This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/r4TboysH3BIov20XJi7dFtnnedE.roa File: r4TboysH3BIov20XJi7dFtnnedE.roa (raw, json) Hash identifier: iYkSazY0HewBpzFtbetYoDpATNCZ32qEoeSC9E4fGas= Subject key identifier: AF:84:DB:A3:2B:07:DC:12:28:BF:6D:17:26:2E:DD:16:D9:E7:79:D1 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910A7AD87C7E24D2A476BBD96BD8354 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/r4TboysH3BIov20XJi7dFtnnedE.roa Signing time: Thu 01 Jan 2026 10:18:13 +0000 ROA not before: Thu 01 Jan 2026 10:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210934 IP address blocks: 2a12:bec4:1cd0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a7:ad:87:c7:e2:4d:2a:47:6b:bd:96:bd:83:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af84dba32b07dc1228bf6d17262edd16d9e779d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:34:b2:c1:35:d8:df:3d:53:81:3a:a5:7a:34: 7a:1c:26:6c:d0:4a:79:11:33:0c:ca:e6:78:43:9c: 16:2e:3f:af:b5:18:54:91:db:a4:bd:cd:b9:f8:e7: d9:c3:33:0d:0c:61:e6:f5:a1:28:96:2c:0d:5f:18: a0:ff:bb:ee:a9:ba:fb:89:ae:60:dd:aa:07:70:cb: c7:97:31:63:20:ee:27:dd:ca:4a:74:62:82:a9:9a: f7:7f:52:73:c7:2b:f4:23:4b:7f:f9:ba:90:0d:bd: f0:30:c7:4a:f2:13:f9:b1:f5:b4:3e:51:6c:d8:63: 61:92:ad:f1:2c:2a:75:20:fd:87:0f:5d:35:36:3c: 56:80:9b:fe:3d:07:c0:dd:cd:64:ef:65:61:1d:d8: 3b:92:e7:fd:6a:40:19:ad:09:5e:81:0f:f7:19:4f: 31:e4:2c:ed:71:62:4e:f6:c8:b3:36:bf:9c:93:07: ed:97:6c:c2:29:37:21:b2:dd:48:07:2b:96:b1:c3: 70:a5:d2:a4:8b:00:0b:0c:d0:95:92:ea:fb:1f:80: 81:83:a6:d5:bf:c6:e5:10:3f:21:39:53:16:49:d6: de:90:1e:b9:f1:af:eb:19:43:30:6d:56:d2:fd:bb: 49:d3:41:3f:fa:44:d3:77:82:cc:37:c3:ae:4a:fc: 4c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:84:DB:A3:2B:07:DC:12:28:BF:6D:17:26:2E:DD:16:D9:E7:79:D1 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/r4TboysH3BIov20XJi7dFtnnedE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:1cd0::/44 Signature Algorithm: sha256WithRSAEncryption 19:3d:72:8e:97:21:3e:9b:e1:9e:1d:c5:f0:bc:ef:97:b9:27: fc:46:42:9b:9f:34:1c:de:d6:fb:d6:c0:15:d6:41:21:c7:65: ac:c6:91:80:59:cc:5c:e1:1a:39:5d:85:2b:65:0c:79:e0:f2: e3:df:5f:e3:6b:13:46:b3:48:8b:11:e7:af:a3:c6:fd:ee:85: 77:88:c9:f1:92:fb:7b:ed:17:2d:12:d4:f0:8e:9a:00:9e:e9: 1a:3b:1f:5f:32:43:de:95:62:e8:60:fe:70:20:ad:bf:26:11: 68:44:ed:a1:07:37:16:f8:1d:7c:5d:ad:9e:2c:36:26:4b:49: f4:32:93:1e:11:30:e7:ca:89:2d:20:6b:5b:3f:49:0c:54:4d: 73:78:77:14:3c:c1:46:e8:c0:a1:a0:bf:96:2f:73:f3:46:49: c9:f5:77:f5:95:8e:b6:40:da:72:f9:77:05:30:9e:9a:58:d0: cc:cd:69:2c:2b:05:00:59:5c:73:51:ed:a7:e9:e7:c9:8c:a5: 68:0b:5f:4e:b3:15:0b:f2:fe:45:1e:03:61:fb:ea:49:10:83: 25:db:ce:3c:6d:1a:27:d4:3a:ee:31:38:90:51:fa:77:2d:f2: 31:cd:57:95:9f:17:5f:19:d4:b3:c8:a9:ef:c4:f3:2d:20:15: d6:36:2b:4b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EKeth8fiTSpHa72WvYNUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjg0ZGJhMzJiMDdkYzEyMjhiZjZkMTcyNjJlZGQxNmQ5ZTc3OWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjSywTXY3z1TgTqlejR6HCZs0Ep5 ETMMyuZ4Q5wWLj+vtRhUkdukvc25+OfZwzMNDGHm9aEoliwNXxig/7vuqbr7ia5g 3aoHcMvHlzFjIO4n3cpKdGKCqZr3f1Jzxyv0I0t/+bqQDb3wMMdK8hP5sfW0PlFs 2GNhkq3xLCp1IP2HD101NjxWgJv+PQfA3c1k72VhHdg7kuf9akAZrQlegQ/3GU8x 5CztcWJO9sizNr+ckwftl2zCKTchst1IByuWscNwpdKkiwALDNCVkur7H4CBg6bV v8blED8hOVMWSdbekB658a/rGUMwbVbS/btJ00E/+kTTd4LMN8OuSvxMmwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFK+E26MrB9wSKL9tFyYu3RbZ53nRMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvcjRUYm95c0gzQklvdjIwWEppN2RGdG5uZWRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+xBzQ MA0GCSqGSIb3DQEBCwUAA4IBAQAZPXKOlyE+m+GeHcXwvO+XuSf8RkKbnzQc3tb7 1sAV1kEhx2WsxpGAWcxc4Ro5XYUrZQx54PLj31/jaxNGs0iLEeevo8b97oV3iMnx kvt77RctEtTwjpoAnukaOx9fMkPelWLoYP5wIK2/JhFoRO2hBzcW+B18Xa2eLDYm S0n0MpMeETDnyoktIGtbP0kMVE1zeHcUPMFG6MChoL+WL3PzRknJ9Xf1lY62QNpy +XcFMJ6aWNDMzWksKwUAWVxzUe2n6efJjKVoC19OsxUL8v5FHgNh++pJEIMl2848 bRon1DruMTiQUfp3LfIxzVeVnxdfGdSzyKnvxPMtIBXWNitL -----END CERTIFICATE-----Generated at Sun Jan 11 15:07:36 2026 by rpki-client