This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/4Ha_i2fzynlg4lj4N3UFrsXHdcM.roa File: 4Ha_i2fzynlg4lj4N3UFrsXHdcM.roa (raw, json) Hash identifier: lLpMGC2U8Hm7Bc/fFKcXEXNGa72FYEBuCz/vfAkOk0U= Subject key identifier: E0:76:BF:8B:67:F3:CA:79:60:E2:58:F8:37:75:05:AE:C5:C7:75:C3 Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc Certificate serial: 019B7FF25C994D137F58D1AE8C7E617B93CA Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/4Ha_i2fzynlg4lj4N3UFrsXHdcM.roa Signing time: Fri 02 Jan 2026 18:22:28 +0000 ROA not before: Fri 02 Jan 2026 18:22:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12337 IP address blocks: 2a02:1140:113::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:5c:99:4d:13:7f:58:d1:ae:8c:7e:61:7b:93:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc Validity Not Before: Jan 2 18:22:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e076bf8b67f3ca7960e258f8377505aec5c775c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:08:5c:71:b7:36:fd:c0:d4:08:23:74:ea:30: 7f:8a:c0:44:e0:6b:3a:06:58:8c:69:44:22:1e:44: 1e:7f:18:3e:e1:a2:5e:b4:af:4f:71:6f:d3:8b:f4: 3f:66:87:c2:0f:ff:b9:05:fe:9a:62:97:06:98:ec: e7:f3:a3:4e:ac:07:31:4c:b6:38:b1:2c:9d:a1:53: 81:a9:aa:19:0b:63:75:d8:63:95:c6:29:95:bf:51: 1f:bb:fd:1e:0f:ee:80:89:87:45:77:27:c2:58:ae: ee:0b:2b:0e:18:38:3e:ef:b6:06:1a:58:a5:50:43: 4e:c7:3a:a5:a5:f9:99:1d:79:81:85:ff:54:61:2e: 45:61:43:36:13:1a:91:cf:fe:cd:4b:26:43:89:77: 4a:89:3b:79:e5:4b:72:90:91:f9:8d:ad:6e:1c:02: c0:7f:09:37:26:b8:72:68:25:06:f3:7a:dd:b6:30: 93:5f:06:eb:76:27:24:34:00:8b:0c:c8:a5:12:5b: d9:c3:8b:8b:02:13:07:81:b1:fb:d5:43:9f:7d:7c: 0d:05:19:64:44:32:01:bd:f3:2a:cc:d7:1d:1e:4e: 36:3d:01:27:b1:6a:27:13:8c:83:7f:03:ca:e5:44: a4:1d:27:6c:de:53:65:be:46:f1:ab:9f:4d:a0:ec: 9f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:76:BF:8B:67:F3:CA:79:60:E2:58:F8:37:75:05:AE:C5:C7:75:C3 X509v3 Authority Key Identifier: keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/4Ha_i2fzynlg4lj4N3UFrsXHdcM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:1140:113::/48 Signature Algorithm: sha256WithRSAEncryption 69:ae:23:4e:15:97:be:b6:f9:15:72:8c:c3:bf:e7:2e:36:0d: d6:cc:2c:55:29:da:f8:c4:e3:84:70:f4:6f:d2:97:3f:bb:29: 46:c6:86:96:7b:00:bb:cd:96:73:fa:e4:a7:ce:0d:0c:02:b9: f1:6a:aa:db:1e:3e:08:c7:eb:55:c6:18:7c:87:46:c8:0f:cf: f1:83:0f:14:a6:69:73:90:ac:9f:0b:67:6e:52:90:95:2c:54: f3:9a:e3:42:c2:55:08:87:5e:7b:4b:98:e8:09:9e:32:35:70: f9:47:5d:79:32:1f:cb:78:85:0e:aa:83:e1:af:17:82:10:ad: 80:8e:7b:ce:85:c8:42:8c:91:65:bb:fe:5b:2b:72:34:60:c7: 5c:62:a9:73:d4:cb:b5:a2:df:0e:76:f9:73:1a:aa:e4:34:ab: 4b:fc:00:0c:42:19:8e:fd:64:70:a4:91:43:97:63:10:2f:27: 56:4d:80:2f:f9:0c:d5:f5:d2:67:9a:52:54:d7:0f:f9:19:5c: bd:a4:a2:d3:44:6c:2d:0f:02:ea:bd:58:34:7c:03:22:c8:bc: 93:89:91:92:64:4a:94:5c:93:d8:56:c9:6e:55:86:3c:e7:1b: 8e:8a:32:dc:04:7c:25:9a:a7:b1:4b:13:6c:80:58:32:4e:6e: 3c:3b:44:42 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8lyZTRN/WNGujH5he5PKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MTgyYWFiNWFkOWVmYTM4MGE2YzZmMDZjMDE2ZTE1OGJl OTc3YmMwHhcNMjYwMTAyMTgyMjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDc2YmY4YjY3ZjNjYTc5NjBlMjU4ZjgzNzc1MDVhZWM1Yzc3NWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjghccbc2/cDUCCN06jB/isBE4Gs6 BliMaUQiHkQefxg+4aJetK9PcW/Ti/Q/ZofCD/+5Bf6aYpcGmOzn86NOrAcxTLY4 sSydoVOBqaoZC2N12GOVximVv1Efu/0eD+6AiYdFdyfCWK7uCysOGDg+77YGGlil UENOxzqlpfmZHXmBhf9UYS5FYUM2ExqRz/7NSyZDiXdKiTt55UtykJH5ja1uHALA fwk3JrhyaCUG83rdtjCTXwbrdickNACLDMilElvZw4uLAhMHgbH71UOffXwNBRlk RDIBvfMqzNcdHk42PQEnsWonE4yDfwPK5USkHSds3lNlvkbxq59NoOyfwwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOB2v4tn88p5YOJY+Dd1Ba7Fx3XDMB8GA1UdIwQY MBaAFFcYKqta2e+jgKbG8GwBbhWL6Xe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYt YTk2YzYyNjZhYmRiLzEvNEhhX2kyZnp5bmxnNGxqNE4zVUZyc1hIZGNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYtYTk2YzYyNjZhYmRi LzEvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgIRQAET MA0GCSqGSIb3DQEBCwUAA4IBAQBpriNOFZe+tvkVcozDv+cuNg3WzCxVKdr4xOOE cPRv0pc/uylGxoaWewC7zZZz+uSnzg0MArnxaqrbHj4Ix+tVxhh8h0bID8/xgw8U pmlzkKyfC2duUpCVLFTzmuNCwlUIh157S5joCZ4yNXD5R115Mh/LeIUOqoPhrxeC EK2AjnvOhchCjJFlu/5bK3I0YMdcYqlz1Mu1ot8OdvlzGqrkNKtL/AAMQhmO/WRw pJFDl2MQLydWTYAv+QzV9dJnmlJU1w/5GVy9pKLTRGwtDwLqvVg0fAMiyLyTiZGS ZEqUXJPYVsluVYY85xuOijLcBHwlmqexSxNsgFgyTm48O0RC -----END CERTIFICATE-----Generated at Wed Jan 21 15:06:13 2026 by rpki-client