This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/4YDvutSU0UmPrwnDFoLiKufwEY8.roa File: 4YDvutSU0UmPrwnDFoLiKufwEY8.roa (raw, json) Hash identifier: zJVa6p9/6hu2WbxRpiJdGV1n058lDV+uyqxwOAwNowA= Subject key identifier: E1:80:EF:BA:D4:94:D1:49:8F:AF:09:C3:16:82:E2:2A:E7:F0:11:8F Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Certificate serial: 019B7EA55FA2186C976FB081D3E8ED71DD98 Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/4YDvutSU0UmPrwnDFoLiKufwEY8.roa Signing time: Fri 02 Jan 2026 12:18:45 +0000 ROA not before: Fri 02 Jan 2026 12:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212106 IP address blocks: 2a10:4646:11::/48 maxlen: 48 2a10:4646:60::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:5f:a2:18:6c:97:6f:b0:81:d3:e8:ed:71:dd:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Validity Not Before: Jan 2 12:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e180efbad494d1498faf09c31682e22ae7f0118f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6a:d7:6d:4c:97:f2:a1:a8:9b:95:68:0e:b9: c5:d0:99:ad:7b:03:49:6e:c5:22:2b:28:09:69:9d: b9:e2:dd:85:3d:64:73:36:f9:bc:fd:a2:78:8c:10: 3d:8f:bf:d7:9e:a1:7e:14:28:16:0b:59:77:fb:fb: 73:38:7a:c3:dd:ba:1e:af:aa:9d:c5:89:88:62:ae: 21:6d:88:34:92:9f:73:24:01:7e:22:67:f5:36:ac: 5c:61:17:7a:b2:aa:d0:4c:97:11:41:0a:24:e8:31: 68:fd:06:8d:83:d5:71:58:d9:16:e0:60:14:ff:3e: f4:fb:75:ca:fe:dd:d1:a9:2d:b0:ae:41:d4:07:17: b6:b1:ee:02:7a:7f:31:f9:34:9e:56:6e:10:7d:1f: 8e:32:7e:3a:45:36:19:f7:69:e2:c5:2a:41:75:64: b0:24:94:31:52:25:47:18:0e:e3:ac:6f:63:bd:9c: b0:60:89:90:96:2d:a9:be:32:0e:16:33:c4:e5:98: ad:69:9b:a9:78:df:19:70:7c:0f:13:e9:ea:50:b0: 5c:16:38:37:21:71:e1:a5:35:2e:a6:69:bf:ec:56: 49:29:21:fe:f8:31:eb:bc:1f:e4:b4:cd:d2:5d:4a: 93:19:a2:c2:ea:69:5e:8b:aa:17:29:4c:1e:20:29: 8c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:80:EF:BA:D4:94:D1:49:8F:AF:09:C3:16:82:E2:2A:E7:F0:11:8F X509v3 Authority Key Identifier: keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/4YDvutSU0UmPrwnDFoLiKufwEY8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:4646:11::/48 2a10:4646:60::/44 Signature Algorithm: sha256WithRSAEncryption 7f:d0:fa:03:5d:40:c0:01:90:22:63:61:50:ff:90:b9:a2:1d: af:0d:a3:f8:ae:84:e2:4e:9f:83:da:38:ba:7a:78:43:e2:62: c9:89:ee:8d:64:90:0d:3e:f1:b6:b3:8e:a8:0e:d0:7b:e1:86: bb:f2:26:7c:0e:33:29:8c:7b:38:c1:85:90:a5:4c:d2:c2:a0: 6e:00:29:60:38:d8:19:70:a6:5d:ff:ff:9b:0a:02:d7:1b:05: 0d:8e:60:32:3f:b5:51:71:9f:1d:93:77:3c:28:02:a3:28:40: 65:1e:07:44:58:d6:6d:c6:22:2a:ca:27:7e:60:c0:97:c5:66: ce:c7:33:dd:14:d5:27:9c:9f:d6:a9:31:7c:b0:65:76:6a:b5: b7:ee:1d:3a:66:3c:de:a6:e7:72:50:9f:59:d4:92:f3:60:85: 99:ec:75:55:4e:4d:44:24:e3:7c:32:1c:98:2b:98:28:7f:4d: a1:0f:71:f1:bd:df:87:04:8f:03:81:0a:e9:d1:7f:de:1d:da: 3a:b9:e7:1b:21:4c:c3:52:27:fc:7c:e4:83:1b:e0:b3:5a:66: b7:d4:45:3f:41:a1:8a:e6:d8:cb:ba:96:2c:01:2d:e0:b0:8d: 40:d2:f7:df:17:d6:2f:b9:20:e3:e7:82:fb:ce:03:b1:68:8a: d7:2d:81:a6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+pV+iGGyXb7CB0+jtcd2YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2 N2RmMDIwHhcNMjYwMTAyMTIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTgwZWZiYWQ0OTRkMTQ5OGZhZjA5YzMxNjgyZTIyYWU3ZjAxMThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mrXbUyX8qGom5VoDrnF0JmtewNJ bsUiKygJaZ254t2FPWRzNvm8/aJ4jBA9j7/XnqF+FCgWC1l3+/tzOHrD3boer6qd xYmIYq4hbYg0kp9zJAF+Imf1NqxcYRd6sqrQTJcRQQok6DFo/QaNg9VxWNkW4GAU /z70+3XK/t3RqS2wrkHUBxe2se4Cen8x+TSeVm4QfR+OMn46RTYZ92nixSpBdWSw JJQxUiVHGA7jrG9jvZywYImQli2pvjIOFjPE5ZitaZupeN8ZcHwPE+nqULBcFjg3 IXHhpTUupmm/7FZJKSH++DHrvB/ktM3SXUqTGaLC6mlei6oXKUweICmMTQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOGA77rUlNFJj68JwxaC4irn8BGPMB8GA1UdIwQY MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt YWU5MjgzZTc5NjRlLzEvNFlEdnV0U1UwVW1QcnduREZvTGlLdWZ3RVk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKhBGRgAR AwcEKhBGRgBgMA0GCSqGSIb3DQEBCwUAA4IBAQB/0PoDXUDAAZAiY2FQ/5C5oh2v DaP4roTiTp+D2ji6enhD4mLJie6NZJANPvG2s46oDtB74Ya78iZ8DjMpjHs4wYWQ pUzSwqBuAClgONgZcKZd//+bCgLXGwUNjmAyP7VRcZ8dk3c8KAKjKEBlHgdEWNZt xiIqyid+YMCXxWbOxzPdFNUnnJ/WqTF8sGV2arW37h06ZjzepudyUJ9Z1JLzYIWZ 7HVVTk1EJON8MhyYK5gof02hD3Hxvd+HBI8DgQrp0X/eHdo6uecbIUzDUif8fOSD G+CzWma31EU/QaGK5tjLupYsAS3gsI1A0vffF9YvuSDj54L7zgOxaIrXLYGm -----END CERTIFICATE-----Generated at Fri Jan 30 22:55:38 2026 by rpki-client