This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/4ZGNJqUJGxDQ-JDLSgjyKGfqQW8.roa File: 4ZGNJqUJGxDQ-JDLSgjyKGfqQW8.roa (raw, json) Hash identifier: HdNBs/3VfDOQkzfrG5FPF/W8U9fZWOacY1hI7bXdJa8= Subject key identifier: E1:91:8D:26:A5:09:1B:10:D0:F8:90:CB:4A:08:F2:28:67:EA:41:6F Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42 Certificate serial: 019B78A2F399BACCB4DFC9267CEAE5D2F93E Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/4ZGNJqUJGxDQ-JDLSgjyKGfqQW8.roa Signing time: Thu 01 Jan 2026 08:18:23 +0000 ROA not before: Thu 01 Jan 2026 08:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 2001:2002::/32 maxlen: 32 2001:2080::/28 maxlen: 28 2001:2093::/32 maxlen: 32 2001:2094::/30 maxlen: 30 2001:2098::/29 maxlen: 29 2001:20a0::/27 maxlen: 27 2001:20c0::/26 maxlen: 26 2001:2100::/24 maxlen: 24 2001:2200::/23 maxlen: 23 2001:2400::/22 maxlen: 22 2001:2800::/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f3:99:ba:cc:b4:df:c9:26:7c:ea:e5:d2:f9:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42 Validity Not Before: Jan 1 08:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1918d26a5091b10d0f890cb4a08f22867ea416f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:9e:d1:18:26:38:38:a0:6b:c1:d2:7a:98:bd: 55:e7:86:cc:21:59:82:a0:c1:9d:c2:e6:cf:7f:d2: a0:45:c5:14:22:4d:a5:23:dd:f3:a0:a4:31:f4:e5: 32:d7:ad:87:01:9b:3f:40:68:c7:09:86:68:7c:cc: 35:39:a3:3d:13:fd:8a:ad:25:b4:f8:48:82:43:36: 3a:b5:3a:e2:67:f1:45:80:d0:7b:a5:fb:17:94:8b: 4f:8c:87:ae:98:3b:86:90:99:6a:1c:6e:6f:31:4f: 4b:1e:d0:a2:00:2c:33:0c:3a:8c:14:e2:7a:2a:8a: 3b:fa:f9:e8:df:c7:80:68:f5:a8:be:79:26:97:7d: 91:1b:b8:b7:80:49:8f:56:1e:6c:63:62:9e:ba:ae: a2:db:5a:3e:ba:84:8c:5b:ff:0f:b7:20:0d:dc:19: 19:e5:03:aa:06:f5:e7:3c:75:d2:32:64:fd:8d:1a: dd:d8:fd:49:12:26:3d:90:3c:c5:0d:9c:a1:fb:9f: eb:39:54:bc:d6:c9:c1:68:55:bd:50:2f:df:db:db: ca:bd:ad:be:20:a8:8f:61:78:b3:c3:6b:53:7a:29: fa:75:6e:a7:a8:6a:18:1f:30:5d:01:79:9d:6e:5b: db:ea:5c:d1:2d:ad:d3:a1:fa:e4:82:84:e3:5a:6f: cc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:91:8D:26:A5:09:1B:10:D0:F8:90:CB:4A:08:F2:28:67:EA:41:6F X509v3 Authority Key Identifier: keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/4ZGNJqUJGxDQ-JDLSgjyKGfqQW8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:2002::/32 2001:2080::/28 2001:2093::-2001:2fff:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 54:81:87:fd:42:f9:5b:9b:5a:2c:78:7d:03:f8:86:03:43:c9: 