This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/4D9r9RN5T1GqSVDtczGI79beDVM.roa File: 4D9r9RN5T1GqSVDtczGI79beDVM.roa (raw, json) Hash identifier: Y+J7VZ+8OQ1Ij53aUcGBnMKEONK3oBElTqaeO4u6KVI= Subject key identifier: E0:3F:6B:F5:13:79:4F:51:AA:49:50:ED:73:31:88:EF:D6:DE:0D:53 Certificate issuer: /CN=56afcd8fb40aae1d243c2a8ce2541a69987eed13 Certificate serial: 019B7AC88A8A5CAEF614420935E2E6CA98A0 Authority key identifier: 56:AF:CD:8F:B4:0A:AE:1D:24:3C:2A:8C:E2:54:1A:69:98:7E:ED:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/4D9r9RN5T1GqSVDtczGI79beDVM.roa Signing time: Thu 01 Jan 2026 18:18:41 +0000 ROA not before: Thu 01 Jan 2026 18:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212580 IP address blocks: 2a11:e487:1::/48 maxlen: 48 2a11:e487:2::/48 maxlen: 48 2a11:e487:3::/48 maxlen: 48 2a11:e487:beef::/48 maxlen: 48 2a11:e487:fc01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:8a:8a:5c:ae:f6:14:42:09:35:e2:e6:ca:98:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56afcd8fb40aae1d243c2a8ce2541a69987eed13 Validity Not Before: Jan 1 18:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e03f6bf513794f51aa4950ed733188efd6de0d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:af:63:db:8b:cf:9d:da:8c:27:27:3e:8c:78: 17:b5:fa:ae:c4:97:a7:8a:0e:79:5c:c2:de:44:d4: 37:83:bd:14:c3:7f:6f:bf:21:55:b5:cc:78:00:8c: 64:95:6b:ec:6e:21:68:00:16:13:05:60:6d:99:fa: 89:7a:1a:b1:90:cf:f9:e7:f2:8e:38:a2:a0:92:3c: ee:1d:76:93:43:e0:59:fa:a8:b5:d5:6b:67:eb:68: b3:01:41:a7:3d:e2:87:24:65:81:e5:c5:1a:c2:73: 70:b3:37:27:1e:f9:b3:24:b7:6a:18:84:e8:c8:33: ee:ec:0c:e3:0a:10:9a:89:72:b3:7e:34:fd:70:15: e5:a9:2b:c2:ff:ee:94:f9:bb:ae:90:13:a5:28:37: 5b:1f:4d:7b:ff:99:da:ea:9c:c8:0c:35:66:04:4a: e5:fe:38:38:47:3c:51:cb:5c:5a:51:e4:7d:27:21: e8:8d:14:c6:64:d5:69:b6:d4:d6:01:02:f4:a4:28: 31:0f:cf:8c:6c:ee:16:71:c2:8e:ab:36:b3:d0:7c: 9b:c2:4c:a6:16:08:b3:51:b0:69:70:16:b8:0a:d9: 99:14:18:32:d5:06:6d:79:9e:bf:ec:79:7b:11:fb: 93:88:3f:68:7e:12:88:7d:26:d1:95:5c:eb:3d:f1: 68:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:3F:6B:F5:13:79:4F:51:AA:49:50:ED:73:31:88:EF:D6:DE:0D:53 X509v3 Authority Key Identifier: keyid:56:AF:CD:8F:B4:0A:AE:1D:24:3C:2A:8C:E2:54:1A:69:98:7E:ED:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/4D9r9RN5T1GqSVDtczGI79beDVM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:e487:1::-2a11:e487:3:ffff:ffff:ffff:ffff:ffff 2a11:e487:beef::/48 2a11:e487:fc01::/48 Signature Algorithm: sha256WithRSAEncryption 