This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/4hHdENRP8UqRMPRer0DmyKbxqs0.roa File: 4hHdENRP8UqRMPRer0DmyKbxqs0.roa (raw, json) Hash identifier: ADyWa0O+LoRcn7gTpz/vrNoTBtYlMAM0Wz+sCKXyoTQ= Subject key identifier: E2:11:DD:10:D4:4F:F1:4A:91:30:F4:5E:AF:40:E6:C8:A6:F1:AA:CD Certificate issuer: /CN=7b11318d4bdd3ec5943386e701d7d02bd68300ad Certificate serial: 019B7F811AA88AEDE3AED8CC3B7A8501B961 Authority key identifier: 7B:11:31:8D:4B:DD:3E:C5:94:33:86:E7:01:D7:D0:2B:D6:83:00:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/4hHdENRP8UqRMPRer0DmyKbxqs0.roa Signing time: Fri 02 Jan 2026 16:18:45 +0000 ROA not before: Fri 02 Jan 2026 16:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211759 IP address blocks: 2a14:60c7:8000::/38 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.crl rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:1a:a8:8a:ed:e3:ae:d8:cc:3b:7a:85:01:b9:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b11318d4bdd3ec5943386e701d7d02bd68300ad Validity Not Before: Jan 2 16:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e211dd10d44ff14a9130f45eaf40e6c8a6f1aacd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5f:e1:f3:fe:6a:1d:3a:3b:96:16:f6:e7:d9: ff:a2:c7:ce:e6:b6:2b:bc:f3:5f:7b:19:69:a3:5d: ba:80:24:06:72:6d:c9:93:b3:3c:97:57:78:70:a7: 3b:4b:9c:f0:0e:8c:96:cb:98:99:61:91:45:5d:bb: db:2d:66:91:41:4d:24:cd:7f:fd:5d:b6:7a:89:69: 67:64:27:20:0f:f2:2c:95:01:d8:c3:dd:c3:93:d7: 09:a3:0c:8d:d9:85:b6:c8:ec:3a:cb:53:dd:65:a8: 81:35:f6:69:c5:4e:0f:b4:60:a2:fe:6b:28:33:b4: 43:44:69:c8:81:eb:d6:c7:ff:5a:62:c0:21:58:b3: 14:69:98:02:07:c8:6c:bb:68:71:4b:fc:89:26:89: ab:3e:a9:54:61:1a:56:3b:d9:f4:38:5f:a3:80:25: 71:fd:5a:ab:99:b5:8f:f6:0f:5f:70:28:ac:41:24: 11:6f:9a:3c:46:d3:14:78:77:0d:78:20:14:11:4b: ef:ca:1a:84:a4:24:5a:93:98:75:8c:cb:5d:81:76: 92:ab:a0:b5:c8:b5:4d:9c:34:ec:8c:ed:d2:7f:88: 1a:bf:4a:04:b7:4e:fb:a4:d4:f5:a3:9b:be:fe:f8: 28:b8:c0:e0:8c:6d:e6:b5:8a:61:35:5c:16:8d:5e: 60:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:11:DD:10:D4:4F:F1:4A:91:30:F4:5E:AF:40:E6:C8:A6:F1:AA:CD X509v3 Authority Key Identifier: keyid:7B:11:31:8D:4B:DD:3E:C5:94:33:86:E7:01:D7:D0:2B:D6:83:00:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/4hHdENRP8UqRMPRer0DmyKbxqs0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:60c7:8000::/38 Signature Algorithm: sha256WithRSAEncryption 69:32:12:15:55:5c:9e:38:86:a2:24:40:e6:02:fa:80:61:eb: 