This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d9d1b3-5911-49e7-81aa-0f0d53ac0e0d/1/4hUo9slD_WYqWgnSusuLi5aYgKk.roa File: 4hUo9slD_WYqWgnSusuLi5aYgKk.roa (raw, json) Hash identifier: Xmxn5Zro/2pB9LNtV2YLqCKLpWDCyVWpsb7YiPBgbM0= Subject key identifier: E2:15:28:F6:C9:43:FD:66:2A:5A:09:D2:BA:CB:8B:8B:96:98:80:A9 Certificate issuer: /CN=f060dd403ddef7e519173b3fb4dc7e8a23341115 Certificate serial: 019C2DD226D5D09469C12650E2C249CC8016 Authority key identifier: F0:60:DD:40:3D:DE:F7:E5:19:17:3B:3F:B4:DC:7E:8A:23:34:11:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8GDdQD3e9-UZFzs_tNx-iiM0ERU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d9d1b3-5911-49e7-81aa-0f0d53ac0e0d/1/4hUo9slD_WYqWgnSusuLi5aYgKk.roa Signing time: Thu 05 Feb 2026 12:41:12 +0000 ROA not before: Thu 05 Feb 2026 12:41:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201623 IP address blocks: 2001:678:ac4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d9d1b3-5911-49e7-81aa-0f0d53ac0e0d/1/8GDdQD3e9-UZFzs_tNx-iiM0ERU.crl rsync://rpki.ripe.net/repository/DEFAULT/70/d9d1b3-5911-49e7-81aa-0f0d53ac0e0d/1/8GDdQD3e9-UZFzs_tNx-iiM0ERU.mft rsync://rpki.ripe.net/repository/DEFAULT/8GDdQD3e9-UZFzs_tNx-iiM0ERU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2d:d2:26:d5:d0:94:69:c1:26:50:e2:c2:49:cc:80:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f060dd403ddef7e519173b3fb4dc7e8a23341115 Validity Not Before: Feb 5 12:41:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e21528f6c943fd662a5a09d2bacb8b8b969880a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6d:bc:07:85:19:60:e2:45:cf:a0:58:b6:ad: 62:70:65:ef:57:42:18:0a:42:24:0b:c1:76:16:3f: 44:04:2e:cf:59:53:34:c8:84:a4:5c:69:2a:8d:bf: 2f:f0:13:c6:d3:69:26:b1:b3:ee:de:cb:da:ba:cf: 13:f1:0b:d5:29:5f:9b:a4:4c:a5:5a:09:77:35:12: 6c:77:1f:3a:43:79:43:fd:bf:89:e1:d0:c5:ca:c2: 25:96:a9:f2:3c:1a:04:5d:44:06:11:b2:ee:ea:98: b4:03:e5:61:61:90:6e:61:9e:bf:2a:c9:98:da:9e: bd:bf:cf:08:93:e8:18:51:de:e1:1e:5d:01:fe:92: a9:a8:bd:6d:d1:d0:93:ad:97:76:31:3a:db:09:de: c4:5e:4f:87:af:8c:22:19:cc:cc:ad:c9:20:02:ae: f6:5e:de:01:4e:69:da:b2:6b:90:0a:d3:2b:b3:2c: c0:07:27:9f:6f:09:bc:a7:86:ea:f4:d9:36:ba:3a: b2:d3:85:c0:f5:54:df:16:75:ca:dd:3d:9f:a1:b2: 48:f8:76:c8:26:04:5b:f9:a0:75:35:af:f4:5f:bb: 44:52:b6:6f:ca:ab:e1:75:61:67:bd:ee:76:4b:ed: c5:fd:e6:9c:14:11:4a:d1:b5:3f:7b:7e:9c:aa:fc: 98:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:15:28:F6:C9:43:FD:66:2A:5A:09:D2:BA:CB:8B:8B:96:98:80:A9 X509v3 Authority Key Identifier: keyid:F0:60:DD:40:3D:DE:F7:E5:19:17:3B:3F:B4:DC:7E:8A:23:34:11:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8GDdQD3e9-UZFzs_tNx-iiM0ERU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d9d1b3-5911-49e7-81aa-0f0d53ac0e0d/1/4hUo9slD_WYqWgnSusuLi5aYgKk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d9d1b3-5911-49e7-81aa-0f0d53ac0e0d/1/8GDdQD3e9-UZFzs_tNx-iiM0ERU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:ac4::/48 