This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/RvjdrZHQvT2b90nWXdsgoaDdips.roa File: RvjdrZHQvT2b90nWXdsgoaDdips.roa (raw, json) Hash identifier: qK/UmJeSS3Eli2K0IV23Gv9PIRqLGK5MHBRUfrzwD3E= Subject key identifier: 46:F8:DD:AD:91:D0:BD:3D:9B:F7:49:D6:5D:DB:20:A1:A0:DD:8A:9B Certificate issuer: /CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d Certificate serial: 019B797F107B2A32E8E0A6775384C66CD9BF Authority key identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/RvjdrZHQvT2b90nWXdsgoaDdips.roa Signing time: Thu 01 Jan 2026 12:18:49 +0000 ROA not before: Thu 01 Jan 2026 12:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48659 IP address blocks: 2a03:ae40:fa00::/40 maxlen: 40 2a03:ae40:fb00::/40 maxlen: 40 2a13:2802:5000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:10:7b:2a:32:e8:e0:a6:77:53:84:c6:6c:d9:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d Validity Not Before: Jan 1 12:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46f8ddad91d0bd3d9bf749d65ddb20a1a0dd8a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c2:59:ea:25:72:38:6c:e2:fc:cb:15:e4:58: 5a:48:f3:ef:5c:40:71:a3:37:f0:81:60:dd:66:8b: a5:27:e6:61:67:10:17:5c:5f:c6:bf:b6:c7:c1:14: 1e:7d:36:fc:b0:02:9a:3c:60:62:86:b6:a2:2f:55: 9a:3e:00:9a:0d:de:0e:ce:51:fd:e6:51:fc:7a:ef: 89:74:c7:6d:bc:a7:b8:29:bf:fc:9e:5c:b1:ed:d2: bc:15:1a:77:3f:22:8b:5a:40:1f:91:dd:42:13:9e: 72:e8:25:ad:f3:61:99:64:35:7e:ae:bb:17:33:7e: 3f:fd:36:6e:ad:83:db:34:72:b1:25:eb:f3:3b:8f: c7:8f:d1:ff:04:6a:9b:3f:8e:e1:60:58:75:2f:a5: 9e:36:7c:c8:d5:b5:f6:c0:5a:7d:78:5a:84:6c:8f: 58:3c:85:88:bc:79:e4:e5:1b:e2:1a:40:4d:8d:01: a8:3d:5e:a2:af:70:ad:89:42:75:f9:86:23:1f:6c: 9a:32:a0:ed:00:6a:ef:70:aa:12:b4:f7:7e:63:bb: 89:78:ba:5e:fe:28:9e:34:13:85:0d:df:07:e0:06: 7e:ab:73:9e:3b:76:84:37:52:82:c3:df:77:79:46: eb:10:f7:0e:03:4f:6b:c0:99:86:c0:96:37:99:8b: 95:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F8:DD:AD:91:D0:BD:3D:9B:F7:49:D6:5D:DB:20:A1:A0:DD:8A:9B X509v3 Authority Key Identifier: keyid:20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/RvjdrZHQvT2b90nWXdsgoaDdips.