This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/q4N1Kb_HBWzfg1hHkp8rrBk9rgg.roa File: q4N1Kb_HBWzfg1hHkp8rrBk9rgg.roa (raw, json) Hash identifier: XdsYOXPA6Krs0VRRvFb/EETf2VCM2Wv0VcaetSGQKaI= Subject key identifier: AB:83:75:29:BF:C7:05:6C:DF:83:58:47:92:9F:2B:AC:19:3D:AE:08 Certificate issuer: /CN=9af9d0d4befda09e999eabd0c8724e217364de10 Certificate serial: 019B7CEE0CF0B73FB2C0D62610FF65D1E752 Authority key identifier: 9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/q4N1Kb_HBWzfg1hHkp8rrBk9rgg.roa Signing time: Fri 02 Jan 2026 04:18:54 +0000 ROA not before: Fri 02 Jan 2026 04:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49714 IP address blocks: 2a0e:fd87:8000::/34 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:0c:f0:b7:3f:b2:c0:d6:26:10:ff:65:d1:e7:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9af9d0d4befda09e999eabd0c8724e217364de10 Validity Not Before: Jan 2 04:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab837529bfc7056cdf835847929f2bac193dae08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:52:b6:52:3e:c2:21:1d:92:da:87:ce:72:90: da:7c:ed:be:0e:eb:d3:7e:b0:2f:51:fe:85:0b:e2: d2:10:3b:7a:b8:de:0e:07:ce:35:64:8e:2d:a9:7a: 35:2d:f1:1e:87:c1:6c:40:83:74:2d:be:68:6e:a1: c9:ba:c0:14:16:38:cb:59:bb:3d:1f:d6:74:0f:03: 33:f0:3d:fb:35:53:20:fd:c4:cf:a1:a9:3e:15:4e: c7:c8:fb:da:78:80:e8:e1:6e:8f:e9:24:19:3d:96: a4:c7:87:45:7b:a9:b2:57:f3:d8:3f:79:23:28:95: c6:42:6b:4b:98:f6:59:dc:1b:7c:25:b0:90:a5:86: 78:61:e1:e2:c5:44:69:02:68:97:fe:1c:5f:28:fc: 5e:08:02:3c:39:61:47:94:d3:46:70:e7:cf:bd:b8: d6:22:2e:d1:6b:12:6c:de:db:26:99:b0:6d:9c:e0: 48:a4:52:aa:77:50:2a:53:89:47:4e:d5:7c:79:13: 4d:e6:a4:17:18:d5:1d:0a:5f:d7:85:73:65:15:d0: d8:37:13:43:6e:36:16:40:02:c2:43:53:84:d2:e2: e3:fe:2a:e6:b1:87:a5:db:87:76:6c:e7:b2:ea:ce: f7:0f:d5:8e:7e:b3:29:b3:44:7c:ba:77:86:2c:41: 08:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:83:75:29:BF:C7:05:6C:DF:83:58:47:92:9F:2B:AC:19:3D:AE:08 X509v3 Authority Key Identifier: keyid:9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/q4N1Kb_HBWzfg1hHkp8rrBk9rgg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:fd87:8000::/34 Signature Algorithm: sha256WithRSAEncryption 27:81:01:bb:3a:03:8b:8e:d2:37:05:36:2d:88:4b:b7:44:45: 50:b5:1c:3c:ca:8b:80:de:a0:a9:45:15:0d:b9:e0:d8:d8:a7: 03:eb:3f:28:bc:4b:f0:52:51:63:ca:27:c7:6d:bb:5b:b9:f5: 