Signature Algorithm: sha256WithRSAEncryption e3:fc:9f:4e:b4:2a:f3:99:7d:d6:d2:5b:6c:dd:bb:a3:25:e6: c2:4c:e1:ea:35:a0:a5:b8:14:2c:36:9d:a6:98:10:af:36:d6: ad:12:50:14:3a:63:9e:13:f2:1d:3a:8b:3a:f0:27:1a:70:b7: ff:c2:7d:ec:9e:87:74:81:32:f5:0b:e4:18:a6:ab:88:48:cf: f0:e3:6b:3e:1b:10:4c:52:56:9e:7b:5e:75:6e:f2:a3:6d:29: 2f:6c:8e:04:d8:3d:a8:24:78:fa:4e:2a:69:5c:57:3e:b3:63: cf:28:3f:71:83:ef:41:f8:44:15:21:07:4e:97:28:55:21:02: b9:3e:28:f6:83:f1:f6:4f:6c:d5:45:47:cc:c6:f0:e7:0d:6e: 3b:a7:b9:45:81:6a:1e:5d:a8:d2:4d:43:22:81:6d:19:44:ad: e7:28:55:51:4f:5a:a8:11:3f:cd:8e:92:1f:97:52:e0:b8:07: e9:13:58:fa:2f:65:23:02:b6:95:98:7b:85:18:49:61:a2:67: 64:d8:52:bc:ea:b7:2a:bf:be:0d:6c:30:ff:35:c7:e0:bc:b0: 59:88:8d:e2:b0:25:d8:cf:66:34:c2:4a:a9:5f:33:6b:f6:5c: 90:94:c1:81:b3:c8:06:13:58:23:ae:54:66:d0:95:1c:8b:0c: 07:e5:ea:20 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZwt0ibV0JRpwSZQ4sJJzIAWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNjBkZDQwM2RkZWY3ZTUxOTE3M2IzZmI0ZGM3ZThhMjMz NDExMTUwHhcNMjYwMjA1MTI0MTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjE1MjhmNmM5NDNmZDY2MmE1YTA5ZDJiYWNiOGI4Yjk2OTg4MGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW28B4UZYOJFz6BYtq1icGXvV0IY CkIkC8F2Fj9EBC7PWVM0yISkXGkqjb8v8BPG02kmsbPu3svaus8T8QvVKV+bpEyl Wgl3NRJsdx86Q3lD/b+J4dDFysIllqnyPBoEXUQGEbLu6pi0A+VhYZBuYZ6/KsmY 2p69v88Ik+gYUd7hHl0B/pKpqL1t0dCTrZd2MTrbCd7EXk+Hr4wiGczMrckgAq72 Xt4BTmnasmuQCtMrsyzAByefbwm8p4bq9Nk2ujqy04XA9VTfFnXK3T2fobJI+HbI JgRb+aB1Na/0X7tEUrZvyqvhdWFnve52S+3F/eacFBFK0bU/e36cqvyYuwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOIVKPbJQ/1mKloJ0rrLi4uWmICpMB8GA1UdIwQY MBaAFPBg3UA93vflGRc7P7TcfoojNBEVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEdEZFFEM2U5LVVaRnpzX3ROeC1paU0wRVJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kOWQxYjMtNTkxMS00OWU3LTgxYWEt MGYwZDUzYWMwZTBkLzEvNGhVbzlzbERfV1lxV2duU3VzdUxpNWFZZ0trLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9kOWQxYjMtNTkxMS00OWU3LTgxYWEtMGYwZDUzYWMwZTBk LzEvOEdEZFFEM2U5LVVaRnpzX3ROeC1paU0wRVJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeArE MA0GCSqGSIb3DQEBCwUAA4IBAQDj/J9OtCrzmX3W0lts3bujJebCTOHqNaCluBQs Np2mmBCvNtatElAUOmOeE/IdOos68CcacLf/wn3snod0gTL1C+QYpquISM/w42s+ GxBMUlaee151bvKjbSkvbI4E2D2oJHj6TippXFc+s2PPKD9xg+9B+EQVIQdOlyhV IQK5Pij2g/H2T2zVRUfMxvDnDW47p7lFgWoeXajSTUMigW0ZRK3nKFVRT1qoET/N jpIfl1LguAfpE1j6L2UjAraVmHuFGElhomdk2FK86rcqv74NbDD/NcfgvLBZiI3i sCXYz2Y0wkqpXzNr9lyQlMGBs8gGE1gjrlRm0JUciwwH5eog -----END CERTIFICATE-----Generated at Mon Feb 9 20:48:50 2026 by rpki-client