This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/p4hBn6CYtn1VKDaiKsyhOMqHgsQ.roa File: p4hBn6CYtn1VKDaiKsyhOMqHgsQ.roa (raw, json) Hash identifier: haUohiyH5mbkoLGOMq3EZCD2dc1b/l0VJe9Q5+fs1Ac= Subject key identifier: A7:88:41:9F:A0:98:B6:7D:55:28:36:A2:2A:CC:A1:38:CA:87:82:C4 Certificate issuer: /CN=8d5ab1424c412b3fbf4efae9ae1e68e36c2bee81 Certificate serial: 019B797F4213BD71A8899F8AE6E031EFB7F2 Authority key identifier: 8D:5A:B1:42:4C:41:2B:3F:BF:4E:FA:E9:AE:1E:68:E3:6C:2B:EE:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVqxQkxBKz-_Tvrprh5o42wr7oE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/p4hBn6CYtn1VKDaiKsyhOMqHgsQ.roa Signing time: Thu 01 Jan 2026 12:19:01 +0000 ROA not before: Thu 01 Jan 2026 12:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198533 IP address blocks: 2a0a:fc00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.mft rsync://rpki.ripe.net/repository/DEFAULT/jVqxQkxBKz-_Tvrprh5o42wr7oE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:42:13:bd:71:a8:89:9f:8a:e6:e0:31:ef:b7:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d5ab1424c412b3fbf4efae9ae1e68e36c2bee81 Validity Not Before: Jan 1 12:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a788419fa098b67d552836a22acca138ca8782c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:19:e3:e5:fc:d1:dc:c8:a7:16:2b:3d:39:ea: da:5e:d4:2e:93:3e:0b:3f:8a:e8:15:b8:2e:6a:c0: 11:f8:50:6b:b9:28:60:81:3e:9c:dd:eb:d7:31:5d: ec:b2:89:ed:4f:31:ff:ec:58:e7:69:7b:3c:2a:66: f6:70:a4:3a:26:2a:8b:0c:ad:89:e7:28:55:7b:62: cd:36:ef:93:af:cd:92:dc:26:a8:f2:c4:58:1b:9e: 7a:6c:7f:c8:2d:46:44:7d:9c:de:42:a4:4a:64:4e: b5:c1:b4:a4:d2:67:05:f9:71:ab:45:1e:a0:73:67: 3e:4d:67:27:36:b1:48:c0:0c:67:c9:31:02:06:b4: 16:fe:13:43:65:09:1a:96:e7:53:26:a5:79:1c:d0: 7a:3c:51:27:ad:03:1d:e6:bd:40:48:0b:b3:13:2d: af:a4:0c:2c:8a:83:47:59:e9:ed:1e:7c:bd:a5:d0: f4:8c:bf:17:06:5a:e8:5e:59:05:ac:ff:67:1d:1d: 1e:e9:9f:e5:68:3e:9a:37:95:cf:c9:3a:f4:ec:70: 85:05:cb:eb:ed:52:0b:11:46:e3:8d:90:b1:18:1c: 0d:37:ae:d3:51:bc:53:6f:62:ad:71:a2:a4:ab:95: ec:ab:3d:f3:af:be:bb:37:8b:65:5b:6b:70:c6:14: 15:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:88:41:9F:A0:98:B6:7D:55:28:36:A2:2A:CC:A1:38:CA:87:82:C4 X509v3 Authority Key Identifier: keyid:8D:5A:B1:42:4C:41:2B:3F:BF:4E:FA:E9:AE:1E:68:E3:6C:2B:EE:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVqxQkxBKz-_Tvrprh5o42wr7oE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/p4hBn6CYtn1VKDaiKsyhOMqHgsQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:fc00::/29 