This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/_4M4oq0S8mIZa0V69_lse01j-Sk.roa File: _4M4oq0S8mIZa0V69_lse01j-Sk.roa (raw, json) Hash identifier: NZU7UkxZ6lsoZXHjmmCZKMcfUdhd7kq2mJZpnareMGQ= Subject key identifier: FF:83:38:A2:AD:12:F2:62:19:6B:45:7A:F7:F9:6C:7B:4D:63:F9:29 Certificate issuer: /CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d Certificate serial: 019B7D5BB06EA7CAE1B7FFE6DE1A3DE22762 Authority key identifier: 11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/_4M4oq0S8mIZa0V69_lse01j-Sk.roa Signing time: Fri 02 Jan 2026 06:18:39 +0000 ROA not before: Fri 02 Jan 2026 06:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216289 IP address blocks: 2a14:f300:a0fe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.mft rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:b0:6e:a7:ca:e1:b7:ff:e6:de:1a:3d:e2:27:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111c6daf277c2735cdee4a0c85e36c85c25d3c3d Validity Not Before: Jan 2 06:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff8338a2ad12f262196b457af7f96c7b4d63f929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8b:10:c8:8c:18:f1:a3:0e:29:a9:a1:c4:1d: 35:f6:88:22:11:82:dc:01:c3:c5:60:14:c0:1a:a4: 60:4c:4e:46:ed:4d:66:ab:28:13:38:72:85:64:55: f4:36:f1:ab:4c:5c:52:73:28:05:5e:05:ad:1d:32: be:25:87:86:96:6f:79:60:63:95:66:e3:a1:1c:5b: af:bc:bd:f1:8b:af:c6:5c:60:f7:61:d8:49:0a:86: 24:ea:12:75:2e:44:ef:50:e1:fb:7a:87:0e:a9:f7: f9:39:0a:82:c7:0b:49:4b:fd:10:df:4b:8e:62:0a: 5c:8f:b4:e8:c1:02:da:47:59:8c:8c:5e:43:87:90: 5c:0e:42:c6:b8:e8:c7:96:80:da:1b:e2:87:da:aa: b7:5d:ea:72:a1:41:47:16:66:39:01:f5:a6:84:80: 98:8c:80:68:8f:ab:4e:4c:1a:a6:e5:7a:15:f5:c9: c6:6f:62:1e:74:ac:30:44:e4:58:83:75:b9:e7:da: e0:32:f4:6b:81:42:b4:13:6a:c4:dd:47:ab:a1:e3: 0e:29:10:04:dc:c4:bf:92:13:cc:ee:9e:06:08:ed: bc:ce:1f:ce:63:71:ac:24:1e:e0:24:e3:ec:af:86: 25:37:64:8e:3f:9d:b8:f2:5c:e7:6e:74:0e:01:88: ab:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:83:38:A2:AD:12:F2:62:19:6B:45:7A:F7:F9:6C:7B:4D:63:F9:29 X509v3 Authority Key Identifier: keyid:11:1C:6D:AF:27:7C:27:35:CD:EE:4A:0C:85:E3:6C:85:C2:5D:3C:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERxtryd8JzXN7koMheNshcJdPD0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/_4M4oq0S8mIZa0V69_lse01j-Sk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ba4766-7b3f-4e57-83de-37bfcb80f618/1/ERxtryd8JzXN7koMheNshcJdPD0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:f300:a0fe::/48 Signature Algorithm: sha256WithRSAEncryption 5d:f0:2e:a8:19:48:6f:16:10:4b:79:0a:61:88:7c:bc:e7:c0: c9:be:e0:8a:ed:c1:01:b9:2d:2a:6e:e2:84:dc:21:d4:71:8e: 14:77:bd:a2:b6:7e:6c:1c:34:bc:97:c2:d2:1f:61:ff:f2:93: b5:4f:b7:12:60:0d:59:3c:3c:2c:9e:1b:68:0f:bc:7f:74:97: 17:f9:09:40:59:79:6a:15:7c:74:c1:e5:70:a3:7b:89:60:12: 77:59:ac:08:38:c8:05:a7:c5:e8:f8:f2:7e:61:dd:51:63:20: 49:39:25:f8:16:e1:67:74:2b:9e:b8:44:b2:bb:2e:e8:a1:25: a9:db:5f:e1:8c:e0:95:40:04:37:f9:ad:38:06:60:15:0c:46: 14:90:78:66:15:74:bf:88:b1:c4:83:51:2e:43:80:37:a7:5a: ac:12:2b:ad:48:d5:35:3a:b1:a8:fc:e0:98:e1:91:20:76:0b: d3:05:18:af:d6:13:15:bd:a2:dc:36:00:62:95:bc:3d:7d:0c: 03:01:46:76:fa:ca:68:00:3b:53:2d:d0:c3:98:88:22:dc:05: 9a:9e:46:e1:b4:b5:1e:99:3d:8f:88:bf:9f:90:85:64:be:56: 09:6e:5d:28:72:35:7d:99:13:7a:3e:62:49:dd:fc:f6:0b:15: bb:01:50:c7 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9W7Bup8rht//m3ho94idiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWM2ZGFmMjc3YzI3MzVjZGVlNGEwYzg1ZTM2Yzg1YzI1 ZDNjM2QwHhcNMjYwMTAyMDYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjgzMzhhMmFkMTJmMjYyMTk2YjQ1N2FmN2Y5NmM3YjRkNjNmOTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIsQyIwY8aMOKamhxB019ogiEYLc AcPFYBTAGqRgTE5G7U1mqygTOHKFZFX0NvGrTFxScygFXgWtHTK+JYeGlm95YGOV ZuOhHFuvvL3xi6/GXGD3YdhJCoYk6hJ1LkTvUOH7eocOqff5OQqCxwtJS/0Q30uO Ygpcj7TowQLaR1mMjF5Dh5BcDkLGuOjHloDaG+KH2qq3XepyoUFHFmY5AfWmhICY jIBoj6tOTBqm5XoV9cnGb2IedKwwRORYg3W559rgMvRrgUK0E2rE3UeroeMOKRAE 3MS/khPM7p4GCO28zh/OY3GsJB7gJOPsr4YlN2SOP5248lznbnQOAYirUwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFP+DOKKtEvJiGWtFevf5bHtNY/kpMB8GA1UdIwQY MBaAFBEcba8nfCc1ze5KDIXjbIXCXTw9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVJ4dHJ5ZDhKelhON2tvTWhlTnNoY0pkUEQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iYTQ3NjYtN2IzZi00ZTU3LTgzZGUt MzdiZmNiODBmNjE4LzEvXzRNNG9xMFM4bUlaYTBWNjlfbHNlMDFqLVNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9iYTQ3NjYtN2IzZi00ZTU3LTgzZGUtMzdiZmNiODBmNjE4 LzEvRVJ4dHJ5ZDhKelhON2tvTWhlTnNoY0pkUEQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhTzAKD+ MA0GCSqGSIb3DQEBCwUAA4IBAQBd8C6oGUhvFhBLeQphiHy858DJvuCK7cEBuS0q buKE3CHUcY4Ud72itn5sHDS8l8LSH2H/8pO1T7cSYA1ZPDwsnhtoD7x/dJcX+QlA WXlqFXx0weVwo3uJYBJ3WawIOMgFp8Xo+PJ+Yd1RYyBJOSX4FuFndCueuESyuy7o oSWp21/hjOCVQAQ3+a04BmAVDEYUkHhmFXS/iLHEg1EuQ4A3p1qsEiutSNU1OrGo /OCY4ZEgdgvTBRiv1hMVvaLcNgBilbw9fQwDAUZ2+spoADtTLdDDmIgi3AWankbh tLUemT2PiL+fkIVkvlYJbl0ocjV9mRN6PmJJ3fz2CxW7AVDH -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:22 2026 by rpki-client