This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/1-4VgmB7x2kPxjVo8rWB5bdGpwJg.roa File: 1-4VgmB7x2kPxjVo8rWB5bdGpwJg.roa (raw, json) Hash identifier: tYA4HwMckxXKaEemAAzTny37cSzdXzplQtmU/0PMdkU= Subject key identifier: FB:85:60:98:1E:F1:DA:43:F1:8D:5A:3C:AD:60:79:6D:D1:A9:C0:98 Certificate issuer: /CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc Certificate serial: 019B7B35BB8E38E4A78D72B94C75FD94B4AB Authority key identifier: F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/1-4VgmB7x2kPxjVo8rWB5bdGpwJg.roa Signing time: Thu 01 Jan 2026 20:17:57 +0000 ROA not before: Thu 01 Jan 2026 20:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214567 IP address blocks: 2a14:11c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:bb:8e:38:e4:a7:8d:72:b9:4c:75:fd:94:b4:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc Validity Not Before: Jan 1 20:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb8560981ef1da43f18d5a3cad60796dd1a9c098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:c2:79:ae:21:77:e2:8c:10:92:59:f9:5f:c1: bb:ac:12:39:27:9c:9c:8c:03:ec:ad:59:07:ff:3b: 5c:a5:b6:57:9f:82:80:63:89:4e:cf:7c:34:5b:4d: 31:d4:f7:b8:cc:f5:ec:65:b6:da:40:7a:77:86:c3: 90:51:cf:36:61:1a:30:34:bb:cb:f6:4a:60:22:63: 2b:75:3b:11:81:cf:cb:62:e7:7c:c5:ad:a7:8b:4d: f3:0b:9a:77:79:d4:18:e0:34:b4:11:fb:c9:37:f9: 75:7f:ca:a6:cc:30:1e:a4:f8:10:90:d1:db:3a:d8: b9:73:7f:66:a2:ba:9f:d3:d2:a2:a9:a6:9a:ef:44: cb:77:92:b8:5a:a4:03:c2:e4:e0:d0:02:5a:da:9e: b6:79:f5:ee:8b:aa:1e:1f:4b:e2:a7:97:19:d4:1d: 04:dd:ae:05:4b:0f:4e:02:73:46:e0:52:12:04:0d: dd:9d:4f:13:e4:03:48:ac:aa:45:a0:42:68:43:20: 8b:bf:81:58:2f:87:98:41:d2:7d:4a:7b:63:02:8c: 8e:af:b9:88:94:de:9c:66:8f:c6:5b:7d:54:67:13: 13:12:67:ce:06:a7:ce:1d:a6:40:36:9e:2b:7d:d8: 0d:32:f7:03:b7:f3:04:dd:4e:ef:54:1a:4a:b3:61: 27:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:85:60:98:1E:F1:DA:43:F1:8D:5A:3C:AD:60:79:6D:D1:A9:C0:98 X509v3 Authority Key Identifier: keyid:F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/1-4VgmB7x2kPxjVo8rWB5bdGpwJg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:11c0::/29 Signature Algorithm: sha256WithRSAEncryption 9d:85:5f:8f:0d:ae:6f:24:99:ac:15:df:bf:bf:33:3c:e1:b9: 61:fd:69:9d:b7:57:e2:bc:17:a7:d5:8c:ba:af:62:b2:b2:b6: b7:66:a8:cf:a2:ea:d6:78:3c:8e:b9:31:b3:c0:75:37:d9:3d: 1d:fb:12:c5:8d:eb:59:a3:3e:74:5a:b7:df:27:fe:85:8d:21: c6:f1:83:e1:a4:87:45:91:c5:df:e6:69:3d:96:3a:c4:7a:37: e1:42:01:8a:e7:ec:b3:5e:c9:bf:e7:5e:31:dd:bc:20:6e:2d: 19:21:a7:3a:11:55:17:dd:7c:e2:1f:7c:87:23:99:bb:5c:6e: ae:e0:23:14:75:e7:1e:fa:2c:e2:55:7a:27:fd:ef:8a:9b:4a: 0f:6c:74:c4:f7:07:83:e6:13:70:bf:0c:a1:a1:d8:a6:74:6c: 81:8e:bb:dd:e6:29:26:87:c9:ae:bd:35:5e:6b:f4:09:07:b9: d5:18:13:a3:55:cf:9d:61:80:94:fc:60:c7:b9:1d:26:8c:05: 8e:fe:6f:41:0c:80:24:55:8e:20:6d:9f:d8:a3:75:9c:09:e9: bb:93:f4:3c:b8:42:f6:ec:49:6b:aa:d5:2c:33:ff:2a:76:d5: 69:a4:e0:0c:76:4b:88:16:16:28:05:f6:48:f6:bb:4c:91:de: 17:9f:60:14 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt7NbuOOOSnjXK5THX9lLSrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYjlhZWNhYTM3ZGVkYzBmMmMwNGY1MWJjOTYzZmNkMmU0 YWFjY2MwHhcNMjYwMTAxMjAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjg1NjA5ODFlZjFkYTQzZjE4ZDVhM2NhZDYwNzk2ZGQxYTljMDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+MJ5riF34owQkln5X8G7rBI5J5yc jAPsrVkH/ztcpbZXn4KAY4lOz3w0W00x1Pe4zPXsZbbaQHp3hsOQUc82YRowNLvL 9kpgImMrdTsRgc/LYud8xa2ni03zC5p3edQY4DS0EfvJN/l1f8qmzDAepPgQkNHb Oti5c39morqf09Kiqaaa70TLd5K4WqQDwuTg0AJa2p62efXui6oeH0vip5cZ1B0E 3a4FSw9OAnNG4FISBA3dnU8T5ANIrKpFoEJoQyCLv4FYL4eYQdJ9SntjAoyOr7mI lN6cZo/GW31UZxMTEmfOBqfOHaZANp4rfdgNMvcDt/ME3U7vVBpKs2EnUwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFPuFYJge8dpD8Y1aPK1geW3RqcCYMB8GA1UdIwQY MBaAFPG5rsqjfe3A8sBPUbyWP80uSqzMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGJtdXlxTjk3Y0R5d0U5UnZKWV96UzVLck13LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC80YmQ3MGMtMDk0YS00M2QwLWFkZGEt MDRmYmQ2ODE4OTZhLzEvMS00VmdtQjd4MmtQeGpWbzhyV0I1YmRHcHdKZy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjgvNGJkNzBjLTA5NGEtNDNkMC1hZGRhLTA0ZmJkNjgxODk2 YS8xLzhibXV5cU45N2NEeXdFOVJ2SllfelM1S3JNdy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoUEcAw DQYJKoZIhvcNAQELBQADggEBAJ2FX48Nrm8kmawV37+/MzzhuWH9aZ23V+K8F6fV jLqvYrKytrdmqM+i6tZ4PI65MbPAdTfZPR37EsWN61mjPnRat98n/oWNIcbxg+Gk h0WRxd/maT2WOsR6N+FCAYrn7LNeyb/nXjHdvCBuLRkhpzoRVRfdfOIffIcjmbtc bq7gIxR15x76LOJVeif974qbSg9sdMT3B4PmE3C/DKGh2KZ0bIGOu93mKSaHya69 NV5r9AkHudUYE6NVz51hgJT8YMe5HSaMBY7+b0EMgCRVjiBtn9ijdZwJ6buT9Dy4 QvbsSWuq1Swz/yp21Wmk4Ax2S4gWFigF9kj2u0yR3hefYBQ= -----END CERTIFICATE-----Generated at Mon Jan 26 23:24:05 2026 by rpki-client