This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/b4gApv3V9WNuH1tUYB6hLsjX2Mk.roa File: b4gApv3V9WNuH1tUYB6hLsjX2Mk.roa (raw, json) Hash identifier: Gl55nIcp7Geh+WGb27hWRSt+zD+uJeV75P0qyXtzqOc= Subject key identifier: 6F:88:00:A6:FD:D5:F5:63:6E:1F:5B:54:60:1E:A1:2E:C8:D7:D8:C9 Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d Certificate serial: 019B7AC8296B3D95DB3388830D6E56117DE8 Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/b4gApv3V9WNuH1tUYB6hLsjX2Mk.roa Signing time: Thu 01 Jan 2026 18:18:16 +0000 ROA not before: Thu 01 Jan 2026 18:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16125 IP address blocks: 213.252.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:29:6b:3d:95:db:33:88:83:0d:6e:56:11:7d:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d Validity Not Before: Jan 1 18:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f8800a6fdd5f5636e1f5b54601ea12ec8d7d8c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e2:6d:8d:25:be:02:77:a7:b7:e9:b2:d0:24: 88:5d:2b:2c:c6:b9:b1:94:05:2e:ef:d0:49:8b:31: a1:a4:03:0b:43:fe:ee:0d:ba:1c:80:52:66:a0:b0: 79:e2:40:8b:08:b7:52:7b:42:07:96:52:be:c9:1e: b4:a1:bb:11:2f:d5:c4:66:7e:18:00:3c:27:23:a4: d3:7f:1b:f1:2f:9c:14:67:a7:d0:9c:b1:4f:fb:da: 7e:2a:ac:a5:fe:41:c6:de:99:36:3f:b2:48:ba:32: 2e:df:37:f0:b7:04:f1:b8:06:78:f7:8c:cf:da:a5: be:36:0b:47:da:02:23:13:1b:c9:42:7b:be:75:07: 29:24:23:da:a8:31:06:42:fc:a4:d6:25:ab:1b:37: b4:57:7d:b2:51:93:15:f4:5f:c3:5b:14:7c:d7:a4: dd:24:eb:50:1e:f4:8c:53:73:f5:92:6b:7b:5b:6f: ef:48:75:4c:24:6d:ca:30:13:47:31:1e:fb:15:38: 2e:bf:64:44:fa:3b:1f:0d:6d:2b:c0:ea:bb:00:2d: 8e:ac:6a:75:fe:14:0d:16:ce:1b:3e:3f:2c:05:98: 3c:a5:77:9c:3e:25:0e:fd:c5:0d:54:88:13:79:fe: 73:e5:2e:2b:af:2c:2d:51:97:85:e3:db:c6:10:a4: 6e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:88:00:A6:FD:D5:F5:63:6E:1F:5B:54:60:1E:A1:2E:C8:D7:D8:C9 X509v3 Authority Key Identifier: keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/b4gApv3V9WNuH1tUYB6hLsjX2Mk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.252.248.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:2b:c6:c2:15:b5:8f:18:96:b6:12:a0:8b:b5:d4:7e:75:61: d6:20:63:33:bf:62:49:54:f6:a9:95:a2:94:fd:34:06:e9:6b: 7f:bd:ff:d1:da:a2:ce:2a:51:e5:83:98:c0:eb:fc:12:52:b4: 7e:78:06:cc:ba:fb:30:7c:53:b3:dd:91:c0:95:0c:db:9d:bb: 0d:4e:0d:35:6c:8d:0c:5f:f3:9e:52:46:75:ef:7f:4a:8b:4f: 77:c2:36:c9:c5:d2:d8:c5:74:77:32:9b:49:15:0a:8b:3b:88: 8a:cd:71:70:e2:bb:f5:c9:18:7e:59:a1:07:4f:c8:ee:0c:75: f4:67:e4:e1:7e:26:e5:5d:b6:95:12:36:82:c1:7a:a5:f1:f1: 56:49:32:48:89:ca:56:36:f4:0b:c9:45:d1:3c:84:fc:a7:53: 41:11:67:ef:02:e6:a7:6d:98:8b:ce:57:4b:94:28:88:d5:d6: d9:8d:a9:f0:92:f6:cd:d2:d9:94:41:92:9f:fb:9e:8b:ff:ed: d8:6f:61:bb:b2:06:74:6f:e1:97:74:27:59:8a:b3:8a:cf:c7: 1f:ce:2f:a9:a1:71:4d:a6:0e:b2:55:ec:a4:26:82:e5:7c:49: 94:0b:06:80:34:68:18:9d:be:6c:63:94:1e:48:ad:c7:ce:7c: 0f:00:4d:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yClrPZXbM4iDDW5WEX3oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3 MTE4MGQwHhcNMjYwMTAxMTgxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Zjg4MDBhNmZkZDVmNTYzNmUxZjViNTQ2MDFlYTEyZWM4ZDdkOGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweJtjSW+Anent+my0CSIXSssxrmx lAUu79BJizGhpAMLQ/7uDbocgFJmoLB54kCLCLdSe0IHllK+yR60obsRL9XEZn4Y ADwnI6TTfxvxL5wUZ6fQnLFP+9p+Kqyl/kHG3pk2P7JIujIu3zfwtwTxuAZ494zP 2qW+NgtH2gIjExvJQnu+dQcpJCPaqDEGQvyk1iWrGze0V32yUZMV9F/DWxR816Td JOtQHvSMU3P1kmt7W2/vSHVMJG3KMBNHMR77FTguv2RE+jsfDW0rwOq7AC2OrGp1 /hQNFs4bPj8sBZg8pXecPiUO/cUNVIgTef5z5S4rrywtUZeF49vGEKRu1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG+IAKb91fVjbh9bVGAeoS7I19jJMB8GA1UdIwQY MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt MDQ2ODA0MjQ4NmRjLzEvYjRnQXB2M1Y5V051SDF0VVlCNmhMc2pYMk1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1fz4MA0G CSqGSIb3DQEBCwUAA4IBAQBqK8bCFbWPGJa2EqCLtdR+dWHWIGMzv2JJVPaplaKU /TQG6Wt/vf/R2qLOKlHlg5jA6/wSUrR+eAbMuvswfFOz3ZHAlQzbnbsNTg01bI0M X/OeUkZ1739Ki093wjbJxdLYxXR3MptJFQqLO4iKzXFw4rv1yRh+WaEHT8juDHX0 Z+ThfiblXbaVEjaCwXql8fFWSTJIicpWNvQLyUXRPIT8p1NBEWfvAuanbZiLzldL lCiI1dbZjanwkvbN0tmUQZKf+56L/+3Yb2G7sgZ0b+GXdCdZirOKz8cfzi+poXFN pg6yVeykJoLlfEmUCwaANGgYnb5sY5QeSK3HznwPAE0Z -----END CERTIFICATE-----Generated at Wed Jan 21 03:04:03 2026 by rpki-client