This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/4bmJyGbIVo-cNj8QK-IT7nzsaPA.roa File: 4bmJyGbIVo-cNj8QK-IT7nzsaPA.roa (raw, json) Hash identifier: nSZRPOQqe7DVG+VL7Za1u1OIJhF6Aajk+6MyhNvdJuI= Subject key identifier: E1:B9:89:C8:66:C8:56:8F:9C:36:3F:10:2B:E2:13:EE:7C:EC:68:F0 Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 019B78A37ACF47861B67E980BFB039541078 Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/4bmJyGbIVo-cNj8QK-IT7nzsaPA.roa Signing time: Thu 01 Jan 2026 08:18:58 +0000 ROA not before: Thu 01 Jan 2026 08:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205007 IP address blocks: 2a10:9686::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:7a:cf:47:86:1b:67:e9:80:bf:b0:39:54:10:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Jan 1 08:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1b989c866c8568f9c363f102be213ee7cec68f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b8:e3:3b:5a:8f:d6:10:fd:5e:ad:c5:e6:0f: 5c:e5:76:46:da:41:4c:92:8c:9f:4a:59:7e:74:8b: cb:33:6a:4f:81:a0:ee:37:4b:94:0e:c2:3b:e9:e5: 95:f5:19:5a:6a:01:40:60:0b:70:fd:78:c6:b0:58: 2e:e1:de:3d:79:9d:d6:9a:9d:a6:1e:01:44:52:3d: 19:ca:c4:32:54:92:db:a8:43:11:b3:e2:5c:24:3d: 73:f2:d3:cb:76:e0:43:4d:c8:5d:cb:2d:81:af:1c: 14:f6:24:18:08:57:64:a9:3c:0e:3f:9f:e0:3c:51: 81:55:01:a0:dc:71:59:ca:4a:f2:4f:22:b4:92:2a: 04:5a:c2:6b:79:53:03:55:2f:a7:fc:9d:7f:a6:2a: 60:71:3f:a8:30:1b:12:2f:85:a5:96:cb:0b:67:b6: 84:90:3f:24:02:05:f9:f9:8f:29:91:3c:e2:65:07: 40:3f:05:cf:9a:53:6c:26:a2:72:88:04:aa:b7:26: 35:95:d5:81:f4:f5:24:c4:54:e4:f1:38:8b:45:5e: 3c:dc:17:52:02:ba:67:74:32:cc:e4:9b:8f:0e:d9: 28:24:57:7e:63:5b:da:f5:c3:fd:d2:60:86:47:4f: 7e:5d:b2:70:51:40:c2:3e:9a:56:f3:56:d2:dd:90: b1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B9:89:C8:66:C8:56:8F:9C:36:3F:10:2B:E2:13:EE:7C:EC:68:F0 X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/4bmJyGbIVo-cNj8QK-IT7nzsaPA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:9686::/32 Signature Algorithm: sha256WithRSAEncryption 7d:28:1a:61:c7:3d:f9:27:b0:9e:ee:ac:d2:a5:f5:38:5d:dd: a4:6b:91:0a:47:4d:21:39:4a:6c:0c:4e:e5:41:3c:ce:7a:23: 0e:c0:af:1b:cb:15:5a:18:c2:28:15:6e:df:44:ca:e5:10:2a: 46:c4:49:61:74:97:34:82:fb:d8:63:6e:d1:bd:a3:00:27:cf: 57:ae:2e:7b:5e:23:b9:4d:d8:4a:a4:0c:6b:46:0e:52:84:72: f5:4c:9e:39:2f:43:f5:70:bd:32:d9:c1:60:68:9d:58:b3:b4: c1:a0:dc:21:a0:d6:25:20:29:39:eb:71:d3:53:b5:b3:b1:bc: 8b:e3:cb:e6:c6:ba:1b:6c:a2:04:cb:21:15:1c:00:7a:e5:d8: 09:35:1a:a1:15:92:cf:1d:78:2f:21:fe:49:9e:52:cc:c3:89: e1:e2:89:dc:8a:bd:34:c6:94:fa:40:90:f2:27:04:12:13:a1: e2:0c:9e:a9:03:c2:0a:c3:07:0c:c8:ae:e2:c1:22:4f:ef:35: ba:37:b0:ea:f2:ed:aa:f0:46:9f:a0:c6:2b:19:f3:59:6f:d0: 53:9c:db:3e:b8:80:f1:2e:40:a9:ba:27:09:c8:86:dd:f1:be: 1f:39:54:74:4a:ee:12:a9:a1:4e:26:5c:13:64:bc:04:c1:c2: ba:c9:1a:f6 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4o3rPR4YbZ+mAv7A5VBB4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjYwMTAxMDgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWI5ODljODY2Yzg1NjhmOWMzNjNmMTAyYmUyMTNlZTdjZWM2OGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7jjO1qP1hD9Xq3F5g9c5XZG2kFM koyfSll+dIvLM2pPgaDuN0uUDsI76eWV9RlaagFAYAtw/XjGsFgu4d49eZ3Wmp2m HgFEUj0ZysQyVJLbqEMRs+JcJD1z8tPLduBDTchdyy2BrxwU9iQYCFdkqTwOP5/g PFGBVQGg3HFZykryTyK0kioEWsJreVMDVS+n/J1/pipgcT+oMBsSL4WllssLZ7aE kD8kAgX5+Y8pkTziZQdAPwXPmlNsJqJyiASqtyY1ldWB9PUkxFTk8TiLRV483BdS ArpndDLM5JuPDtkoJFd+Y1va9cP90mCGR09+XbJwUUDCPppW81bS3ZCxpQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFOG5ichmyFaPnDY/ECviE+587GjwMB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvNGJtSnlHYklWby1jTmo4UUstSVQ3bnpzYVBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhCWhjAN BgkqhkiG9w0BAQsFAAOCAQEAfSgaYcc9+Sewnu6s0qX1OF3dpGuRCkdNITlKbAxO 5UE8znojDsCvG8sVWhjCKBVu30TK5RAqRsRJYXSXNIL72GNu0b2jACfPV64ue14j uU3YSqQMa0YOUoRy9UyeOS9D9XC9MtnBYGidWLO0waDcIaDWJSApOetx01O1s7G8 i+PL5sa6G2yiBMshFRwAeuXYCTUaoRWSzx14LyH+SZ5SzMOJ4eKJ3Iq9NMaU+kCQ 8icEEhOh4gyeqQPCCsMHDMiu4sEiT+81ujew6vLtqvBGn6DGKxnzWW/QU5zbPriA 8S5AqbonCciG3fG+HzlUdEruEqmhTiZcE2S8BMHCuska9g== -----END CERTIFICATE-----Generated at Wed Jan 7 06:57:07 2026 by rpki-client