This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/4pV68l2U_OBI_KTxAoUjIOcjUzI.roa File: 4pV68l2U_OBI_KTxAoUjIOcjUzI.roa (raw, json) Hash identifier: B8v0b/yVI8T3veKWEXtdL1LMqczUDHMKi7SYPYiViEE= Subject key identifier: E2:95:7A:F2:5D:94:FC:E0:48:FC:A4:F1:02:85:23:20:E7:23:53:32 Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Certificate serial: 019B7E38B5A5F44C586C000892D6AC3C6957 Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/4pV68l2U_OBI_KTxAoUjIOcjUzI.roa Signing time: Fri 02 Jan 2026 10:20:04 +0000 ROA not before: Fri 02 Jan 2026 10:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201217 IP address blocks: 2a13:a5c6::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b5:a5:f4:4c:58:6c:00:08:92:d6:ac:3c:69:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Validity Not Before: Jan 2 10:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2957af25d94fce048fca4f102852320e7235332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2c:24:43:f1:62:5f:33:6d:a0:40:6a:e7:65: 40:d6:61:7c:84:24:85:19:36:80:77:03:4d:22:75: 74:0d:75:b2:02:84:36:3a:a8:91:8f:72:07:54:c6: 23:c2:94:8c:18:58:46:29:7e:12:71:86:db:30:6a: 65:a3:7f:59:d9:ba:7c:5a:7c:1f:b4:7f:b4:f9:f5: da:d4:0a:e0:b1:6c:da:ab:ae:d4:0f:e7:aa:55:b3: 26:dd:c4:34:ee:d7:e9:e2:9d:2f:5e:49:ce:c0:5a: 04:9a:bc:27:81:99:6e:1c:92:9e:db:a6:ee:00:b6: 59:19:d2:47:08:c2:a0:22:7c:93:e4:67:f4:7e:68: 11:4e:3e:dd:73:b0:c1:6d:84:d6:c2:6e:bf:d6:ff: df:d0:2a:1c:4b:74:7b:c4:6e:bd:aa:26:90:0a:21: 28:a7:cc:f9:69:ad:79:dc:be:bd:ad:09:d3:50:eb: 51:1f:83:42:c5:2a:50:2b:f1:8f:e6:a6:e0:31:da: 6a:17:12:93:71:05:e2:5e:02:02:78:8d:a5:ff:e0: 61:32:8e:97:83:f3:fd:32:0d:34:f3:38:22:e4:57: 71:50:38:5a:59:4f:5e:f7:b8:34:06:d8:f3:c2:06: 62:d3:40:d8:b6:a2:1e:d2:9e:a4:b1:5e:32:09:db: 9c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:95:7A:F2:5D:94:FC:E0:48:FC:A4:F1:02:85:23:20:E7:23:53:32 X509v3 Authority Key Identifier: keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/4pV68l2U_OBI_KTxAoUjIOcjUzI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:a5c6::/32 Signature Algorithm: sha256WithRSAEncryption 81:92:ed:62:b1:a4:2d:b4:e5:15:ce:cb:b3:fc:d4:0f:03:fc: dc:1f:0d:98:c0:10:cd:b7:eb:86:cf:c8:a3:24:91:9b:a5:48: 87:ea:08:df:45:6a:2c:b1:c1:7a:37:2c:a7:29:e7:73:35:b9: ea:6d:b6:9e:0a:b0:fc:b4:f5:34:95:8d:53:9a:cb:a7:93:c4: 50:0e:04:15:d0:5d:d4:b0:04:c8:1b:29:99:36:9c:ed:50:8b: ac:cb:0e:5b:66:d9:d3:d9:3e:e7:48:ba:af:52:5b:aa:9e:fa: 63:0b:c1:0c:3e:c2:4b:10:8e:12:86:84:61:dc:c2:5a:f5:0f: cf:38:6d:8b:14:fc:87:0b:8a:36:cd:51:da:be:7f:eb:3e:41: 2e:50:12:16:f7:4d:f7:c1:2c:05:2b:d2:10:8f:c3:95:7f:da: 8f:d2:21:b3:e1:b6:f7:f4:a8:9e:67:36:49:81:48:f0:28:89: 4b:ba:53:7c:75:44:dd:34:61:1d:fe:f4:2a:2a:d6:53:40:1f: fe:e9:bf:4b:cd:d2:26:fb:ef:4b:eb:0f:34:0e:72:7b:84:be: d6:47:72:a6:0c:12:8c:9c:cf:3f:62:a9:04:60:19:32:e6:a8: b1:9a:ad:61:79:8d:62:18:c6:12:76:35:79:21:81:3f:87:cf: e9:32:73:bf -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+OLWl9ExYbAAIktasPGlXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3 MWRkOWQwHhcNMjYwMTAyMTAyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjk1N2FmMjVkOTRmY2UwNDhmY2E0ZjEwMjg1MjMyMGU3MjM1MzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSwkQ/FiXzNtoEBq52VA1mF8hCSF GTaAdwNNInV0DXWyAoQ2OqiRj3IHVMYjwpSMGFhGKX4ScYbbMGplo39Z2bp8Wnwf tH+0+fXa1ArgsWzaq67UD+eqVbMm3cQ07tfp4p0vXknOwFoEmrwngZluHJKe26bu ALZZGdJHCMKgInyT5Gf0fmgRTj7dc7DBbYTWwm6/1v/f0CocS3R7xG69qiaQCiEo p8z5aa153L69rQnTUOtRH4NCxSpQK/GP5qbgMdpqFxKTcQXiXgICeI2l/+BhMo6X g/P9Mg008zgi5FdxUDhaWU9e97g0BtjzwgZi00DYtqIe0p6ksV4yCducowIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFOKVevJdlPzgSPyk8QKFIyDnI1MyMB8GA1UdIwQY MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct NjNjNzIxY2YxZjU2LzEvNHBWNjhsMlVfT0JJX0tUeEFvVWpJT2NqVXpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2 LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhOlxjAN BgkqhkiG9w0BAQsFAAOCAQEAgZLtYrGkLbTlFc7Ls/zUDwP83B8NmMAQzbfrhs/I oySRm6VIh+oI30VqLLHBejcspynnczW56m22ngqw/LT1NJWNU5rLp5PEUA4EFdBd 1LAEyBspmTac7VCLrMsOW2bZ09k+50i6r1Jbqp76YwvBDD7CSxCOEoaEYdzCWvUP zzhtixT8hwuKNs1R2r5/6z5BLlASFvdN98EsBSvSEI/DlX/aj9Ihs+G29/Sonmc2 SYFI8CiJS7pTfHVE3TRhHf70KirWU0Af/um/S83SJvvvS+sPNA5ye4S+1kdypgwS jJzPP2KpBGAZMuaosZqtYXmNYhjGEnY1eSGBP4fP6TJzvw== -----END CERTIFICATE-----Generated at Mon Jan 5 03:50:01 2026 by rpki-client