75:7e:cb:5c:fd:21:8a:e4:40:78:2f:cb:32:84:31:14:7f:dc: 2e:9e:2a:40:ad:81:b4:fb:87:38:b3:90:2b:35:fd:c0:56:03: 41:26:45:a3:44:59:7d:92:55:4c:ad:28:0d:25:da:b0:3a:1d: eb:91:3a:60:6b:35:e4:49:2e:d2:d8:62:99:a0:6c:46:37:f4: dd:14:ce:88:07:fe:dc:fc:3b:3a:78:cf:ea:71:c1:f7:cd:ad: 35:f2:03:b5:a4:0c:56:b4:f6:87:b7:95:cc:6e:11:2b:7b:47: a6:23:d5:72:b4:3d:6f:28:e5:d1:74:08:87:b9:04:34:a3:54: e9:e9:1b:a6:b8:89:1d:9e:74:0b:d1:7c:82:9c:9e:76:e8:4d: 48:ea:f2:97:42:fc:84:dc:a4:ae:61:18:b6:dc:01:ca:4e:f0: 52:f2:18:f1:47:29:67:b1:24:1f:33:ad:36:08:a6:36:49:a4: 1a:3f:ee:01:f1:45:52:3e:9c:e9:7e:6f:5a:76:39:78:f4:d2: 7d:ba:1e:89 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt87gzwtz+ywNYmEP9l0edSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZjlkMGQ0YmVmZGEwOWU5OTllYWJkMGM4NzI0ZTIxNzM2 NGRlMTAwHhcNMjYwMTAyMDQxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjgzNzUyOWJmYzcwNTZjZGY4MzU4NDc5MjlmMmJhYzE5M2RhZTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFK2Uj7CIR2S2ofOcpDafO2+DuvT frAvUf6FC+LSEDt6uN4OB841ZI4tqXo1LfEeh8FsQIN0Lb5obqHJusAUFjjLWbs9 H9Z0DwMz8D37NVMg/cTPoak+FU7HyPvaeIDo4W6P6SQZPZakx4dFe6myV/PYP3kj KJXGQmtLmPZZ3Bt8JbCQpYZ4YeHixURpAmiX/hxfKPxeCAI8OWFHlNNGcOfPvbjW Ii7RaxJs3tsmmbBtnOBIpFKqd1AqU4lHTtV8eRNN5qQXGNUdCl/XhXNlFdDYNxND bjYWQALCQ1OE0uLj/irmsYel24d2bOey6s73D9WOfrMps0R8uneGLEEIdwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFKuDdSm/xwVs34NYR5KfK6wZPa4IMB8GA1UdIwQY MBaAFJr50NS+/aCemZ6r0MhyTiFzZN4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXZuUTFMNzlvSjZabnF2UXlISk9JWE5rM2hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wMWQ5ZmUtZTE0YS00MGE0LTg0NTgt MjY3MDFiMTYyZmMzLzEvcTROMUtiX0hCV3pmZzFoSGtwOHJyQms5cmdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wMWQ5ZmUtZTE0YS00MGE0LTg0NTgtMjY3MDFiMTYyZmMz LzEvbXZuUTFMNzlvSjZabnF2UXlISk9JWE5rM2hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGKg79h4Aw DQYJKoZIhvcNAQELBQADggEBACeBAbs6A4uO0jcFNi2IS7dERVC1HDzKi4DeoKlF FQ254NjYpwPrPyi8S/BSUWPKJ8dtu1u59XV+y1z9IYrkQHgvyzKEMRR/3C6eKkCt gbT7hzizkCs1/cBWA0EmRaNEWX2SVUytKA0l2rA6HeuROmBrNeRJLtLYYpmgbEY3 9N0UzogH/tz8Ozp4z+pxwffNrTXyA7WkDFa09oe3lcxuESt7R6Yj1XK0PW8o5dF0 CIe5BDSjVOnpG6a4iR2edAvRfIKcnnboTUjq8pdC/ITcpK5hGLbcAcpO8FLyGPFH KWexJB8zrTYIpjZJpBo/7gHxRVI+nOl+b1p2OXj00n26Hok= -----END CERTIFICATE-----Generated at Sat Jan 10 06:59:43 2026 by rpki-client