This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/n4DxEm2C9DgfRdTFUEly40c3ySQ.roa File: n4DxEm2C9DgfRdTFUEly40c3ySQ.roa (raw, json) Hash identifier: EEKVIWMbLgevLDeloMM06tT9vww9YdjYKwtKyRl3ARE= Subject key identifier: 9F:80:F1:12:6D:82:F4:38:1F:45:D4:C5:50:49:72:E3:47:37:C9:24 Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81 Certificate serial: 019B7EA6CFAEE0062D91D2B28232C03A5A0C Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/n4DxEm2C9DgfRdTFUEly40c3ySQ.roa Signing time: Fri 02 Jan 2026 12:20:19 +0000 ROA not before: Fri 02 Jan 2026 12:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214430 IP address blocks: 2a01:e281:a100::/40 maxlen: 48 2a01:e281:ae00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:cf:ae:e0:06:2d:91:d2:b2:82:32:c0:3a:5a:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81 Validity Not Before: Jan 2 12:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f80f1126d82f4381f45d4c5504972e34737c924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:17:2c:04:45:52:eb:64:5d:c2:43:85:a3:58: 64:c9:35:3a:c3:9f:6e:53:5e:04:5f:64:b6:7b:ca: a9:e3:eb:31:7c:ae:25:3f:11:88:65:a9:bb:68:94: 2c:80:05:a6:80:3b:04:03:83:d6:85:33:2e:fd:81: 00:9d:dd:17:db:a0:1f:5f:0a:a7:17:43:37:0e:1b: 66:16:c4:89:5d:46:f1:ee:b4:56:4f:1d:f2:69:66: 59:6f:5e:1b:db:c1:72:4d:80:9d:18:6e:2d:90:99: d5:0e:25:43:a5:d9:b5:5f:7f:90:4c:55:69:91:de: 39:e5:ce:62:33:b3:e4:29:3c:d2:52:a7:df:0a:42: f5:db:9e:e9:ad:d3:8a:e0:58:5d:47:66:82:73:48: 23:fe:a6:e1:5f:63:17:84:dd:7a:0a:59:34:45:9e: cc:68:b8:f2:1c:b7:c1:82:aa:10:5d:31:2f:7f:bf: 84:ab:bc:52:a7:e6:ec:ed:20:62:8d:7c:58:9d:ee: 96:4d:02:e6:e1:cf:0b:5b:93:6a:36:21:7a:17:39: f1:f1:b2:30:ef:62:03:21:0f:fe:65:d1:82:30:fd: cc:f1:21:6d:b8:9a:6f:61:1b:a8:fa:41:56:29:42: 75:b3:4f:4a:49:56:84:aa:6b:57:33:64:ee:37:da: e6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:80:F1:12:6D:82:F4:38:1F:45:D4:C5:50:49:72:E3:47:37:C9:24 X509v3 Authority Key Identifier: keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/n4DxEm2C9DgfRdTFUEly40c3ySQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:e281:a100::/40 2a01:e281:ae00::/40 Signature Algorithm: sha256WithRSAEncryption 73:11:71:7b:28:08:96:64:db:7b:8b:46:bc:ce:e2:6b:b8:7c: cc:69:c2:00:33:32:69:ec:17:6c:ce:d5:f6:7f:cc:2a:69:2f: 13:a2:11:ad:ab:38:56:1c:29:55:5c:0e:df:df:c2:fa:22:b5: 63:c4:54:ef:4e:88:26:9a:43:fb:75:4f:2b:94:2d:98:87:a9: 14:8b:c9:16:6f:c3:2e:64:76:b2:f9:ec:88:41:86:a8:a1:5a: 1a:d5:a4:fb:4f:e0:05:58:c8:34:46:4a:fc:c5:12:e6:27:e3: 94:1a:00:e3:37:b6:2c:81:c0:38:0a:58:d6:75:48:c3:61:50: 44:00:9d:2f:b3:ca:ea:f4:8f:51:c3:05:39:3d:8e:99:cd:b2: 11:25:c7:1d:db:3f:48:83:44:01:04:5c:9c:0d:af:64:db:b6: 93:93:8f:a8:61:c7:b6:d2:b7:2f:76:27:8d:be:2e:0c:51:91: 6a:41:ca:13:60:a7:91:98:0f:c7:3d:28:bc:8c:0a:ac:5d:78: 4c:fd:26:df:f4:77:14:c7:2a:e7:b0:62:ab:36:74:5e:88:87: 0a:f0:45:53:9d:62:18:64:92:b8:dc:e5:db:b2:29:d8:b4:f5: 96:9d:e0:2b:7d:52:7b:9b:c2:18:f4:91:cf:54:30:25:0d:40: 51:5c:73:07 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt+ps+u4AYtkdKygjLAOloMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZGJlMWU3ZDllODdkNjg3MDFhNDAzNWE3NmM1MWJmZWNk ODhkODEwHhcNMjYwMTAyMTIyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjgwZjExMjZkODJmNDM4MWY0NWQ0YzU1MDQ5NzJlMzQ3MzdjOTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBcsBEVS62RdwkOFo1hkyTU6w59u U14EX2S2e8qp4+sxfK4lPxGIZam7aJQsgAWmgDsEA4PWhTMu/YEAnd0X26AfXwqn F0M3DhtmFsSJXUbx7rRWTx3yaWZZb14b28FyTYCdGG4tkJnVDiVDpdm1X3+QTFVp kd455c5iM7PkKTzSUqffCkL1257prdOK4FhdR2aCc0gj/qbhX2MXhN16Clk0RZ7M aLjyHLfBgqoQXTEvf7+Eq7xSp+bs7SBijXxYne6WTQLm4c8LW5NqNiF6Fznx8bIw 72IDIQ/+ZdGCMP3M8SFtuJpvYRuo+kFWKUJ1s09KSVaEqmtXM2TuN9rm+wIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFJ+A8RJtgvQ4H0XUxVBJcuNHN8kkMB8GA1UdIwQY MBaAFGnb4efZ6H1ocBpANadsUb/s2I2BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWIt OGQ5NDU1M2I3NWUxLzEvbjREeEVtMkM5RGdmUmRURlVFbHk0MGMzeVNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWItOGQ5NDU1M2I3NWUx LzEvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYAKgHigaED BgAqAeKBrjANBgkqhkiG9w0BAQsFAAOCAQEAcxFxeygIlmTbe4tGvM7ia7h8zGnC ADMyaewXbM7V9n/MKmkvE6IRras4VhwpVVwO39/C+iK1Y8RU706IJppD+3VPK5Qt mIepFIvJFm/DLmR2svnsiEGGqKFaGtWk+0/gBVjINEZK/MUS5ifjlBoA4ze2LIHA OApY1nVIw2FQRACdL7PK6vSPUcMFOT2Omc2yESXHHds/SINEAQRcnA2vZNu2k5OP qGHHttK3L3Ynjb4uDFGRakHKE2CnkZgPxz0ovIwKrF14TP0m3/R3FMcq57BiqzZ0 XoiHCvBFU51iGGSSuNzl27Ip2LT1lp3gK31Se5vCGPSRz1QwJQ1AUVxzBw== -----END CERTIFICATE-----Generated at Mon Jan 26 14:16:42 2026 by rpki-client