This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/4bGNwzRhZ3Sv5nqd5iP2VTOnrSM.roa File: 4bGNwzRhZ3Sv5nqd5iP2VTOnrSM.roa (raw, json) Hash identifier: XJWuoe6EziLT9jv/4mhHwrbdMSAC7slam5GYAks/R7g= Subject key identifier: E1:B1:8D:C3:34:61:67:74:AF:E6:7A:9D:E6:23:F6:55:33:A7:AD:23 Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA7586BF19B53FF4681E32FF1839CE0 Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/4bGNwzRhZ3Sv5nqd5iP2VTOnrSM.roa Signing time: Fri 02 Jan 2026 12:20:54 +0000 ROA not before: Fri 02 Jan 2026 12:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207036 IP address blocks: 2a06:e881:1600::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:58:6b:f1:9b:53:ff:46:81:e3:2f:f1:83:9c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1b18dc334616774afe67a9de623f65533a7ad23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:63:a8:f6:01:19:28:79:b0:e0:32:1c:2c:e5: fc:93:85:bc:28:24:dc:96:79:e9:16:3c:39:56:06: 2d:99:f6:28:12:2e:a5:ce:cd:28:30:97:7d:7f:5f: 29:47:e7:78:8b:67:49:b6:a8:c6:74:61:91:43:e9: d1:0a:88:e3:d7:4b:b3:8d:a5:21:2b:7a:b1:86:4f: b4:08:00:d4:33:82:df:03:a5:3b:51:e2:4c:da:25: eb:dd:75:a5:d9:4b:ec:cc:1f:cf:ca:1c:49:31:8c: 46:8d:af:6c:fe:de:d5:47:0b:52:67:3b:78:77:ed: 31:ce:a3:97:b9:25:6c:3c:2d:5d:6d:a7:01:f0:40: 04:14:ca:49:2e:fe:72:64:a3:26:88:00:3c:0c:a2: 65:29:61:24:15:69:4c:03:9d:41:26:79:e6:a1:99: 16:db:ea:09:49:d4:1b:ad:08:c8:f3:b1:ca:e9:a5: 3c:14:27:bf:bb:9e:60:bd:ae:56:f7:46:e4:76:94: b4:c3:71:99:83:0e:60:f4:77:6b:ad:2c:42:af:8e: 9d:88:36:8c:9b:8d:e1:43:d7:75:7c:05:a1:6e:77: 56:e0:39:0f:fe:ac:ab:4f:d2:ab:04:c4:4d:64:6a: 5c:3d:9a:f7:9a:da:c9:02:35:95:9b:14:d7:78:49: 7a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B1:8D:C3:34:61:67:74:AF:E6:7A:9D:E6:23:F6:55:33:A7:AD:23 X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/4bGNwzRhZ3Sv5nqd5iP2VTOnrSM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:e881:1600::/44 Signature Algorithm: sha256WithRSAEncryption 68:ca:cd:96:2a:96:50:d8:ee:c7:e4:2c:3e:f8:5b:14:eb:fa: 7f:c2:fc:d0:31:2e:ad:b5:3b:a5:52:8e:09:72:cc:8e:b0:73: a6:79:d1:dc:2c:3f:e7:2a:ff:af:f5:e7:1b:52:4d:41:b1:7e: 12:cd:8e:14:75:ed:c0:06:29:70:2d:06:7b:12:12:e5:15:c3: 31:55:ac:41:3f:3a:19:58:5e:18:b4:ab:7b:13:f4:9d:73:d0: af:15:d7:34:2e:7c:32:38:f6:65:1d:59:ab:92:da:81:1b:7e: 94:0a:7f:13:39:72:19:0f:ed:a7:f8:24:90:3c:e0:fc:e2:2f: fa:04:3e:88:83:d2:7a:1c:61:07:62:1b:16:42:37:09:23:44: 61:26:55:b6:0b:34:1a:f6:14:2a:ec:2b:f1:9d:c5:22:e8:f7: 7c:51:c2:31:5e:a5:27:b8:f4:a5:d2:fb:7c:ec:ca:2c:55:36: 61:97:e5:50:6f:49:0c:23:f0:22:8e:46:46:9d:2c:0b:3c:b6: be:93:98:97:a3:a5:ed:88:31:57:be:1d:79:ce:95:28:ed:25: 5b:f2:45:80:07:9b:ab:19:11:76:8e:e9:73:87:ba:da:65:ae: d3:dc:5f:2d:67:a5:62:8c:d0:5b:30:a5:f8:0a:51:16:e2:bc: ba:51:01:b7 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+p1hr8ZtT/0aB4y/xg5zgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWIxOGRjMzM0NjE2Nzc0YWZlNjdhOWRlNjIzZjY1NTMzYTdhZDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GOo9gEZKHmw4DIcLOX8k4W8KCTc lnnpFjw5VgYtmfYoEi6lzs0oMJd9f18pR+d4i2dJtqjGdGGRQ+nRCojj10uzjaUh K3qxhk+0CADUM4LfA6U7UeJM2iXr3XWl2UvszB/PyhxJMYxGja9s/t7VRwtSZzt4 d+0xzqOXuSVsPC1dbacB8EAEFMpJLv5yZKMmiAA8DKJlKWEkFWlMA51BJnnmoZkW 2+oJSdQbrQjI87HK6aU8FCe/u55gva5W90bkdpS0w3GZgw5g9HdrrSxCr46diDaM m43hQ9d1fAWhbndW4DkP/qyrT9KrBMRNZGpcPZr3mtrJAjWVmxTXeEl6gwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOGxjcM0YWd0r+Z6neYj9lUzp60jMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvNGJHTnd6UmhaM1N2NW5xZDVpUDJWVE9uclNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgbogRYA MA0GCSqGSIb3DQEBCwUAA4IBAQBoys2WKpZQ2O7H5Cw++FsU6/p/wvzQMS6ttTul Uo4JcsyOsHOmedHcLD/nKv+v9ecbUk1BsX4SzY4Ude3ABilwLQZ7EhLlFcMxVaxB PzoZWF4YtKt7E/Sdc9CvFdc0LnwyOPZlHVmrktqBG36UCn8TOXIZD+2n+CSQPOD8 4i/6BD6Ig9J6HGEHYhsWQjcJI0RhJlW2CzQa9hQq7CvxncUi6Pd8UcIxXqUnuPSl 0vt87MosVTZhl+VQb0kMI/AijkZGnSwLPLa+k5iXo6XtiDFXvh15zpUo7SVb8kWA B5urGRF2julzh7raZa7T3F8tZ6VijNBbMKX4ClEW4ry6UQG3 -----END CERTIFICATE-----Generated at Tue Jan 20 22:47:38 2026 by rpki-client