This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/a4zBtMFZYByhLbfrS1dLgNWkKck.roa File: a4zBtMFZYByhLbfrS1dLgNWkKck.roa (raw, json) Hash identifier: dYhiBJ/AxN48Rl+cu3HQdPVxUF/dVcAsWXYAXFUPJcE= Subject key identifier: 6B:8C:C1:B4:C1:59:60:1C:A1:2D:B7:EB:4B:57:4B:80:D5:A4:29:C9 Certificate issuer: /CN=8405c07192a8106fedb0760b8945032ca1d3054b Certificate serial: 019B7CEDF9C89556C58B8FA4D3574863A380 Authority key identifier: 84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/a4zBtMFZYByhLbfrS1dLgNWkKck.roa Signing time: Fri 02 Jan 2026 04:18:49 +0000 ROA not before: Fri 02 Jan 2026 04:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41320 IP address blocks: 2a0c:3a81:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:f9:c8:95:56:c5:8b:8f:a4:d3:57:48:63:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8405c07192a8106fedb0760b8945032ca1d3054b Validity Not Before: Jan 2 04:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b8cc1b4c159601ca12db7eb4b574b80d5a429c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:67:6b:54:5f:37:f5:a0:c0:3d:e1:12:b2:37: c7:af:61:16:a7:c5:a7:50:ca:48:09:9d:d7:52:40: d3:f1:fa:7e:af:55:5a:c4:6e:1e:4d:9c:35:a0:22: 5c:de:83:a9:33:7a:a2:04:3b:71:63:2c:9b:da:4b: 90:bc:8c:ae:b4:42:51:75:ba:ca:4e:30:ae:a8:78: 97:6f:3c:09:a0:6b:db:6d:0f:9c:71:e7:7d:5c:b8: 7e:75:dc:d3:46:c5:a3:2e:11:2e:d4:a1:38:0b:38: e6:0c:76:09:ac:43:83:05:93:ea:d8:59:e8:c7:79: 78:38:03:c9:03:d7:ef:79:49:e1:ed:81:b8:80:01: d0:0f:84:92:03:72:58:39:e8:ec:ac:28:43:62:7a: b9:ec:62:b6:5d:0e:eb:3a:f2:b8:cd:c3:cf:d9:17: 0b:a4:3a:1f:97:31:8a:ad:dd:f7:11:44:8d:89:c0: a3:53:89:94:ac:3f:28:94:a4:35:e0:ad:95:34:2b: bb:12:03:0f:4c:2d:b5:68:93:5c:8d:1d:cf:b0:c2: 35:c7:43:ec:7c:5d:a0:2c:90:2f:b9:66:e5:97:9d: 24:dc:af:32:16:bc:40:b6:34:e2:35:d7:6b:4d:5e: 29:6f:d9:ff:46:bf:13:4e:e3:fd:83:7e:1c:5c:fd: f0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:8C:C1:B4:C1:59:60:1C:A1:2D:B7:EB:4B:57:4B:80:D5:A4:29:C9 X509v3 Authority Key Identifier: keyid:84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/a4zBtMFZYByhLbfrS1dLgNWkKck.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:3a81:100::/40 Signature Algorithm: sha256WithRSAEncryption 0d:b1:ec:f0:89:cf:e6:a7:f0:83:74:48:48:7d:81:62:32:64: d6:ed:dd:27:cf:04:4f:c6:d9:a4:0e:79:4c:f6:7a:8d:c6:12: 17:df:de:0c:d9:51:02:c2:af:b9:38:63:b9:b4:9e:80:f1:f4: ad:bc:25:53:fe:9a:f8:49:e9:71:33:58:5e:9b:1c:19:78:df: bb:e6:e1:0c:06:ff:e1:b0:a1:a9:96:a2:8d:4b:7e:e4:e5:53: d1:a3:d0:59:50:27:73:ed:87:be:89:2d:ba:79:dc:b6:11:13: 08:d2:07:6e:a6:44:06:f2:92:0b:d5:00:f8:22:7e:f8:97:c6: 5e:10:8b:02:45:f1:3f:8c:08:0f:51:ff:67:9e:48:0b:dd:83: 26:e3:58:01:e3:63:46:96:ea:0c:4c:d7:41:df:02:06:20:26: 45:4a:9d:a9:66:24:e7:e8:27:26:6f:45:1a:3f:87:d7:12:7c: e0:18:00:06:d0:12:59:fd:99:c5:0d:d0:65:08:2c:66:f1:3d: 9f:8d:26:ef:26:4b:6c:2b:ad:79:29:6f:00:53:c0:3d:9f:db: 87:c0:d0:6c:45:c9:0f:35:50:75:51:b1:42:20:8c:52:a6:be: da:fa:57:60:e4:7f:0e:33:30:b0:c4:3c:4e:5a:7c:0c:49:42: 4b:39:26:20 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt87fnIlVbFi4+k01dIY6OAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0MDVjMDcxOTJhODEwNmZlZGIwNzYwYjg5NDUwMzJjYTFk MzA1NGIwHhcNMjYwMTAyMDQxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjhjYzFiNGMxNTk2MDFjYTEyZGI3ZWI0YjU3NGI4MGQ1YTQyOWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmdrVF839aDAPeESsjfHr2EWp8Wn UMpICZ3XUkDT8fp+r1VaxG4eTZw1oCJc3oOpM3qiBDtxYyyb2kuQvIyutEJRdbrK TjCuqHiXbzwJoGvbbQ+cced9XLh+ddzTRsWjLhEu1KE4CzjmDHYJrEODBZPq2Fno x3l4OAPJA9fveUnh7YG4gAHQD4SSA3JYOejsrChDYnq57GK2XQ7rOvK4zcPP2RcL pDoflzGKrd33EUSNicCjU4mUrD8olKQ14K2VNCu7EgMPTC21aJNcjR3PsMI1x0Ps fF2gLJAvuWbll50k3K8yFrxAtjTiNddrTV4pb9n/Rr8TTuP9g34cXP3wQQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFGuMwbTBWWAcoS2360tXS4DVpCnJMB8GA1UdIwQY MBaAFIQFwHGSqBBv7bB2C4lFAyyh0wVLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEFYQWNaS29FR190c0hZTGlVVURMS0hUQlVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mNjE1YjAtNGQ5OC00YTNkLThiZDIt NGM5M2JlZTI3ZDU0LzEvYTR6QnRNRlpZQnloTGJmclMxZExnTldrS2NrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9mNjE1YjAtNGQ5OC00YTNkLThiZDItNGM5M2JlZTI3ZDU0 LzEvaEFYQWNaS29FR190c0hZTGlVVURMS0hUQlVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgw6gQEw DQYJKoZIhvcNAQELBQADggEBAA2x7PCJz+an8IN0SEh9gWIyZNbt3SfPBE/G2aQO eUz2eo3GEhff3gzZUQLCr7k4Y7m0noDx9K28JVP+mvhJ6XEzWF6bHBl437vm4QwG /+GwoamWoo1LfuTlU9Gj0FlQJ3Pth76JLbp53LYREwjSB26mRAbykgvVAPgifviX xl4QiwJF8T+MCA9R/2eeSAvdgybjWAHjY0aW6gxM10HfAgYgJkVKnalmJOfoJyZv RRo/h9cSfOAYAAbQEln9mcUN0GUILGbxPZ+NJu8mS2wrrXkpbwBTwD2f24fA0GxF yQ81UHVRsUIgjFKmvtr6V2Dkfw4zMLDEPE5afAxJQks5JiA= -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:57 2026 by rpki-client