0d:7a:ec:f7:2a:4c:e5:32:df:fa:60:54:8f:83:21:5a:e5:f5: 87:95:09:87:8e:bf:2f:c8:6b:23:d8:00:83:6a:f0:ce:ca:57: 85:9c:f6:54:ad:13:fa:06:71:d3:ba:fa:20:81:95:b5:5b:5d: 24:f3:41:d7:d6:7f:c0:dc:07:bb:30:8d:d1:23:99:d8:ef:3d: a3:04:ea:3e:82:55:c0:d4:3a:a7:84:34:f7:93:11:a6:11:59: 2d:e6:db:3d:9f:15:b0:30:a8:67:7c:48:85:06:1d:00:57:1f: 94:67:bf:f7:e8:d4:77:43:f2:bf:c5:6c:86:31:32:4b:49:5d: cd:84:e3:0c:bc:cc:87:19:3e:c4:0c:00:24:c2:25:ac:42:7c: 67:db:06:d0:cf:1e:f4:22:3f:13:58:61:63:84:15:b1:41:3f: 67:a5:e1:70:ad:c7:11:38:20:08:bc:96:fb:1c:03:99:fd:a6: 1f:1c:1b:63:1e:bd:0c:82:1d:02:5a:2f:59:70:89:08:77:2e: c0:23:24:bf:95:68:ab:17:b5:34:a0:0f:86:32:ac:4e:77:60: 57:f3:de:30:47:ed:0d:71:69:cd:60:22:f2:ce:80:7b:4e:2b: 46:bd:97:c3 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/gRqoiu3jrtjMO3qFAblhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMTEzMThkNGJkZDNlYzU5NDMzODZlNzAxZDdkMDJiZDY4 MzAwYWQwHhcNMjYwMTAyMTYxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjExZGQxMGQ0NGZmMTRhOTEzMGY0NWVhZjQwZTZjOGE2ZjFhYWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1V/h8/5qHTo7lhb259n/osfO5rYr vPNfexlpo126gCQGcm3Jk7M8l1d4cKc7S5zwDoyWy5iZYZFFXbvbLWaRQU0kzX/9 XbZ6iWlnZCcgD/IslQHYw93Dk9cJowyN2YW2yOw6y1PdZaiBNfZpxU4PtGCi/mso M7RDRGnIgevWx/9aYsAhWLMUaZgCB8hsu2hxS/yJJomrPqlUYRpWO9n0OF+jgCVx /VqrmbWP9g9fcCisQSQRb5o8RtMUeHcNeCAUEUvvyhqEpCRak5h1jMtdgXaSq6C1 yLVNnDTsjO3Sf4gav0oEt077pNT1o5u+/vgouMDgjG3mtYphNVwWjV5gxwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFOIR3RDUT/FKkTD0Xq9A5sim8arNMB8GA1UdIwQY MBaAFHsRMY1L3T7FlDOG5wHX0CvWgwCtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXhFeGpVdmRQc1dVTTRibkFkZlFLOWFEQUswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9jOWMzNzAtNzEyMy00MDgxLWI5NTYt ODhlYzU3OWY4OGNhLzEvNGhIZEVOUlA4VXFSTVBSZXIwRG15S2J4cXMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9jOWMzNzAtNzEyMy00MDgxLWI5NTYtODhlYzU3OWY4OGNh LzEvZXhFeGpVdmRQc1dVTTRibkFkZlFLOWFEQUswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKhRgx4Aw DQYJKoZIhvcNAQELBQADggEBAGkyEhVVXJ44hqIkQOYC+oBh6w167PcqTOUy3/pg VI+DIVrl9YeVCYeOvy/IayPYAINq8M7KV4Wc9lStE/oGcdO6+iCBlbVbXSTzQdfW f8DcB7swjdEjmdjvPaME6j6CVcDUOqeENPeTEaYRWS3m2z2fFbAwqGd8SIUGHQBX H5Rnv/fo1HdD8r/FbIYxMktJXc2E4wy8zIcZPsQMACTCJaxCfGfbBtDPHvQiPxNY YWOEFbFBP2el4XCtxxE4IAi8lvscA5n9ph8cG2MevQyCHQJaL1lwiQh3LsAjJL+V aKsXtTSgD4YyrE53YFfz3jBH7Q1xac1gIvLOgHtOK0a9l8M= -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:38 2026 by rpki-client