Signature Algorithm: sha256WithRSAEncryption af:aa:3d:9d:9a:72:2a:6f:bc:9d:e6:08:f1:de:f5:55:ea:c9: 14:89:2f:44:aa:32:f9:74:c7:bc:c3:d5:76:c2:e6:79:46:ea: eb:2f:09:d4:85:31:33:92:1e:7e:d5:4c:9c:6f:79:94:a2:da: f9:35:18:df:14:9f:41:55:e6:5a:85:8a:07:8f:01:74:5e:46: 7c:18:8f:87:4a:98:dd:83:49:c6:b5:3e:c8:e0:e1:97:7b:46: 0d:71:b9:37:22:96:f8:30:7c:15:a4:3a:24:52:cf:49:2e:4e: e6:fd:b6:bf:c1:f1:6e:5b:96:bb:7e:28:bb:a1:28:dd:35:09: 62:63:d5:5e:2d:13:33:ef:4b:e4:72:54:13:78:5e:d8:77:8c: 4e:73:7d:06:ed:06:1a:27:96:32:f4:5f:b3:42:82:8c:08:6c: bb:ac:62:a8:b6:8f:62:d1:ec:2f:22:e4:6b:eb:45:62:bb:13: d7:7d:a9:98:37:e5:56:d9:18:2e:7a:66:c2:b0:cb:06:64:10: 2f:a9:4d:3c:6f:3f:c3:67:ce:44:7f:89:bb:42:5c:ed:3d:4c: 2d:25:b1:0e:5e:34:4d:a9:b4:05:1b:e1:26:56:3c:79:c3:f4: 78:77:ce:ad:10:87:08:0e:bf:80:b0:25:d3:c6:a8:89:5d:4c: 9e:4d:8d:34 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5f0ITvXGoiZ+K5uAx77fyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNWFiMTQyNGM0MTJiM2ZiZjRlZmFlOWFlMWU2OGUzNmMy YmVlODEwHhcNMjYwMTAxMTIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzg4NDE5ZmEwOThiNjdkNTUyODM2YTIyYWNjYTEzOGNhODc4MmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRnj5fzR3MinFis9OeraXtQukz4L P4roFbguasAR+FBruShggT6c3evXMV3ssontTzH/7FjnaXs8Kmb2cKQ6JiqLDK2J 5yhVe2LNNu+Tr82S3Cao8sRYG556bH/ILUZEfZzeQqRKZE61wbSk0mcF+XGrRR6g c2c+TWcnNrFIwAxnyTECBrQW/hNDZQkaludTJqV5HNB6PFEnrQMd5r1ASAuzEy2v pAwsioNHWentHny9pdD0jL8XBlroXlkFrP9nHR0e6Z/laD6aN5XPyTr07HCFBcvr 7VILEUbjjZCxGBwNN67TUbxTb2KtcaKkq5Xsqz3zr767N4tlW2twxhQVkwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFKeIQZ+gmLZ9VSg2oirMoTjKh4LEMB8GA1UdIwQY MBaAFI1asUJMQSs/v0766a4eaONsK+6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZxeFFreEJLei1fVHZycHJoNW80MndyN29FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85ZGRhZmQtMDM0Ni00OWExLWFjM2Qt ZjEwMDJmNTQ4NjE1LzEvcDRoQm42Q1l0bjFWS0RhaUtzeWhPTXFIZ3NRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC85ZGRhZmQtMDM0Ni00OWExLWFjM2QtZjEwMDJmNTQ4NjE1 LzEvalZxeFFreEJLei1fVHZycHJoNW80MndyN29FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgr8ADAN BgkqhkiG9w0BAQsFAAOCAQEAr6o9nZpyKm+8neYI8d71VerJFIkvRKoy+XTHvMPV dsLmeUbq6y8J1IUxM5IeftVMnG95lKLa+TUY3xSfQVXmWoWKB48BdF5GfBiPh0qY 3YNJxrU+yODhl3tGDXG5NyKW+DB8FaQ6JFLPSS5O5v22v8HxbluWu34ou6Eo3TUJ YmPVXi0TM+9L5HJUE3he2HeMTnN9Bu0GGieWMvRfs0KCjAhsu6xiqLaPYtHsLyLk a+tFYrsT132pmDflVtkYLnpmwrDLBmQQL6lNPG8/w2fORH+Ju0Jc7T1MLSWxDl40 Tam0BRvhJlY8ecP0eHfOrRCHCA6/gLAl08aoiV1Mnk2NNA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:24:07 2026 by rpki-client