This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/4xB4yyr6YEm-yvCmxKG_UezWjuY.roa File: 4xB4yyr6YEm-yvCmxKG_UezWjuY.roa (raw, json) Hash identifier: CVgnePl3GtGgUJvx3YbVJ3pRj6ajgpXzxG/fkBKNNBE= Subject key identifier: E3:10:78:CB:2A:FA:60:49:BE:CA:F0:A6:C4:A1:BF:51:EC:D6:8E:E6 Certificate issuer: /CN=03364fcedd691357733cd5ccd7029db8e61d1e3a Certificate serial: 019B7B369F6754CA43DFB7558EBCD34ACB21 Authority key identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/4xB4yyr6YEm-yvCmxKG_UezWjuY.roa Signing time: Thu 01 Jan 2026 20:18:55 +0000 ROA not before: Thu 01 Jan 2026 20:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212027 IP address blocks: 2a14:16c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:9f:67:54:ca:43:df:b7:55:8e:bc:d3:4a:cb:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a Validity Not Before: Jan 1 20:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e31078cb2afa6049becaf0a6c4a1bf51ecd68ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:48:cd:89:d7:68:c8:17:c6:44:91:70:94:65: e5:76:8a:f5:78:14:73:45:22:44:b5:0f:a4:fb:f7: 03:b7:1f:01:a7:04:4c:68:b9:a9:1e:78:82:3b:7e: 4f:63:16:44:d3:75:d0:ca:04:2f:24:f2:b2:27:96: ce:49:60:1d:f8:53:3d:cd:cb:89:d8:86:75:54:93: 2e:db:39:3b:3f:92:67:e2:5d:95:df:75:a1:17:47: 8b:cf:b6:3a:04:70:02:ad:e4:16:5b:20:79:f9:b7: c4:64:9d:ca:ff:63:88:53:41:50:5a:6d:8b:b7:ce: 3b:b6:a5:53:ce:51:07:4b:b5:86:0b:46:04:b1:27: 9f:ca:47:b0:4f:2b:f5:73:fd:bc:64:32:d6:d7:fc: 8b:25:e4:78:e2:79:13:e5:14:22:9a:ea:23:9a:67: 17:50:29:3c:23:86:8e:bf:2c:40:c5:68:ec:be:4a: 93:3b:c5:4c:64:be:27:8e:19:12:0d:cf:9a:62:44: 91:30:d9:67:c8:66:f4:9a:a9:5c:a9:32:41:ea:d9: 6c:0b:be:44:c0:6e:6d:27:e6:25:fd:fa:ae:0d:f6: 4b:11:75:37:c1:9a:0d:63:5b:7e:b9:b0:b9:bb:81: 28:f5:5c:99:6e:22:ab:29:e3:98:d6:e5:37:92:f5: 47:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:10:78:CB:2A:FA:60:49:BE:CA:F0:A6:C4:A1:BF:51:EC:D6:8E:E6 X509v3 Authority Key Identifier: keyid:03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/4xB4yyr6YEm-yvCmxKG_UezWjuY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:16c0::/29 Signature Algorithm: sha256WithRSAEncryption 6e:57:78:66:20:10:0a:97:43:6c:ae:f7:4f:a2:8e:66:a7:ef: df:26:52:1f:6e:22:ac:a0:38:ee:bb:4b:ff:06:cf:ed:b6:50: b7:d2:b0:74:df:88:50:19:fe:86:16:01:15:d3:3c:18:66:0a: 6d:cf:62:42:77:44:21:ff:e9:1d:c7:bb:d2:83:a6:1b:21:da: 77:36:7f:71:07:8c:24:db:44:48:48:85:e4:df:e8:19:8d:4e: 5c:d7:68:8c:be:01:87:dd:ac:32:6a:96:61:5b:80:2d:70:20: a4:7d:a7:f2:e5:dc:00:f9:6a:3f:f2:4d:78:91:ff:a8:b7:79: 4f:f2:54:25:17:0f:28:43:e6:dc:b4:f0:68:05:5e:ef:a2:80: 35:9b:cb:f1:cc:35:71:c4:bb:b0:b3:c4:a9:65:fc:1b:be:1a: a6:6d:06:01:aa:cd:a2:fd:b1:3a:39:8b:30:96:f6:40:dd:99: e5:26:cf:8f:9c:c7:79:98:3c:be:68:f1:c5:b2:db:09:a0:b2: 47:b9:c7:59:d9:c1:60:54:20:3c:0a:30:e1:83:21:0f:7c:85: 80:4b:0b:db:32:18:22:97:90:c9:53:d3:41:fa:81:51:d0:e8: bd:d4:ef:b1:e0:12:8b:83:41:d5:df:fa:eb:5b:b5:65:23:f1: a0:c9:02:ff -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7Np9nVMpD37dVjrzTSsshMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMzY0ZmNlZGQ2OTEzNTc3MzNjZDVjY2Q3MDI5ZGI4ZTYx ZDFlM2EwHhcNMjYwMTAxMjAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzEwNzhjYjJhZmE2MDQ5YmVjYWYwYTZjNGExYmY1MWVjZDY4ZWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0jNiddoyBfGRJFwlGXldor1eBRz RSJEtQ+k+/cDtx8BpwRMaLmpHniCO35PYxZE03XQygQvJPKyJ5bOSWAd+FM9zcuJ 2IZ1VJMu2zk7P5Jn4l2V33WhF0eLz7Y6BHACreQWWyB5+bfEZJ3K/2OIU0FQWm2L t847tqVTzlEHS7WGC0YEsSefykewTyv1c/28ZDLW1/yLJeR44nkT5RQimuojmmcX UCk8I4aOvyxAxWjsvkqTO8VMZL4njhkSDc+aYkSRMNlnyGb0mqlcqTJB6tlsC75E wG5tJ+Yl/fquDfZLEXU3wZoNY1t+ubC5u4Eo9VyZbiKrKeOY1uU3kvVHmwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFOMQeMsq+mBJvsrwpsShv1Hs1o7mMB8GA1UdIwQY MBaAFAM2T87daRNXczzVzNcCnbjmHR46MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXpaUHp0MXBFMWR6UE5YTTF3S2R1T1lkSGpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81NmY1MjYtNTNkZS00YzlkLWI0MDEt YWJmMGI1OTQ2NDZmLzEvNHhCNHl5cjZZRW0teXZDbXhLR19VZXpXanVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi81NmY1MjYtNTNkZS00YzlkLWI0MDEtYWJmMGI1OTQ2NDZm LzEvQXpaUHp0MXBFMWR6UE5YTTF3S2R1T1lkSGpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhQWwDAN BgkqhkiG9w0BAQsFAAOCAQEAbld4ZiAQCpdDbK73T6KOZqfv3yZSH24irKA47rtL /wbP7bZQt9KwdN+IUBn+hhYBFdM8GGYKbc9iQndEIf/pHce70oOmGyHadzZ/cQeM JNtESEiF5N/oGY1OXNdojL4Bh92sMmqWYVuALXAgpH2n8uXcAPlqP/JNeJH/qLd5 T/JUJRcPKEPm3LTwaAVe76KANZvL8cw1ccS7sLPEqWX8G74apm0GAarNov2xOjmL MJb2QN2Z5SbPj5zHeZg8vmjxxbLbCaCyR7nHWdnBYFQgPAow4YMhD3yFgEsL2zIY IpeQyVPTQfqBUdDovdTvseASi4NB1d/661u1ZSPxoMkC/w== -----END CERTIFICATE-----Generated at Wed Jan 21 07:21:51 2026 by rpki-client