This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/4utvqVH2q-VIwIirVXaFkWXi6ew.roa File: 4utvqVH2q-VIwIirVXaFkWXi6ew.roa (raw, json) Hash identifier: MPfmwrNSud3jHQizj/8yTBu5TAZkbuSLhnD4OyS+DtA= Subject key identifier: E2:EB:6F:A9:51:F6:AB:E5:48:C0:88:AB:55:76:85:91:65:E2:E9:EC Certificate issuer: /CN=b986028c9feb6f142b3fecb64667f48874ba9c37 Certificate serial: 019B79100CB54AA088BF375DA8DACA30D040 Authority key identifier: B9:86:02:8C:9F:EB:6F:14:2B:3F:EC:B6:46:67:F4:88:74:BA:9C:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/4utvqVH2q-VIwIirVXaFkWXi6ew.roa Signing time: Thu 01 Jan 2026 10:17:33 +0000 ROA not before: Thu 01 Jan 2026 10:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25365 IP address blocks: 2a00:7880:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:0c:b5:4a:a0:88:bf:37:5d:a8:da:ca:30:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b986028c9feb6f142b3fecb64667f48874ba9c37 Validity Not Before: Jan 1 10:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2eb6fa951f6abe548c088ab5576859165e2e9ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3b:40:9b:2b:09:f3:82:c9:72:79:dc:23:88: 6d:fe:01:78:41:88:7c:64:5e:e1:da:a3:d0:8c:c0: a9:d6:14:cd:2f:3c:06:7a:4a:6e:af:1a:16:ce:d2: 4e:e2:2f:39:d6:43:6e:29:1a:95:15:66:e2:f3:57: 4b:fd:ec:bd:9a:7b:76:29:2f:69:7f:e2:71:3c:99: 20:d9:b0:82:60:47:19:f0:c8:b4:33:e3:7d:e2:1e: 61:5b:67:24:84:31:5e:ce:38:7e:73:42:22:e9:90: ee:d9:89:c4:33:ff:36:e3:52:4b:42:59:80:d0:23: 0c:c6:38:ee:9b:7d:6b:47:ad:ff:c0:b4:34:ab:a8: b6:11:ce:d6:81:0b:10:a7:9a:5e:7a:f5:e1:8c:43: 90:55:64:89:e0:cc:9d:bd:dd:4c:bb:1a:45:55:f9: 20:59:2e:87:6b:be:9a:11:7f:9e:96:89:a6:ec:7e: 0b:be:c7:18:88:58:73:31:35:4a:74:5c:ee:b1:77: ac:8d:e0:96:45:58:7e:f9:8b:15:45:30:23:3f:b8: 37:8e:c0:1e:be:07:a5:51:7f:76:58:2a:01:5f:be: 32:57:20:66:1b:2d:67:48:ed:2e:69:d0:5a:58:3d: c3:7c:d2:26:b5:b3:c5:7a:79:0b:50:d6:ea:f5:ac: c0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:EB:6F:A9:51:F6:AB:E5:48:C0:88:AB:55:76:85:91:65:E2:E9:EC X509v3 Authority Key Identifier: keyid:B9:86:02:8C:9F:EB:6F:14:2B:3F:EC:B6:46:67:F4:88:74:BA:9C:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/4utvqVH2q-VIwIirVXaFkWXi6ew.