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:ae40:fa00::/39 2a13:2802:5000::/36 Signature Algorithm: sha256WithRSAEncryption ae:a8:bd:d2:33:44:d1:b8:4c:35:95:e5:d5:a7:62:03:4b:b6: 05:7a:f1:67:01:90:39:2f:cf:02:d5:bd:8c:db:b1:b8:e6:aa: d3:a1:a9:fa:c1:54:2e:c5:ed:81:33:98:72:b9:59:5f:33:ab: 83:b8:34:8b:bd:24:ad:cf:e7:9b:cd:2f:08:44:62:8e:c1:49: 28:06:97:5b:09:83:2e:ad:dd:c2:19:ea:e7:dc:5b:a3:c4:b7: 7c:9d:a3:59:45:a7:66:11:94:eb:20:cf:a5:44:33:90:10:bb: ca:c5:5e:8a:bb:db:75:f8:f6:5c:f8:85:d8:9a:30:bf:37:b7: 7d:30:70:3d:c0:b6:0a:6a:0b:f4:46:b2:95:b9:89:95:b3:50: 62:a9:f4:30:bf:8c:27:73:02:83:e0:f5:d7:2c:66:0c:61:d3: c8:73:5d:10:37:04:7c:29:45:b1:ac:b4:4e:44:7c:c6:72:37: 14:95:e3:8a:d8:65:54:9a:fb:a1:6e:c6:45:14:a2:90:a7:0b: 8e:f4:26:f6:c7:07:b3:0b:cd:13:6f:18:27:67:fa:a6:d7:9f: 6d:b1:e6:c3:b4:15:90:3a:69:21:79:e4:a7:2e:5c:0e:c6:a5: 1c:b3:4c:ec:1e:d2:a6:40:3f:45:61:9c:a8:4a:61:b5:79:12: 9e:6b:56:5c -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt5fxB7KjLo4KZ3U4TGbNm/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZjYzODEwN2FiYjg0YWU2ZmIwM2NjMWRiMmNmZDFiYzQ0 ODdmOGQwHhcNMjYwMTAxMTIxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmY4ZGRhZDkxZDBiZDNkOWJmNzQ5ZDY1ZGRiMjBhMWEwZGQ4YTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7cJZ6iVyOGzi/MsV5FhaSPPvXEBx ozfwgWDdZoulJ+ZhZxAXXF/Gv7bHwRQefTb8sAKaPGBihraiL1WaPgCaDd4OzlH9 5lH8eu+JdMdtvKe4Kb/8nlyx7dK8FRp3PyKLWkAfkd1CE55y6CWt82GZZDV+rrsX M34//TZurYPbNHKxJevzO4/Hj9H/BGqbP47hYFh1L6WeNnzI1bX2wFp9eFqEbI9Y PIWIvHnk5RviGkBNjQGoPV6ir3CtiUJ1+YYjH2yaMqDtAGrvcKoStPd+Y7uJeLpe /iieNBOFDd8H4AZ+q3OeO3aEN1KCw993eUbrEPcOA09rwJmGwJY3mYuVfQIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFEb43a2R0L09m/dJ1l3bIKGg3YqbMB8GA1UdIwQY MBaAFCD2OBB6u4Sub7A8wdss/RvESH+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVBZNEVIcTdoSzV2c0R6QjJ5ejlHOFJJZjQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80ZjU4MDgtMWMwNC00MjU1LTliODQt YTgyODM2ZGUwNWZjLzEvUnZqZHJaSFF2VDJiOTBuV1hkc2dvYURkaXBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC80ZjU4MDgtMWMwNC00MjU1LTliODQtYTgyODM2ZGUwNWZj LzEvSVBZNEVIcTdoSzV2c0R6QjJ5ejlHOFJJZjQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYBKgOuQPoD BgQqEygCUDANBgkqhkiG9w0BAQsFAAOCAQEArqi90jNE0bhMNZXl1adiA0u2BXrx ZwGQOS/PAtW9jNuxuOaq06Gp+sFULsXtgTOYcrlZXzOrg7g0i70krc/nm80vCERi jsFJKAaXWwmDLq3dwhnq59xbo8S3fJ2jWUWnZhGU6yDPpUQzkBC7ysVeirvbdfj2 XPiF2Jowvze3fTBwPcC2CmoL9EaylbmJlbNQYqn0ML+MJ3MCg+D11yxmDGHTyHNd EDcEfClFsay0TkR8xnI3FJXjithlVJr7oW7GRRSikKcLjvQm9scHswvNE28YJ2f6 ptefbbHmw7QVkDppIXnkpy5cDsalHLNM7B7SpkA/RWGcqEphtXkSnmtWXA== -----END CERTIFICATE-----Generated at Mon Jan 26 13:45:09 2026 by rpki-client