This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/v28XBIDcOIWawnqoBUd5lqyUYxk.roa File: v28XBIDcOIWawnqoBUd5lqyUYxk.roa (raw, json) Hash identifier: WxydDKnqf++ZAuoc5GMUeeHtdm5DstgCBzp6r96AGOg= Subject key identifier: BF:6F:17:04:80:DC:38:85:9A:C2:7A:A8:05:47:79:96:AC:94:63:19 Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Certificate serial: 019B7EA55BB3FD497A015DDB93FD03783530 Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/v28XBIDcOIWawnqoBUd5lqyUYxk.roa Signing time: Fri 02 Jan 2026 12:18:44 +0000 ROA not before: Fri 02 Jan 2026 12:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208796 IP address blocks: 2a10:4646:270::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:5b:b3:fd:49:7a:01:5d:db:93:fd:03:78:35:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Validity Not Before: Jan 2 12:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf6f170480dc38859ac27aa805477996ac946319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:88:73:ee:ff:0a:37:ac:95:9f:1c:23:96:5e: a1:59:7f:48:13:32:88:d0:c1:f3:2a:f0:ec:07:f9: 52:4b:20:99:d6:c7:ab:63:57:f0:22:57:e9:a6:af: ab:d3:cb:5e:b7:d9:b4:7b:99:3a:e8:e6:1f:2e:73: 66:63:e7:36:c0:dc:9f:fd:52:93:9b:d6:99:e1:9e: 65:5b:80:06:99:ff:d2:4e:fd:f9:fc:25:44:52:69: 15:24:ac:ee:db:e2:96:bd:5f:ce:73:54:7a:fe:8d: 4c:89:42:5b:d1:3a:8d:aa:79:dc:17:43:37:c7:e7: 2b:74:c0:1a:6c:01:3c:35:fe:21:97:87:42:d0:9a: 3c:89:77:71:f3:bd:6a:3d:df:73:dd:4f:cf:a0:12: 36:6d:c5:85:b9:d7:f2:6d:dd:28:3a:80:4f:96:6e: d8:2b:e7:bf:6b:95:7f:d8:b5:d6:5a:3b:bd:8e:f2: 8f:af:33:9e:ad:ae:4e:35:be:6b:83:fc:0e:d0:37: fe:79:18:4f:76:52:28:ce:bb:79:26:cd:f1:0c:ff: 84:d0:25:63:e6:11:57:d6:14:c6:2b:42:1a:b7:f0: 26:fe:3b:a1:48:e5:7b:1c:0f:5b:d6:73:5f:02:08: f4:2e:14:56:5a:b6:32:73:b6:06:78:7d:18:f8:28: c6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:6F:17:04:80:DC:38:85:9A:C2:7A:A8:05:47:79:96:AC:94:63:19 X509v3 Authority Key Identifier: keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/v28XBIDcOIWawnqoBUd5lqyUYxk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:4646:270::/44 Signature Algorithm: sha256WithRSAEncryption 31:1a:cf:c5:89:e9:3b:a9:ed:98:8a:9d:e2:41:c6:40:88:c4: 0f:f9:fa:76:1a:1b:a1:5b:d9:00:78:3c:b7:2e:8b:ad:64:91: f7:29:10:14:8f:1b:84:d1:6d:d8:f0:d4:2c:fd:84:e2:18:29: 8f:5c:ad:31:24:73:b9:af:c6:a9:b8:5a:a1:66:d0:5f:51:18: 6f:17:f5:75:a5:e3:26:6e:15:d8:ad:61:37:65:ba:dd:63:b0: 22:13:8b:3c:76:a0:8e:83:7e:da:5b:ce:28:4f:60:1d:b2:7a: e5:b6:75:4d:29:2c:ae:6a:c9:36:ed:9f:28:36:7b:10:f2:b8: 50:bb:98:0e:2f:c2:1e:62:1f:f3:b2:74:5b:fb:67:c9:84:35: bb:ec:16:e4:85:4d:6d:7c:79:e1:06:20:d1:a5:f8:a3:46:bd: 89:36:73:6a:e7:1d:33:f7:b9:a8:eb:db:b1:cb:c9:df:6c:da: d9:d7:30:27:9a:b3:6a:c0:e1:5c:e1:51:1e:90:8b:70:28:61: 26:02:5b:6d:70:c9:d8:9b:5f:a1:c2:60:80:77:ef:48:0b:3d: d6:91:0b:32:ef:d2:71:d5:fb:f3:2e:6b:08:4d:a8:dd:e7:a2: dd:25:9f:6c:60:7f:94:94:32:56:b7:e1:e9:e0:49:e9:52:8f: 8d:02:c6:b9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pVuz/Ul6AV3bk/0DeDUwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2 N2RmMDIwHhcNMjYwMTAyMTIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjZmMTcwNDgwZGMzODg1OWFjMjdhYTgwNTQ3Nzk5NmFjOTQ2MzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ohz7v8KN6yVnxwjll6hWX9IEzKI 0MHzKvDsB/lSSyCZ1serY1fwIlfppq+r08tet9m0e5k66OYfLnNmY+c2wNyf/VKT m9aZ4Z5lW4AGmf/STv35/CVEUmkVJKzu2+KWvV/Oc1R6/o1MiUJb0TqNqnncF0M3 x+crdMAabAE8Nf4hl4dC0Jo8iXdx871qPd9z3U/PoBI2bcWFudfybd0oOoBPlm7Y K+e/a5V/2LXWWju9jvKPrzOera5ONb5rg/wO0Df+eRhPdlIozrt5Js3xDP+E0CVj 5hFX1hTGK0Iat/Am/juhSOV7HA9b1nNfAgj0LhRWWrYyc7YGeH0Y+CjGewIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFL9vFwSA3DiFmsJ6qAVHeZaslGMZMB8GA1UdIwQY MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt YWU5MjgzZTc5NjRlLzEvdjI4WEJJRGNPSVdhd25xb0JVZDVscXlVWXhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhBGRgJw MA0GCSqGSIb3DQEBCwUAA4IBAQAxGs/Fiek7qe2Yip3iQcZAiMQP+fp2GhuhW9kA eDy3LoutZJH3KRAUjxuE0W3Y8NQs/YTiGCmPXK0xJHO5r8apuFqhZtBfURhvF/V1 peMmbhXYrWE3ZbrdY7AiE4s8dqCOg37aW84oT2AdsnrltnVNKSyuask27Z8oNnsQ 8rhQu5gOL8IeYh/zsnRb+2fJhDW77BbkhU1tfHnhBiDRpfijRr2JNnNq5x0z97mo 69uxy8nfbNrZ1zAnmrNqwOFc4VEekItwKGEmAlttcMnYm1+hwmCAd+9ICz3WkQsy 79Jx1fvzLmsITajd56LdJZ9sYH+UlDJWt+Hp4EnpUo+NAsa5 -----END CERTIFICATE-----Generated at Fri Jan 30 22:55:34 2026 by rpki-client