This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/4tTygGsoOC57_e0TFdEUu9FhmkQ.roa File: 4tTygGsoOC57_e0TFdEUu9FhmkQ.roa (raw, json) Hash identifier: bdmWnnPgneqPEoOHX7yu1K/Ep7MD/9NI6lWLIyb8LVM= Subject key identifier: E2:D4:F2:80:6B:28:38:2E:7B:FD:ED:13:15:D1:14:BB:D1:61:9A:44 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6EC7DAF9D6384DF5B0FB75D053D45 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/4tTygGsoOC57_e0TFdEUu9FhmkQ.roa Signing time: Fri 02 Jan 2026 12:20:27 +0000 ROA not before: Fri 02 Jan 2026 12:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205591 IP address blocks: 2a0c:9a40:8680::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ec:7d:af:9d:63:84:df:5b:0f:b7:5d:05:3d:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2d4f2806b28382e7bfded1315d114bbd1619a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cb:d6:08:a1:c6:cc:f7:cd:21:37:39:4e:52: e6:83:f4:27:f9:46:03:95:ae:ed:6c:b7:2e:4a:df: ec:6a:c8:48:bf:cd:ad:d6:23:4e:1b:e4:ab:bc:41: 97:46:4c:89:98:c4:05:50:41:84:1e:34:c9:bc:5f: 6c:63:51:56:54:77:7b:26:48:4f:0b:a1:12:ef:c0: 54:d4:9c:95:b4:0b:00:28:4e:bc:bd:ab:9c:38:66: ac:31:5e:10:e8:be:6b:2b:10:42:86:dc:19:f4:ba: 16:20:0b:0d:0f:be:7a:74:8f:d5:6e:52:02:f3:2d: ba:0f:d4:66:90:18:18:ea:75:58:d9:32:21:61:c1: 0e:6b:19:77:88:9a:98:5c:a5:04:c3:2d:60:12:00: fb:3e:3d:8d:5c:95:fb:c7:00:61:4f:45:03:6b:3b: ae:9d:cd:f0:de:55:23:bb:04:24:31:07:27:5f:04: 69:ff:0f:ff:e1:48:97:cc:ba:cd:0e:e6:03:48:18: c8:2f:d3:0e:e6:5f:41:f1:cb:fe:b9:62:9e:9e:e2: a7:8e:9e:94:da:36:84:6e:a1:43:3d:83:15:d4:f0: c9:d6:38:03:b9:42:08:53:38:74:5b:a1:66:a9:35: d2:03:99:26:52:cd:80:9a:31:a2:da:11:35:22:be: 6b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D4:F2:80:6B:28:38:2E:7B:FD:ED:13:15:D1:14:BB:D1:61:9A:44 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/4tTygGsoOC57_e0TFdEUu9FhmkQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8680::/44 Signature Algorithm: sha256WithRSAEncryption 71:87:3a:d3:2f:67:0b:07:1b:81:d2:84:47:f8:8d:bf:39:fb: d2:9a:c9:9e:59:a4:01:82:f9:cc:c3:1b:c3:3f:3e:4a:8f:68: 63:ad:8c:c5:f7:6f:4d:82:3f:4d:b3:3c:3a:c6:3a:7d:cb:d9: 5b:d7:d9:4a:ff:19:61:7e:63:57:d6:fb:b2:80:1c:38:a0:46: e8:6c:7e:b6:51:87:72:5b:98:51:55:1a:94:17:c4:ec:12:aa: c8:4e:8f:82:2b:21:82:af:df:65:7f:7a:79:2e:a3:83:43:0b: fd:f8:11:35:b4:58:d8:0a:80:fa:d4:f7:73:6f:9e:dd:77:bd: 6e:98:c3:b5:3d:3c:12:97:a5:c8:80:43:f5:f3:09:88:36:05: b1:f8:f8:c9:b0:2e:ee:c7:d7:ed:c9:99:b9:c5:9a:3c:0c:1b: b9:a8:4e:5f:eb:b8:6c:9d:b5:ac:4a:64:a9:90:90:9a:a3:46: 74:54:b4:c4:8b:1e:c1:16:90:66:61:75:c5:7e:0c:ff:3a:6e: 8b:ad:59:9d:01:11:a1:2e:6d:60:62:83:f9:e7:86:a1:6f:ca: d6:d5:86:7e:0b:bb:55:66:86:9d:bb:75:6a:64:ab:b4:d7:06: 6a:b0:75:37:45:d7:44:43:79:89:6c:e8:43:95:0a:46:68:05: 60:ad:33:2d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pux9r51jhN9bD7ddBT1FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmQ0ZjI4MDZiMjgzODJlN2JmZGVkMTMxNWQxMTRiYmQxNjE5YTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMvWCKHGzPfNITc5TlLmg/Qn+UYD la7tbLcuSt/sashIv82t1iNOG+SrvEGXRkyJmMQFUEGEHjTJvF9sY1FWVHd7JkhP C6ES78BU1JyVtAsAKE68vaucOGasMV4Q6L5rKxBChtwZ9LoWIAsND756dI/VblIC 8y26D9RmkBgY6nVY2TIhYcEOaxl3iJqYXKUEwy1gEgD7Pj2NXJX7xwBhT0UDazuu nc3w3lUjuwQkMQcnXwRp/w//4UiXzLrNDuYDSBjIL9MO5l9B8cv+uWKenuKnjp6U 2jaEbqFDPYMV1PDJ1jgDuUIIUzh0W6FmqTXSA5kmUs2AmjGi2hE1Ir5rZQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOLU8oBrKDgue/3tExXRFLvRYZpEMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvNHRUeWdHc29PQzU3X2UwVEZkRVV1OUZobWtRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQIaA MA0GCSqGSIb3DQEBCwUAA4IBAQBxhzrTL2cLBxuB0oRH+I2/OfvSmsmeWaQBgvnM wxvDPz5Kj2hjrYzF929Ngj9Nszw6xjp9y9lb19lK/xlhfmNX1vuygBw4oEbobH62 UYdyW5hRVRqUF8TsEqrITo+CKyGCr99lf3p5LqODQwv9+BE1tFjYCoD61Pdzb57d d71umMO1PTwSl6XIgEP18wmINgWx+PjJsC7ux9ftyZm5xZo8DBu5qE5f67hsnbWs SmSpkJCao0Z0VLTEix7BFpBmYXXFfgz/Om6LrVmdARGhLm1gYoP554ahb8rW1YZ+ C7tVZoadu3VqZKu01wZqsHU3RddEQ3mJbOhDlQpGaAVgrTMt -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:40 2026 by rpki-client