3d:9f:cd:13:74:14:9f:21:86:32:87:a8:6c:83:16:ab:fb:14: a6:32:08:15:ac:16:e1:85:74:97:6d:71:68:c3:d1:74:cb:66: 34:7a:b9:81:aa:e1:13:e0:49:1b:93:88:ea:7b:b2:eb:c7:e3: f8:0d:69:87:cb:a7:a9:89:be:07:a1:94:97:46:ca:79:9b:8d: d5:0e:42:f8:e2:7e:c5:ee:6a:e6:fa:fe:da:21:96:8b:ba:a9: 6a:f1:b1:9c:f0:9b:eb:e4:e5:55:35:17:96:15:e5:fc:31:c2: c3:1a:b6:16:1f:81:9c:54:64:53:4f:29:5a:3b:24:52:fb:ae: 3b:76:03:f9:19:77:f9:e0:e8:d3:51:a7:dc:59:6b:ea:1b:6c: 9b:22:26:b6:f4:8f:1a:cd:73:d9:2b:d0:b7:25:03:93:38:87: a1:71:fa:a0:40:61:e9:61:ab:fa:d9:7b:0d:53:6e:6b:45:ed: 66:64:f9:ba:53:77:c7:29:2d:6f:aa:13:91:b4:5f:89:23:60: d7:c6:1c:cb:d6:06:35:d9:58:d5:50:9a:ae:de:71:34:1f:19: 8c:7f:5e:e1:49:b1:73:b3:24:cd:a1:c0:86:e3:38:08:1e:15: dc:33:d7:4f -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt4ovOZusy038kmfOrl0vk+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiYTViMWMwOWFhMzFmNjcxM2M2MWIzMmU1NTgxMDllNDc5 NjZkNDIwHhcNMjYwMTAxMDgxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTkxOGQyNmE1MDkxYjEwZDBmODkwY2I0YTA4ZjIyODY3ZWE0MTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+J7RGCY4OKBrwdJ6mL1V54bMIVmC oMGdwubPf9KgRcUUIk2lI93zoKQx9OUy162HAZs/QGjHCYZofMw1OaM9E/2KrSW0 +EiCQzY6tTriZ/FFgNB7pfsXlItPjIeumDuGkJlqHG5vMU9LHtCiACwzDDqMFOJ6 Koo7+vno38eAaPWovnkml32RG7i3gEmPVh5sY2Keuq6i21o+uoSMW/8PtyAN3BkZ 5QOqBvXnPHXSMmT9jRrd2P1JEiY9kDzFDZyh+5/rOVS81snBaFW9UC/f29vKva2+ IKiPYXizw2tTein6dW6nqGoYHzBdAXmdblvb6lzRLa3TofrkgoTjWm/MVwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFOGRjSalCRsQ0PiQy0oI8ihn6kFvMB8GA1UdIwQY MBaAFDulscCaox9nE8YbMuVYEJ5Hlm1CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzZXeHdKcWpIMmNUeGhzeTVWZ1Fua2VXYlVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xM2JkNzctZDI5Ny00Njg5LWJlZTQt NDY2ZTljYWI3ODY0LzEvNFpHTkpxVUpHeERRLUpETFNnanlLR2ZxUVc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8xM2JkNzctZDI5Ny00Njg5LWJlZTQtNDY2ZTljYWI3ODY0 LzEvTzZXeHdKcWpIMmNUeGhzeTVWZ1Fua2VXYlVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdAwUAIAEgAgMF BCABIIAwDQMFACABIJMDBAQgASAwDQYJKoZIhvcNAQELBQADggEBAFSBh/1C+Vub Wix4fQP4hgNDyT2fzRN0FJ8hhjKHqGyDFqv7FKYyCBWsFuGFdJdtcWjD0XTLZjR6 uYGq4RPgSRuTiOp7suvH4/gNaYfLp6mJvgehlJdGynmbjdUOQvjifsXuaub6/toh lou6qWrxsZzwm+vk5VU1F5YV5fwxwsMathYfgZxUZFNPKVo7JFL7rjt2A/kZd/ng 6NNRp9xZa+obbJsiJrb0jxrNc9kr0LclA5M4h6Fx+qBAYelhq/rZew1TbmtF7WZk +bpTd8cpLW+qE5G0X4kjYNfGHMvWBjXZWNVQmq7ecTQfGYx/XuFJsXOzJM2hwIbj OAgeFdwz108= -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:11 2026 by rpki-client