This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/pOrqbHZi1VTPzd3E16dHigG9X_M.roa File: pOrqbHZi1VTPzd3E16dHigG9X_M.roa (raw, json) Hash identifier: C1s5ru2cOKTgc4bOCi0g0DrVt47GvCI/PVKTkhz3xeo= Subject key identifier: A4:EA:EA:6C:76:62:D5:54:CF:CD:DD:C4:D7:A7:47:8A:01:BD:5F:F3 Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Certificate serial: 019B7A5B4B1D9276BE133D2CF12FA1ED7E93 Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/pOrqbHZi1VTPzd3E16dHigG9X_M.roa Signing time: Thu 01 Jan 2026 16:19:21 +0000 ROA not before: Thu 01 Jan 2026 16:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 151338 IP address blocks: 2a12:f8c1:40::/48 maxlen: 48 2a12:f8c1:41::/48 maxlen: 48 2a12:f8c1:42::/48 maxlen: 48 2a12:f8c1:43::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 22:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:4b:1d:92:76:be:13:3d:2c:f1:2f:a1:ed:7e:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Validity Not Before: Jan 1 16:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4eaea6c7662d554cfcdddc4d7a7478a01bd5ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d4:5a:9c:41:e2:8b:60:6d:14:78:60:ff:e5: ba:07:6b:9c:93:e9:26:fb:44:93:a6:c6:7f:86:c7: 25:40:85:b6:16:c2:a5:30:ea:fe:f4:df:ca:65:40: 5f:9c:df:9f:e7:98:de:6c:8c:74:84:ce:23:9c:86: c2:13:3c:42:28:af:96:52:f0:f9:6c:ab:17:72:b2: fb:69:35:17:24:e5:73:ad:ec:10:98:06:ff:bf:86: 79:8e:6f:df:21:a3:50:c3:8f:76:da:62:91:6d:d8: 23:d6:08:32:7d:2d:c4:1c:54:b6:45:f1:ff:f3:ff: f8:4d:aa:e0:2e:ca:36:ea:69:06:f6:8a:02:2c:b8: 23:b0:db:ae:e0:7e:20:4d:ac:da:ea:d2:5a:10:84: 97:0f:7b:80:82:19:6b:1a:b1:0a:e3:49:4f:78:b4: 8c:17:fd:b6:5a:06:69:1b:12:c6:6b:74:84:55:02: d7:40:58:a6:8f:9a:39:0c:4e:76:61:b2:7c:f9:68: d5:ca:92:40:18:98:41:5c:70:cb:fb:c1:1d:e5:21: c4:84:14:1b:79:95:43:94:78:b4:ed:69:cd:3c:a2: 84:41:30:c7:35:06:69:96:6f:17:24:11:c0:7d:a9: 5c:f1:17:45:8b:b2:0d:75:30:31:3a:d3:b6:75:3d: 86:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:EA:EA:6C:76:62:D5:54:CF:CD:DD:C4:D7:A7:47:8A:01:BD:5F:F3 X509v3 Authority Key Identifier: keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/pOrqbHZi1VTPzd3E16dHigG9X_M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:f8c1:40::/46 Signature Algorithm: sha256WithRSAEncryption 06:93:71:b5:54:36:90:01:48:e8:6f:88:ae:24:a4:3f:62:94: fc:b9:e9:cd:93:9a:4d:e7:2a:9b:a5:a1:40:89:54:6d:de:e1: ea:58:c2:d4:97:f0:9b:c5:52:0f:4f:31:f4:3f:57:b0:cb:3a: 80:82:51:07:d1:7d:d2:bc:22:c9:c7:8d:c7:6a:f4:28:eb:00: 81:71:02:cd:24:cf:26:7b:2d:21:bc:b9:bb:9a:94:c4:dc:44: 99:4f:9e:da:91:e2:b9:0b:b9:62:fa:fe:fa:bb:b6:54:b9:30: 97:80:a9:d5:72:52:1b:51:c6:b8:7f:eb:95:0d:8f:53:d8:a8: e4:ac:3b:01:57:17:05:59:bd:fb:74:02:6b:b5:d5:2d:af:22: 08:71:b8:a4:df:ba:92:bc:8c:9e:64:25:30:00:b2:5d:92:ad: 20:6b:03:21:11:1d:7d:05:36:0d:7b:af:41:b2:a0:b3:c0:20: 05:02:6e:07:b2:94:74:dc:77:9d:f9:fc:b2:66:1c:85:83:0a: 2d:26:80:74:31:c7:e9:b7:8f:74:ca:23:d1:01:49:6d:74:4f: a0:7c:13:b4:c8:0f:fc:3b:94:33:f3:76:25:bd:09:ec:90:1d: 8b:92:8a:d6:67:91:21:f9:0e:00:c6:40:f7:7f:49:78:1d:c5: 91:83:47:57 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6W0sdkna+Ez0s8S+h7X6TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMzkyZTkyOTMxN2FlNmJkZTA4YTVhM2I5OGEyYjcwMWRk Yjg5M2EwHhcNMjYwMTAxMTYxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGVhZWE2Yzc2NjJkNTU0Y2ZjZGRkYzRkN2E3NDc4YTAxYmQ1ZmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdRanEHii2BtFHhg/+W6B2uck+km +0STpsZ/hsclQIW2FsKlMOr+9N/KZUBfnN+f55jebIx0hM4jnIbCEzxCKK+WUvD5 bKsXcrL7aTUXJOVzrewQmAb/v4Z5jm/fIaNQw4922mKRbdgj1ggyfS3EHFS2RfH/ 8//4TargLso26mkG9ooCLLgjsNuu4H4gTaza6tJaEISXD3uAghlrGrEK40lPeLSM F/22WgZpGxLGa3SEVQLXQFimj5o5DE52YbJ8+WjVypJAGJhBXHDL+8Ed5SHEhBQb eZVDlHi07WnNPKKEQTDHNQZplm8XJBHAfalc8RdFi7INdTAxOtO2dT2GHwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKTq6mx2YtVUz83dxNenR4oBvV/zMB8GA1UdIwQY MBaAFGM5LpKTF65r3gilo7mKK3Ad24k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEt ODcyNTBmNWEwN2NjLzEvcE9ycWJIWmkxVlRQemQzRTE2ZEhpZ0c5WF9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEtODcyNTBmNWEwN2Nj LzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKhL4wQBA MA0GCSqGSIb3DQEBCwUAA4IBAQAGk3G1VDaQAUjob4iuJKQ/YpT8uenNk5pN5yqb paFAiVRt3uHqWMLUl/CbxVIPTzH0P1ewyzqAglEH0X3SvCLJx43HavQo6wCBcQLN JM8mey0hvLm7mpTE3ESZT57akeK5C7li+v76u7ZUuTCXgKnVclIbUca4f+uVDY9T 2KjkrDsBVxcFWb37dAJrtdUtryIIcbik37qSvIyeZCUwALJdkq0gawMhER19BTYN e69BsqCzwCAFAm4HspR03Hed+fyyZhyFgwotJoB0Mcfpt490yiPRAUltdE+gfBO0 yA/8O5Qz83YlvQnskB2LkorWZ5Eh+Q4AxkD3f0l4HcWRg0dX -----END CERTIFICATE-----Generated at Thu Jan 22 09:14:55 2026 by rpki-client