This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/4AjGjVkO2tVBx0Eie_ffAJbIoko.roa File: 4AjGjVkO2tVBx0Eie_ffAJbIoko.roa (raw, json) Hash identifier: HDPfPT6f6mvgy7P34ZeKqbqyBJoxXjtENIEEg/9aLlo= Subject key identifier: E0:08:C6:8D:59:0E:DA:D5:41:C7:41:22:7B:F7:DF:00:96:C8:A2:4A Certificate issuer: /CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435 Certificate serial: 019B78354B345617C0EBE0F96E2C9662298C Authority key identifier: C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/4AjGjVkO2tVBx0Eie_ffAJbIoko.roa Signing time: Thu 01 Jan 2026 06:18:37 +0000 ROA not before: Thu 01 Jan 2026 06:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206081 IP address blocks: 2001:67c:c64::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:4b:34:56:17:c0:eb:e0:f9:6e:2c:96:62:29:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435 Validity Not Before: Jan 1 06:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e008c68d590edad541c741227bf7df0096c8a24a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:2e:85:d9:43:b8:1b:b6:f9:fa:3e:7b:25:9a: 07:2e:41:34:64:41:b6:41:d7:7c:ad:42:a2:8f:5d: 0c:38:2c:b5:b7:3d:75:d8:cc:5c:0e:f3:ea:a9:94: 58:ab:40:d5:68:3b:1c:e6:e2:c1:7d:84:c6:f9:c1: ef:83:62:3c:7f:14:62:ce:d0:b2:c1:e2:4c:30:94: c2:29:1b:9d:8f:5a:c4:a8:31:a2:c9:6c:27:f8:67: 24:33:73:05:dc:70:5c:b3:e2:0e:2a:9f:3d:06:ca: e3:4a:de:77:63:0c:97:3b:9b:1c:18:f7:2c:19:57: 64:7c:e7:84:7a:74:79:22:80:d6:e9:b2:82:1b:bb: c9:c5:9e:45:e8:48:0b:f4:2a:48:7c:7c:3e:ae:f9: 5f:f6:95:72:a6:73:cb:43:fe:b5:d3:0b:8d:06:53: 17:47:f8:94:18:ca:5c:e2:d4:96:f1:ee:88:22:b8: 27:a7:97:40:93:a5:6f:62:f7:92:f9:c2:1e:86:4d: a2:93:a0:a6:96:32:8e:5c:35:1f:9e:90:60:e8:57: 10:53:ef:49:e0:11:ac:27:a9:a9:57:30:d3:7e:9d: da:cd:03:70:44:44:3e:d1:4b:ab:20:f3:27:b4:36: 57:bd:98:61:00:54:09:78:d7:88:98:18:48:5b:f8: 91:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:08:C6:8D:59:0E:DA:D5:41:C7:41:22:7B:F7:DF:00:96:C8:A2:4A X509v3 Authority Key Identifier: keyid:C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/4AjGjVkO2tVBx0Eie_ffAJbIoko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:c64::/48 Signature Algorithm: sha256WithRSAEncryption ad:1a:d6:b2:8c:7b:4e:c0:17:71:cc:c9:11:af:c3:94:d2:4e: d8:b5:aa:83:d5:cf:1f:b1:0b:5c:99:c8:f1:a9:54:a6:94:a0: 9c:d3:71:04:2c:74:96:2a:f7:e1:82:1c:9e:a0:78:f0:e0:90: b1:47:88:8a:5a:40:91:6b:fe:10:df:71:7d:46:fb:cf:96:af: 57:b6:ef:83:4b:77:2d:df:58:34:c9:98:4b:fc:74:f8:e7:3a: e2:3d:42:c1:26:6d:62:69:dc:4e:29:11:1a:ed:d1:a9:a5:f3: b5:2c:b6:c4:a5:44:1b:d8:94:b7:ab:76:f6:5d:10:14:8f:9e: a4:0c:25:8f:45:5c:dc:54:f0:a9:7c:d3:ad:84:d2:5a:4a:36: 46:59:60:68:df:a8:f6:f5:ae:5b:50:2c:b8:9b:df:18:2f:8d: c1:9f:fe:4b:c8:21:87:0f:73:32:3a:c0:5b:a1:23:90:69:c8: 6e:ab:5d:2e:a1:e0:e6:54:b1:37:47:fc:b9:76:3f:c5:4c:b3: 7a:ff:ff:00:e8:b8:19:89:ab:90:b6:e1:9c:b3:cf:e3:6f:0f: d0:a2:a5:a2:5f:f4:3a:d6:5c:3e:62:a5:18:24:cf:f7:5e:76: 89:dc:d7:1a:c5:df:2e:da:dc:5f:2a:d1:db:6a:5e:bb:55:68: 42:fa:b0:03 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4NUs0VhfA6+D5biyWYimMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MjllMTBlMTZiYzc5YmZjNTZjNTM1NTdlNWIxYWE1NTlj Yzc0MzUwHhcNMjYwMTAxMDYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDA4YzY4ZDU5MGVkYWQ1NDFjNzQxMjI3YmY3ZGYwMDk2YzhhMjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+C6F2UO4G7b5+j57JZoHLkE0ZEG2 Qdd8rUKij10MOCy1tz112MxcDvPqqZRYq0DVaDsc5uLBfYTG+cHvg2I8fxRiztCy weJMMJTCKRudj1rEqDGiyWwn+GckM3MF3HBcs+IOKp89BsrjSt53YwyXO5scGPcs GVdkfOeEenR5IoDW6bKCG7vJxZ5F6EgL9CpIfHw+rvlf9pVypnPLQ/610wuNBlMX R/iUGMpc4tSW8e6IIrgnp5dAk6VvYveS+cIehk2ik6CmljKOXDUfnpBg6FcQU+9J 4BGsJ6mpVzDTfp3azQNwREQ+0UurIPMntDZXvZhhAFQJeNeImBhIW/iRGQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOAIxo1ZDtrVQcdBInv33wCWyKJKMB8GA1UdIwQY MBaAFMgp4Q4WvHm/xWxTVX5bGqVZzHQ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUNuaERoYThlYl9GYkZOVmZsc2FwVm5NZERVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS82NjdhNGQtNGEzYS00OGY1LWEyNmEt Yjg0NTNlZWJiMjY3LzEvNEFqR2pWa08ydFZCeDBFaWVfZmZBSmJJb2tvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS82NjdhNGQtNGEzYS00OGY1LWEyNmEtYjg0NTNlZWJiMjY3 LzEveUNuaERoYThlYl9GYkZOVmZsc2FwVm5NZERVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAxk MA0GCSqGSIb3DQEBCwUAA4IBAQCtGtayjHtOwBdxzMkRr8OU0k7YtaqD1c8fsQtc mcjxqVSmlKCc03EELHSWKvfhghyeoHjw4JCxR4iKWkCRa/4Q33F9RvvPlq9Xtu+D S3ct31g0yZhL/HT45zriPULBJm1iadxOKREa7dGppfO1LLbEpUQb2JS3q3b2XRAU j56kDCWPRVzcVPCpfNOthNJaSjZGWWBo36j29a5bUCy4m98YL43Bn/5LyCGHD3My OsBboSOQachuq10uoeDmVLE3R/y5dj/FTLN6//8A6LgZiauQtuGcs8/jbw/QoqWi X/Q61lw+YqUYJM/3XnaJ3Ncaxd8u2txfKtHbal67VWhC+rAD -----END CERTIFICATE-----Generated at Mon Jan 26 07:56:12 2026 by rpki-client