This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/4kLVVeCRQJrEoKU2Z3FAZr5ZTZg.roa File: 4kLVVeCRQJrEoKU2Z3FAZr5ZTZg.roa (raw, json) Hash identifier: N+n4RQm/UCrzmjM9BuILs0DGf1giItqSLrBBjPu0qrU= Subject key identifier: E2:42:D5:55:E0:91:40:9A:C4:A0:A5:36:67:71:40:66:BE:59:4D:98 Certificate issuer: /CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07 Certificate serial: 019B7EA4C61B3100DAC7534D6469E4EDDDA5 Authority key identifier: C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/4kLVVeCRQJrEoKU2Z3FAZr5ZTZg.roa Signing time: Fri 02 Jan 2026 12:18:06 +0000 ROA not before: Fri 02 Jan 2026 12:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215936 IP address blocks: 2001:67c:d54::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:c6:1b:31:00:da:c7:53:4d:64:69:e4:ed:dd:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07 Validity Not Before: Jan 2 12:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e242d555e091409ac4a0a53667714066be594d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:75:67:0d:41:4d:65:78:6b:7b:a6:18:8e:ca: ff:50:8f:d6:15:08:2b:39:29:a5:31:0f:d6:f7:dd: a9:b0:79:d2:f2:18:ea:34:20:ab:2d:5c:ef:fe:3b: 07:ec:da:15:a0:ea:4e:71:73:33:57:ab:cf:4b:cf: fa:9c:0b:10:f1:95:9e:6c:c0:4e:aa:83:65:f1:45: af:86:a7:9e:e4:8f:5c:87:97:ca:67:3a:1d:73:56: d7:91:37:22:7e:78:72:4c:39:7a:ae:37:c1:cc:1b: aa:4d:7a:df:d5:68:0a:68:ee:56:e0:7a:11:d6:fd: 42:11:ec:9d:df:91:0c:21:67:22:72:9a:f7:a4:fe: 31:16:f5:73:c0:54:6d:b3:aa:6c:d0:47:ea:af:95: 2e:52:09:d5:b2:75:0e:12:10:30:f8:8a:61:26:a2: c9:16:92:57:26:9f:6b:fd:5f:75:24:a9:a5:5d:20: a1:a2:84:0c:2a:44:04:48:14:3f:9d:bd:60:fa:b4: 14:14:14:5b:9c:c3:b3:d0:9f:bb:ed:9c:47:d5:2b: ab:9d:20:3a:68:81:68:ce:82:36:18:a1:d4:c8:c4: e4:5c:69:98:61:a7:ad:81:b8:e0:65:e4:66:ba:66: aa:3b:f7:ed:10:50:96:73:86:a3:cb:e9:7a:70:20: 41:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:42:D5:55:E0:91:40:9A:C4:A0:A5:36:67:71:40:66:BE:59:4D:98 X509v3 Authority Key Identifier: keyid:C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/4kLVVeCRQJrEoKU2Z3FAZr5ZTZg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:d54::/48 Signature Algorithm: sha256WithRSAEncryption 86:f9:e9:09:b7:a6:df:ca:d8:78:24:25:55:ce:51:85:99:c1: 38:cb:e1:a6:6f:cf:c4:68:5e:67:de:52:9d:3d:11:be:13:fb: 6b:0e:02:0d:33:a2:72:76:fc:88:13:5d:8d:e1:70:2c:03:16: 11:50:ea:12:da:e2:b3:fc:41:af:f2:f5:c0:68:85:00:6a:4a: 94:22:1f:cf:ac:17:97:d9:e4:0f:b2:3e:6c:bc:8f:0e:c5:24: 5a:a3:a7:e1:32:34:19:cc:69:48:46:a4:1d:8b:7c:dd:be:55: b5:d5:18:da:b7:28:2d:5f:42:03:0a:f2:37:71:65:62:62:09: 0c:7e:10:50:de:80:3f:a3:6f:d4:25:62:57:0a:f3:19:ae:7e: eb:f4:c4:50:0a:4f:8e:5e:12:81:6f:8d:3b:7f:92:c0:4a:0f: b3:41:24:6d:90:04:ff:e1:9d:be:84:8c:ea:34:60:e8:9f:5f: f4:fd:4c:1c:8f:a4:44:9d:f8:3b:30:e1:9b:c0:a2:57:19:99: ca:48:af:78:ff:65:7a:bc:77:4c:9c:f1:2d:94:b7:39:aa:18: ce:3d:f2:3c:35:84:6e:41:45:59:7b:e5:86:a3:56:22:6c:c0: f3:5b:f0:a8:4c:f9:d3:c3:3a:69:2d:16:81:d6:46:4d:7b:80: 2a:04:ae:a1 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pMYbMQDax1NNZGnk7d2lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2ZmMzOGIyYTEwMDM5NWZhOWI5OTE5YWQ3OTJlN2FjYjJk YjJlMDcwHhcNMjYwMTAyMTIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjQyZDU1NWUwOTE0MDlhYzRhMGE1MzY2NzcxNDA2NmJlNTk0ZDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43VnDUFNZXhre6YYjsr/UI/WFQgr OSmlMQ/W992psHnS8hjqNCCrLVzv/jsH7NoVoOpOcXMzV6vPS8/6nAsQ8ZWebMBO qoNl8UWvhqee5I9ch5fKZzodc1bXkTcifnhyTDl6rjfBzBuqTXrf1WgKaO5W4HoR 1v1CEeyd35EMIWcicpr3pP4xFvVzwFRts6ps0Efqr5UuUgnVsnUOEhAw+IphJqLJ FpJXJp9r/V91JKmlXSChooQMKkQESBQ/nb1g+rQUFBRbnMOz0J+77ZxH1SurnSA6 aIFozoI2GKHUyMTkXGmYYaetgbjgZeRmumaqO/ftEFCWc4ajy+l6cCBBCwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOJC1VXgkUCaxKClNmdxQGa+WU2YMB8GA1UdIwQY MBaAFMb8OLKhADlfqbmRmteS56yy2y4HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHZ3NHNxRUFPVi1wdVpHYTE1TG5yTExiTGdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OTgwMGQtMTUxZi00ZTMwLTlmZDgt YTg5YTcwMjhkNDI5LzEvNGtMVlZlQ1JRSnJFb0tVMlozRkFacjVaVFpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85OTgwMGQtMTUxZi00ZTMwLTlmZDgtYTg5YTcwMjhkNDI5 LzEveHZ3NHNxRUFPVi1wdVpHYTE1TG5yTExiTGdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA1U MA0GCSqGSIb3DQEBCwUAA4IBAQCG+ekJt6bfyth4JCVVzlGFmcE4y+Gmb8/EaF5n 3lKdPRG+E/trDgINM6JydvyIE12N4XAsAxYRUOoS2uKz/EGv8vXAaIUAakqUIh/P rBeX2eQPsj5svI8OxSRao6fhMjQZzGlIRqQdi3zdvlW11RjatygtX0IDCvI3cWVi YgkMfhBQ3oA/o2/UJWJXCvMZrn7r9MRQCk+OXhKBb407f5LASg+zQSRtkAT/4Z2+ hIzqNGDon1/0/Uwcj6REnfg7MOGbwKJXGZnKSK94/2V6vHdMnPEtlLc5qhjOPfI8 NYRuQUVZe+WGo1YibMDzW/CoTPnTwzppLRaB1kZNe4AqBK6h -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:12 2026 by rpki-client