This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4ng_LDm3U28WbHLuI-cRuVoJwMQ.roa File: 4ng_LDm3U28WbHLuI-cRuVoJwMQ.roa (raw, json) Hash identifier: UpQ0/W+aasAGJ5VFbrQix96qXc3INXI1RCOVpu3LR7s= Subject key identifier: E2:78:3F:2C:39:B7:53:6F:16:6C:72:EE:23:E7:11:B9:5A:09:C0:C4 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D8B92832ED1953BBEBF41C9191ABA Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4ng_LDm3U28WbHLuI-cRuVoJwMQ.roa Signing time: Fri 02 Jan 2026 06:20:41 +0000 ROA not before: Fri 02 Jan 2026 06:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216411 IP address blocks: 2a0e:b107:2050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:8b:92:83:2e:d1:95:3b:be:bf:41:c9:19:1a:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2783f2c39b7536f166c72ee23e711b95a09c0c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d1:02:24:95:cb:a2:30:59:90:e3:a6:ac:07: 1f:fe:cb:ff:69:97:f3:ad:ce:f5:1b:00:25:9e:fd: e9:5b:45:2e:f6:5a:9d:d3:ed:6f:c3:94:c0:e2:7c: b1:4c:c5:1b:af:94:a1:cb:e5:18:00:34:0b:7a:df: 26:39:56:82:20:66:b0:19:84:cb:96:48:83:34:a6: 23:9a:59:00:03:8a:8d:c9:71:58:ca:ea:ff:e7:4a: 74:88:ef:1f:c7:f3:b5:ae:38:48:5a:ab:73:00:6d: 12:99:4e:2e:de:02:85:de:d8:f2:43:52:46:0e:7c: 12:89:e2:62:1b:c9:80:f9:46:ac:66:90:ce:43:d4: 78:76:76:92:52:c0:ea:95:8b:ab:76:ce:e3:9f:1f: c0:ec:97:34:98:d8:3e:41:7c:e0:b1:54:8e:a1:83: f5:2d:aa:be:44:ed:05:b0:28:3f:fb:97:d7:be:6c: da:8b:ca:18:e9:ad:36:33:78:97:62:2a:1e:72:ce: f4:8a:a5:26:52:90:34:be:be:59:5d:18:c8:81:83: 94:fb:7d:26:d3:a5:53:11:55:66:cb:13:04:9a:b4: 52:f4:d8:a8:5b:10:db:ef:14:56:bd:a6:5f:e7:9c: c9:fe:9d:40:52:2d:38:d9:f8:b1:fe:71:e2:9f:d5: ea:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:78:3F:2C:39:B7:53:6F:16:6C:72:EE:23:E7:11:B9:5A:09:C0:C4 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4ng_LDm3U28WbHLuI-cRuVoJwMQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:2050::/48 Signature Algorithm: sha256WithRSAEncryption a8:86:bb:93:ba:45:2e:25:e1:8d:1f:a6:49:0f:cf:9b:bb:8e: e7:5a:8b:67:b6:cc:3c:e7:39:88:b7:ec:32:bb:11:e3:c1:88: 45:95:97:42:a7:b4:fa:03:b8:9a:22:ef:66:a3:2f:f8:a0:7e: 8a:c6:3f:cd:a7:5e:aa:69:5c:d9:88:ce:9e:08:68:ff:54:63: fc:e0:a7:fa:d7:d5:91:31:d8:83:43:26:97:a7:f1:8e:b1:68: b6:1d:b5:e1:43:f9:1d:66:cf:8b:30:7a:36:6d:4d:af:9a:3e: 0f:38:50:89:b4:53:d9:3f:0c:a0:e7:5c:a8:b7:5a:f8:7d:53: 54:47:42:22:8c:93:b1:d0:48:c0:d0:d5:41:2d:b7:27:6c:0a: 9c:bd:6f:e4:55:33:c1:e1:46:a3:4d:5b:76:8c:75:e2:64:95: 36:64:cb:58:c2:21:de:b0:52:c4:42:57:88:47:b5:d5:e5:f6: 30:26:c3:5c:9a:ff:e5:0b:7d:96:9a:ea:66:a1:56:48:2f:3e: 39:1a:fc:0e:6d:73:33:4b:bb:15:9a:a8:86:84:b0:b7:02:e7: 08:a2:22:13:8f:31:bb:5d:7a:61:f2:e3:8e:ed:55:1f:19:93: eb:b5:32:a8:db:de:9e:64:d8:73:63:f3:1e:26:99:7c:97:1d: f4:6d:1f:4f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XYuSgy7RlTu+v0HJGRq6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjc4M2YyYzM5Yjc1MzZmMTY2YzcyZWUyM2U3MTFiOTVhMDljMGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNECJJXLojBZkOOmrAcf/sv/aZfz rc71GwAlnv3pW0Uu9lqd0+1vw5TA4nyxTMUbr5Shy+UYADQLet8mOVaCIGawGYTL lkiDNKYjmlkAA4qNyXFYyur/50p0iO8fx/O1rjhIWqtzAG0SmU4u3gKF3tjyQ1JG DnwSieJiG8mA+UasZpDOQ9R4dnaSUsDqlYurds7jnx/A7Jc0mNg+QXzgsVSOoYP1 Laq+RO0FsCg/+5fXvmzai8oY6a02M3iXYioecs70iqUmUpA0vr5ZXRjIgYOU+30m 06VTEVVmyxMEmrRS9NioWxDb7xRWvaZf55zJ/p1AUi042fix/nHin9XqiwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOJ4Pyw5t1NvFmxy7iPnEblaCcDEMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvNG5nX0xEbTNVMjhXYkhMdUktY1J1Vm9Kd01RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xByBQ MA0GCSqGSIb3DQEBCwUAA4IBAQCohruTukUuJeGNH6ZJD8+bu47nWotntsw85zmI t+wyuxHjwYhFlZdCp7T6A7iaIu9moy/4oH6Kxj/Np16qaVzZiM6eCGj/VGP84Kf6 19WRMdiDQyaXp/GOsWi2HbXhQ/kdZs+LMHo2bU2vmj4POFCJtFPZPwyg51yot1r4 fVNUR0IijJOx0EjA0NVBLbcnbAqcvW/kVTPB4UajTVt2jHXiZJU2ZMtYwiHesFLE QleIR7XV5fYwJsNcmv/lC32WmupmoVZILz45GvwObXMzS7sVmqiGhLC3AucIoiIT jzG7XXph8uOO7VUfGZPrtTKo296eZNhzY/MeJpl8lx30bR9P -----END CERTIFICATE-----Generated at Fri Jan 9 13:12:00 2026 by rpki-client