This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/_IfucW-In1l5Fz3tjcTrBT7FS9I.roa File: _IfucW-In1l5Fz3tjcTrBT7FS9I.roa (raw, json) Hash identifier: 0d3RCOf/PgnlqbIN8XSmRiR9HJQfbIKvyOIHy7stdzo= Subject key identifier: FC:87:EE:71:6F:88:9F:59:79:17:3D:ED:8D:C4:EB:05:3E:C5:4B:D2 Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Certificate serial: 019B7EA553E4AC5FE592D8048266DCE1DBE6 Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/_IfucW-In1l5Fz3tjcTrBT7FS9I.roa Signing time: Fri 02 Jan 2026 12:18:42 +0000 ROA not before: Fri 02 Jan 2026 12:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57080 IP address blocks: 2a10:4646:1c0::/48 maxlen: 48 2a10:4646:1c1::/48 maxlen: 48 2a10:4646:1c2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:53:e4:ac:5f:e5:92:d8:04:82:66:dc:e1:db:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Validity Not Before: Jan 2 12:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc87ee716f889f5979173ded8dc4eb053ec54bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:09:74:9f:80:13:56:ca:30:b8:11:b6:da:9c: 84:94:1a:49:06:f3:9a:24:b5:fd:2e:f7:ec:8a:ef: c9:2f:74:d8:7a:01:96:4b:0b:93:1b:3d:f6:c3:e4: 10:00:80:14:8b:38:6c:49:49:c6:0b:63:19:c4:4d: cc:e4:ce:e6:8d:06:cc:f1:5d:20:93:c9:84:95:50: 10:83:c8:b7:51:2b:82:ca:47:a5:0f:1e:79:5e:09: fb:db:78:69:df:70:62:6e:d3:68:4f:07:9c:3d:9b: 27:c9:d8:f9:df:af:32:14:55:6f:84:55:f8:af:ed: 46:c6:4e:6d:7b:02:a6:81:b4:57:90:8f:66:8b:9e: 1e:1a:58:ae:c2:b9:9a:1c:e7:54:5e:fa:51:6a:45: 76:01:6d:c2:70:01:ed:4c:a0:f8:80:43:52:a4:4f: bc:f9:c3:3f:88:8f:1c:e7:4b:6d:2a:37:21:d2:94: 2b:d2:85:83:92:c0:a7:f6:d1:e1:45:5f:f1:a3:99: 03:e5:60:3f:e8:64:5a:e8:4a:0d:67:c5:29:b7:c9: cb:47:d9:de:54:05:cf:e4:8f:c2:9d:31:52:19:75: 80:78:6e:4b:19:fa:e3:7a:b3:eb:5f:bc:83:e9:53: b2:67:8e:70:87:7e:fc:e8:bc:e4:df:68:a8:5b:16: 1e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:87:EE:71:6F:88:9F:59:79:17:3D:ED:8D:C4:EB:05:3E:C5:4B:D2 X509v3 Authority Key Identifier: keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/_IfucW-In1l5Fz3tjcTrBT7FS9I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:4646:1c0::-2a10:4646:1c2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption c8:7a:6b:41:5b:50:6c:a4:7e:2b:0d:bd:45:6b:5a:c0:1d:e4: ec:0e:a5:89:ef:43:f6:60:d3:85:18:24:ad:f2:8f:51:56:98: d6:24:15:18:36:aa:66:86:94:95:7d:ee:f9:91:55:82:8e:99: ab:f0:dd:7a:d9:36:7f:89:1d:1b:8a:f0:c9:38:79:4e:7d:34: 1d:a2:40:22:72:d5:ac:42:38:1e:44:01:39:7c:2f:d5:5e:a1: da:67:44:4a:cc:5a:1a:1a:52:e0:66:bf:b4:49:58:7d:b6:e5: 55:f8:3f:40:aa:27:96:9e:bf:dc:0e:65:00:83:2b:6e:f7:c7: ba:b6:5a:91:0d:1d:47:49:ca:11:0a:c9:61:0b:bf:d5:4d:f5: 13:0d:bc:50:40:02:40:59:f8:7f:a9:0c:ae:d3:5a:4e:e0:3f: 48:7c:12:56:7b:d2:5b:bf:d2:4a:2e:92:3b:02:a4:f6:cb:86: 3d:49:e1:b9:92:65:a8:9e:01:12:ff:5c:67:5b:71:ef:5b:9e: 1c:0c:20:f6:25:62:fb:a4:fa:d6:83:29:15:6e:aa:28:5e:34: 0e:82:6a:d0:9a:48:a9:39:34:3d:0c:23:23:da:c5:f7:4d:76: 84:a6:66:58:4f:b0:cd:02:a4:17:c5:86:c7:07:4d:31:f9:d9: 10:67:35:75 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt+pVPkrF/lktgEgmbc4dvmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2 N2RmMDIwHhcNMjYwMTAyMTIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzg3ZWU3MTZmODg5ZjU5NzkxNzNkZWQ4ZGM0ZWIwNTNlYzU0YmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAl0n4ATVsowuBG22pyElBpJBvOa JLX9Lvfsiu/JL3TYegGWSwuTGz32w+QQAIAUizhsSUnGC2MZxE3M5M7mjQbM8V0g k8mElVAQg8i3USuCykelDx55Xgn723hp33BibtNoTwecPZsnydj5368yFFVvhFX4 r+1Gxk5tewKmgbRXkI9mi54eGliuwrmaHOdUXvpRakV2AW3CcAHtTKD4gENSpE+8 +cM/iI8c50ttKjch0pQr0oWDksCn9tHhRV/xo5kD5WA/6GRa6EoNZ8Upt8nLR9ne VAXP5I/CnTFSGXWAeG5LGfrjerPrX7yD6VOyZ45wh3786Lzk32ioWxYepwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFPyH7nFviJ9ZeRc97Y3E6wU+xUvSMB8GA1UdIwQY MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt YWU5MjgzZTc5NjRlLzEvX0lmdWNXLUluMWw1RnozdGpjVHJCVDdGUzlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwYqEEZG AcADBwAqEEZGAcIwDQYJKoZIhvcNAQELBQADggEBAMh6a0FbUGykfisNvUVrWsAd 5OwOpYnvQ/Zg04UYJK3yj1FWmNYkFRg2qmaGlJV97vmRVYKOmavw3XrZNn+JHRuK 8Mk4eU59NB2iQCJy1axCOB5EATl8L9VeodpnRErMWhoaUuBmv7RJWH225VX4P0Cq J5aev9wOZQCDK273x7q2WpENHUdJyhEKyWELv9VN9RMNvFBAAkBZ+H+pDK7TWk7g P0h8ElZ70lu/0koukjsCpPbLhj1J4bmSZaieARL/XGdbce9bnhwMIPYlYvuk+taD KRVuqiheNA6CatCaSKk5ND0MIyPaxfdNdoSmZlhPsM0CpBfFhscHTTH52RBnNXU= -----END CERTIFICATE-----Generated at Fri Jan 30 22:55:38 2026 by rpki-client