2e:3e:e9:cb:8f:f6:03:e2:8c:55:90:e3:af:e2:b4:4d:b2:a3: 6c:55:85:33:55:2d:5d:66:ff:50:8e:cb:6a:86:5f:4c:6e:53: 5f:27:24:9d:c7:49:66:ae:72:9f:25:20:ef:05:66:65:08:c9: 4c:2f:eb:f1:94:59:f2:fd:4b:2b:bc:25:40:13:73:29:b5:db: 59:d9:f9:24:9f:0b:a2:e4:c6:7c:9c:45:ca:12:5c:b6:0c:e4: f8:85:8c:39:c5:ae:a0:df:c8:4d:76:94:36:1f:83:17:27:48: 14:4e:0a:b8:90:e1:7c:53:3a:ef:ea:90:d3:1a:cf:94:fb:2d: 0d:ed:8f:cd:d0:03:3c:9a:bd:04:c8:46:1f:60:60:4e:35:15: 6f:e0:5d:32:5d:79:b2:a3:71:98:b5:08:1d:bd:75:2a:a7:e0: 0b:08:38:00:45:1e:69:e9:7e:4a:a6:f8:8d:8f:1f:90:37:2b: 23:30:7c:36:25:d5:c8:2c:ad:da:fe:20:30:d3:6e:aa:0f:ab: 42:83:86:00:4a:8a:6b:4e:7a:27:01:f6:e0:60:9e:16:31:4d: cd:6c:b1:be:35:c2:70:ab:29:ef:a8:5b:83:56:0d:cc:54:70: 74:cb:09:e3:79:ce:bc:f8:f9:7a:00:2b:4b:f4:dc:d7:84:0e: 34:f5:60:b0 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt6yIqKXK72FEIJNeLmypigMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2YWZjZDhmYjQwYWFlMWQyNDNjMmE4Y2UyNTQxYTY5OTg3 ZWVkMTMwHhcNMjYwMTAxMTgxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDNmNmJmNTEzNzk0ZjUxYWE0OTUwZWQ3MzMxODhlZmQ2ZGUwZDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq9j24vPndqMJyc+jHgXtfquxJen ig55XMLeRNQ3g70Uw39vvyFVtcx4AIxklWvsbiFoABYTBWBtmfqJehqxkM/55/KO OKKgkjzuHXaTQ+BZ+qi11Wtn62izAUGnPeKHJGWB5cUawnNwszcnHvmzJLdqGITo yDPu7AzjChCaiXKzfjT9cBXlqSvC/+6U+buukBOlKDdbH017/5na6pzIDDVmBErl /jg4RzxRy1xaUeR9JyHojRTGZNVpttTWAQL0pCgxD8+MbO4WccKOqzaz0Hybwkym FgizUbBpcBa4CtmZFBgy1QZteZ6/7Hl7EfuTiD9ofhKIfSbRlVzrPfFo4wIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFOA/a/UTeU9RqklQ7XMxiO/W3g1TMB8GA1UdIwQY MBaAFFavzY+0Cq4dJDwqjOJUGmmYfu0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnFfTmo3UUtyaDBrUENxTTRsUWFhWmgtN1JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS80YzI2MzctM2JiYi00YTUzLWEyMTYt MjM3YmU3NzMwMDdhLzEvNEQ5cjlSTjVUMUdxU1ZEdGN6R0k3OWJlRFZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS80YzI2MzctM2JiYi00YTUzLWEyMTYtMjM3YmU3NzMwMDdh LzEvVnFfTmo3UUtyaDBrUENxTTRsUWFhWmgtN1JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmMBIDBwAqEeSH AAEDBwIqEeSHAAADBwAqEeSHvu8DBwAqEeSH/AEwDQYJKoZIhvcNAQELBQADggEB AC4+6cuP9gPijFWQ46/itE2yo2xVhTNVLV1m/1COy2qGX0xuU18nJJ3HSWaucp8l IO8FZmUIyUwv6/GUWfL9Syu8JUATcym121nZ+SSfC6LkxnycRcoSXLYM5PiFjDnF rqDfyE12lDYfgxcnSBROCriQ4XxTOu/qkNMaz5T7LQ3tj83QAzyavQTIRh9gYE41 FW/gXTJdebKjcZi1CB29dSqn4AsIOABFHmnpfkqm+I2PH5A3KyMwfDYl1cgsrdr+ IDDTbqoPq0KDhgBKimtOeicB9uBgnhYxTc1ssb41wnCrKe+oW4NWDcxUcHTLCeN5 zrz4+XoAK0v03NeEDjT1YLA= -----END CERTIFICATE-----Generated at Tue Jan 20 09:41:04 2026 by rpki-client