This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/4rMTbRvyrGX_6yYG_HISVSDUsEs.roa File: 4rMTbRvyrGX_6yYG_HISVSDUsEs.roa (raw, json) Hash identifier: 1MTYbelSkYUF8prO69R/5HpiYCv5PcgPFmtM5MflF0E= Subject key identifier: E2:B3:13:6D:1B:F2:AC:65:FF:EB:26:06:FC:72:12:55:20:D4:B0:4B Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82C4C9622706B3AE704AB58474AE68 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/4rMTbRvyrGX_6yYG_HISVSDUsEs.roa Signing time: Fri 02 Jan 2026 16:20:34 +0000 ROA not before: Fri 02 Jan 2026 16:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201331 IP address blocks: 2a0b:b87:ffea::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:c4:c9:62:27:06:b3:ae:70:4a:b5:84:74:ae:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2b3136d1bf2ac65ffeb2606fc72125520d4b04b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:dc:a1:ca:09:9d:13:d2:45:e7:21:c4:44:72: ef:39:cf:60:f0:97:ac:26:d2:8d:0a:bb:b9:3b:7e: 1f:a5:b5:80:4b:8c:43:f6:57:54:63:40:e4:c0:20: 68:f0:98:45:5e:c4:dd:9c:5d:8a:ed:94:cd:3c:0d: 93:6f:98:47:96:9d:6e:fb:18:92:69:b1:4d:79:ef: 5c:c0:2d:84:f9:0b:5f:0d:26:16:02:79:6d:1b:be: d9:34:c6:21:8f:3c:d6:04:9b:93:8b:5f:d5:b5:ba: 69:2c:a6:29:56:5c:2f:54:aa:05:c5:c7:ea:87:22: 96:b3:80:85:e7:c3:62:3e:ea:90:8f:1a:87:57:de: 6b:dd:4a:0e:bc:05:3d:38:de:8d:c6:9f:27:6e:36: 22:fe:96:6f:b1:ad:9c:30:2b:eb:f8:48:00:56:82: fe:95:77:c5:bf:f9:cb:37:9b:4c:fe:62:b5:bc:a9: 5d:aa:32:5a:45:c3:12:0e:6e:41:7b:e4:64:91:6d: f4:57:cb:04:c6:be:72:33:71:3e:f2:51:3e:d4:69: fb:be:d0:09:af:21:21:43:ed:b2:c8:b8:ab:ec:c8: 0c:db:9d:ca:c3:c2:3e:c4:c1:1e:17:b7:e6:06:b8: 31:39:3f:df:c2:d6:1a:30:4a:4e:12:9f:f1:3c:64: 46:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B3:13:6D:1B:F2:AC:65:FF:EB:26:06:FC:72:12:55:20:D4:B0:4B X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/4rMTbRvyrGX_6yYG_HISVSDUsEs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:b87:ffea::/48 Signature Algorithm: sha256WithRSAEncryption 2f:d6:24:2b:e3:07:f3:cb:0d:de:8c:42:a7:81:ac:50:2f:30: b6:0b:74:9f:d6:c9:d7:90:30:92:41:cf:c7:aa:0e:1d:4c:62: 18:00:a5:f0:23:80:9c:48:de:89:2a:a3:ec:10:5e:bc:40:03: 44:2f:4a:2d:97:a3:6c:25:f5:f8:0b:33:cb:23:0e:76:2f:17: 57:f9:4a:bf:cd:f3:a3:d6:16:bd:52:52:d8:b8:97:42:0c:f2: da:c5:6c:7e:c0:ba:5e:f1:42:0a:8a:26:2f:f5:1a:cb:25:e4: fa:2f:e4:a2:d9:21:42:07:7a:38:89:d2:21:cf:78:af:a8:43: 70:a8:e1:80:9d:be:df:ed:33:f5:48:3b:b9:36:13:8e:18:21: a3:62:83:f4:dc:85:8f:8c:85:37:01:a4:53:96:f1:74:66:37: 3d:b9:0c:e5:63:12:98:df:7f:1e:0f:6f:89:fa:79:53:38:f1: c9:7c:a1:8d:2a:4f:d7:69:5b:d9:d8:e0:94:46:75:21:f2:6a: 1e:ec:a2:3f:11:92:8f:05:9f:e6:b4:b2:39:b3:17:1e:6c:7b: 04:c8:98:2f:e4:2a:12:8d:89:e8:51:be:f6:6a:38:11:d2:00: 43:70:03:1c:65:3f:2f:09:4b:b1:64:a5:09:cd:a1:e9:12:e4: 1e:29:e0:fe -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/gsTJYicGs65wSrWEdK5oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmIzMTM2ZDFiZjJhYzY1ZmZlYjI2MDZmYzcyMTI1NTIwZDRiMDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tyhygmdE9JF5yHERHLvOc9g8Jes JtKNCru5O34fpbWAS4xD9ldUY0DkwCBo8JhFXsTdnF2K7ZTNPA2Tb5hHlp1u+xiS abFNee9cwC2E+QtfDSYWAnltG77ZNMYhjzzWBJuTi1/VtbppLKYpVlwvVKoFxcfq hyKWs4CF58NiPuqQjxqHV95r3UoOvAU9ON6Nxp8nbjYi/pZvsa2cMCvr+EgAVoL+ lXfFv/nLN5tM/mK1vKldqjJaRcMSDm5Be+RkkW30V8sExr5yM3E+8lE+1Gn7vtAJ ryEhQ+2yyLir7MgM253Kw8I+xMEeF7fmBrgxOT/fwtYaMEpOEp/xPGRGxQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOKzE20b8qxl/+smBvxyElUg1LBLMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvNHJNVGJSdnlyR1hfNnlZR19ISVNWU0RVc0VzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgsLh//q MA0GCSqGSIb3DQEBCwUAA4IBAQAv1iQr4wfzyw3ejEKngaxQLzC2C3Sf1snXkDCS Qc/Hqg4dTGIYAKXwI4CcSN6JKqPsEF68QANEL0otl6NsJfX4CzPLIw52LxdX+Uq/ zfOj1ha9UlLYuJdCDPLaxWx+wLpe8UIKiiYv9RrLJeT6L+Si2SFCB3o4idIhz3iv qENwqOGAnb7f7TP1SDu5NhOOGCGjYoP03IWPjIU3AaRTlvF0Zjc9uQzlYxKY338e D2+J+nlTOPHJfKGNKk/XaVvZ2OCURnUh8moe7KI/EZKPBZ/mtLI5sxcebHsEyJgv 5CoSjYnoUb72ajgR0gBDcAMcZT8vCUuxZKUJzaHpEuQeKeD+ -----END CERTIFICATE-----Generated at Tue Jan 20 15:19:05 2026 by rpki-client