This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/4oHL96070XVJFK5YR2z3SGTLdMY.roa File: 4oHL96070XVJFK5YR2z3SGTLdMY.roa (raw, json) Hash identifier: FF1916bNfm13YDHdzfWvKY2B8uJg3LA5NBIqV3b8KEA= Subject key identifier: E2:81:CB:F7:AD:3B:D1:75:49:14:AE:58:47:6C:F7:48:64:CB:74:C6 Certificate issuer: /CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c Certificate serial: 019B775961297CD1E65248925D45B68C380C Authority key identifier: 0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/4oHL96070XVJFK5YR2z3SGTLdMY.roa Signing time: Thu 01 Jan 2026 02:18:24 +0000 ROA not before: Thu 01 Jan 2026 02:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56849 IP address blocks: 2a0e:48c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:61:29:7c:d1:e6:52:48:92:5d:45:b6:8c:38:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c Validity Not Before: Jan 1 02:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e281cbf7ad3bd1754914ae58476cf74864cb74c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:98:02:7f:2c:f4:b8:fe:fa:6b:96:02:f8:22: b1:62:95:23:87:80:72:92:c2:9f:b1:46:1b:b8:18: fe:7c:65:da:28:5c:e7:eb:c9:93:56:57:a3:0e:9e: 57:e0:90:21:aa:db:eb:04:17:f1:c3:fc:cc:02:fd: a5:29:31:a2:d6:bf:54:a3:ba:c3:a0:7b:06:a8:92: 13:88:6d:4b:96:8c:a2:75:ff:26:d9:14:97:11:ed: 64:91:44:dc:f2:75:ea:e4:6f:69:56:66:1f:53:28: 23:81:32:74:dc:72:e9:77:9e:b3:af:12:31:02:c3: bc:af:f3:86:b4:83:66:ba:ab:d5:76:02:5c:97:52: ed:fa:c8:31:ac:8e:8f:b0:08:cf:c3:fa:d1:8a:1c: 7e:c4:b8:39:ce:18:42:a9:2c:31:b3:a4:72:ea:9c: a5:2e:28:12:bf:f2:8b:5b:57:00:62:55:8e:c3:52: ac:a5:00:f5:23:c2:0c:db:c7:fa:51:a0:6d:e6:b6: 7a:6a:95:28:33:ac:5c:04:5b:f6:12:be:5d:86:0d: 9a:8e:5b:b4:fc:9c:e4:18:c9:55:11:40:35:0c:4f: be:98:84:08:4e:a9:0a:0b:c0:ab:21:e1:ad:74:a6: a6:79:03:b9:54:0b:2a:48:20:59:35:94:26:0f:f6: 0e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:81:CB:F7:AD:3B:D1:75:49:14:AE:58:47:6C:F7:48:64:CB:74:C6 X509v3 Authority Key Identifier: keyid:0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/4oHL96070XVJFK5YR2z3SGTLdMY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:48c0::/29 Signature Algorithm: sha256WithRSAEncryption 96:9f:80:39:af:0e:d7:e9:45:8b:17:67:37:82:2f:e4:f8:16: 3d:fe:f2:30:6f:cb:fc:e8:05:b3:3b:10:fa:44:60:40:71:62: 71:4e:9a:dc:59:49:8e:46:01:46:41:b1:41:6a:ff:bd:7e:fa: 65:3f:ed:b0:53:3a:11:c6:3a:46:44:c0:b2:dc:ff:58:81:de: 31:bb:3d:1b:d3:be:56:ca:37:46:95:9e:44:01:18:9d:19:57: d6:63:8c:99:2b:b7:b0:3c:6d:36:2b:ea:a8:3b:a0:e5:66:1a: 9f:5b:fa:ee:fa:d0:bf:0b:c7:45:da:ef:01:f0:15:84:f6:51: d9:3a:c9:3b:1c:88:81:61:24:a1:c0:22:6e:ba:e5:58:f3:61: 92:f8:74:1c:58:20:d9:ed:52:3e:e2:1e:00:83:b0:6e:e9:e6: d7:ff:39:28:53:e0:85:59:2d:76:a4:5b:04:1f:cc:ca:a2:32: c9:cb:e7:d7:f0:71:b0:e6:65:c0:25:d5:92:d9:6b:93:a9:3c: 23:f1:23:4e:f1:66:6e:64:31:71:43:a8:81:f9:a2:f4:ad:ae: c7:63:da:67:ab:43:ae:25:f0:dd:7a:f6:1e:11:70:cc:fb:9d: d1:24:b9:7f:3f:c1:35:1d:04:b2:a9:38:db:18:a6:32:0f:32: 32:3a:90:c5 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3WWEpfNHmUkiSXUW2jDgMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYjNlNzNhYThiN2YwYWYzYmQ4NDAwNTcyZGFlNzJiMGQ0 NmY1NWMwHhcNMjYwMTAxMDIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjgxY2JmN2FkM2JkMTc1NDkxNGFlNTg0NzZjZjc0ODY0Y2I3NGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5gCfyz0uP76a5YC+CKxYpUjh4By ksKfsUYbuBj+fGXaKFzn68mTVlejDp5X4JAhqtvrBBfxw/zMAv2lKTGi1r9Uo7rD oHsGqJITiG1Lloyidf8m2RSXEe1kkUTc8nXq5G9pVmYfUygjgTJ03HLpd56zrxIx AsO8r/OGtINmuqvVdgJcl1Lt+sgxrI6PsAjPw/rRihx+xLg5zhhCqSwxs6Ry6pyl LigSv/KLW1cAYlWOw1KspQD1I8IM28f6UaBt5rZ6apUoM6xcBFv2Er5dhg2ajlu0 /JzkGMlVEUA1DE++mIQITqkKC8CrIeGtdKameQO5VAsqSCBZNZQmD/YORwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFOKBy/etO9F1SRSuWEds90hky3TGMB8GA1UdIwQY MBaAFAuz5zqot/CvO9hABXLa5ysNRvVcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzdQbk9xaTM4Szg3MkVBRmN0cm5LdzFHOVZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lZmY2N2YtNDBhOS00Nzc1LWE5YzIt YWQyOGZhOTY2YjUxLzEvNG9ITDk2MDcwWFZKRks1WVIyejNTR1RMZE1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9lZmY2N2YtNDBhOS00Nzc1LWE5YzItYWQyOGZhOTY2YjUx LzEvQzdQbk9xaTM4Szg3MkVBRmN0cm5LdzFHOVZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg5IwDAN BgkqhkiG9w0BAQsFAAOCAQEAlp+AOa8O1+lFixdnN4Iv5PgWPf7yMG/L/OgFszsQ +kRgQHFicU6a3FlJjkYBRkGxQWr/vX76ZT/tsFM6EcY6RkTAstz/WIHeMbs9G9O+ Vso3RpWeRAEYnRlX1mOMmSu3sDxtNivqqDug5WYan1v67vrQvwvHRdrvAfAVhPZR 2TrJOxyIgWEkocAibrrlWPNhkvh0HFgg2e1SPuIeAIOwbunm1/85KFPghVktdqRb BB/MyqIyycvn1/BxsOZlwCXVktlrk6k8I/EjTvFmbmQxcUOogfmi9K2ux2PaZ6tD riXw3Xr2HhFwzPud0SS5fz/BNR0Esqk42ximMg8yMjqQxQ== -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:15 2026 by rpki-client