This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/4cyxgKfHx73cxANXfCDuCGGKNgI.roa File: 4cyxgKfHx73cxANXfCDuCGGKNgI.roa (raw, json) Hash identifier: JTW79OnrfXB/3TRgMkZzzLj69/ILo3f756ILXg43zmg= Subject key identifier: E1:CC:B1:80:A7:C7:C7:BD:DC:C4:03:57:7C:20:EE:08:61:8A:36:02 Certificate issuer: /CN=955246b1b65c95046259c2248c1d306ff135b984 Certificate serial: 019B77C72FC22F51C7D221177F635D1723DD Authority key identifier: 95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/4cyxgKfHx73cxANXfCDuCGGKNgI.roa Signing time: Thu 01 Jan 2026 04:18:21 +0000 ROA not before: Thu 01 Jan 2026 04:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211501 IP address blocks: 2001:67c:10d8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:2f:c2:2f:51:c7:d2:21:17:7f:63:5d:17:23:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=955246b1b65c95046259c2248c1d306ff135b984 Validity Not Before: Jan 1 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1ccb180a7c7c7bddcc403577c20ee08618a3602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:71:53:ea:96:d8:44:1a:c4:17:eb:71:9f:9a: 42:e4:76:c0:23:86:47:17:ec:f8:2c:31:47:4b:f4: 06:60:79:40:91:36:ec:0d:9f:73:b1:6a:6a:1b:93: 7a:5a:c1:71:1d:b1:61:98:9f:41:29:5e:4a:37:c7: cc:b4:32:e5:a3:1e:e4:6d:5f:7b:e9:d9:da:5f:87: f5:ce:39:5d:0b:aa:82:39:d8:44:3a:8d:ea:8b:c6: 37:6c:a5:96:50:1b:67:5a:0e:f0:08:e6:67:68:99: f6:cd:c4:92:32:68:44:c0:08:2b:7e:0b:82:4b:d9: b9:aa:86:4b:09:4b:4b:f4:8f:a7:39:47:82:85:f6: dd:d8:b0:78:8a:2a:0e:cf:ef:af:b0:7b:c2:0f:03: 03:9d:ed:88:d5:48:bd:49:97:8a:d4:f4:9d:90:22: 47:5b:54:c8:fb:e3:22:3a:31:ab:02:8d:70:06:10: c3:78:f4:cb:d0:8c:8e:48:fd:80:bf:af:44:0c:29: f5:23:d7:29:58:a5:57:a4:42:81:e4:f0:0e:a6:15: 64:8b:40:27:e1:37:05:64:9e:f7:52:32:96:fe:4b: 48:19:a8:61:58:60:a5:78:6d:4e:8f:72:24:4f:44: e6:5b:ee:df:f1:1b:25:97:b9:5e:a3:77:ad:c2:0d: 61:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CC:B1:80:A7:C7:C7:BD:DC:C4:03:57:7C:20:EE:08:61:8A:36:02 X509v3 Authority Key Identifier: keyid:95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/4cyxgKfHx73cxANXfCDuCGGKNgI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:10d8::/48 Signature Algorithm: sha256WithRSAEncryption 9e:e0:2c:37:94:c7:fa:4f:5a:09:16:f2:84:ca:b5:b3:b6:f9: aa:e7:9a:33:b3:0c:28:a2:10:33:77:10:be:c8:00:28:d6:5c: 79:ba:af:d5:d3:5b:97:d3:24:f9:3d:e2:39:27:ed:c6:fc:4a: 83:35:e6:5c:e9:d4:f6:99:3b:d7:14:5c:97:6f:e1:6c:0f:e8: 7f:4e:b3:38:3d:04:7d:eb:09:b7:91:4f:d4:90:b5:0b:f3:1e: 98:bd:9b:e6:10:7d:1e:5b:d7:57:c2:1c:f4:3b:2c:d7:fd:72: c4:68:a2:91:79:db:51:f4:9c:4b:00:68:df:4b:c6:84:4a:90: bf:6b:63:6a:21:08:3f:86:f3:65:e3:d7:0f:71:56:55:0d:44: 90:b7:22:35:d5:31:a2:9c:0b:77:1b:fa:15:2d:9c:90:9e:6e: 48:31:31:92:c7:1c:90:fe:16:89:45:13:79:68:c4:81:1e:a3: ac:af:bf:7f:35:46:5a:42:1d:81:5a:4b:44:fc:da:42:38:9f: 90:cc:73:65:ba:ba:a9:11:93:8b:8f:6d:8d:0c:ed:ec:5f:c2: da:09:5a:9a:48:b2:f8:d4:56:dc:0c:6d:f7:18:0c:dc:a0:ae: 09:93:ea:2f:72:ad:ee:ab:95:24:d4:3b:e6:d3:ab:c3:22:15: bb:b2:a5:60 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3xy/CL1HH0iEXf2NdFyPdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NTI0NmIxYjY1Yzk1MDQ2MjU5YzIyNDhjMWQzMDZmZjEz NWI5ODQwHhcNMjYwMTAxMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWNjYjE4MGE3YzdjN2JkZGNjNDAzNTc3YzIwZWUwODYxOGEzNjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHFT6pbYRBrEF+txn5pC5HbAI4ZH F+z4LDFHS/QGYHlAkTbsDZ9zsWpqG5N6WsFxHbFhmJ9BKV5KN8fMtDLlox7kbV97 6dnaX4f1zjldC6qCOdhEOo3qi8Y3bKWWUBtnWg7wCOZnaJn2zcSSMmhEwAgrfguC S9m5qoZLCUtL9I+nOUeChfbd2LB4iioOz++vsHvCDwMDne2I1Ui9SZeK1PSdkCJH W1TI++MiOjGrAo1wBhDDePTL0IyOSP2Av69EDCn1I9cpWKVXpEKB5PAOphVki0An 4TcFZJ73UjKW/ktIGahhWGCleG1Oj3IkT0TmW+7f8Rsll7leo3etwg1hxQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOHMsYCnx8e93MQDV3wg7ghhijYCMB8GA1UdIwQY MBaAFJVSRrG2XJUEYlnCJIwdMG/xNbmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFZKR3NiWmNsUVJpV2NJa2pCMHdiX0UxdVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9hN2M4ZDAtYzkyZC00NWQwLTkxYTMt MjhjMjJhYmYwOGQwLzEvNGN5eGdLZkh4NzNjeEFOWGZDRHVDR0dLTmdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9hN2M4ZDAtYzkyZC00NWQwLTkxYTMtMjhjMjJhYmYwOGQw LzEvbFZKR3NiWmNsUVJpV2NJa2pCMHdiX0UxdVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBDY MA0GCSqGSIb3DQEBCwUAA4IBAQCe4Cw3lMf6T1oJFvKEyrWztvmq55ozswwoohAz dxC+yAAo1lx5uq/V01uX0yT5PeI5J+3G/EqDNeZc6dT2mTvXFFyXb+FsD+h/TrM4 PQR96wm3kU/UkLUL8x6YvZvmEH0eW9dXwhz0OyzX/XLEaKKRedtR9JxLAGjfS8aE SpC/a2NqIQg/hvNl49cPcVZVDUSQtyI11TGinAt3G/oVLZyQnm5IMTGSxxyQ/haJ RRN5aMSBHqOsr79/NUZaQh2BWktE/NpCOJ+QzHNlurqpEZOLj22NDO3sX8LaCVqa SLL41FbcDG33GAzcoK4Jk+ovcq3uq5Uk1Dvm06vDIhW7sqVg -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:26 2026 by rpki-client