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:7880:10::/48 Signature Algorithm: sha256WithRSAEncryption 41:5c:14:b5:ae:d5:f9:28:54:f1:25:8e:4c:db:2a:a8:3c:21: 40:11:45:6b:0a:47:f4:11:24:8a:27:e8:1e:08:26:c6:12:1b: 8b:57:c9:cd:d7:a8:2b:da:87:fb:41:99:55:db:f3:d8:1d:48: 61:69:fa:f1:88:55:b5:b8:9c:ee:13:b3:c2:e9:ab:d7:d5:b6: b6:b9:56:b5:ef:62:f0:79:07:d1:92:de:6d:34:15:2a:32:44: 09:13:73:03:47:73:e4:72:38:cf:73:1b:fa:19:e8:4e:60:c3: c9:b8:d0:48:2e:33:8e:db:dc:aa:4d:8f:a3:31:9f:e5:a5:fe: 2e:3c:c8:b9:b4:ff:2c:b1:13:f9:94:24:f2:13:61:37:a5:b7: ff:af:13:85:e9:a6:18:fb:13:97:5a:04:eb:05:f3:ee:28:a9: a7:76:d6:32:d6:b5:d0:92:4d:3b:fc:f1:73:96:5a:d0:2b:ba: be:e7:77:d5:a4:33:d2:dd:f3:f3:f5:f6:32:1e:de:fb:09:6e: 6a:32:6e:35:e1:0c:bf:30:49:13:3e:51:8a:00:bf:14:f3:1f: e2:2d:27:64:ed:94:30:b1:07:a2:ea:58:e8:c6:33:ac:b4:74: d0:b5:e0:64:55:84:ad:7e:56:d0:ca:24:45:21:2e:e8:3a:ca: 7b:32:81:78 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EAy1SqCIvzddqNrKMNBAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ODYwMjhjOWZlYjZmMTQyYjNmZWNiNjQ2NjdmNDg4NzRi YTljMzcwHhcNMjYwMTAxMTAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmViNmZhOTUxZjZhYmU1NDhjMDg4YWI1NTc2ODU5MTY1ZTJlOWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDtAmysJ84LJcnncI4ht/gF4QYh8 ZF7h2qPQjMCp1hTNLzwGekpurxoWztJO4i851kNuKRqVFWbi81dL/ey9mnt2KS9p f+JxPJkg2bCCYEcZ8Mi0M+N94h5hW2ckhDFezjh+c0Ii6ZDu2YnEM/8241JLQlmA 0CMMxjjum31rR63/wLQ0q6i2Ec7WgQsQp5peevXhjEOQVWSJ4Mydvd1MuxpFVfkg WS6Ha76aEX+elomm7H4LvscYiFhzMTVKdFzusXesjeCWRVh++YsVRTAjP7g3jsAe vgelUX92WCoBX74yVyBmGy1nSO0uadBaWD3DfNImtbPFenkLUNbq9azAaQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOLrb6lR9qvlSMCIq1V2hZFl4unsMB8GA1UdIwQY MBaAFLmGAoyf628UKz/stkZn9Ih0upw3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVlZQ2pKX3JieFFyUC15MlJtZjBpSFM2bkRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8yODU4NTAtNzU1MS00MjI5LTg3YjYt M2E0NDY4YzRkZmRmLzEvNHV0dnFWSDJxLVZJd0lpclZYYUZrV1hpNmV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8yODU4NTAtNzU1MS00MjI5LTg3YjYtM2E0NDY4YzRkZmRm LzEvdVlZQ2pKX3JieFFyUC15MlJtZjBpSFM2bkRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgB4gAAQ MA0GCSqGSIb3DQEBCwUAA4IBAQBBXBS1rtX5KFTxJY5M2yqoPCFAEUVrCkf0ESSK J+geCCbGEhuLV8nN16gr2of7QZlV2/PYHUhhafrxiFW1uJzuE7PC6avX1ba2uVa1 72LweQfRkt5tNBUqMkQJE3MDR3PkcjjPcxv6GehOYMPJuNBILjOO29yqTY+jMZ/l pf4uPMi5tP8ssRP5lCTyE2E3pbf/rxOF6aYY+xOXWgTrBfPuKKmndtYy1rXQkk07 /PFzllrQK7q+53fVpDPS3fPz9fYyHt77CW5qMm414Qy/MEkTPlGKAL8U8x/iLSdk 7ZQwsQei6ljoxjOstHTQteBkVYStflbQyiRFIS7oOsp7MoF4 -----END CERTIFICATE-----Generated at Tue Jan 27 02:06:56 2026 by rpki-client