTPPTudRg.roa (raw, json) Hash identifier: p83+T0Upjeovgtqd88WpPOM7Tu4/j4E/XsKJyGxiwr4= Subject key identifier: E1:B2:3F:70:0C:63:78:BF:7C:A0:A3:4F:CA:72:D3:3C:F4:EE:75:18 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6E8C6D697B7BFFED7B6009DB062BB Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/4bI_cAxjeL98oKNPynLTPPTudRg.roa Signing time: Fri 02 Jan 2026 12:20:26 +0000 ROA not before: Fri 02 Jan 2026 12:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204914 IP address blocks: 2a0c:9a40:8350::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:e8:c6:d6:97:b7:bf:fe:d7:b6:00:9d:b0:62:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1b23f700c6378bf7ca0a34fca72d33cf4ee7518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:db:2b:33:53:25:95:74:da:b2:c4:6c:e6:e9: 32:7f:69:7a:f6:72:f2:36:52:23:75:f4:26:d7:9f: 86:b1:ae:68:85:10:9b:62:41:78:03:f9:1a:38:7e: 9c:75:7c:da:51:db:c8:df:1e:3f:dd:37:95:04:40: db:54:85:a3:b1:58:08:ca:ea:6e:9b:bb:fe:44:bc: b7:8f:d5:e8:12:9e:38:69:97:62:09:56:06:44:cc: 91:7e:a8:5f:cd:57:12:18:8a:0d:e1:9c:93:d2:c5: e1:8c:01:ad:b4:00:5f:99:08:5d:ad:6e:95:5d:9d: ac:ad:51:1e:09:71:11:09:2c:a3:c3:f7:48:25:cd: 59:1a:4b:82:cf:4c:ed:5b:35:a0:20:c7:a6:6e:5d: fa:bd:a6:95:08:f7:ec:9f:c0:c7:e1:b9:5b:4e:c8: 66:47:fc:61:3b:b9:8e:91:79:3b:20:64:48:a5:d6: 4e:20:76:08:57:dc:8e:6b:22:ae:40:d5:33:0d:a5: fa:5c:08:eb:bb:4e:c6:42:ac:21:ba:5a:7b:8d:3c: 58:8c:1d:a0:aa:75:8e:8b:7e:6e:b1:df:5d:c0:14: 88:7f:70:6e:40:84:67:47:b2:90:3f:1e:cf:9b:4a: 15:17:8a:32:ca:9f:97:66:51:1a:50:f7:32:e2:18: d0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B2:3F:70:0C:63:78:BF:7C:A0:A3:4F:CA:72:D3:3C:F4:EE:75:18 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/4bI_cAxjeL98oKNPynLTPPTudRg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8350::/48 Signature Algorithm: sha256WithRSAEncryption 45:40:ba:0c:aa:33:52:55:5f:e4:c7:2c:78:c9:7c:e1:1f:da: 41:fa:7c:e6:ac:7e:a8:4a:8f:bb:98:61:be:56:c8:89:41:01: 78:59:ce:a3:be:32:3e:bf:39:c9:2e:4a:06:c5:81:80:93:f3: 81:02:57:cd:5f:3e:b7:ec:31:ce:bc:ef:66:d3:d8:15:bb:37: 51:6e:0c:bf:b7:97:24:c7:12:11:7b:f9:2c:d1:d6:85:b4:1f: 4c:dc:1c:c1:0f:2d:47:f0:63:59:ce:cd:3f:b9:2f:f6:89:f1: 9b:06:31:e7:ec:cd:9d:cc:d9:97:23:c2:bc:bc:f1:45:e6:61: 04:f0:98:e6:d3:7c:3e:bc:ff:a8:5d:36:a8:a9:8b:91:2a:c2: 2b:9d:a3:df:93:cd:36:e0:1e:79:46:21:6d:b3:68:5a:5c:99: de:ca:0a:e2:2a:19:32:75:b6:29:36:2a:c0:e9:f6:1a:9f:3f: 7a:40:7e:c4:0b:66:fe:34:32:30:4f:9b:5f:b5:ae:35:0d:3c: 1c:6d:74:34:ea:ea:aa:48:bc:90:ce:e2:3c:58:49:df:99:6a: cb:c8:70:a7:ce:f4:3b:af:6f:e9:00:38:78:b3:9d:31:db:1e: 5c:26:3c:bc:6e:d4:0c:0c:c1:c0:d8:a6:91:34:e0:fd:40:2d: f9:93:9e:74 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pujG1pe3v/7XtgCdsGK7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWIyM2Y3MDBjNjM3OGJmN2NhMGEzNGZjYTcyZDMzY2Y0ZWU3NTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNsrM1MllXTassRs5ukyf2l69nLy NlIjdfQm15+Gsa5ohRCbYkF4A/kaOH6cdXzaUdvI3x4/3TeVBEDbVIWjsVgIyupu m7v+RLy3j9XoEp44aZdiCVYGRMyRfqhfzVcSGIoN4ZyT0sXhjAGttABfmQhdrW6V XZ2srVEeCXERCSyjw/dIJc1ZGkuCz0ztWzWgIMembl36vaaVCPfsn8DH4blbTshm R/xhO7mOkXk7IGRIpdZOIHYIV9yOayKuQNUzDaX6XAjru07GQqwhulp7jTxYjB2g qnWOi35usd9dwBSIf3BuQIRnR7KQPx7Pm0oVF4oyyp+XZlEaUPcy4hjQ+wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOGyP3AMY3i/fKCjT8py0zz07nUYMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvNGJJX2NBeGplTDk4b0tOUHluTFRQUFR1ZFJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQINQ MA0GCSqGSIb3DQEBCwUAA4IBAQBFQLoMqjNSVV/kxyx4yXzhH9pB+nzmrH6oSo+7 mGG+VsiJQQF4Wc6jvjI+vznJLkoGxYGAk/OBAlfNXz637DHOvO9m09gVuzdRbgy/ t5ckxxIRe/ks0daFtB9M3BzBDy1H8GNZzs0/uS/2ifGbBjHn7M2dzNmXI8K8vPFF 5mEE8Jjm03w+vP+oXTaoqYuRKsIrnaPfk8024B55RiFts2haXJneygriKhkydbYp NirA6fYanz96QH7EC2b+NDIwT5tfta41DTwcbXQ06uqqSLyQzuI8WEnfmWrLyHCn zvQ7r2/pADh4s50x2x5cJjy8btQMDMHA2KaRNOD9QC35k550 -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:24 2026 by rpki-client