This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/m8ID0gB2vpvaO0SqfOivDD6e-8Q.roa File: m8ID0gB2vpvaO0SqfOivDD6e-8Q.roa (raw, json) Hash identifier: WOi6Lhxlm92bLPsxSuGyD5YQk0k4RFLyGTk9VGtyTMo= Subject key identifier: 9B:C2:03:D2:00:76:BE:9B:DA:3B:44:AA:7C:E8:AF:0C:3E:9E:FB:C4 Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019B7EA75F8154AE47589114C94B18F5E76D Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/m8ID0gB2vpvaO0SqfOivDD6e-8Q.roa Signing time: Fri 02 Jan 2026 12:20:56 +0000 ROA not before: Fri 02 Jan 2026 12:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 2a10:b45::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:5f:81:54:ae:47:58:91:14:c9:4b:18:f5:e7:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Jan 2 12:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bc203d20076be9bda3b44aa7ce8af0c3e9efbc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f2:eb:13:1d:5d:51:c2:e8:53:71:03:5a:fc: 35:8e:b5:dd:b3:af:6c:38:21:f5:a5:b6:1b:ba:f7: 97:1f:40:b6:8c:15:2a:75:ac:00:8e:35:5e:08:37: a2:71:bd:b4:ec:65:41:47:12:29:7d:d8:51:17:4b: c4:fd:58:e1:9c:e1:5f:50:6d:82:9e:4c:20:83:06: 50:8e:7e:f9:b8:49:6b:b9:bc:ca:6b:1c:e5:c8:5b: be:74:63:29:f5:4e:5f:bc:35:9e:44:d7:20:0e:8b: b0:14:5e:78:ea:ea:fe:35:48:1d:68:99:fd:14:c2: c2:88:ba:1a:ce:3d:67:58:19:bf:bf:98:20:03:94: e3:4d:eb:a2:aa:4b:ac:70:c7:6b:98:3a:36:26:06: cf:6c:31:7c:7a:ec:9f:68:06:aa:6f:a3:42:84:e6: be:8a:61:bf:bb:fa:a2:55:1c:0e:0a:50:9f:7f:95: fb:6f:f1:93:bb:81:12:72:2b:a4:75:ba:ed:a2:73: 64:1e:d5:a5:b4:6b:0e:70:89:d2:f1:ec:a3:d8:4f: 92:73:91:86:c0:a0:12:57:68:86:03:cc:ba:bc:5c: 66:ac:7a:38:5f:17:11:28:65:53:ef:0e:18:fb:4e: 8c:00:fe:2d:70:cd:fc:62:d5:67:60:a7:fe:12:cb: d0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C2:03:D2:00:76:BE:9B:DA:3B:44:AA:7C:E8:AF:0C:3E:9E:FB:C4 X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/m8ID0gB2vpvaO0SqfOivDD6e-8Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:b45::/32 Signature Algorithm: sha256WithRSAEncryption 34:25:5b:4a:ba:9f:7e:95:e6:ca:38:52:a3:82:3d:36:0b:1f: 61:0e:3b:f4:47:ea:a6:de:25:77:71:c9:e1:08:01:20:a1:e7: 9a:fd:bd:f9:b4:75:4c:ec:79:2d:cc:dc:3c:06:cb:e7:48:95: 52:35:0a:51:07:73:66:41:1a:f3:19:33:d7:cd:8a:a7:11:a1: 01:30:05:1c:95:65:f5:43:36:5e:9b:c0:44:ef:38:2c:43:63: f6:35:20:36:88:0d:3e:d9:8f:56:bd:c6:be:cd:db:1d:bd:cd: 02:d8:ec:9b:2b:6d:96:ec:c6:39:1e:b9:e5:b3:9d:cf:77:89: 0f:a8:75:3e:e5:37:a1:2c:aa:bf:61:71:a4:af:0b:9a:84:3a: b3:02:62:21:23:fa:04:ce:f9:cd:dc:c0:79:bc:56:88:71:de: 4d:68:25:ba:c8:c3:0e:82:86:32:37:95:38:a5:98:a4:98:66: 93:14:02:39:ed:a9:3d:e2:b1:d4:e5:a2:fb:14:1c:ef:6e:18: a9:cb:b3:ba:e1:62:da:b1:8a:bc:1a:2c:d9:cc:e3:12:26:07: b5:72:cd:c1:23:80:e3:43:56:c7:bb:49:bc:09:1c:f9:a5:38: a5:44:34:63:ad:2f:9a:71:87:9e:d5:d8:46:4d:55:64:4f:1d: 78:e0:a6:0a -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+p1+BVK5HWJEUyUsY9edtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjYwMTAyMTIyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmMyMDNkMjAwNzZiZTliZGEzYjQ0YWE3Y2U4YWYwYzNlOWVmYmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/LrEx1dUcLoU3EDWvw1jrXds69s OCH1pbYbuveXH0C2jBUqdawAjjVeCDeicb207GVBRxIpfdhRF0vE/VjhnOFfUG2C nkwggwZQjn75uElrubzKaxzlyFu+dGMp9U5fvDWeRNcgDouwFF546ur+NUgdaJn9 FMLCiLoazj1nWBm/v5ggA5TjTeuiqkuscMdrmDo2JgbPbDF8euyfaAaqb6NChOa+ imG/u/qiVRwOClCff5X7b/GTu4ESciukdbrtonNkHtWltGsOcInS8eyj2E+Sc5GG wKASV2iGA8y6vFxmrHo4XxcRKGVT7w4Y+06MAP4tcM38YtVnYKf+EsvQnQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFJvCA9IAdr6b2jtEqnzorww+nvvEMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvbThJRDBnQjJ2cHZhTzBTcWZPaXZERDZlLThRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhALRTAN BgkqhkiG9w0BAQsFAAOCAQEANCVbSrqffpXmyjhSo4I9NgsfYQ479Efqpt4ld3HJ 4QgBIKHnmv29+bR1TOx5LczcPAbL50iVUjUKUQdzZkEa8xkz182KpxGhATAFHJVl 9UM2XpvARO84LENj9jUgNogNPtmPVr3Gvs3bHb3NAtjsmyttluzGOR655bOdz3eJ D6h1PuU3oSyqv2FxpK8LmoQ6swJiISP6BM75zdzAebxWiHHeTWglusjDDoKGMjeV OKWYpJhmkxQCOe2pPeKx1OWi+xQc724YqcuzuuFi2rGKvBos2czjEiYHtXLNwSOA 40NWx7tJvAkc+aU4pUQ0Y60vmnGHntXYRk1VZE8deOCmCg== -----END CERTIFICATE-----Generated at Sat Jan 3 18:59:59 2026 by rpki-client